@atrib/verify 0.7.0 → 0.7.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -232,7 +232,7 @@ Checks performed when evidence is present:
|
|
|
232
232
|
- Optional `client_id`, subject, actor subject, and `cnf.jkt` checks.
|
|
233
233
|
- Optional DPoP proof checks for `htm`, `htu`, `ath`, `jti`, `iat`, nonce when supplied, and `cnf.jkt` binding.
|
|
234
234
|
|
|
235
|
-
The default signature policy is `require`. Missing trusted keys or unverified decoded claims make the evidence block invalid. Use `signaturePolicy: "best-effort"` only for advisory triage. DPoP replay state stays caller-owned: pass `seenJtis` for one-process checks, `MemoryDpopReplayCache` for one-process services, or `createFetchDpopReplayCache()` when a deployment exposes a shared atomic replay-cache endpoint.
|
|
235
|
+
The default signature policy is `require`. Missing trusted keys or unverified decoded claims make the evidence block invalid. Use `signaturePolicy: "best-effort"` only for advisory triage. DPoP replay state stays caller-owned: pass `seenJtis` for one-process checks, `MemoryDpopReplayCache` for one-process services, or `createFetchDpopReplayCache()` when a deployment exposes a shared atomic replay-cache endpoint. A Cloudflare Worker and Durable Object reference for the HTTP replay-cache endpoint and host-owned introspection proxy lives at [`packages/integration/examples/cloudflare-agents/oauth-evidence-infra/`](https://github.com/creatornader/atrib/blob/main/packages/integration/examples/cloudflare-agents/oauth-evidence-infra/).
|
|
236
236
|
|
|
237
237
|
```typescript
|
|
238
238
|
import { createFetchDpopReplayCache, verifyRecord } from '@atrib/verify'
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atrib/verify",
|
|
3
|
-
"version": "0.7.
|
|
3
|
+
"version": "0.7.2",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|
|
@@ -33,7 +33,7 @@
|
|
|
33
33
|
"@sd-jwt/sd-jwt-vc": "0.19.0",
|
|
34
34
|
"canonicalize": "^3.0.0",
|
|
35
35
|
"jose": "6.2.3",
|
|
36
|
-
"@atrib/mcp": "0.
|
|
36
|
+
"@atrib/mcp": "0.17.0"
|
|
37
37
|
},
|
|
38
38
|
"devDependencies": {
|
|
39
39
|
"@types/node": "^25.9.1",
|