@ainra/middleware 0.5.0 → 0.7.0

package/dist/index.js

@@ -7,7 +7,7 @@
 //! Two surfaces:
 //!   * `ainraGate(verifier, opts)` → Connect/Express `(req, res, next)` middleware.
 //!   * `checkRequest(verifier, bundle, opts)` → framework-agnostic `{ allow, reason?, verdict }` (edge/fetch).
-import { verdictEvent, serializeVerdictEvent, decodeInstance, verifyPresentation, isPresentationRef, splitPresentation, joinPresentation, presentationRef, POP_HEADER, PRIME_PATH, decisionRequestDigest, linkFromIndex, jwkThumbprintEd25519, } from "@ainra/sdk";
+import { verdictEvent, serializeVerdictEvent, decodeInstance, verifyPresentation, isPresentationRef, splitPresentation, joinPresentation, presentationRef, POP_HEADER, PRIME_PATH, decisionRequestDigest, linkFromIndex, presentedKeyThumbprint, } from "@ainra/sdk";
 import { createHash } from "node:crypto";
 /** The default store: in memory, bounded, oldest-first eviction, and nothing outlives the credential it holds.
  *  Bounded because whoever can mint valid bundles can otherwise fill it; eviction costs them nothing but costs an
@@ -282,11 +282,13 @@ export function ainraLinkGate(verifier, opts) {
         }
         let r;
         let tp = null;
-        if (!key || key.length !== 32) {
+        // A key of either Link algorithm (D-082): 32 bytes Ed25519, 33 a compressed secp256k1 point. Anything else, or
+        // bytes that are no point on the curve, is not a key this gate verified.
+        tp = key ? presentedKeyThumbprint(key) : null;
+        if (!key || tp === null) {
             r = { verdict: "invalid", reason: "sig_invalid" };
         }
         else {
-            tp = jwkThumbprintEd25519(key);
             let link = null;
             try {
                 const { index, status } = await opts.source();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ainra/middleware",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "AINRA verifier middleware — a fail-closed gate (Connect/Express + framework-agnostic) that verifies an AINRA passport on a request, over @ainra/sdk. The verification wedge: local, offline, ~5-line integration.",
   "license": "Apache-2.0 OR MIT",
   "type": "module",
@@ -14,7 +14,7 @@
     "test": "node --test"
   },
   "dependencies": {
-    "@ainra/sdk": "^0.5.0"
+    "@ainra/sdk": "^0.7.0"
   },
   "devDependencies": {
     "@types/node": "^26.1.1",