@bedrock/kms-http 21.0.0 → 22.1.0

package/lib/middleware.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2019-2024 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2019-2025 Digital Bazaar, Inc. All rights reserved.
  */
 import * as bedrock from '@bedrock/core';
 import * as brZCapStorage from '@bedrock/zcap-storage';
@@ -20,6 +20,7 @@ import {defaultModuleManager as moduleManager} from '@bedrock/kms';
 import {reportOperationUsage} from './metering.js';
 
 const {config, util: {BedrockError}} = bedrock;
+const {helpers: {inspectCapabilityChain}} = brZCapStorage;
 
 const FIVE_MINUTES = 1000 * 60 * 5;
 
@@ -200,44 +201,6 @@ async function getVerifier({keyId, documentLoader}) {
   return {verifier, verificationMethod};
 }
 
-async function inspectCapabilityChain({
-  capabilityChain, capabilityChainMeta
-}) {
-  // if capability chain has only root, there's nothing to check as root
-  // zcaps cannot be revoked
-  if(capabilityChain.length === 1) {
-    return {valid: true};
-  }
-
-  // collect capability IDs and delegators for all delegated capabilities in
-  // chain (skip root) so they can be checked for revocation
-  const capabilities = [];
-  for(const [i, capability] of capabilityChain.entries()) {
-    // skip root zcap, it cannot be revoked
-    if(i === 0) {
-      continue;
-    }
-    const [{purposeResult}] = capabilityChainMeta[i].verifyResult.results;
-    if(purposeResult && purposeResult.delegator) {
-      capabilities.push({
-        capabilityId: capability.id,
-        delegator: purposeResult.delegator.id,
-      });
-    }
-  }
-
-  const revoked = await brZCapStorage.revocations.isRevoked({capabilities});
-  if(revoked) {
-    return {
-      valid: false,
-      error: new Error(
-        'One or more capabilities in the chain have been revoked.')
-    };
-  }
-
-  return {valid: true};
-}
-
 function onError({error}) {
   if(!(error instanceof BedrockError)) {
     // always expose cause message and name; expose cause details as

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/kms-http",
-  "version": "21.0.0",
+  "version": "22.1.0",
   "type": "module",
   "description": "Bedrock KMS HTTP API",
   "main": "./lib/index.js",
@@ -28,37 +28,37 @@
   },
   "homepage": "https://github.com/digitalbazaar/bedrock-kms-http",
   "dependencies": {
-    "@digitalbazaar/ed25519-multikey": "^1.1.0",
+    "@digitalbazaar/ed25519-multikey": "^1.3.1",
     "@digitalbazaar/ed25519-signature-2020": "^5.4.0",
     "@digitalbazaar/ezcap-express": "^7.1.0",
     "@digitalbazaar/webkms-switch": "^12.0.0",
-    "cidr-regex": "^4.1.1",
+    "cidr-regex": "^4.1.3",
     "cors": "^2.8.5",
     "forwarded": "^0.2.0",
     "ipaddr.js": "^2.2.0"
   },
   "peerDependencies": {
     "@bedrock/app-identity": "^4.0.0",
-    "@bedrock/core": "^6.1.3",
+    "@bedrock/core": "^6.3.0",
     "@bedrock/did-context": "^6.0.0",
-    "@bedrock/did-io": "^10.3.1",
+    "@bedrock/did-io": "^10.4.0",
     "@bedrock/express": "^8.3.1",
-    "@bedrock/jsonld-document-loader": "^5.1.0",
-    "@bedrock/kms": "^15.0.0",
-    "@bedrock/meter-usage-reporter": "^9.0.1",
+    "@bedrock/jsonld-document-loader": "^5.2.0",
+    "@bedrock/kms": "^16.0.0",
+    "@bedrock/meter-usage-reporter": "^10.0.0",
     "@bedrock/security-context": "^9.0.0",
-    "@bedrock/validation": "^7.1.0",
+    "@bedrock/validation": "^7.1.1",
     "@bedrock/veres-one-context": "^16.0.0",
-    "@bedrock/zcap-storage": "^8.0.1"
+    "@bedrock/zcap-storage": "^9.3.0"
   },
   "directories": {
     "lib": "./lib"
   },
   "devDependencies": {
-    "eslint": "^8.57.0",
+    "eslint": "^8.57.1",
     "eslint-config-digitalbazaar": "^5.2.0",
-    "eslint-plugin-jsdoc": "^48.11.0",
-    "eslint-plugin-unicorn": "^55.0.0"
+    "eslint-plugin-jsdoc": "^50.6.3",
+    "eslint-plugin-unicorn": "^56.0.1"
   },
   "engines": {
     "node": ">=18"