@bedrock/vc-verifier 23.6.0 → 24.0.0

package/LICENSE.md

@@ -1,8 +1,7 @@
 Bedrock Non-Commercial License v1.0
 ===================================
 
-Copyright (c) 2011-2022 Digital Bazaar, Inc.
-All rights reserved.
+Copyright (c) 2011-2026 Digital Bazaar, Inc.
 
 Summary
 =======

package/README.md

@@ -1,7 +1,7 @@
 # Bedrock VC Verifier API module _(@bedrock/vc-verifier)_
 
-[![Build Status](https://img.shields.io/github/actions/workflow/status/digitalbazaar/bedrock-vc-verifier/main.yml)](https://github.com/digitalbazaar/bedrock-vc-verifier/actions/workflows/main.yml)
-[![NPM Version](https://img.shields.io/npm/v/bedrock-vc-verifier.svg)](https://npm.im/bedrock-vc-verifier)
+[![Build Status](https://img.shields.io/github/actions/workflow/status/digitalbazaar/bedrock-vc-verifier/main.yaml)](https://github.com/digitalbazaar/bedrock-vc-verifier/actions/workflows/main.yaml)
+[![NPM Version](https://img.shields.io/npm/v/@bedrock/vc-verifier.svg)](https://npm.im/@bedrock/vc-verifier)
 
 > A VC Verifier API library for use with Bedrock applications.
 
@@ -25,7 +25,10 @@ TBD
 
 ## Install
 
-- Node.js 18+ is required.
+This software requires and supports maintained recent versions of Node.js.
+Updates may remove support for older unmaintained platform versions. Please use
+dependency version lock files and testing to ensure compatibility with this
+software.
 
 ### NPM
 

package/lib/challenges.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2022-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2022-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import * as database from '@bedrock/mongodb';
@@ -85,7 +85,7 @@ function _decodeChallenge({challenge}) {
       multihash: true,
       expectedSize: 16
     }));
-  } catch(e) {
+  } catch {
     throw new BedrockError(
       'Invalid challenge.', 'DataError', {
         httpStatusCode: 400,
@@ -157,7 +157,7 @@ async function _use({challenge, explain = false} = {}) {
   const collection = database.collections[COLLECTION_NAME];
   const query = {'challenge.value': challenge};
   const $inc = {
-    'challenge.uses': 1,
+    'challenge.uses': 1
   };
   const $set = {
     'meta.updated': Date.now()

package/lib/config.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2019-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
  */
 import {config} from '@bedrock/core';
 import '@bedrock/app-identity';
@@ -27,10 +27,7 @@ cfg.documentLoader = {
 
 cfg.supportedSuites = [
   'bbs-2023',
-  'Ed25519Signature2018',
   'Ed25519Signature2020',
-  'eddsa-2022',
-  'ecdsa-2019',
   'ecdsa-rdfc-2019',
   'eddsa-rdfc-2022',
   'ecdsa-jcs-2019',

package/lib/di.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2018-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2018-2026 Digital Bazaar, Inc.
  */
 import * as vc from '@digitalbazaar/vc';
 import {createCheckStatus} from './status.js';

package/lib/documentLoader.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2019-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import {
@@ -87,7 +87,7 @@ export async function createDocumentLoader({
     try {
       // try to resolve URL through built-in doc loader
       return await brDocLoader(url);
-    } catch(e) {
+    } catch {
       // FIXME: improve to check for `NotFoundError` once `e.name`
       // supports it
     }
@@ -113,7 +113,7 @@ export async function createDocumentLoader({
 
 async function _resolve({didResolver, didUrl}) {
   // split on `?` query or `#` fragment
-  const [did] = didUrl.split(/(?=[\?#])/);
+  const [did] = didUrl.split(/(?=[?#])/);
 
   // fetch DID document using DID resolver, assume DID param is prepended
   const url = didResolver.url.endsWith('/') ?

package/lib/envelopes.js

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2019-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import * as mdl from './mdl.js';
@@ -88,6 +88,6 @@ function _throwUnknownFormat(format) {
       details: {
         httpStatusCode: 400,
         public: true
-      },
+      }
     });
 }

package/lib/http.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2018-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2018-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import {createChallenge, verifyChallenge} from './challenges.js';
@@ -76,7 +76,7 @@ export async function addRoutes({app, service} = {}) {
       try {
         const {
           options = {},
-          verifiableCredential: credential,
+          verifiableCredential: credential
         } = req.body;
 
         const {checks} = options;

package/lib/index.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2021-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2021-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import {

package/lib/iso18013-7.js

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2025-2026 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2025-2026 Digital Bazaar, Inc.
  */
 import {oid4vp} from '@digitalbazaar/oid4-client';
 

package/lib/mdl.js

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2025-2026 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2025-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import {addDocumentRoutes, documentStores} from '@bedrock/service-agent';
@@ -45,7 +45,7 @@ export async function verifyEnvelopedPresentation({
         details: {
           httpStatusCode: 400,
           public: true
-        },
+        }
       });
   }
 
@@ -66,7 +66,7 @@ export async function verifyEnvelopedPresentation({
         details: {
           httpStatusCode: 400,
           public: true
-        },
+        }
       });
   }
 

package/lib/status.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2019-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import {
@@ -122,17 +122,18 @@ export function createCheckStatus({config} = {}) {
       }
       return result;
     } catch(error) {
+      let _error = error;
       if(!(error instanceof BedrockError)) {
         // always expose cause message and name; expose cause details as
         // BedrockError if error is marked public
         const details = error.details?.public ? error.details : {};
-        error = new BedrockError(error.message, {
+        _error = new BedrockError(error.message, {
           name: error.name || 'OperationError',
           details: {...details, public: true},
           cause: error
         });
       }
-      return {verified: false, error};
+      return {verified: false, error: _error};
     }
   };
 }
@@ -199,7 +200,7 @@ async function _expandIfTerseEntry({credentialStatus, cache}) {
 
   if(!webLoader) {
     throw new BedrockError(
-      `Web loader disabled; cannot load credential status list(s) for `
+      `Web loader disabled; cannot load credential status list(s) for ` +
       `status type "${credentialStatus.type}".`, {
         name: 'NotSupportedError',
         details: {

package/lib/suites.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2018-2024 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2018-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import {
@@ -18,17 +18,10 @@ import {
   createVerifyCryptosuite as createEddsaJcs2022VerifyCryptoSuite
 } from '@digitalbazaar/eddsa-jcs-2022-cryptosuite';
 import {DataIntegrityProof} from '@digitalbazaar/data-integrity';
-import {
-  cryptosuite as ecdsa2019CryptoSuite
-} from '@digitalbazaar/ecdsa-2019-cryptosuite';
 import {
   cryptosuite as ecdsaRdfc2019CryptoSuite
 } from '@digitalbazaar/ecdsa-rdfc-2019-cryptosuite';
-import {Ed25519Signature2018} from '@digitalbazaar/ed25519-signature-2018';
 import {Ed25519Signature2020} from '@digitalbazaar/ed25519-signature-2020';
-import {
-  cryptosuite as eddsa2022CryptoSuite
-} from '@digitalbazaar/eddsa-2022-cryptosuite';
 import {
   cryptosuite as eddsaRdfc2022CryptoSuite
 } from '@digitalbazaar/eddsa-rdfc-2022-cryptosuite';
@@ -44,13 +37,7 @@ const SUPPORTED_CRYPTOSUITES = new Map([
   ['ecdsa-xi-2023', options => createEcdsaXi2023Cryptosuite(options)]
 ]);
 
-const SUPPORTED_LEGACY_CRYPTOSUITES = new Map([
-  ['ecdsa-2019', ecdsa2019CryptoSuite],
-  ['eddsa-2022', eddsa2022CryptoSuite],
-]);
-
 const SUPPORTED_LEGACY_SUITES = new Map([
-  ['Ed25519Signature2018', Ed25519Signature2018],
   ['Ed25519Signature2020', Ed25519Signature2020]
 ]);
 
@@ -67,12 +54,6 @@ export function createSuites({options} = {}) {
     if(LegacySuite) {
       return new LegacySuite();
     }
-    const LegacyCryptosuite = SUPPORTED_LEGACY_CRYPTOSUITES.get(supportedSuite);
-    if(LegacyCryptosuite) {
-      return new DataIntegrityProof({
-        cryptosuite: LegacyCryptosuite, legacyContext: true
-      });
-    }
     throw new Error(`Unsupported suite ${supportedSuite}`);
   });
   return suite;

package/lib/vcb.js

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2024-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2024-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import * as cborld from '@digitalbazaar/cborld';
@@ -19,7 +19,7 @@ const AAMVA_IIN_TO_VCB_LOCATION = new Map([
   // VCB spec, i.e., test vector intentionally invalid issuer
   ['000000', {subfile: 'ZZ', field: 'ZZA', encoding: 'base64url'}],
   // US state of CA
-  ['636014', {subfile: 'ZC', field: 'ZCE', encoding: 'base64'}],
+  ['636014', {subfile: 'ZC', field: 'ZCE', encoding: 'base64'}]
 ]);
 
 const SUPPORTED_BARCODE_FORMATS = new Set([
@@ -208,6 +208,6 @@ function _throwUnknownFormat(format) {
       details: {
         httpStatusCode: 400,
         public: true
-      },
+      }
     });
 }

package/lib/vcjwt.js

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2019-2024 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2019-2026 Digital Bazaar, Inc.
  */
 import * as bedrock from '@bedrock/core';
 import * as EcdsaMultikey from '@digitalbazaar/ecdsa-multikey';
@@ -540,7 +540,7 @@ function _jwtPayloadToPresentation({verifyResult, challenge} = {}) {
       return {
         '@context': VC_CONTEXT_2,
         id: `data:application/jwt,${vc}`,
-        type: 'EnvelopedVerifiableCredential',
+        type: 'EnvelopedVerifiableCredential'
       };
     });
   }

package/lib/verify.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2018-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2018-2026 Digital Bazaar, Inc.
  */
 import * as di from './di.js';
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-verifier",
-  "version": "23.6.0",
+  "version": "24.0.0",
   "type": "module",
   "description": "Bedrock VC Verifier",
   "main": "./lib/index.js",
@@ -9,7 +9,7 @@
     "schemas/**/*.js"
   ],
   "scripts": {
-    "lint": "eslint --ext .cjs,.js ."
+    "lint": "eslint"
   },
   "repository": {
     "type": "git",
@@ -25,52 +25,49 @@
   },
   "homepage": "https://github.com/digitalbazaar/bedrock-vc-verifier",
   "dependencies": {
-    "@auth0/mdl": "^3.0.0",
+    "@auth0/mdl": "^3.0.1",
     "@digitalbazaar/bbs-2023-cryptosuite": "^2.0.1",
-    "@digitalbazaar/cborld": "^8.0.0",
+    "@digitalbazaar/cborld": "^8.1.0",
     "@digitalbazaar/data-integrity": "^2.5.0",
-    "@digitalbazaar/ecdsa-2019-cryptosuite": "^2.0.0",
     "@digitalbazaar/ecdsa-jcs-2019-cryptosuite": "^1.0.0",
     "@digitalbazaar/ecdsa-multikey": "^1.8.0",
-    "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.2.0",
+    "@digitalbazaar/ecdsa-rdfc-2019-cryptosuite": "^1.3.0",
     "@digitalbazaar/ecdsa-sd-2023-cryptosuite": "^3.4.1",
-    "@digitalbazaar/ecdsa-xi-2023-cryptosuite": "^1.1.0",
+    "@digitalbazaar/ecdsa-xi-2023-cryptosuite": "^1.2.0",
     "@digitalbazaar/ed25519-multikey": "^1.3.1",
-    "@digitalbazaar/ed25519-signature-2018": "^4.1.0",
     "@digitalbazaar/ed25519-signature-2020": "^5.4.0",
-    "@digitalbazaar/eddsa-2022-cryptosuite": "^1.0.0",
     "@digitalbazaar/eddsa-jcs-2022-cryptosuite": "^1.0.0",
-    "@digitalbazaar/eddsa-rdfc-2022-cryptosuite": "^1.2.0",
-    "@digitalbazaar/oid4-client": "^5.8.0",
+    "@digitalbazaar/eddsa-rdfc-2022-cryptosuite": "^1.3.0",
+    "@digitalbazaar/oid4-client": "^5.10.0",
     "@digitalbazaar/pdf417-dl-canonicalizer": "^1.2.1",
-    "@digitalbazaar/vc": "^7.2.0",
+    "@digitalbazaar/vc": "^7.3.0",
     "@digitalbazaar/vc-bitstring-status-list": "^2.0.1",
     "@digitalbazaar/vc-revocation-list": "^7.0.0",
     "@digitalbazaar/vc-status-list": "^8.0.1",
     "@digitalbazaar/vpqr": "^6.0.0",
     "assert-plus": "^1.0.0",
     "bnid": "^3.0.0",
-    "body-parser": "^1.20.3",
-    "cors": "^2.8.5",
-    "jose": "^6.0.10",
-    "serialize-error": "^12.0.0"
+    "body-parser": "^1.20.5",
+    "cors": "^2.8.6",
+    "jose": "^6.2.3",
+    "serialize-error": "^13.0.1"
   },
   "peerDependencies": {
-    "@bedrock/app-identity": "^4.0.0",
+    "@bedrock/app-identity": "^4.2.0",
     "@bedrock/core": "^6.3.0",
     "@bedrock/credentials-context": "^5.0.3",
     "@bedrock/data-integrity-context": "^4.0.3",
     "@bedrock/did-context": "^6.0.0",
     "@bedrock/did-io": "^10.4.0",
-    "@bedrock/express": "^8.3.1",
+    "@bedrock/express": "^8.6.3",
     "@bedrock/https-agent": "^4.1.0",
     "@bedrock/jsonld-document-loader": "^5.2.1",
-    "@bedrock/mongodb": "^11.0.0",
+    "@bedrock/mongodb": "^11.0.1",
     "@bedrock/multikey-context": "^3.0.0",
     "@bedrock/security-context": "^9.0.0",
     "@bedrock/service-agent": "^10.3.1",
-    "@bedrock/service-context-store": "^13.1.0",
-    "@bedrock/service-core": "^11.4.0",
+    "@bedrock/service-context-store": "^13.2.0",
+    "@bedrock/service-core": "^11.5.0",
     "@bedrock/validation": "^7.1.1",
     "@bedrock/vc-barcodes-context": "^1.0.0",
     "@bedrock/vc-revocation-list-context": "^5.0.0",
@@ -78,12 +75,10 @@
     "@bedrock/veres-one-context": "^16.0.0"
   },
   "devDependencies": {
-    "eslint": "^8.57.1",
-    "eslint-config-digitalbazaar": "^5.2.0",
-    "eslint-plugin-jsdoc": "^50.6.8",
-    "eslint-plugin-unicorn": "^56.0.1"
+    "@digitalbazaar/eslint-config": "^8.0.1",
+    "eslint": "^9.39.4"
   },
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   }
 }

package/schemas/bedrock-vc-verifier.js

@@ -1,5 +1,5 @@
 /*!
- * Copyright (c) 2022-2025 Digital Bazaar, Inc. All rights reserved.
+ * Copyright (c) 2022-2026 Digital Bazaar, Inc.
  */
 import {schemas} from '@bedrock/validation';
 
@@ -66,7 +66,7 @@ function verifiableCredential() {
         minItems: 1,
         // this first type must be VerifiableCredential
         items: [
-          {const: 'VerifiableCredential'},
+          {const: 'VerifiableCredential'}
         ],
         // additional types must be strings
         additionalItems: {
@@ -122,7 +122,7 @@ export function verifiablePresentation() {
         minItems: 1,
         // this first type must be VerifiablePresentation
         items: [
-          {const: 'VerifiablePresentation'},
+          {const: 'VerifiablePresentation'}
         ],
         // additional types must be strings
         additionalItems: {
@@ -178,7 +178,7 @@ const envelopedVerifiablePresentation = {
 export const verifyOptions = {
   title: 'Verify Options',
   type: 'object',
-  oneOf: [{
+  anyOf: [{
     required: ['didResolver']
   }, {
     required: ['documentLoader']