- Add support for verifying vcs with
ecdsa-jcs-2019
andeddsa-jcs-2022
signatures.
- Support checking
BitstringStatusList
credential status checks.
- Use latest cryptosuite dependencies to get bug fixes.
- Use
@digitalbazaar/[email protected]
to get P-384 proof fix.
- Throw better error if JWT verification method cannot be retrieved
from
kid
URL. - Improve verification method controller check error.
- BREAKING: Use
@digitalbazaar/bbs-2023-cryptosuite@2
to get interoperability with the latest IETF BBS draft 6. Previous BBS proofs are no longer compatible and should be considered obsolete.
- Fix in-place modification (creates a clone instead) of VC/VP properties when decoding VC-JWTs.
- Ensure a DI-protected VP that contains at least one enveloped VC can be verified.
- Add feature to verify VC-JWT-enveloped credentials and presentations. These
credentials and presentations must be sent using an VC 2.x
EnvelopedVerifiableCredential
orEnvelopedVerifiablePresentation
to the appropriate VC API endpoint. For presentations, any VCs inside the presentation can be provided usingEnvelopedVerifiableCredential
or, if a theEnvelopedVerifiablePresentation
envelopes a 1.1 VP, the VCs can be expressed directly as strings to allow for interoperability with VC-JWT 1.1.
- Add support for using a configured external DID resolver.
- Add support for
did:web
DIDs via@bedrock/[email protected]
. - Add support for
documentLoader
options when configuring a verifier instance, with an option for disabling remote context loading.
- BREAKING: Update peer dependencies.
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
@bedrock/[email protected]
- Update to
@digitalbazaar/vc@7
.- Adds VC 2.0 support.
- Update minor, test, and dev dependencies.
- Use
@bedrock/[email protected]
to enable resolution of BBS-baseddid:key
DIDs.
- Add support for verifying vcs with
ecdsa-sd-2023
,ecdsa-rdfc-2019
andeddsa-rdfc-2022
signatures. - Add missing peer dep
@bedrock/app-identity
v4.0.
- BREAKING: Update
@bedrock/data-integrity-context
peer dep to v3.0 that uses@digitalbazaar/[email protected]
. - Use
@digitalbazaar/[email protected]
. AddslegacyContext
flag to allow use of legacy context and updates default context URL tohttps://w3id.org/security/data-integrity/v2
.
- Add support for verifying signatures that use the
ECDSA P-384
key type.
- Use
@digitalbazaar/vc@6
. - BREAKING: Update peer deps:
- Use
@bedrock/credentials-context@4
. This version requires Node.js 18+. - Use
@bedrock/data-integrity-context@2
. This version requires Node.js 18+. - Use
@bedrock/did-context@5
. This version requires Node.js 18+. - Use
@bedrock/jsonld-document-loader@4
. This version requires Node.js 18+. - Use
@bedrock/multikey-context@2
. This version requires Node.js 18+. - Use
@bedrock/security-context@8
. This version requires Node.js 18+. - Use
@bedrock/service-agent@8
. This version requires Node.js 18+. - Use
@bedrock/service-context-store@11
. This version requires Node.js 18+. - Use
@bedrock/service-core@9
. This version requires Node.js 18+. - Use
@bedrock/vc-revocation-list-context@4
. This version requires Node.js 18+. - Use
@bedrock/vc-status-list-context@5
. This version requires Node.js 18+. - Use
@bedrock/veres-one-context@15
. This version requires Node.js 18+.
- Use
- Update test deps.
- BREAKING: Drop support for Node.js 16.
- Fixed mismatched/incompatible peerdeps. Updated to:
- Update
@bedrock/service-agent
to v7.0. - Update
@bedrock/service-context-store
to v10.0. - Update
@bedrock/service-core
to v8.0.
- Update
- Add
ecdsa-2019
to supported suites.
- BREAKING: Update peerdep
@bedrock/did-io
to v10.0.
- BREAKING: Use little-endian bit order for all bitstrings with revocation and status lists. This change is incompatible with previous deployments.
- Ensure verification errors, such as expired credential errors, are serializable.
- BREAKING: Only check challenge reuse (using verifier-based challenge
management) when
challenge
is set inchecks
.
- Update
@digitalbazaar/ed25519-signature-*
and@digitalbazaar/vc*
dependencies.
- BREAKING: Update peer deps:
@bedrock/service-context-store@9
@bedrock/service-core@7
.
- BREAKING: See
@bedrock/service-core@7
for important config changes and new peer dependency@bedrock/oauth2-verifier@1
.
- Allow json
req.body
to be more than just objects or arrays.
- Add support for eddsa-2022 cryptosuite.
- Add support for DataIntegrityProof.
- Add support for oauth2-authorized verifier instances.
- BREAKING: Require Node.js >=16.
- BREAKING: Update dependenices.
@digitalbazaar/vc@4
:expirationDate
now checked.
- BREAKING: Update peer dependencies.
@bedrock/did-io@9
@bedrock/service-agent@6
@bedrock/service-context-store@8
@bedrock/service-core@6
- Use
package.json
files
field. - Lint module.
- BREAKING Use
@digitalbazaar/vc-status-list
v4.0. IfstatusPurpose
in credential does not match thestatusPurpose
of status list credential, an error will be thrown.
- BREAKING: Use
@bedrock-service-context-store@7
to cause migration of old EDV context documents to the new EDV attribute version.
- BREAKING: Update peer deps:
@bedrock/service-agent@5
@bedrock/service-context-store@6
.
- BREAKING: The updated peer dependencies use a new EDV client with a new blind attribute version. This version is incompatible with previous versions and a manual migration must be performed to update all EDV documents to use the new blind attribute version -- or a new deployment is required.
- BREAKING: Update peer deps:
@bedrock/core@6
@bedrock/credentials-context@3
@bedrock/did-context@4
@bedrock/did-io@8
@bedrock/express@8
@bedrock/https-agent@4
@bedrock/jsonld-document-loader@3
@bedrock/mongodb@10
@bedrock/security-context@7
@bedrock/service-agent@4
@bedrock/service-context-store@5
@bedrock/service-core@5
@bedrock/validation@7
@bedrock/vc-status-list-context@3
@bedrock/vc-revocation-list-context@3
@bedrock/veres-one-context@14
.
- BREAKING: Update
@digitalbazaar/vc-status-list
and@bedrock/vc-status-list-context
to v3.0.
- BREAKING: Rename package to
@bedrock/vc-verifier
. - BREAKING: Convert to module (ESM).
- BREAKING: Remove default export.
- BREAKING: Require node 14.x.
- Add missing dependencies
@digitalbazaar/[email protected]
and@digitalbazaar/[email protected]
in test. - Add coverage action in github workflows.
- Remove unused dependency
[email protected]
. - Remove unused dependencies
veres-one-context
,did-veres-one
,crypto-ld
,did-context
andbedrock-views
from test.
- Update dependencies:
@digitalbazaar/[email protected]
.
- BREAKING: Update peer dependencies:
bedrock-service-core@3
bedrock-service-context-store@3
[email protected]
.
- BREAKING: Move zcap revocations to
/zcaps/revocations
to better future proof. - BREAKING: Require
bedrock-service-core@2
,bedrock-service-agent@2
, andbedrock-service-context-store@2
peer dependencies.
- Add default (dev mode)
app-identity
entry forvc-verifier
service.
- Use
@digitalbazaar/vc-status-list-context
and updated bedrock-vc-status-list-context. These dependencies have no changes other than moved package locations.
- BREAKING: Complete refactor to run on top of
bedrock-service*
modules. While this version has similar functionality, its APIs and implementation are a clean break from previous versions.
- Refactor documentLoader.
- Add support for "StatusList2021Credential" status checks using
[email protected]
- Add tests.
- Add support for unsigned VPs.
- Update deps to fix multicodec bugs and set
verificationSuite
forv1
toEd25519VerificationKey2020
in config.
- Fix bedrock peer dependencies.
- BREAKING: Remove
axios
and use@digitalbazaar/[email protected]
. Errors surfaced fromhttp-client
do not have the same signature asaxios
. - BREAKING: Remove
cfg.ledgerHostname
andcfg.mode
fromconfig.js
. - BREAKING: Use vc-revocation-list@3. Revocation list credentials must have the same issuer value as the credential to be revoked.
- BREAKING: Use [email protected].
- Replace
vc-js
with@digitalbazaar/vc
. - Update to support ed25519 2020 signature suite.
- Update peerDeps and testDeps.
- Only verify based on
options.checks
.
- Implement W3C CCG VC Verification HTTP API.
- API endpoint /vc/verify which can verify a presentation.
- Mock API endpoint /verifiers/:verifierId/verifications/:referenceId
- Positive tests for both endpoints.
- Utils to serialize errors in verification reports.