@bedrock/vc-verifier 19.1.0 → 20.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-verifier",
-  "version": "19.1.0",
+  "version": "20.1.0",
   "type": "module",
   "description": "Bedrock VC Verifier",
   "main": "./lib/index.js",
@@ -9,7 +9,7 @@
     "schemas/**/*.js"
   ],
   "scripts": {
-    "lint": "eslint ."
+    "lint": "eslint --ext .cjs,.js ."
   },
   "repository": {
     "type": "git",
@@ -25,52 +25,54 @@
   },
   "homepage": "https://github.com/digitalbazaar/bedrock-vc-verifier",
   "dependencies": {
-    "@digitalbazaar/bbs-2023-cryptosuite": "^1.1.0",
-    "@digitalbazaar/data-integrity": "^2.0.0",
+    "@digitalbazaar/bbs-2023-cryptosuite": "^1.2.0",
+    "@digitalbazaar/data-integrity": "^2.2.0",
     "@digitalbazaar/ecdsa-2019-cryptosuite": "^2.0.0",
-    "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.0.1",
-    "@digitalbazaar/ecdsa-sd-2023-cryptosuite": "^3.2.0",
+    "@digitalbazaar/ecdsa-multikey": "^1.7.0",
+    "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.1.0",
+    "@digitalbazaar/ecdsa-sd-2023-cryptosuite": "^3.2.1",
+    "@digitalbazaar/ed25519-multikey": "^1.1.0",
     "@digitalbazaar/ed25519-signature-2018": "^4.0.0",
-    "@digitalbazaar/ed25519-signature-2020": "^5.0.0",
+    "@digitalbazaar/ed25519-signature-2020": "^5.4.0",
     "@digitalbazaar/eddsa-2022-cryptosuite": "^1.0.0",
-    "@digitalbazaar/eddsa-rdfc-2022-cryptosuite": "^1.0.1",
-    "@digitalbazaar/vc": "^6.0.0",
-    "@digitalbazaar/vc-revocation-list": "^6.0.0",
-    "@digitalbazaar/vc-status-list": "^7.0.0",
+    "@digitalbazaar/eddsa-rdfc-2022-cryptosuite": "^1.1.0",
+    "@digitalbazaar/vc": "^7.0.0",
+    "@digitalbazaar/vc-revocation-list": "^7.0.0",
+    "@digitalbazaar/vc-status-list": "^8.0.0",
     "assert-plus": "^1.0.0",
     "bnid": "^3.0.0",
-    "body-parser": "^1.20.0",
+    "body-parser": "^1.20.2",
     "cors": "^2.8.5",
-    "serialize-error": "^11.0.0"
+    "jose": "^5.6.3",
+    "klona": "^2.0.6",
+    "serialize-error": "^11.0.3"
   },
   "peerDependencies": {
     "@bedrock/app-identity": "^4.0.0",
-    "@bedrock/core": "^6.0.1",
-    "@bedrock/credentials-context": "^4.0.0",
-    "@bedrock/data-integrity-context": "^3.0.0",
-    "@bedrock/did-context": "^5.0.0",
-    "@bedrock/did-io": "^10.2.0",
-    "@bedrock/express": "^8.0.0",
-    "@bedrock/https-agent": "^4.0.0",
-    "@bedrock/jsonld-document-loader": "^4.0.0",
-    "@bedrock/mongodb": "^10.0.0",
-    "@bedrock/multikey-context": "^2.0.0",
-    "@bedrock/security-context": "^8.0.0",
-    "@bedrock/service-agent": "^8.0.0",
-    "@bedrock/service-context-store": "^11.0.0",
-    "@bedrock/service-core": "^9.0.0",
-    "@bedrock/validation": "^7.0.0",
-    "@bedrock/vc-revocation-list-context": "^4.0.0",
-    "@bedrock/vc-status-list-context": "^5.0.0",
-    "@bedrock/veres-one-context": "^15.0.0"
+    "@bedrock/core": "^6.1.3",
+    "@bedrock/credentials-context": "^5.0.2",
+    "@bedrock/data-integrity-context": "^4.0.3",
+    "@bedrock/did-context": "^6.0.0",
+    "@bedrock/did-io": "^10.3.1",
+    "@bedrock/express": "^8.3.1",
+    "@bedrock/https-agent": "^4.1.0",
+    "@bedrock/jsonld-document-loader": "^5.1.0",
+    "@bedrock/mongodb": "^10.2.0",
+    "@bedrock/multikey-context": "^3.0.0",
+    "@bedrock/security-context": "^9.0.0",
+    "@bedrock/service-agent": "^9.0.2",
+    "@bedrock/service-context-store": "^12.0.0",
+    "@bedrock/service-core": "^10.0.0",
+    "@bedrock/validation": "^7.1.0",
+    "@bedrock/vc-revocation-list-context": "^5.0.0",
+    "@bedrock/vc-status-list-context": "^6.0.2",
+    "@bedrock/veres-one-context": "^16.0.0"
   },
   "devDependencies": {
-    "eslint": "^8.47.0",
-    "eslint-config-digitalbazaar": "^5.0.1",
-    "eslint-plugin-jsdoc": "^48.0.3",
-    "eslint-plugin-unicorn": "^50.0.1",
-    "jsdoc": "^4.0.2",
-    "jsdoc-to-markdown": "^8.0.0"
+    "eslint": "^8.57.0",
+    "eslint-config-digitalbazaar": "^5.2.0",
+    "eslint-plugin-jsdoc": "^48.11.0",
+    "eslint-plugin-unicorn": "^55.0.0"
   },
   "engines": {
     "node": ">=18"

package/schemas/bedrock-vc-verifier.js

@@ -1,59 +1,260 @@
 /*!
- * Copyright (c) 2022 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2022-2024 Digital Bazaar, Inc. All rights reserved.
  */
-const context = {
-  title: '@context',
+import {schemas} from '@bedrock/validation';
+
+const VC_CONTEXT_1 = 'https://www.w3.org/2018/credentials/v1';
+const VC_CONTEXT_2 = 'https://www.w3.org/ns/credentials/v2';
+
+const vcContext = {
   type: 'array',
   minItems: 1,
-  items: {
-    type: ['string', 'object']
+  // the first context must be the VC context
+  items: [{
+    oneOf: [{
+      const: VC_CONTEXT_1
+    }, {
+      const: VC_CONTEXT_2
+    }]
+  }],
+  // additional contexts maybe strings or objects
+  additionalItems: {
+    anyOf: [{type: 'string'}, {type: 'object'}]
   }
 };
 
-export const createChallengeBody = {
-  title: 'Create Challenge Body',
+function idOrObjectWithId() {
+  return {
+    title: 'identifier or an object with an id',
+    anyOf: [
+      schemas.identifier(),
+      {
+        type: 'object',
+        required: ['id'],
+        additionalProperties: true,
+        properties: {id: schemas.identifier()}
+      }
+    ]
+  };
+}
+
+function verifiableCredential() {
+  return {
+    title: 'Verifiable Credential',
+    type: 'object',
+    required: [
+      '@context',
+      'credentialSubject',
+      'issuer',
+      'type'
+    ],
+    additionalProperties: true,
+    properties: {
+      '@context': vcContext,
+      credentialSubject: {
+        anyOf: [
+          {type: 'object'},
+          {type: 'array', minItems: 1, items: {type: 'object'}}
+        ]
+      },
+      id: {
+        type: 'string'
+      },
+      issuer: idOrObjectWithId(),
+      type: {
+        type: 'array',
+        minItems: 1,
+        // this first type must be VerifiableCredential
+        items: [
+          {const: 'VerifiableCredential'},
+        ],
+        // additional types must be strings
+        additionalItems: {
+          type: 'string'
+        }
+      },
+      proof: schemas.proof()
+    }
+  };
+}
+
+const envelopedVerifiableCredential = {
+  title: 'Enveloped Verifiable Credential',
   type: 'object',
   additionalProperties: false,
-  // body must be empty
-  properties: {}
+  required: ['@context', 'id', 'type'],
+  properties: {
+    '@context': {
+      anyOf: [{
+        const: VC_CONTEXT_2
+      }, {
+        type: 'array',
+        minItems: 1,
+        maxItems: 1,
+        // the first context must be the VC context
+        items: [{
+          const: VC_CONTEXT_2
+        }]
+      }]
+    },
+    id: {
+      type: 'string'
+    },
+    type: {
+      const: 'EnvelopedVerifiableCredential'
+    }
+  }
 };
 
-export const verifyCredentialBody = {
-  title: 'Verify Credential Body',
+export function verifiablePresentation() {
+  return {
+    title: 'Verifiable Presentation',
+    type: 'object',
+    required: ['@context', 'type'],
+    additionalProperties: true,
+    properties: {
+      '@context': vcContext,
+      id: {
+        type: 'string'
+      },
+      type: {
+        type: 'array',
+        minItems: 1,
+        // this first type must be VerifiablePresentation
+        items: [
+          {const: 'VerifiablePresentation'},
+        ],
+        // additional types must be strings
+        additionalItems: {
+          type: 'string'
+        }
+      },
+      verifiableCredential: {
+        anyOf: [
+          verifiableCredential(),
+          envelopedVerifiableCredential, {
+            type: 'array',
+            minItems: 1,
+            items: {
+              anyOf: [verifiableCredential(), envelopedVerifiableCredential]
+            }
+          }
+        ]
+      },
+      holder: idOrObjectWithId(),
+      proof: schemas.proof()
+    }
+  };
+}
+
+const envelopedVerifiablePresentation = {
+  title: 'Enveloped Verifiable Presentation',
   type: 'object',
-  required: ['verifiableCredential'],
   additionalProperties: false,
+  required: ['@context', 'id', 'type'],
   properties: {
-    options: {
-      type: 'object'
+    '@context': {
+      anyOf: [{
+        const: VC_CONTEXT_2
+      }, {
+        type: 'array',
+        minItems: 1,
+        maxItems: 1,
+        // the first context must be the VC context
+        items: [{
+          const: VC_CONTEXT_2
+        }]
+      }]
     },
-    verifiableCredential: {
-      type: 'object',
-      additionalProperties: true,
-      required: ['@context'],
-      properties: {
-        '@context': context
-      }
+    id: {
+      type: 'string'
+    },
+    type: {
+      const: 'EnvelopedVerifiablePresentation'
     }
   }
 };
 
-export const verifyPresentationBody = {
-  title: 'Verify Presentation Body',
+export const verifyOptions = {
+  title: 'Verify Options',
   type: 'object',
-  required: ['verifiablePresentation'],
+  oneOf: [{
+    required: ['didResolver']
+  }, {
+    required: ['documentLoader']
+  }],
   additionalProperties: false,
   properties: {
-    options: {
-      type: 'object'
+    didResolver: {
+      title: 'DID Resolver',
+      type: 'object',
+      required: ['url'],
+      additionalProperties: false,
+      properties: {
+        url: {
+          type: 'string',
+          pattern: '^https://[^.]+.[^.]+'
+        }
+      }
     },
-    verifiablePresentation: {
+    documentLoader: {
+      title: 'Document Loader',
       type: 'object',
-      additionalProperties: true,
-      required: ['@context'],
+      required: ['allowRemoteContexts'],
+      additionalProperties: false,
       properties: {
-        '@context': context
+        allowRemoteContexts: {
+          type: 'boolean'
+        }
       }
     }
   }
 };
+
+export const createChallengeBody = {
+  title: 'Create Challenge Body',
+  type: 'object',
+  additionalProperties: false,
+  // body must be empty
+  properties: {}
+};
+
+export function verifyCredentialBody() {
+  return {
+    title: 'Verify Credential Body',
+    type: 'object',
+    required: ['verifiableCredential'],
+    additionalProperties: false,
+    properties: {
+      options: {
+        type: 'object'
+      },
+      verifiableCredential: {
+        anyOf: [
+          verifiableCredential(),
+          envelopedVerifiableCredential
+        ]
+      }
+    }
+  };
+}
+
+export function verifyPresentationBody() {
+  return {
+    title: 'Verify Presentation Body',
+    type: 'object',
+    required: ['verifiablePresentation'],
+    additionalProperties: false,
+    properties: {
+      options: {
+        type: 'object'
+      },
+      verifiablePresentation: {
+        anyOf: [
+          verifiablePresentation(),
+          envelopedVerifiablePresentation
+        ]
+      }
+    }
+  };
+}