import crypto from 'crypto'
import moment from 'moment';
import { base64url, exportJWK, generateKeyPair } from 'jose';
import SD from "@transmute/vc-jwt-sd";
const alg = 'ES384'
const iss = 'did:web:issuer.example'
const nonce = '9876543210'
const aud = 'did:web:verifier.example'
const issuerKeyPair  = await generateKeyPair(alg)
const holderKeyPair  = await generateKeyPair(alg)
const digester = SD.digester('sha-256')
const issuer = new SD.Issuer({
  alg,
  iss,
  digester,
  signer: await SD.JWS.signer(await exportJWK(issuerKeyPair.privateKey)),
  salter: () => {
    return base64url.encode(crypto.randomBytes(16));
  }
})
const vc = await issuer.issue({
  iat: moment().unix(),
  exp: moment().add(1, 'month').unix(),
  holder: await exportJWK(holderKeyPair.publicKey),
  claims: SD.YAML.load(`
"@context":
  - https://www.w3.org/ns/credentials/v2
  - https://w3id.org/traceability/v1
id: http://supply-chain.example/credentials/dd0c6f9a-5df6-40a3-bb34-863cd1fda606
type:
  - VerifiableCredential
  - EntryNumberCredential
validFrom: ${moment().toISOString()}
validUntil: ${moment().add(1, 'month').toISOString()}
issuer:
  type:
    - Organization
  id: ${iss}
  name: ACME Customs Broker
  !sd location:
    type:
      - Place
    address:
      type:
        - PostalAddress
      streetAddress: 123 Example Street
      addressLocality: Toronto
      addressRegion: ON
      addressCountry: CA
      postalCode: M3B 1A2
credentialSubject:
  type:
    - EntryNumber
  !sd entryNumber: "12345123456"
`)
  })
const holder = new SD.Holder({
  alg,
  digester,
  signer: await SD.JWS.signer(await exportJWK(holderKeyPair.privateKey))
})
const vp = await holder.present({
  credential: vc,
  nonce,
  aud,
  disclosure: SD.YAML.load(`
issuer:
  location: False
credentialSubject:
  entryNumber: True
    `),
  })
const verifier = new SD.Verifier({
  alg,
  digester,
  verifier: {
    verify: async (token :string) => {
      const parsed = SD.Parse.compact(token)
      const verifier = await SD.JWS.verifier(await exportJWK(issuerKeyPair.publicKey))
      return verifier.verify(parsed.jwt)
    }
  }
})
const verified = await verifier.verify({
  presentation: vp,
  nonce,
  aud
})