@agentidentitytrustprotocol/aitp 0.19.0 → 0.21.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -10
- package/index.d.ts +106 -28
- package/index.js +56 -54
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -93,13 +93,13 @@ const rsess = responder.newResponder(null, { pinnedKeys: [initiator.aid] });
|
|
|
93
93
|
const hello = sess.buildHello(respManifest, ['demo.write']);
|
|
94
94
|
const { ackJson: helloAck, sessionId } = rsess.processHello(hello);
|
|
95
95
|
const commit = sess.processHelloAck(helloAck, sessionId);
|
|
96
|
-
const { ackJson: commitAck } = rsess.processCommit(commit);
|
|
97
|
-
const completed = sess.complete(commitAck);
|
|
96
|
+
const { ackJson: commitAck } = rsess.processCommit(commit, []);
|
|
97
|
+
const completed = sess.complete(commitAck, []);
|
|
98
98
|
// completed = { tct, claims, grantVoucher? }
|
|
99
99
|
// `tct` is an opaque compact-JWS string; `claims` is the decoded TCT.
|
|
100
100
|
|
|
101
101
|
// Each peer now holds a TCT the other issued it.
|
|
102
|
-
const ident = initiator.verifyTct(completed.tct, 'demo.write');
|
|
102
|
+
const ident = initiator.verifyTct(completed.tct, 'demo.write', undefined, []);
|
|
103
103
|
console.log(ident.peerAid, ident.grants);
|
|
104
104
|
|
|
105
105
|
// `completed.grantVoucher` (when present) is what you pass to
|
|
@@ -119,29 +119,31 @@ compact-JWS token strings** (`header.payload.signature`).
|
|
|
119
119
|
|
|
120
120
|
| Export | Feature | Notes |
|
|
121
121
|
|---------------------------|:-------:|-------|
|
|
122
|
-
| `AitpAgent` | default | `generate(opts?)` / `fromSeed(buffer, opts?)` (`opts.suite = "ed25519" \| "p256"`), `aid`, `buildManifest(opts)
|
|
122
|
+
| `AitpAgent` | default | `generate(opts?)` / `fromSeed(buffer, opts?)` (`opts.suite = "ed25519" \| "p256"`), `aid`, `buildManifest(opts)` (`opts.revocationListUri`), `newSession(jwks?, opts?)`, `newResponder(jwks?, opts?)` (`opts.trustAnchors`, `opts.pinnedKeys`), `verifyTct(token, grant, expectedAudience?, revokedJtis?, revocation?, pop?)`, `verifyTctCached(token, grant, store, expectedAudience?, revokedJtis?, revocation?, pop?)` (`pop = { challenge, response }`, the presented-TCT path), `newPopChallenge(tctToken, ttlSecs?)`, `signPopResponse(challengeJson)`, `buildDelegation(voucherToken, delegateeAid, scope, ttlSecs?)`, `issueTctForDelegatee(verified, ttlSecs?)` → `{ tct, grantVoucher? }`, `signEnvelope(messageType, payloadJson, opts?)` (`opts.extensionsJson`, `opts.messageId`, `opts.timestamp`), `signRevocationList(entries, expiresInSecs?)` |
|
|
123
123
|
| `JsInitiatorSession` | default | Returned by `newSession`. `buildHello(peerManifest, grants, oidcMintJwt?)`, `processHelloAck(...)`, `complete(...)` → `{ tct, claims, grantVoucher? }` |
|
|
124
124
|
| `JsResponderSession` | default | Returned by `newResponder`. `processHello(hello, oidcMintJwt?)` → `{ ackJson, sessionId }`, `processCommit(commit)` → `{ ackJson, completed: { tct, claims, grantVoucher? } }` |
|
|
125
125
|
| `TctStore` | default | Cache for `AitpAgent.verifyTctCached()`. A byte-identical, still-valid TCT skips the signature check; the key is the SHA-256 of the token bytes |
|
|
126
126
|
| `JwksProvider` | default | OIDC JWKS map. `upsert(issuer, keys)`, `remove(issuer)`, `issuers()` |
|
|
127
|
-
| `verifyDelegation(token, verifierAid, issuerManifests, revokedJtis?)` | default | RFC-AITP-0006, strict single-hop; rejects any multi-hop `chain`. Verifies under the key the delegator's Manifest designates (`issuerManifests`: `{"manifest": ...}` JSON strings). Returns `{ delegator, delegatee, issuedBy, grants, expiresAt, cnfJkt }` |
|
|
127
|
+
| `verifyDelegation(token, verifierAid, issuerManifests, revokedJtis?, revocation?)` | default | RFC-AITP-0006, strict single-hop; rejects any multi-hop `chain`. Verifies under the key the delegator's Manifest designates (`issuerManifests`: `{"manifest": ...}` JSON strings). Returns `{ delegator, delegatee, issuedBy, grants, expiresAt, cnfJkt }` |
|
|
128
128
|
| `verifyManifestJson(json, nowUnixSecs?)` | default | Throws an `Error` with `code` (e.g. `signature_invalid`, `expired`, `unknown_field`, `malformed`) |
|
|
129
129
|
| `verifyEnvelope(json, expectedSenderAid)` | default | Verifies an `aitp/0.3` envelope's signature against a pinned sender, in the RFC-AITP-0001 §5.4 check order. Throws an `Error` with `code` (`UNKNOWN_VERSION`, `UNKNOWN_FIELD`, `INVALID_ENVELOPE`, `INVALID_SIGNATURE`). Replay and timestamp checks stay with the caller; see [Envelope signatures](../../docs/sdk-node.md#envelope-signatures-rfc-aitp-0001-54) |
|
|
130
130
|
| `verifyRevocationList(json, expectedIssuerAid, nowUnixSecs?)` | default | Verifies a revocation snapshot against a pinned issuer. Throws an `Error` with `code` |
|
|
131
131
|
| `revocationSigningBytes(json)` | default | The exact bytes a revocation snapshot's signature covers |
|
|
132
|
+
| `verifyPopResponse(challengeJson, responseJson, tctToken)` | default | RFC-AITP-0005 §6.2 checks only (not the TCT itself); returns the proven holder AID. Throws with `code` `POP_CHALLENGE_INVALID` or `POP_RESPONSE_INVALID` |
|
|
132
133
|
| `computeAidJkt(aid)` | default | RFC 7638 thumbprint of an AID's key, for an OIDC JWT's `cnf.jkt` |
|
|
133
134
|
| `buildRenewalRequest()` / `processRenewalRequest()` | `renewal` | RFC-AITP-0013 (Planned). `processRenewalRequest` → `{ tct, grantVoucher? }` |
|
|
134
135
|
| `SessionBundleBuilder`, `verifySessionBundle(json, verifierAid, coordinatorManifestJson, nowUnixSecs?, revocationCheck?)` | `session-bundle` | RFC-AITP-0010. Verifies under the key the coordinator's Manifest designates (`coordinatorManifestJson`: `{"manifest": ...}` JSON, required) |
|
|
135
136
|
| `computeSpkiHash()`, `SpkiPinVerifier` | `spki-pinning` | HPKP-style outbound pinning |
|
|
136
|
-
| `verifyDelegationMultihop(token, verifierAid, issuerManifests, maxDelegationHops?, revokedJtis?)` | `multihop-delegation` | RFC-AITP-0011 multi-hop opt-in |
|
|
137
|
+
| `verifyDelegationMultihop(token, verifierAid, issuerManifests, maxDelegationHops?, revokedJtis?, revocation?)` | `multihop-delegation` | RFC-AITP-0011 multi-hop opt-in |
|
|
137
138
|
|
|
138
139
|
`verifyTct` returns `{ peerAid, grants, expiresAt, jti }`, where `peerAid` is
|
|
139
140
|
the issuer.
|
|
140
141
|
|
|
141
142
|
### Revocation
|
|
142
143
|
|
|
143
|
-
`verifyTct` and `verifyTctCached` take
|
|
144
|
-
|
|
144
|
+
`verifyTct` and `verifyTctCached` take a `revokedJtis` argument, an array of
|
|
145
|
+
revoked TCT `jti` strings, and an optional final `revocation` argument
|
|
146
|
+
(`'fail_closed'`, the default, or `'fail_open'`). A TCT whose `jti` is in the
|
|
145
147
|
array is rejected, even if its signature, audience and expiry are otherwise
|
|
146
148
|
valid:
|
|
147
149
|
|
|
@@ -159,8 +161,15 @@ revocation snapshot you fetched and checked with `verifyRevocationList`
|
|
|
159
161
|
The set is passed up-front rather than through a JS callback invoked per
|
|
160
162
|
`jti`, so that it stays sound under napi threading constraints.
|
|
161
163
|
|
|
162
|
-
|
|
163
|
-
|
|
164
|
+
Revocation is `fail_closed` (RFC-AITP-0008 §3.1): if you omit `revokedJtis`,
|
|
165
|
+
every TCT is rejected with `code` `'TCT_REVOKED'`, because an unknown status
|
|
166
|
+
counts as revoked. Pass `[]` when the issuer's list is empty, or
|
|
167
|
+
`'fail_open'` only when the deployment has no revocation source.
|
|
168
|
+
|
|
169
|
+
As an issuer, advertise your list: `buildManifest({ ..., revocationListUri })`
|
|
170
|
+
puts `rfc-aitp-0008.revocation_list_uri` in your signed Manifest, as
|
|
171
|
+
RFC-AITP-0005 §11 and RFC-AITP-0008 §1.4 require. Use an absolute HTTPS URL,
|
|
172
|
+
conventionally your origin plus `REVOCATION_LIST_PATH`.
|
|
164
173
|
|
|
165
174
|
### UUID inputs
|
|
166
175
|
|
package/index.d.ts
CHANGED
|
@@ -60,30 +60,58 @@ export declare class AitpAgent {
|
|
|
60
60
|
*
|
|
61
61
|
* `expectedAudience` defaults to `null`, which means "verify as the
|
|
62
62
|
* holder" (RFC-AITP-0005 §9 receipt model — `this.aid` is used).
|
|
63
|
-
* Resource servers verifying a TCT presented by a peer
|
|
64
|
-
*
|
|
65
|
-
*
|
|
63
|
+
* Resource servers verifying a TCT presented by a peer pass
|
|
64
|
+
* `pop: { challenge, response }` (the presented-TCT path): the
|
|
65
|
+
* challenge from `newPopChallenge` and the presenter's
|
|
66
|
+
* `signPopResponse` reply. The TCT and the PoP response are verified
|
|
67
|
+
* together (RFC-AITP-0005 §6.2) and the audience is pinned to the
|
|
68
|
+
* proven holder AID (`sub`). A PoP failure throws with `code ===
|
|
69
|
+
* 'POP_CHALLENGE_INVALID'` or `'POP_RESPONSE_INVALID'`. `pop` and
|
|
70
|
+
* `expectedAudience` are mutually exclusive. If you pass
|
|
71
|
+
* `expectedAudience` instead, that AID MUST come from an authenticated
|
|
72
|
+
* source, never from the token: a verified PoP response or an
|
|
73
|
+
* equivalent channel binding. Passing the TCT's own `aud` back makes
|
|
74
|
+
* the audience check vacuous.
|
|
66
75
|
*
|
|
67
|
-
* `revokedJtis` (F-1) is
|
|
76
|
+
* `revokedJtis` (F-1) is the issuer's deny list of revoked TCT `jti`
|
|
68
77
|
* strings; any TCT whose `jti` is in the list is rejected even if
|
|
69
|
-
* otherwise valid.
|
|
70
|
-
*
|
|
71
|
-
*
|
|
72
|
-
*
|
|
73
|
-
*
|
|
74
|
-
*
|
|
78
|
+
* otherwise valid. Revocation is `fail_closed`: **without `revokedJtis`
|
|
79
|
+
* every TCT is rejected** with `code === 'TCT_REVOKED'` and a "revocation
|
|
80
|
+
* source unavailable" message. Pass `[]` when nothing is revoked, or
|
|
81
|
+
* `'fail_open'` as `revocation` to skip the check. The caller is
|
|
82
|
+
* responsible for sourcing the revoked set (e.g. from a `RevocationList`
|
|
83
|
+
* it fetched and verified). Entries are lookup keys and are normalized:
|
|
84
|
+
* any RFC 9562 text form (uppercase, braced, `urn:uuid:`, unhyphenated)
|
|
85
|
+
* matches. An entry that is not a UUID throws rather than being ignored.
|
|
75
86
|
*/
|
|
76
|
-
verifyTct(tctToken: string, requiredGrant: string, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null): JsTctIdentity
|
|
87
|
+
verifyTct(tctToken: string, requiredGrant: string, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null, pop?: PopExchange | undefined | null): JsTctIdentity
|
|
77
88
|
/**
|
|
78
89
|
* Like `verifyTct`, but consults a `TctStore` first: a byte-identical,
|
|
79
90
|
* already-verified, still-valid TCT skips the signature check (the
|
|
80
91
|
* verification hot path for an agent that sees the same TCT on many
|
|
81
92
|
* requests). All cheap policy checks (expiry, audience, required grant,
|
|
82
|
-
* and the
|
|
83
|
-
* signature check is elided. `revokedJtis`
|
|
84
|
-
* `verifyTct
|
|
93
|
+
* and the `fail_closed` revocation gate) still run on every call; only
|
|
94
|
+
* the signature check is elided. `revokedJtis`, `revocation` and `pop`
|
|
95
|
+
* behave as in `verifyTct`; `pop` is checked on every call.
|
|
85
96
|
*/
|
|
86
|
-
verifyTctCached(tctToken: string, requiredGrant: string, store: JsTctStore, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null): JsTctIdentity
|
|
97
|
+
verifyTctCached(tctToken: string, requiredGrant: string, store: JsTctStore, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null, pop?: PopExchange | undefined | null): JsTctIdentity
|
|
98
|
+
/**
|
|
99
|
+
* Consumer side of downstream proof of possession (RFC-AITP-0005 §6):
|
|
100
|
+
* a `pop_challenge` payload JSON for the presented `tctToken`
|
|
101
|
+
* (`tct_jti`, a CSPRNG 128-bit base64url `nonce`, `expires_at`
|
|
102
|
+
* `ttlSecs` from now, default 60). Send it to the presenter, then pass
|
|
103
|
+
* it with the reply as `pop` to `verifyTct`. Accept a response to each
|
|
104
|
+
* challenge at most once: the SDK keeps no replay cache.
|
|
105
|
+
*/
|
|
106
|
+
newPopChallenge(tctToken: string, ttlSecs?: number | undefined | null): string
|
|
107
|
+
/**
|
|
108
|
+
* Holder side of downstream proof of possession (RFC-AITP-0005 §6.1):
|
|
109
|
+
* sign a received `pop_challenge` payload with this agent's key over
|
|
110
|
+
* `sha256` of the decoded nonce bytes, and return the `pop_response`
|
|
111
|
+
* payload JSON. A malformed or expired challenge throws with `code ===
|
|
112
|
+
* 'POP_CHALLENGE_INVALID'`.
|
|
113
|
+
*/
|
|
114
|
+
signPopResponse(challengeJson: string): string
|
|
87
115
|
/**
|
|
88
116
|
* Build a delegation compact-JWS token from a held **grant voucher**
|
|
89
117
|
* (RFC-AITP-0006). `voucherToken` is the `grantVoucher` surfaced by
|
|
@@ -157,8 +185,13 @@ export declare class JsInitiatorSession {
|
|
|
157
185
|
* Step 3 — process `MUTUAL_COMMIT_ACK`. Returns the completed
|
|
158
186
|
* handshake: the TCT the peer issued to us (opaque compact-JWS
|
|
159
187
|
* token plus its decoded claims) and the optional grant voucher.
|
|
188
|
+
*
|
|
189
|
+
* The peer's TCT is checked against `revokedJtis`, the peer's deny
|
|
190
|
+
* list. Revocation is `fail_closed`: with no list the handshake fails
|
|
191
|
+
* with `code === 'TCT_REVOKED'`. Pass `[]` when nothing is revoked, or
|
|
192
|
+
* `'fail_open'` as `revocation` to skip the check.
|
|
160
193
|
*/
|
|
161
|
-
complete(commitAckJson: string): JsCompletedHandshake
|
|
194
|
+
complete(commitAckJson: string, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null): JsCompletedHandshake
|
|
162
195
|
}
|
|
163
196
|
|
|
164
197
|
/** Inbound handshake session — drives the responder side. */
|
|
@@ -169,8 +202,11 @@ export declare class JsResponderSession {
|
|
|
169
202
|
* `oidcMintJwt`: required for OIDC agents (see `JsInitiatorSession.buildHello`).
|
|
170
203
|
*/
|
|
171
204
|
processHello(helloJson: string, oidcMintJwt?: ((arg: string) => string) | undefined | null): JsHelloAckResult
|
|
172
|
-
/**
|
|
173
|
-
|
|
205
|
+
/**
|
|
206
|
+
* Process an incoming `MUTUAL_COMMIT` envelope. `revokedJtis` and
|
|
207
|
+
* `revocation` are as in `JsInitiatorSession.complete` (`fail_closed`).
|
|
208
|
+
*/
|
|
209
|
+
processCommit(commitJson: string, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null): JsCommitAckResult
|
|
174
210
|
}
|
|
175
211
|
|
|
176
212
|
/**
|
|
@@ -467,8 +503,36 @@ export interface ManifestOpts {
|
|
|
467
503
|
* `[oidc_issuer]` for OIDC mode and `[]` for pinned-key mode.
|
|
468
504
|
*/
|
|
469
505
|
acceptedTrustAnchors?: Array<string>
|
|
506
|
+
/**
|
|
507
|
+
* This agent's `ListRevoked` URL, advertised as
|
|
508
|
+
* `rfc-aitp-0008.revocation_list_uri` in the signed Manifest. Every
|
|
509
|
+
* agent that issues TCTs MUST set it (RFC-AITP-0005 §11,
|
|
510
|
+
* RFC-AITP-0008 §1.4); without it a `fail_closed` verifier that
|
|
511
|
+
* discovers lists through the Manifest rejects this agent's TCTs as
|
|
512
|
+
* `TCT_REVOKED`. An absolute HTTPS URL, conventionally the origin
|
|
513
|
+
* plus `REVOCATION_LIST_PATH`.
|
|
514
|
+
*/
|
|
515
|
+
revocationListUri?: string
|
|
516
|
+
}
|
|
517
|
+
|
|
518
|
+
/**
|
|
519
|
+
* A downstream PoP exchange for `verifyTct(..., pop)`: the challenge from
|
|
520
|
+
* `newPopChallenge` and the holder's `signPopResponse` reply.
|
|
521
|
+
*/
|
|
522
|
+
export interface PopExchange {
|
|
523
|
+
/** The `pop_challenge` payload JSON this verifier issued. */
|
|
524
|
+
challenge: string
|
|
525
|
+
/** The holder's `pop_response` payload JSON. */
|
|
526
|
+
response: string
|
|
470
527
|
}
|
|
471
528
|
|
|
529
|
+
/**
|
|
530
|
+
* The conventional path of an agent's `ListRevoked` endpoint (the Rust
|
|
531
|
+
* `HandshakeServer` serves it here). The Manifest still carries an
|
|
532
|
+
* explicit absolute URL; see `ManifestOpts.revocationListUri`.
|
|
533
|
+
*/
|
|
534
|
+
export const REVOCATION_LIST_PATH: string
|
|
535
|
+
|
|
472
536
|
/**
|
|
473
537
|
* Input shape for `signRevocationList`. Field names map to spec
|
|
474
538
|
* `RevocationEntry` (jti, revoked_at, reason).
|
|
@@ -556,17 +620,18 @@ export interface SignEnvelopeOpts {
|
|
|
556
620
|
* §5) before use; when several designate one AID the newest
|
|
557
621
|
* `published_at` wins.
|
|
558
622
|
*
|
|
559
|
-
* `revokedJtis` is
|
|
560
|
-
*
|
|
561
|
-
*
|
|
562
|
-
*
|
|
563
|
-
*
|
|
564
|
-
*
|
|
565
|
-
*
|
|
623
|
+
* `revokedJtis` is the verifier's own deny list of revoked `jti` strings.
|
|
624
|
+
* A token whose `voucher.src_jti` is in it is rejected after every
|
|
625
|
+
* signature check passes (RFC-AITP-0006 §4 step 7, ordered per
|
|
626
|
+
* RFC-AITP-0008 §3.3). Revocation is `fail_closed`: **without
|
|
627
|
+
* `revokedJtis` every token is rejected**. Both failures throw with
|
|
628
|
+
* `code === 'DELEGATION_SOURCE_TCT_REVOKED'`; a missing list says
|
|
629
|
+
* "revocation source unavailable". Pass `[]` when nothing is revoked, or
|
|
630
|
+
* `'fail_open'` as `revocation` to skip the check. Entries are lookup keys and are normalized: any RFC 9562 text form
|
|
566
631
|
* (uppercase, braced, `urn:uuid:`, unhyphenated) matches. An entry that is
|
|
567
632
|
* not a UUID throws rather than being ignored.
|
|
568
633
|
*/
|
|
569
|
-
export declare function verifyDelegation(token: string, verifierAid: string, issuerManifests: Array<string>, revokedJtis?: Array<string> | undefined | null): JsDelegationVerified
|
|
634
|
+
export declare function verifyDelegation(token: string, verifierAid: string, issuerManifests: Array<string>, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null): JsDelegationVerified
|
|
570
635
|
|
|
571
636
|
/**
|
|
572
637
|
* Verify a delegation compact JWS allowing **RFC-AITP-0011 multi-hop**
|
|
@@ -580,7 +645,8 @@ export declare function verifyDelegation(token: string, verifierAid: string, iss
|
|
|
580
645
|
* recommended ceiling). Pass a smaller value for a tighter bound;
|
|
581
646
|
* `maxDelegationHops = 0` reverts to strict single-hop (rejects any non-empty chain).
|
|
582
647
|
*
|
|
583
|
-
* `revokedJtis
|
|
648
|
+
* `revokedJtis` and `revocation` are as in `verifyDelegation`
|
|
649
|
+
* (`fail_closed`). The list is consulted twice — both only after every
|
|
584
650
|
* signature check: once for the root `voucher.src_jti` (RFC-AITP-0006 §4
|
|
585
651
|
* step 7), and once for every hop's `jti`, meaning each chain entry and the
|
|
586
652
|
* outer token (RFC-AITP-0011 §6). Both are MUST-rejects, and a revoked hop
|
|
@@ -601,7 +667,7 @@ export declare function verifyDelegation(token: string, verifierAid: string, iss
|
|
|
601
667
|
* before use; when several designate one AID the newest `published_at`
|
|
602
668
|
* wins.
|
|
603
669
|
*/
|
|
604
|
-
export declare function verifyDelegationMultihop(token: string, verifierAid: string, issuerManifests: Array<string>, maxDelegationHops?: number | undefined | null, revokedJtis?: Array<string> | undefined | null): JsDelegationVerified
|
|
670
|
+
export declare function verifyDelegationMultihop(token: string, verifierAid: string, issuerManifests: Array<string>, maxDelegationHops?: number | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null): JsDelegationVerified
|
|
605
671
|
|
|
606
672
|
/**
|
|
607
673
|
* Verify an `AitpEnvelope` JSON string sent by `expectedSenderAid`.
|
|
@@ -659,6 +725,18 @@ export declare function verifyEnvelope(envelopeJson: string, expectedSenderAid:
|
|
|
659
725
|
*/
|
|
660
726
|
export declare function verifyManifestJson(manifestEnvelopeJson: string, nowUnixSecs?: number | undefined | null): void
|
|
661
727
|
|
|
728
|
+
/**
|
|
729
|
+
* Verify a holder's PoP response for `tctToken` (RFC-AITP-0005 §6.2) and
|
|
730
|
+
* return the proven holder AID (the TCT's `sub`).
|
|
731
|
+
*
|
|
732
|
+
* This proves possession of the key `sub` encodes. It does **not**
|
|
733
|
+
* verify the TCT itself; `AitpAgent.verifyTct(..., pop)` does both. A
|
|
734
|
+
* malformed or stale challenge throws with `code ===
|
|
735
|
+
* 'POP_CHALLENGE_INVALID'`, any other failure with `code ===
|
|
736
|
+
* 'POP_RESPONSE_INVALID'`.
|
|
737
|
+
*/
|
|
738
|
+
export declare function verifyPopResponse(challengeJson: string, responseJson: string, tctToken: string): string
|
|
739
|
+
|
|
662
740
|
/**
|
|
663
741
|
* Verify a `RevocationListEnvelope` JSON string against a pinned issuer.
|
|
664
742
|
*
|
package/index.js
CHANGED
|
@@ -77,8 +77,8 @@ function requireNative() {
|
|
|
77
77
|
try {
|
|
78
78
|
const binding = require('@agentidentitytrustprotocol/aitp-android-arm64')
|
|
79
79
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-android-arm64/package.json').version
|
|
80
|
-
if (bindingPackageVersion !== '0.
|
|
81
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
80
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
81
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
82
82
|
}
|
|
83
83
|
return binding
|
|
84
84
|
} catch (e) {
|
|
@@ -93,8 +93,8 @@ function requireNative() {
|
|
|
93
93
|
try {
|
|
94
94
|
const binding = require('@agentidentitytrustprotocol/aitp-android-arm-eabi')
|
|
95
95
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-android-arm-eabi/package.json').version
|
|
96
|
-
if (bindingPackageVersion !== '0.
|
|
97
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
96
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
97
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
98
98
|
}
|
|
99
99
|
return binding
|
|
100
100
|
} catch (e) {
|
|
@@ -114,8 +114,8 @@ function requireNative() {
|
|
|
114
114
|
try {
|
|
115
115
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-x64-gnu')
|
|
116
116
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-x64-gnu/package.json').version
|
|
117
|
-
if (bindingPackageVersion !== '0.
|
|
118
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
117
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
118
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
119
119
|
}
|
|
120
120
|
return binding
|
|
121
121
|
} catch (e) {
|
|
@@ -130,8 +130,8 @@ function requireNative() {
|
|
|
130
130
|
try {
|
|
131
131
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-x64-msvc')
|
|
132
132
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-x64-msvc/package.json').version
|
|
133
|
-
if (bindingPackageVersion !== '0.
|
|
134
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
133
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
134
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
135
135
|
}
|
|
136
136
|
return binding
|
|
137
137
|
} catch (e) {
|
|
@@ -147,8 +147,8 @@ function requireNative() {
|
|
|
147
147
|
try {
|
|
148
148
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-ia32-msvc')
|
|
149
149
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-ia32-msvc/package.json').version
|
|
150
|
-
if (bindingPackageVersion !== '0.
|
|
151
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
150
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
151
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
152
152
|
}
|
|
153
153
|
return binding
|
|
154
154
|
} catch (e) {
|
|
@@ -163,8 +163,8 @@ function requireNative() {
|
|
|
163
163
|
try {
|
|
164
164
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-arm64-msvc')
|
|
165
165
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-arm64-msvc/package.json').version
|
|
166
|
-
if (bindingPackageVersion !== '0.
|
|
167
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
166
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
167
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
168
168
|
}
|
|
169
169
|
return binding
|
|
170
170
|
} catch (e) {
|
|
@@ -182,8 +182,8 @@ function requireNative() {
|
|
|
182
182
|
try {
|
|
183
183
|
const binding = require('@agentidentitytrustprotocol/aitp-darwin-universal')
|
|
184
184
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-universal/package.json').version
|
|
185
|
-
if (bindingPackageVersion !== '0.
|
|
186
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
185
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
186
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
187
187
|
}
|
|
188
188
|
return binding
|
|
189
189
|
} catch (e) {
|
|
@@ -198,8 +198,8 @@ function requireNative() {
|
|
|
198
198
|
try {
|
|
199
199
|
const binding = require('@agentidentitytrustprotocol/aitp-darwin-x64')
|
|
200
200
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-x64/package.json').version
|
|
201
|
-
if (bindingPackageVersion !== '0.
|
|
202
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
201
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
202
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
203
203
|
}
|
|
204
204
|
return binding
|
|
205
205
|
} catch (e) {
|
|
@@ -214,8 +214,8 @@ function requireNative() {
|
|
|
214
214
|
try {
|
|
215
215
|
const binding = require('@agentidentitytrustprotocol/aitp-darwin-arm64')
|
|
216
216
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-arm64/package.json').version
|
|
217
|
-
if (bindingPackageVersion !== '0.
|
|
218
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
217
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
218
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
219
219
|
}
|
|
220
220
|
return binding
|
|
221
221
|
} catch (e) {
|
|
@@ -234,8 +234,8 @@ function requireNative() {
|
|
|
234
234
|
try {
|
|
235
235
|
const binding = require('@agentidentitytrustprotocol/aitp-freebsd-x64')
|
|
236
236
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-freebsd-x64/package.json').version
|
|
237
|
-
if (bindingPackageVersion !== '0.
|
|
238
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
237
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
238
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
239
239
|
}
|
|
240
240
|
return binding
|
|
241
241
|
} catch (e) {
|
|
@@ -250,8 +250,8 @@ function requireNative() {
|
|
|
250
250
|
try {
|
|
251
251
|
const binding = require('@agentidentitytrustprotocol/aitp-freebsd-arm64')
|
|
252
252
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-freebsd-arm64/package.json').version
|
|
253
|
-
if (bindingPackageVersion !== '0.
|
|
254
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
253
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
254
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
255
255
|
}
|
|
256
256
|
return binding
|
|
257
257
|
} catch (e) {
|
|
@@ -271,8 +271,8 @@ function requireNative() {
|
|
|
271
271
|
try {
|
|
272
272
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-x64-musl')
|
|
273
273
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-x64-musl/package.json').version
|
|
274
|
-
if (bindingPackageVersion !== '0.
|
|
275
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
274
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
275
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
276
276
|
}
|
|
277
277
|
return binding
|
|
278
278
|
} catch (e) {
|
|
@@ -287,8 +287,8 @@ function requireNative() {
|
|
|
287
287
|
try {
|
|
288
288
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-x64-gnu')
|
|
289
289
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-x64-gnu/package.json').version
|
|
290
|
-
if (bindingPackageVersion !== '0.
|
|
291
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
290
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
291
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
292
292
|
}
|
|
293
293
|
return binding
|
|
294
294
|
} catch (e) {
|
|
@@ -305,8 +305,8 @@ function requireNative() {
|
|
|
305
305
|
try {
|
|
306
306
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm64-musl')
|
|
307
307
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm64-musl/package.json').version
|
|
308
|
-
if (bindingPackageVersion !== '0.
|
|
309
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
308
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
309
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
310
310
|
}
|
|
311
311
|
return binding
|
|
312
312
|
} catch (e) {
|
|
@@ -321,8 +321,8 @@ function requireNative() {
|
|
|
321
321
|
try {
|
|
322
322
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm64-gnu')
|
|
323
323
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm64-gnu/package.json').version
|
|
324
|
-
if (bindingPackageVersion !== '0.
|
|
325
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
324
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
325
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
326
326
|
}
|
|
327
327
|
return binding
|
|
328
328
|
} catch (e) {
|
|
@@ -339,8 +339,8 @@ function requireNative() {
|
|
|
339
339
|
try {
|
|
340
340
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm-musleabihf')
|
|
341
341
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm-musleabihf/package.json').version
|
|
342
|
-
if (bindingPackageVersion !== '0.
|
|
343
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
342
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
343
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
344
344
|
}
|
|
345
345
|
return binding
|
|
346
346
|
} catch (e) {
|
|
@@ -355,8 +355,8 @@ function requireNative() {
|
|
|
355
355
|
try {
|
|
356
356
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm-gnueabihf')
|
|
357
357
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm-gnueabihf/package.json').version
|
|
358
|
-
if (bindingPackageVersion !== '0.
|
|
359
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
358
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
359
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
360
360
|
}
|
|
361
361
|
return binding
|
|
362
362
|
} catch (e) {
|
|
@@ -373,8 +373,8 @@ function requireNative() {
|
|
|
373
373
|
try {
|
|
374
374
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-loong64-musl')
|
|
375
375
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-loong64-musl/package.json').version
|
|
376
|
-
if (bindingPackageVersion !== '0.
|
|
377
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
376
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
377
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
378
378
|
}
|
|
379
379
|
return binding
|
|
380
380
|
} catch (e) {
|
|
@@ -389,8 +389,8 @@ function requireNative() {
|
|
|
389
389
|
try {
|
|
390
390
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-loong64-gnu')
|
|
391
391
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-loong64-gnu/package.json').version
|
|
392
|
-
if (bindingPackageVersion !== '0.
|
|
393
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
392
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
393
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
394
394
|
}
|
|
395
395
|
return binding
|
|
396
396
|
} catch (e) {
|
|
@@ -407,8 +407,8 @@ function requireNative() {
|
|
|
407
407
|
try {
|
|
408
408
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-riscv64-musl')
|
|
409
409
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-riscv64-musl/package.json').version
|
|
410
|
-
if (bindingPackageVersion !== '0.
|
|
411
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
410
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
411
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
412
412
|
}
|
|
413
413
|
return binding
|
|
414
414
|
} catch (e) {
|
|
@@ -423,8 +423,8 @@ function requireNative() {
|
|
|
423
423
|
try {
|
|
424
424
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-riscv64-gnu')
|
|
425
425
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-riscv64-gnu/package.json').version
|
|
426
|
-
if (bindingPackageVersion !== '0.
|
|
427
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
426
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
427
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
428
428
|
}
|
|
429
429
|
return binding
|
|
430
430
|
} catch (e) {
|
|
@@ -440,8 +440,8 @@ function requireNative() {
|
|
|
440
440
|
try {
|
|
441
441
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-ppc64-gnu')
|
|
442
442
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-ppc64-gnu/package.json').version
|
|
443
|
-
if (bindingPackageVersion !== '0.
|
|
444
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
443
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
444
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
445
445
|
}
|
|
446
446
|
return binding
|
|
447
447
|
} catch (e) {
|
|
@@ -456,8 +456,8 @@ function requireNative() {
|
|
|
456
456
|
try {
|
|
457
457
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-s390x-gnu')
|
|
458
458
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-s390x-gnu/package.json').version
|
|
459
|
-
if (bindingPackageVersion !== '0.
|
|
460
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
459
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
460
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
461
461
|
}
|
|
462
462
|
return binding
|
|
463
463
|
} catch (e) {
|
|
@@ -476,8 +476,8 @@ function requireNative() {
|
|
|
476
476
|
try {
|
|
477
477
|
const binding = require('@agentidentitytrustprotocol/aitp-openharmony-arm64')
|
|
478
478
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-arm64/package.json').version
|
|
479
|
-
if (bindingPackageVersion !== '0.
|
|
480
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
479
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
480
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
481
481
|
}
|
|
482
482
|
return binding
|
|
483
483
|
} catch (e) {
|
|
@@ -492,8 +492,8 @@ function requireNative() {
|
|
|
492
492
|
try {
|
|
493
493
|
const binding = require('@agentidentitytrustprotocol/aitp-openharmony-x64')
|
|
494
494
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-x64/package.json').version
|
|
495
|
-
if (bindingPackageVersion !== '0.
|
|
496
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
495
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
496
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
497
497
|
}
|
|
498
498
|
return binding
|
|
499
499
|
} catch (e) {
|
|
@@ -508,8 +508,8 @@ function requireNative() {
|
|
|
508
508
|
try {
|
|
509
509
|
const binding = require('@agentidentitytrustprotocol/aitp-openharmony-arm')
|
|
510
510
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-arm/package.json').version
|
|
511
|
-
if (bindingPackageVersion !== '0.
|
|
512
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
511
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
512
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
513
513
|
}
|
|
514
514
|
return binding
|
|
515
515
|
} catch (e) {
|
|
@@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) {
|
|
|
648
648
|
if (!candidateFailed) {
|
|
649
649
|
if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
650
650
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-wasm32-wasi/package.json').version
|
|
651
|
-
if (bindingPackageVersion !== '0.
|
|
652
|
-
throw new Error(`WASI binding package version mismatch, expected 0.
|
|
651
|
+
if (bindingPackageVersion !== '0.21.0') {
|
|
652
|
+
throw new Error(`WASI binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
653
653
|
}
|
|
654
654
|
}
|
|
655
655
|
wasiBinding = require('@agentidentitytrustprotocol/aitp-wasm32-wasi')
|
|
@@ -711,10 +711,12 @@ module.exports.TctStore = nativeBinding.TctStore
|
|
|
711
711
|
module.exports.JsTctStore = nativeBinding.JsTctStore
|
|
712
712
|
module.exports.computeAidJkt = nativeBinding.computeAidJkt
|
|
713
713
|
module.exports.computeSpkiHash = nativeBinding.computeSpkiHash
|
|
714
|
+
module.exports.REVOCATION_LIST_PATH = nativeBinding.REVOCATION_LIST_PATH
|
|
714
715
|
module.exports.revocationSigningBytes = nativeBinding.revocationSigningBytes
|
|
715
716
|
module.exports.verifyDelegation = nativeBinding.verifyDelegation
|
|
716
717
|
module.exports.verifyDelegationMultihop = nativeBinding.verifyDelegationMultihop
|
|
717
718
|
module.exports.verifyEnvelope = nativeBinding.verifyEnvelope
|
|
718
719
|
module.exports.verifyManifestJson = nativeBinding.verifyManifestJson
|
|
720
|
+
module.exports.verifyPopResponse = nativeBinding.verifyPopResponse
|
|
719
721
|
module.exports.verifyRevocationList = nativeBinding.verifyRevocationList
|
|
720
722
|
module.exports.verifySessionBundle = nativeBinding.verifySessionBundle
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@agentidentitytrustprotocol/aitp",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.21.0",
|
|
4
4
|
"description": "Agent Identity Trust Protocol — Node.js SDK",
|
|
5
5
|
"license": "MIT OR Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -48,9 +48,9 @@
|
|
|
48
48
|
"registry": "https://registry.npmjs.org/"
|
|
49
49
|
},
|
|
50
50
|
"optionalDependencies": {
|
|
51
|
-
"@agentidentitytrustprotocol/aitp-darwin-x64": "0.
|
|
52
|
-
"@agentidentitytrustprotocol/aitp-darwin-arm64": "0.
|
|
53
|
-
"@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.
|
|
54
|
-
"@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.
|
|
51
|
+
"@agentidentitytrustprotocol/aitp-darwin-x64": "0.21.0",
|
|
52
|
+
"@agentidentitytrustprotocol/aitp-darwin-arm64": "0.21.0",
|
|
53
|
+
"@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.21.0",
|
|
54
|
+
"@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.21.0"
|
|
55
55
|
}
|
|
56
56
|
}
|