oydid 0.6.4 → 0.6.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e048d33455d4b2b305d1905b1acea54c0f87f7a871998fa5a294b0669a245112
-  data.tar.gz: 0ff2fabe31fe7352062e93ef8bce6c74dfa6afd7004db0f53ccfb13912b7e9d5
+  metadata.gz: 7cd355cc4bdc04a3d149199467cbbe4263ace619676422c722485fc6d459c83b
+  data.tar.gz: 85f8930282e7cbee45997d65a5cca1be2bea78f853cce44152d6b93808e1a923
 SHA512:
-  metadata.gz: be4ef04a7f885cf2cbd870126a45fc97ec84444426dca4341102256dddbe17eddd3975e63ccd02687527fb43099cda7b1eba70e655cf5ecee4c64b21499237ca
-  data.tar.gz: f4c305a56ce2952dc72632d9a3fdc13ee9282eefd40dc8fda65f5233bd8e82409a3ba90a64a4964503cb6ba3825cf89c24143311b6051630148fd21d51ef1a60
+  metadata.gz: e04e8cd58b7a29bb9e7dabffffcf613c9459c18ece1254b8cc1ad60b4d19d073276f18bd0f9c36b7cd6786340e1f81fb9be320f8964a182d5b861bfab9d5825f
+  data.tar.gz: 370d28f6c8614238b734a9a0dc8410de4007923c6ac7e464190ad36bd82bbba5f28def3e46d05c74d882b5ba5559f11cadf2a4a26b2ea0045ea87acd8a6503bb

data/VERSION

@@ -1 +1 @@
-0.6.4
+0.6.5

data/lib/oydid/log.rb

@@ -141,6 +141,7 @@ class Oydid
         terminate_entries = 0
         terminate_overall = 0
         terminate_index = nil
+        revoked_terminate_found = false
         logs.each do |el|
             if el["op"].to_i == 0 # TERMINATE
                 if dag.vertices[i].successors.length == 0
@@ -154,6 +155,7 @@ class Oydid
                     dag.vertices[i].predecessors.each do |l|
                         if logs[l[:id]]["op"].to_i == 0 # TERMINATE
                             terminate_index = l[:id]
+                            revoked_terminate_found = true
                         end
                     end
                 end
@@ -161,11 +163,18 @@ class Oydid
             i += 1
         end unless logs.nil?
 
+        # NOTE: this is a structural check on the log and must not depend on how
+        # verbose the caller wants to be. Suppressing it under :silent returned a
+        # DID document for logs that cannot be resolved.
         if terminate_entries != 1 && !options[:log_complete] && !options[:followAlsoKnownAs]
-            if options[:silent].nil? || !options[:silent]
+            # a revoked DID has no tangling TERMINATE entry (its TERMINATE is
+            # followed by the REVOKE record). That is not a broken log: continue
+            # so that dag_update can report the revocation - or apply DID
+            # Rotation - instead of the unspecific "cannot resolve DID".
+            unless terminate_entries == 0 && revoked_terminate_found
                 return [nil, nil, nil, "cannot resolve DID" ]
             end
-        end 
+        end
 
         # create actual edges between vertices (but only use last terminate index for delegates)
         dag = DAG.new
@@ -254,8 +263,14 @@ class Oydid
         result.uniq
     end
 
+    # a DID is revoked when the REVOCATION record referenced by the current
+    # TERMINATE record has been published and no UPDATE record follows it
+    REVOKED_ERROR_CODE = 410
+
     def self.dag_update(currentDID, options)
         i = 0
+        revoked = false
+        rotation_performed = false
         doc_location = options[:doc_location].to_s
         initial_did = currentDID["did"].to_s.dup
         initial_did = initial_did.delete_prefix("did:oyd:")
@@ -501,6 +516,12 @@ class Oydid
                         end
                     end
 
+                    # the revocation record is published and no UPDATE record
+                    # builds on it: this DID is revoked. The verdict is only
+                    # acted upon after the log has been walked completely, so
+                    # that DID Rotation (handled in the REVOKE entry below) can
+                    # still take precedence.
+                    revoked = !update_term_found
                 else
                     if verification_output
                         currentDID["verification"] += "Revocation reference in log record: " + revoc_term.to_s + "\n"
@@ -538,6 +559,7 @@ class Oydid
                                     # 2) das new DID reference back original DID
                                     currentDID["did"] = rotate_DID
                                     currentDID["doc"]["doc"] = rotate_ddoc
+                                    rotation_performed = true
                                     if verification_output
                                         currentDID["verification"] += "DID rotation to: " + rotate_DID.to_s + "\n"
                                         currentDID["verification"] += "✅ original DID (" + did_orig + ") revoked and referenced in alsoKnownAs\n"
@@ -563,6 +585,13 @@ class Oydid
             end
             i += 1
         end unless currentDID["log"].nil?
+
+        # fail closed: a revoked DID has no resolvable DID Document unless the
+        # controller rotated it to another DID via alsoKnownAs
+        if revoked && !rotation_performed
+            currentDID["error"] = REVOKED_ERROR_CODE
+            currentDID["message"] = "revoked"
+        end
         return currentDID
     end
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: oydid
 version: !ruby/object:Gem::Version
-  version: 0.6.4
+  version: 0.6.5
 platform: ruby
 authors:
 - Christoph Fabianek
 bindir: bin
 cert_chain: []
-date: 2026-06-27 00:00:00.000000000 Z
+date: 2026-08-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: simple_dag
@@ -415,7 +415,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.2.8
+      version: 3.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="