@bedrock/vc-verifier 22.1.0 → 22.1.2

package/lib/vcb.js

@@ -27,6 +27,8 @@ const SUPPORTED_BARCODE_FORMATS = new Set([
   'pdf417'
 ]);
 
+const TEXT_DECODER = new TextDecoder();
+
 export async function verifyEnvelopedCredential({
   config, contents, format, checks
 } = {}) {
@@ -76,6 +78,10 @@ export async function verifyEnvelopedCredential({
 async function _parseQrCodeEnvelope({
   contents, documentLoader, typeTableLoader
 }) {
+  // `fromQrCode` requires text, so convert to text as needed
+  if(contents instanceof Uint8Array) {
+    contents = TEXT_DECODER.decode(contents);
+  }
   const {jsonldDocument: credential} = await util.fromQrCode({
     text: contents,
     documentLoader,

package/lib/verify.js

@@ -36,9 +36,13 @@ export async function verifyPresentation({
     const result = await di.verifyPresentation({
       config, presentation, challenge, domain, checks
     });
-    if(result.verified || !result.presentationResult?.verified) {
-      // the whole VP and all its VCs were verified or the VP itself failed
-      // verification, so no extra work needed below
+    // if the whole VP and all its VCs were verified or if the VP itself
+    // was checked and it failed verification, there is no extra work to be
+    // done and we can return early; it is important to note that the
+    // presence of `presentationResult` must be confirmed here to ensure that
+    // if an unprotected presentation was used and this was allowed, the VC
+    // checks will continue below
+    if(result.verified || result.presentationResult?.verified === false) {
       return result;
     }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-verifier",
-  "version": "22.1.0",
+  "version": "22.1.2",
   "type": "module",
   "description": "Bedrock VC Verifier",
   "main": "./lib/index.js",