@bedrock/vc-verifier 10.0.0 → 12.1.0

package/README.md

@@ -1,4 +1,4 @@
-# Bedrock VC Verifier API module _(bedrock-vc-verifier)_
+# Bedrock VC Verifier API module _(@bedrock/vc-verifier)_
 
 [![Build Status](https://img.shields.io/github/workflow/status/digitalbazaar/bedrock-vc-verifier/Bedrock%20Node.js%20CI)](https://github.com/digitalbazaar/bedrock-vc-verifier/actions?query=workflow%3A%22Bedrock+Node.js+CI%22)
 [![NPM Version](https://img.shields.io/npm/v/bedrock-vc-verifier.svg)](https://npm.im/bedrock-vc-verifier)
@@ -25,7 +25,7 @@ TBD
 
 ## Install
 
-- Node.js 14+ is required.
+- Node.js 16+ is required.
 
 ### NPM
 
@@ -73,8 +73,8 @@ Example request:
 
 Alias: `/instances/:instanceId/credentials/verify`
 
-Optionally performs status checks using the `vc-revocation-list` or
-`vc-status-list` library.
+Optionally performs status checks using the `@digitalbazaar/vc-revocation-list`
+or `@digitalbazaar/vc-status-list` library.
 
 Example request:
 

package/lib/challenges.js

@@ -3,10 +3,8 @@
  */
 import * as bedrock from '@bedrock/core';
 import * as database from '@bedrock/mongodb';
+import {decodeId, generateId} from 'bnid';
 import assert from 'assert-plus';
-import {createRequire} from 'node:module';
-const require = createRequire(import.meta.url);
-const {generateId, decodeId} = require('bnid');
 
 const {util: {BedrockError}} = bedrock;
 

package/lib/documentLoader.js

@@ -2,20 +2,20 @@
  * Copyright (c) 2019-2022 Digital Bazaar, Inc. All rights reserved.
  */
 import * as bedrock from '@bedrock/core';
+import {
+  documentLoader as brDocLoader,
+  httpClientHandler,
+  JsonLdDocumentLoader
+} from '@bedrock/jsonld-document-loader';
+import {createContextDocumentLoader} from '@bedrock/service-context-store';
+import {didIo} from '@bedrock/did-io';
 import '@bedrock/credentials-context';
 import '@bedrock/did-context';
 import '@bedrock/did-io';
 import '@bedrock/security-context';
-import '@bedrock/vc-status-list-context';
 import '@bedrock/vc-revocation-list-context';
+import '@bedrock/vc-status-list-context';
 import '@bedrock/veres-one-context';
-import {createContextDocumentLoader} from '@bedrock/service-context-store';
-import {didIo} from '@bedrock/did-io';
-import {
-  documentLoader as brDocLoader,
-  httpClientHandler,
-  JsonLdDocumentLoader
-} from '@bedrock/jsonld-document-loader';
 
 const serviceType = 'vc-verifier';
 let webLoader;

package/lib/http.js

@@ -2,26 +2,22 @@
  * Copyright (c) 2018-2022 Digital Bazaar, Inc. All rights reserved.
  */
 import * as bedrock from '@bedrock/core';
+import * as vc from '@digitalbazaar/vc';
 import {createChallenge, verifyChallenge} from './challenges.js';
-import {asyncHandler} from '@bedrock/express';
-import bodyParser from 'body-parser';
-import {checkStatus} from './status.js';
-import cors from 'cors';
 import {
   createChallengeBody,
   verifyCredentialBody,
   verifyPresentationBody
 } from '../schemas/bedrock-vc-verifier.js';
+import {metering, middleware} from '@bedrock/service-core';
+import {asyncHandler} from '@bedrock/express';
+import bodyParser from 'body-parser';
+import {checkStatus} from './status.js';
+import cors from 'cors';
 import {createDocumentLoader} from './documentLoader.js';
-import {createRequire} from 'node:module';
+import {Ed25519Signature2018} from '@digitalbazaar/ed25519-signature-2018';
+import {Ed25519Signature2020} from '@digitalbazaar/ed25519-signature-2020';
 import {createValidateMiddleware as validate} from '@bedrock/validation';
-import {metering, middleware} from '@bedrock/service-core';
-const require = createRequire(import.meta.url);
-const {Ed25519Signature2020} =
-  require('@digitalbazaar/ed25519-signature-2020');
-const {Ed25519Signature2018} =
-  require('@digitalbazaar/ed25519-signature-2018');
-const vc = require('@digitalbazaar/vc');
 
 const {util: {BedrockError}} = bedrock;
 
@@ -63,8 +59,7 @@ export async function addRoutes({app, service} = {}) {
     cors(),
     validate({bodySchema: createChallengeBody}),
     getConfigMiddleware,
-    // FIXME: add middleware to switch between oauth2 / zcap based on headers
-    middleware.authorizeConfigZcapInvocation(),
+    middleware.authorizeServiceObjectRequest(),
     asyncHandler(async (req, res) => {
       const {config} = req.serviceObject;
       const challenge = await createChallenge({verifierId: config.id});
@@ -81,8 +76,7 @@ export async function addRoutes({app, service} = {}) {
     cors(),
     validate({bodySchema: verifyCredentialBody}),
     getConfigMiddleware,
-    // FIXME: add middleware to switch between oauth2 / zcap based on headers
-    middleware.authorizeConfigZcapInvocation(),
+    middleware.authorizeServiceObjectRequest(),
     asyncHandler(async (req, res) => {
       const {config} = req.serviceObject;
       const documentLoader = await createDocumentLoader({config});
@@ -139,8 +133,7 @@ export async function addRoutes({app, service} = {}) {
     cors(),
     validate({bodySchema: verifyPresentationBody}),
     getConfigMiddleware,
-    // FIXME: add middleware to switch between oauth2 / zcap based on headers
-    middleware.authorizeConfigZcapInvocation(),
+    middleware.authorizeServiceObjectRequest(),
     asyncHandler(async (req, res) => {
       const {config} = req.serviceObject;
       const documentLoader = await createDocumentLoader({config});

package/lib/index.js

@@ -2,10 +2,10 @@
  * Copyright (c) 2021-2022 Digital Bazaar, Inc. All rights reserved.
  */
 import * as bedrock from '@bedrock/core';
-import {addRoutes} from './http.js';
 import {
   addRoutes as addContextStoreRoutes
 } from '@bedrock/service-context-store';
+import {addRoutes} from './http.js';
 import {createService} from '@bedrock/service-core';
 import {initializeServiceAgent} from '@bedrock/service-agent';
 

package/lib/status.js

@@ -1,17 +1,15 @@
 /*!
  * Copyright (c) 2019-2022 Digital Bazaar, Inc. All rights reserved.
  */
+import {
+  checkStatus as revocationListCheckStatus,
+  statusTypeMatches as revocationListStatusTypeMatches
+} from '@digitalbazaar/vc-revocation-list';
+import {
+  checkStatus as statusListCheckStatus,
+  statusTypeMatches as statusListStatusTypeMatches
+} from '@digitalbazaar/vc-status-list';
 import assert from 'assert-plus';
-import {createRequire} from 'node:module';
-const require = createRequire(import.meta.url);
-const {
-  checkStatus: statusListCheckStatus,
-  statusTypeMatches: statusListStatusTypeMatches
-} = require('@digitalbazaar/vc-status-list');
-const {
-  checkStatus: revocationListCheckStatus,
-  statusTypeMatches: revocationListStatusTypeMatches
-} = require('vc-revocation-list');
 
 const handlerMap = new Map();
 handlerMap.set('RevocationList2020Status', {

package/package.json

@@ -1,9 +1,13 @@
 {
   "name": "@bedrock/vc-verifier",
-  "version": "10.0.0",
+  "version": "12.1.0",
   "type": "module",
   "description": "Bedrock VC Verifier",
   "main": "./lib/index.js",
+  "files": [
+    "lib/**/*.js",
+    "schemas/**/*.js"
+  ],
   "scripts": {
     "lint": "eslint ."
   },
@@ -21,42 +25,43 @@
   },
   "homepage": "https://github.com/digitalbazaar/bedrock-vc-verifier",
   "dependencies": {
-    "@digitalbazaar/ed25519-signature-2018": "^2.1.0",
-    "@digitalbazaar/ed25519-signature-2020": "^3.0.0",
-    "@digitalbazaar/vc": "^2.1.0",
-    "@digitalbazaar/vc-status-list": "^3.0.0",
+    "@digitalbazaar/ed25519-signature-2018": "^3.0.0",
+    "@digitalbazaar/ed25519-signature-2020": "^4.0.1",
+    "@digitalbazaar/vc": "^4.0.0",
+    "@digitalbazaar/vc-revocation-list": "^4.0.0",
+    "@digitalbazaar/vc-status-list": "^5.0.0",
     "assert-plus": "^1.0.0",
-    "bnid": "^2.1.0",
-    "body-parser": "^1.19.0",
-    "cors": "^2.8.5",
-    "vc-revocation-list": "^3.0.0"
+    "bnid": "^3.0.0",
+    "body-parser": "^1.20.0",
+    "cors": "^2.8.5"
   },
   "peerDependencies": {
-    "@bedrock/core": "^6.0.0",
+    "@bedrock/core": "^6.0.1",
     "@bedrock/credentials-context": "^3.0.0",
     "@bedrock/did-context": "^4.0.0",
-    "@bedrock/did-io": "^8.0.0",
+    "@bedrock/did-io": "^9.0.1",
     "@bedrock/express": "^8.0.0",
     "@bedrock/https-agent": "^4.0.0",
     "@bedrock/jsonld-document-loader": "^3.0.0",
     "@bedrock/mongodb": "^10.0.0",
     "@bedrock/security-context": "^7.0.0",
-    "@bedrock/service-agent": "^5.0.0",
-    "@bedrock/service-context-store": "^7.0.0",
-    "@bedrock/service-core": "^5.0.0",
-    "@bedrock/vc-status-list-context": "^4.0.0",
-    "@bedrock/vc-revocation-list-context": "^3.0.0",
-    "@bedrock/veres-one-context": "^14.0.0",
-    "@bedrock/validation": "^7.0.0"
+    "@bedrock/service-agent": "^6.0.0",
+    "@bedrock/service-context-store": "^8.1.0",
+    "@bedrock/service-core": "^6.1.2",
+    "@bedrock/validation": "^7.0.0",
+    "@bedrock/vc-revocation-list-context": "^3.1.0",
+    "@bedrock/vc-status-list-context": "^4.1.0",
+    "@bedrock/veres-one-context": "^14.0.1"
   },
   "devDependencies": {
-    "eslint": "^7.32.0",
-    "eslint-config-digitalbazaar": "^2.8.0",
-    "eslint-plugin-jsdoc": "^28.6.1",
-    "jsdoc": "^3.6.4",
+    "eslint": "^8.18.0",
+    "eslint-config-digitalbazaar": "^4.0.1",
+    "eslint-plugin-jsdoc": "^39.3.3",
+    "eslint-plugin-unicorn": "^43.0.0",
+    "jsdoc": "^3.6.10",
     "jsdoc-to-markdown": "^7.1.1"
   },
   "engines": {
-    "node": ">=14"
+    "node": ">=16"
   }
 }

package/.eslintrc.cjs

@@ -1,12 +0,0 @@
-module.exports = {
-  root: true,
-  parserOptions: {
-    // this is required for dynamic import()
-    ecmaVersion: 2020
-  },
-  env: {
-    node: true
-  },
-  extends: ['digitalbazaar', 'digitalbazaar/jsdoc'],
-  ignorePatterns: ['node_modules/']
-};

package/.github/workflows/main.yml

@@ -1,77 +0,0 @@
-name: Bedrock Node.js CI
-
-on: [push]
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    strategy:
-      matrix:
-        node-version: [16.x]
-    steps:
-    - uses: actions/checkout@v2
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
-      with:
-        node-version: ${{ matrix.node-version }}
-    - run: npm install
-    - name: Run eslint
-      run: npm run lint
-  test-node:
-    needs: [lint]
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    services:
-      mongodb:
-        image: mongo:4.4
-        ports:
-          - 27017:27017
-    strategy:
-      matrix:
-        node-version: [14.x, 16.x]
-    steps:
-    - uses: actions/checkout@v2
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
-      with:
-        node-version: ${{ matrix.node-version }}
-    - run: |
-        npm install
-        cd test
-        npm install
-    - name: Run test with Node.js ${{ matrix.node-version }}
-      run: |
-        cd test
-        npm test
-  coverage:
-    needs: [test-node]
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    services:
-      mongodb:
-        image: mongo:4.4
-        ports:
-          - 27017:27017
-    strategy:
-      matrix:
-        node-version: [16.x]
-    steps:
-    - uses: actions/checkout@v2
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@v1
-      with:
-        node-version: ${{ matrix.node-version }}
-    - run: |
-        npm install
-        cd test
-        npm install
-    - name: Generate coverage report
-      run: |
-        cd test
-        npm run coverage-ci
-    - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v2
-      with:
-        file: ./test/coverage/lcov.info
-        fail_ci_if_error: true

package/CHANGELOG.md

@@ -1,168 +0,0 @@
-# bedrock-vc-verifier ChangeLog
-
-## 10.0.0 - 2022-05-17
-
-### Changed
-- **BREAKING**: Use `@bedrock-service-context-store@7` to cause migration of
-  old EDV context documents to the new EDV attribute version.
-
-## 9.0.0 - 2022-05-05
-
-### Changed
-- **BREAKING**: Update peer deps:
-  - `@bedrock/service-agent@5`
-  - `@bedrock/service-context-store@6`.
-- **BREAKING**: The updated peer dependencies use a new EDV client with a
-  new blind attribute version. This version is incompatible with previous
-  versions and a manual migration must be performed to update all
-  EDV documents to use the new blind attribute version -- or a new
-  deployment is required.
-
-## 8.0.0 - 2022-04-29
-
-### Changed
-- **BREAKING**: Update peer deps:
-  - `@bedrock/core@6`
-  - `@bedrock/credentials-context@3`
-  - `@bedrock/did-context@4`
-  - `@bedrock/did-io@8`
-  - `@bedrock/express@8`
-  - `@bedrock/https-agent@4`
-  - `@bedrock/jsonld-document-loader@3`
-  - `@bedrock/mongodb@10`
-  - `@bedrock/security-context@7`
-  - `@bedrock/service-agent@4`
-  - `@bedrock/service-context-store@5`
-  - `@bedrock/service-core@5`
-  - `@bedrock/validation@7`
-  - `@bedrock/vc-status-list-context@3`
-  - `@bedrock/vc-revocation-list-context@3`
-  - `@bedrock/veres-one-context@14`.
-
-## 7.0.0 - 2022-04-23
-
-### Changed
-- **BREAKING**: Update `@digitalbazaar/vc-status-list` and
-  `@bedrock/vc-status-list-context` to v3.0.
-
-## 6.0.0 - 2022-04-06
-
-### Changed
-- **BREAKING**: Rename package to `@bedrock/vc-verifier`.
-- **BREAKING**: Convert to module (ESM).
-- **BREAKING**: Remove default export.
-- **BREAKING**: Require node 14.x.
-
-## 5.2.0 - 2022-03-14
-
-### Added
-- Add missing dependencies `@digitalbazaar/webkms-client@10.0` and
-  `@digitalbazaar/edv-client@13.0` in test.
-- Add coverage action in github workflows.
-
-### Removed
-- Remove unused dependency `crypto-ld@6.0`.
-- Remove unused dependencies `veres-one-context`, `did-veres-one`, `crypto-ld`,
-  `did-context` and `bedrock-views` from test.
-
-## 5.1.0 - 2022-03-12
-
-### Changed
-- Update dependencies:
-  - `@digitalbazaar/vc-status-list@2.1`.
-
-## 5.0.0 - 2022-03-11
-
-### Changed
-- **BREAKING**: Update peer dependencies:
-  - `bedrock-service-core@3`
-  - `bedrock-service-context-store@3`
-  - `bedrock-did-io@6.1`.
-
-## 4.0.0 - 2022-03-01
-
-### Changed
-- **BREAKING**: Move zcap revocations to `/zcaps/revocations` to better
-  future proof.
-- **BREAKING**: Require `bedrock-service-core@2`, `bedrock-service-agent@2`,
-  and `bedrock-service-context-store@2` peer dependencies.
-
-## 3.1.0 - 2022-02-23
-
-### Added
-- Add default (dev mode) `app-identity` entry for `vc-verifier` service.
-
-## 3.0.1 - 2022-02-21
-
-### Changed
-- Use `@digitalbazaar/vc-status-list-context` and updated bedrock-vc-status-list-context.
-  These dependencies have no changes other than moved package locations.
-
-## 3.0.0 - 2022-02-20
-
-### Changed
-- **BREAKING**: Complete refactor to run on top of `bedrock-service*` modules. While
-  this version has similar functionality, its APIs and implementation are a clean
-  break from previous versions.
-
-## 2.3.0 - 2022-02-15
-
-### Changed
-- Refactor documentLoader.
-
-## 2.2.0 - 2022-02-09
-
-### Added
-- Add support for "StatusList2021Credential" status checks using
-  `vc-status-list@1.0`
-- Add tests.
-
-## 2.1.0 - 2021-09-14
-
-### Added
-- Add support for unsigned VPs.
-
-## 2.0.2 - 2021-08-23
-
-### Changed
-- Update deps to fix multicodec bugs and set `verificationSuite` for `v1` to
-  `Ed25519VerificationKey2020` in config.
-
-## 2.0.1 - 2021-05-28
-
-### Fixed
-- Fix bedrock peer dependencies.
-
-## 2.0.0 - 2021-05-28
-
-### Changed
-- **BREAKING**: Remove `axios` and use `@digitalbazaar/http-client@1.1.0`.
-  Errors surfaced from `http-client` do not have the same signature as `axios`.
-- **BREAKING**: Remove `cfg.ledgerHostname` and `cfg.mode` from `config.js`.
-- **BREAKING**: Use [vc-revocation-list@3](https://github.com/digitalbazaar/vc-revocation-list/blob/main/CHANGELOG.md).
-  Revocation list credentials must have the same issuer value as the credential
-  to be revoked.
-- **BREAKING**: Use [bedrock-did-io@3.0](https://github.com/digitalbazaar/bedrock-did-io/blob/main/CHANGELOG.md).
-- Replace `vc-js` with `@digitalbazaar/vc`.
-- Update to support ed25519 2020 signature suite.
-- Update peerDeps and testDeps.
-
-## 1.2.0 - 2021-03-03
-
-### Fixed
-
-- Only verify based on `options.checks`.
-
-## 1.1.0 - 2020-05-18
-
-### Added
-
-- Implement W3C CCG VC Verification HTTP API.
-
-## 1.0.0 - 2020-02-27
-
-### Added
-  - API endpoint /vc/verify which can verify a presentation.
-  - Mock API endpoint /verifiers/:verifierId/verifications/:referenceId
-  - Positive tests for both endpoints.
-  - Utils to serialize errors in verification reports.

package/test/mocha/.eslintrc.cjs

@@ -1,9 +0,0 @@
-module.exports = {
-  env: {
-    mocha: true
-  },
-  globals: {
-    assertNoError: true,
-    should: true
-  }
-};