@agentidentitytrustprotocol/aitp 0.4.1 → 0.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/index.d.ts +5 -5
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -36,7 +36,7 @@ minimal build can opt out with `--no-default-features`:
|
|
|
36
36
|
|
|
37
37
|
| Feature | Enables | RFC |
|
|
38
38
|
|-----------------------|--------------------------------------------------------------------------|----------------------|
|
|
39
|
-
| `renewal` | `AitpAgent.buildRenewalRequest` / `processRenewalRequest` | RFC-AITP-
|
|
39
|
+
| `renewal` | `AitpAgent.buildRenewalRequest` / `processRenewalRequest` | RFC-AITP-0013 |
|
|
40
40
|
| `session-bundle` | `SessionBundleBuilder`, `verifySessionBundle` | RFC-AITP-0010 |
|
|
41
41
|
| `spki-pinning` | `computeSpkiHash`, `SpkiPinVerifier` | HPKP (RFC 7469) |
|
|
42
42
|
| `multihop-delegation` | `verifyDelegationMultihop` | RFC-AITP-0011 |
|
|
@@ -105,7 +105,7 @@ opaque compact-JWS token strings** (`header.payload.signature`).
|
|
|
105
105
|
| `TctStore` / `verifyTctCached()` | ✅ | Hot-path verify cache: skips the signature check for a byte-identical, still-valid TCT (keyed by SHA-256 of the token bytes) |
|
|
106
106
|
| `verifyDelegation()` | ✅ | RFC-AITP-0006 — strict single-hop; rejects any multi-hop `chain` |
|
|
107
107
|
| `verifyManifestJson()` | ✅ | Control-plane manifest enrollment |
|
|
108
|
-
| `buildRenewalRequest()` / `processRenewalRequest()` | `renewal` | RFC-AITP-
|
|
108
|
+
| `buildRenewalRequest()` / `processRenewalRequest()` | `renewal` | RFC-AITP-0013 |
|
|
109
109
|
| `SessionBundleBuilder`, `verifySessionBundle()` | `session-bundle` | RFC-AITP-0010 |
|
|
110
110
|
| `computeSpkiHash()`, `SpkiPinVerifier` | `spki-pinning` | HPKP outbound pinning |
|
|
111
111
|
| `verifyDelegationMultihop()` | `multihop-delegation` | RFC-AITP-0011 (draft) multi-hop opt-in |
|
package/index.d.ts
CHANGED
|
@@ -129,17 +129,17 @@ export interface JsDelegationVerified {
|
|
|
129
129
|
export declare function verifyDelegation(token: string, verifierAid: string): JsDelegationVerified
|
|
130
130
|
/**
|
|
131
131
|
* Verify a delegation compact JWS allowing **RFC-AITP-0011 multi-hop**
|
|
132
|
-
* chains up to `
|
|
132
|
+
* chains up to `maxDelegationHops` total hops (`chain.length + 1`).
|
|
133
133
|
*
|
|
134
134
|
* The strict single-hop `verifyDelegation` is the safe default; this
|
|
135
135
|
* function additionally allows multi-hop chains. Present by default (the
|
|
136
136
|
* `multihop-delegation` feature); a `--no-default-features` build omits it.
|
|
137
137
|
*
|
|
138
|
-
* `
|
|
138
|
+
* `maxDelegationHops` defaults to `DEFAULT_MAX_DELEGATION_HOPS` (3, the RFC-AITP-0011 §2
|
|
139
139
|
* recommended ceiling). Pass a smaller value for a tighter bound;
|
|
140
|
-
* `
|
|
140
|
+
* `maxDelegationHops = 0` reverts to strict single-hop (rejects any non-empty chain).
|
|
141
141
|
*/
|
|
142
|
-
export declare function verifyDelegationMultihop(token: string, verifierAid: string,
|
|
142
|
+
export declare function verifyDelegationMultihop(token: string, verifierAid: string, maxDelegationHops?: number | undefined | null): JsDelegationVerified
|
|
143
143
|
/**
|
|
144
144
|
* Compute the RFC 7638 JWK thumbprint of the public key embedded in
|
|
145
145
|
* an AID — the value an OIDC IdP MUST place in the JWT's `cnf.jkt`
|
|
@@ -332,7 +332,7 @@ export declare class AitpAgent {
|
|
|
332
332
|
/**
|
|
333
333
|
* Holder side: build a `TctRenewalPayload` JSON for an in-band
|
|
334
334
|
* renewal of `currentTctToken` — the holder's current TCT as a
|
|
335
|
-
* compact-JWS string (RFC-AITP-
|
|
335
|
+
* compact-JWS string (RFC-AITP-0013).
|
|
336
336
|
*
|
|
337
337
|
* Behind the `renewal` Cargo feature, which is **on by default**; a
|
|
338
338
|
* `--no-default-features` build omits it.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@agentidentitytrustprotocol/aitp",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.5.0",
|
|
4
4
|
"description": "Agent Identity Trust Protocol — Node.js SDK",
|
|
5
5
|
"license": "MIT OR Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -53,9 +53,9 @@
|
|
|
53
53
|
"registry": "https://registry.npmjs.org/"
|
|
54
54
|
},
|
|
55
55
|
"optionalDependencies": {
|
|
56
|
-
"@agentidentitytrustprotocol/aitp-darwin-x64": "0.
|
|
57
|
-
"@agentidentitytrustprotocol/aitp-darwin-arm64": "0.
|
|
58
|
-
"@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.
|
|
59
|
-
"@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.
|
|
56
|
+
"@agentidentitytrustprotocol/aitp-darwin-x64": "0.5.0",
|
|
57
|
+
"@agentidentitytrustprotocol/aitp-darwin-arm64": "0.5.0",
|
|
58
|
+
"@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.5.0",
|
|
59
|
+
"@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.5.0"
|
|
60
60
|
}
|
|
61
61
|
}
|