@astrasyncai/verification-gateway 2.4.11 → 2.4.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -189,7 +189,7 @@ function getCapabilities(accessLevel) {
189
189
  }
190
190
 
191
191
  // src/version.ts
192
- var SDK_VERSION = "2.4.11";
192
+ var SDK_VERSION = "2.4.12";
193
193
 
194
194
  // src/verify.ts
195
195
  var DEFAULT_CONFIG = {
@@ -969,7 +969,10 @@ function createMiddleware(options) {
969
969
  const result = await verify(config, {
970
970
  credentials,
971
971
  purpose,
972
- action: req.method.toLowerCase(),
972
+ // RFC 7230 § 3.1.1 — HTTP method tokens uppercase by IANA convention.
973
+ // Backend evaluator tolerates either case as defense-in-depth
974
+ // (round-18.6 batch 2); SDK emits canonical form.
975
+ action: req.method.toUpperCase(),
973
976
  resource: req.path,
974
977
  createSession: shouldRecordDecisions,
975
978
  counterpartyUrl,
@@ -1387,7 +1390,10 @@ function createMiddleware2(options) {
1387
1390
  const result = await verify(config, {
1388
1391
  credentials,
1389
1392
  purpose,
1390
- action: request.method.toLowerCase(),
1393
+ // RFC 7230 § 3.1.1 — HTTP method tokens uppercase by IANA convention.
1394
+ // Backend evaluator tolerates either case as defense-in-depth
1395
+ // (round-18.6 batch 2); SDK emits canonical form.
1396
+ action: request.method.toUpperCase(),
1391
1397
  resource: pathname,
1392
1398
  counterpartyUrl,
1393
1399
  counterpartyType: config.counterpartyType || "website",