@astrasyncai/verification-gateway 2.4.11 → 2.4.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.mjs CHANGED
@@ -126,7 +126,7 @@ function getCapabilities(accessLevel) {
126
126
  }
127
127
 
128
128
  // src/version.ts
129
- var SDK_VERSION = "2.4.11";
129
+ var SDK_VERSION = "2.4.12";
130
130
 
131
131
  // src/verify.ts
132
132
  var DEFAULT_CONFIG = {
@@ -906,7 +906,10 @@ function createMiddleware(options) {
906
906
  const result = await verify(config, {
907
907
  credentials,
908
908
  purpose,
909
- action: req.method.toLowerCase(),
909
+ // RFC 7230 § 3.1.1 — HTTP method tokens uppercase by IANA convention.
910
+ // Backend evaluator tolerates either case as defense-in-depth
911
+ // (round-18.6 batch 2); SDK emits canonical form.
912
+ action: req.method.toUpperCase(),
910
913
  resource: req.path,
911
914
  createSession: shouldRecordDecisions,
912
915
  counterpartyUrl,
@@ -1324,7 +1327,10 @@ function createMiddleware2(options) {
1324
1327
  const result = await verify(config, {
1325
1328
  credentials,
1326
1329
  purpose,
1327
- action: request.method.toLowerCase(),
1330
+ // RFC 7230 § 3.1.1 — HTTP method tokens uppercase by IANA convention.
1331
+ // Backend evaluator tolerates either case as defense-in-depth
1332
+ // (round-18.6 batch 2); SDK emits canonical form.
1333
+ action: request.method.toUpperCase(),
1328
1334
  resource: pathname,
1329
1335
  counterpartyUrl,
1330
1336
  counterpartyType: config.counterpartyType || "website",