oydid 0.8.1 → 0.8.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 853f05f30010c3713c64d00caee53feccd969429af27ee4cbd0370c1de7d9891
-  data.tar.gz: f601867e31baedc4bba925d99039a184dabca9ac64de311b5171c30d84f5b100
+  metadata.gz: 66decf23cb4e474d0703a8948e20474be619c05083bd8abd5ab8d45857ac4ac0
+  data.tar.gz: db83f3c7ba0a20c5e4f8fd8ba8b9977b42b9b78fc56ad11df8a8bf12e9657704
 SHA512:
-  metadata.gz: 78ce89d1e9fe4546852d6cb9ade32a8afbe0756ddf0af9253db328ade1d7d70fa60f1a1dc3ead15093713264954feae54bfb07f6d73ab41791e18758943b99d7
-  data.tar.gz: 01f895768ab0fcbc4f38c5e93e2ca0ab1bd82a5f25fe8092cf63ec32d4552e2f4a7a91292f55294bc9c3e40388b57809f92073199318142eb923c76703757289
+  metadata.gz: 8856635688f0dd47b246443d7fcc7a994ceef87e7d2594530da0f3489445a544f3c7cc9d20327fec7da3988e83872d1ddf3c854bd4db25b367b72fa917ba09c3
+  data.tar.gz: '08956cf2da8ed63a35261a7ffa01cb58b11a177c77fe8b5f873f8ed4d59592695c0e80bd72d118c28f4266728b10e420b4eaab7189c406dd6c7731e52f40e38d'

data/VERSION

@@ -1 +1 @@
-0.8.1
+0.8.2

data/lib/oydid.rb

@@ -1058,6 +1058,18 @@ class Oydid
             return [nil, did_info["message"].to_s]
         end
 
+        # A client that holds no private revocation key - a secure element does
+        # not export one - submits the record it kept from creating or updating
+        # the DID. Rebuilding it here is impossible, and re-signing it would not
+        # help: the hash committed in the TERMINATE entry would no longer match.
+        if !options[:log_revoke].nil?
+            verified, vmsg = verify_revocation_log(did_info, options[:log_revoke], "log_revoke", options)
+            if verified.nil?
+                return [nil, vmsg]
+            end
+            return [link_revocation_log(verified, did_info), ""]
+        end
+
         did = did_info["did"]
         did_hash = did.delete_prefix("did:oyd:")
         did10 = did_hash[0,10]
@@ -1224,6 +1236,15 @@ class Oydid
         # the location extracted from the DID may be percent-encoded
         # (e.g. "http%3A%2F%2Flocalhost%3A3000"); decode before using as URL
         doc_location = doc_location.to_s.gsub("%3A", ":").gsub("%2F", "/")
+        # percent_encode strips the default scheme, so a DID published to an
+        # https location carries a bare host ("oydid.ownyourdata.eu"). Without
+        # putting the scheme back this is not recognised as a remote location
+        # and the revocation is written to a local file instead - which is how
+        # the branch below used to be reached at all.
+        if !(doc_location == "" || doc_location == "local") &&
+           !doc_location.start_with?("http")
+            doc_location = "https://" + doc_location
+        end
 
         # publish revocation log based on location
         case doc_location.to_s
@@ -1236,10 +1257,10 @@ class Oydid
                 return [nil, msg]
             end
         else
-            File.write(did10 + ".log", revoc_log.to_json)
-            if !did_old.nil?
-                File.write(did10_old + ".log", revoc_log.to_json)
-            end
+            # did_old / did10_old were never defined here - they are locals of
+            # generate_base. Writing the revocation next to the previous DID is
+            # the job of the caller that knows about it.
+            write_private_storage(revoc_log.to_json, did10 + ".log")
         end
 
         return [did, ""]

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: oydid
 version: !ruby/object:Gem::Version
-  version: 0.8.1
+  version: 0.8.2
 platform: ruby
 authors:
 - Christoph Fabianek
 bindir: bin
 cert_chain: []
-date: 2026-08-22 00:00:00.000000000 Z
+date: 2026-08-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: simple_dag