@cef-ebsi/cli 0.2.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/LICENSE +189 -189
  2. package/README.md +55 -54
  3. package/bin/cli.js +13 -13
  4. package/dist/commands/compute.js +10 -9
  5. package/dist/commands/compute.js.map +1 -1
  6. package/dist/scripts/accreditAndAuthorize/conformance/step1 +34 -34
  7. package/dist/scripts/accreditAndAuthorize/conformance/step2 +17 -17
  8. package/dist/scripts/accreditAndAuthorize/conformance/step3 +8 -8
  9. package/dist/scripts/accreditAndAuthorize/conformance/step4 +26 -26
  10. package/dist/scripts/accreditAndAuthorize/conformance/step5 +12 -12
  11. package/dist/scripts/accreditAndAuthorize/conformance/step6 +13 -13
  12. package/dist/scripts/accreditAndAuthorize/conformance/step7 +6 -6
  13. package/dist/scripts/accreditAndAuthorize/test/step1 +34 -34
  14. package/dist/scripts/accreditAndAuthorize/test/step2 +17 -17
  15. package/dist/scripts/accreditAndAuthorize/test/step3 +8 -8
  16. package/dist/scripts/accreditAndAuthorize/test/step4 +26 -26
  17. package/dist/scripts/accreditAndAuthorize/test/step5 +12 -12
  18. package/dist/scripts/accreditAndAuthorize/test/step6 +13 -13
  19. package/dist/scripts/accreditAndAuthorize/test/step7 +6 -6
  20. package/dist/scripts/accreditTI +20 -20
  21. package/dist/scripts/assets/CTRevocableCredential.json +29 -29
  22. package/dist/scripts/assets/CredentialToAttestVerifiableAuthorisationForTrustChain.json +28 -28
  23. package/dist/scripts/assets/VerifiableAccreditationToAccredit.json +35 -35
  24. package/dist/scripts/assets/VerifiableAccreditationToAttest.json +32 -32
  25. package/dist/scripts/assets/VerifiableAuthorisationForTrustChain.json +21 -21
  26. package/dist/scripts/assets/VerifiableAuthorisationToOnboard.json +23 -23
  27. package/dist/scripts/bootstrap/0a-loadTPROperator +5 -5
  28. package/dist/scripts/bootstrap/0b-loadAdmin +7 -7
  29. package/dist/scripts/bootstrap/1-populateTPR +115 -115
  30. package/dist/scripts/bootstrap/2-populateDID +21 -21
  31. package/dist/scripts/bootstrap/3-populateTAR +72 -72
  32. package/dist/scripts/bootstrap/4-populateTimestamp +9 -9
  33. package/dist/scripts/bootstrap/5-populateTIR +9 -9
  34. package/dist/scripts/bootstrap/6-populateTSR +22 -22
  35. package/dist/scripts/bootstrap/7-setupConformanceIssuer +34 -34
  36. package/dist/scripts/initializeContracts +5 -5
  37. package/dist/scripts/issueVcOnboard +8 -8
  38. package/dist/scripts/issueVcRootTAO +10 -10
  39. package/dist/scripts/issueVcTAO +11 -11
  40. package/dist/scripts/issueVcTI +11 -11
  41. package/dist/scripts/issue_CTRevocableCredential +12 -12
  42. package/dist/scripts/issue_SelfAttestationSupportOffice +10 -10
  43. package/dist/scripts/issue_VerifiableAccreditationToAccredit +11 -11
  44. package/dist/scripts/issue_VerifiableAccreditationToAttest +11 -11
  45. package/dist/scripts/issue_VerifiableAuthorisationForTrustChain +10 -10
  46. package/dist/scripts/issue_VerifiableAuthorisationToOnboard +9 -9
  47. package/dist/scripts/preregisterIssuer +5 -5
  48. package/dist/scripts/registerDidDocument_ES256K_ES256 +13 -13
  49. package/dist/scripts/registerIssuer +5 -5
  50. package/dist/scripts/wctv3/accreditAndAuthorize +105 -105
  51. package/dist/scripts/wctv3/holderWallet +29 -29
  52. package/dist/scripts/wctv3/issueToHolder +26 -26
  53. package/dist/scripts/wctv3/pda1 +1 -1
  54. package/dist/scripts/wctv3/verifier +6 -6
  55. package/dist/tsconfig.tsbuildinfo +1 -1
  56. package/package.json +98 -98
@@ -1,13 +1,13 @@
1
- # register first part of DID document
2
- resAuthDIDRInvite: authorisation auth didr_invite_presentation ES256 $1
3
- using token resAuthDIDRInvite.access_token
4
-
5
- did insertDidDocument
6
-
7
- # complete DID document
8
- resAuthDIDRWrite: authorisation auth didr_write_presentation ES256K
9
- using token resAuthDIDRWrite.access_token
10
-
11
- did addVerificationMethod user.did ES256
12
- did addVerificationRelationship user.did authentication ES256
13
- did addVerificationRelationship user.did assertionMethod ES256
1
+ # register first part of DID document
2
+ resAuthDIDRInvite: authorisation auth didr_invite_presentation ES256 $1
3
+ using token resAuthDIDRInvite.access_token
4
+
5
+ did insertDidDocument
6
+
7
+ # complete DID document
8
+ resAuthDIDRWrite: authorisation auth didr_write_presentation ES256K
9
+ using token resAuthDIDRWrite.access_token
10
+
11
+ did addVerificationMethod user.did ES256
12
+ did addVerificationRelationship user.did authentication ES256
13
+ did addVerificationRelationship user.did assertionMethod ES256
@@ -1,6 +1,6 @@
1
- # ==> run registerIssuer <vc>
2
- jwtDecoded: compute decodeJWT $1
3
- set reservedAttributeId jwtDecoded.payload.vc.credentialSubject.reservedAttributeId
4
- resAuthTIR: authorisation auth tir_invite_presentation ES256 $1
5
- using token resAuthTIR.access_token
1
+ # ==> run registerIssuer <vc>
2
+ jwtDecoded: compute decodeJWT $1
3
+ set reservedAttributeId jwtDecoded.payload.vc.credentialSubject.reservedAttributeId
4
+ resAuthTIR: authorisation auth tir_invite_presentation ES256 $1
5
+ using token resAuthTIR.access_token
6
6
  tir setAttributeData user.did reservedAttributeId $1
@@ -1,106 +1,106 @@
1
- env test
2
- set domain https://api-test.ebsi.eu
3
-
4
- # create new issuer
5
- using user null
6
- using user
7
- using user ES256
8
-
9
- # request credential to onboard
10
- vcOnboard: conformance getCredential onboard
11
- set myIssuer user
12
- conformance check ti_request_verifiable_authorisation_to_onboard
13
-
14
- # register did document
15
- run registerDidDocument_ES256K_ES256 vcOnboard.vc
16
- conformance check ti_register_did
17
-
18
- # request VerifiableAccreditationToAttest (TI)
19
- vcTI: conformance getCredential ti
20
- conformance check ti_request_verifiable_accreditation_to_attest
21
-
22
- # register the credential for TI
23
- t: authorisation auth tir_invite_presentation ES256 vcTI.vc
24
- using token t.access_token
25
- tir setAttributeData myIssuer.did vcTI.reservedAttributeId vcTI.vc
26
- set vcTI.url https://api-test.ebsi.eu/trusted-issuers-registry/v4/issuers/ myIssuer.did /attributes/ vcTI.reservedAttributeId
27
- conformance check ti_register_verifiable_accreditation_to_attest
28
-
29
- # create a proxy
30
- conformance clientMockUpdateList 1 0 0
31
- t: authorisation auth tir_write_presentation ES256
32
- using token t.access_token
33
- set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
34
- set proxyData.prefix myIssuer.clientId
35
- tir addIssuerProxy myIssuer.did proxyData
36
- proxies: tir get /issuers/ myIssuer.did /proxies
37
- set user.proxyId proxies.items.0.proxyId
38
- set user.accreditationUrl vcTI.url
39
- conformance clientMockInitiate
40
-
41
- # issue CTRevocable with credentialStatus StatusList2021
42
- conformance check ti_request_ctrevocable
43
-
44
- # Validate the issued credential details
45
- conformance check ti_validate_ctrevocable
46
-
47
- # revoke credential
48
- statusListIndex: compute statusListIndex did:ebsi:zy8jAhPDbhwKN74YFWAUzD5
49
- conformance clientMockUpdateList 1 statusListIndex 1
50
- conformance check ti_revoke_ctrevocable
51
-
52
- # request VerifiableAccreditationToAccredit (TAO)
53
- vcTAO: conformance getCredential tao
54
- conformance check tao_request_verifiable_accreditation_to_accredit
55
-
56
- # register the credential for TAO
57
- t: authorisation auth tir_write_presentation ES256
58
- using token t.access_token
59
- tir setAttributeData myIssuer.did vcTAO.reservedAttributeId vcTAO.vc
60
- set vcTAO.url https://api-test.ebsi.eu/trusted-issuers-registry/v4/issuers/ myIssuer.did /attributes/ vcTAO.reservedAttributeId
61
- set user.accreditationUrl vcTAO.url
62
- conformance clientMockInitiate
63
- conformance check tao_register_verifiable_accreditation_to_accredit
64
-
65
- # request credential to onboard sub-account
66
- conformance check tao_request_verifiable_authorisation_to_onboard_subaccount
67
-
68
- # validate credential and register sub-account
69
- conformance check tao_validate_verifiable_authorisation_to_onboard_subaccount
70
-
71
- # request VerifiableAccreditationToAttest for sub-account (TI)
72
- conformance check tao_request_verifiable_accreditation_to_attest_subaccount
73
-
74
- # validate and register credential for sub-account
75
- conformance check tao_validate_verifiable_accreditation_to_attest_subaccount
76
-
77
- # request VerifiableAccreditationToAccredit for sub-account (TAO)
78
- conformance check tao_request_verifiable_accreditation_to_accredit_subaccount
79
-
80
- # validate and register credential for sub-account
81
- conformance check tao_validate_verifiable_accreditation_to_accredit_subaccount
82
-
83
- # revoke credentials issued to subaccount
84
- subaccount: compute subaccountDid myIssuer.did
85
- attributes: tir get /issuers/ subaccount /attributes
86
- t: authorisation auth tir_write_presentation ES256
87
- using token t.access_token
88
- tir setAttributeMetadata subaccount attributes.items.0.id revoked myIssuer.did vcTAO.reservedAttributeId
89
- tir setAttributeMetadata subaccount attributes.items.1.id revoked myIssuer.did vcTAO.reservedAttributeId
90
- conformance check tao_revoke_rights_subaccount
91
-
92
- # request VerifiableAuthorisationForTrustChain (Root TAO)
93
- vcRootTAO: conformance getCredential roottao ES256 vcOnboard.vc
94
- conformance check rtao_request_verifiableauthorisationfortrustchain
95
-
96
- # register the credential for RootTAO
97
- t: authorisation auth tir_write_presentation ES256
98
- using token t.access_token
99
- tir setAttributeData myIssuer.did vcRootTAO.reservedAttributeId vcRootTAO.vc
100
- conformance check rtao_register_verifiableauthorisationfortrustchain
101
-
102
- # request CTAAQualificationCredential
103
- ctaaQualification: conformance getCredential qualification
104
- conformance check request_ctaaqualificationcredential
105
-
1
+ env test
2
+ set domain https://api-test.ebsi.eu
3
+
4
+ # create new issuer
5
+ using user null
6
+ using user
7
+ using user ES256
8
+
9
+ # request credential to onboard
10
+ vcOnboard: conformance getCredential onboard
11
+ set myIssuer user
12
+ conformance check ti_request_verifiable_authorisation_to_onboard
13
+
14
+ # register did document
15
+ run registerDidDocument_ES256K_ES256 vcOnboard.vc
16
+ conformance check ti_register_did
17
+
18
+ # request VerifiableAccreditationToAttest (TI)
19
+ vcTI: conformance getCredential ti
20
+ conformance check ti_request_verifiable_accreditation_to_attest
21
+
22
+ # register the credential for TI
23
+ t: authorisation auth tir_invite_presentation ES256 vcTI.vc
24
+ using token t.access_token
25
+ tir setAttributeData myIssuer.did vcTI.reservedAttributeId vcTI.vc
26
+ set vcTI.url https://api-test.ebsi.eu/trusted-issuers-registry/v4/issuers/ myIssuer.did /attributes/ vcTI.reservedAttributeId
27
+ conformance check ti_register_verifiable_accreditation_to_attest
28
+
29
+ # create a proxy
30
+ conformance clientMockUpdateList 1 0 0
31
+ t: authorisation auth tir_write_presentation ES256
32
+ using token t.access_token
33
+ set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
34
+ set proxyData.prefix myIssuer.clientId
35
+ tir addIssuerProxy myIssuer.did proxyData
36
+ proxies: tir get /issuers/ myIssuer.did /proxies
37
+ set user.proxyId proxies.items.0.proxyId
38
+ set user.accreditationUrl vcTI.url
39
+ conformance clientMockInitiate
40
+
41
+ # issue CTRevocable with credentialStatus StatusList2021
42
+ conformance check ti_request_ctrevocable
43
+
44
+ # Validate the issued credential details
45
+ conformance check ti_validate_ctrevocable
46
+
47
+ # revoke credential
48
+ statusListIndex: compute statusListIndex did:ebsi:zy8jAhPDbhwKN74YFWAUzD5
49
+ conformance clientMockUpdateList 1 statusListIndex 1
50
+ conformance check ti_revoke_ctrevocable
51
+
52
+ # request VerifiableAccreditationToAccredit (TAO)
53
+ vcTAO: conformance getCredential tao
54
+ conformance check tao_request_verifiable_accreditation_to_accredit
55
+
56
+ # register the credential for TAO
57
+ t: authorisation auth tir_write_presentation ES256
58
+ using token t.access_token
59
+ tir setAttributeData myIssuer.did vcTAO.reservedAttributeId vcTAO.vc
60
+ set vcTAO.url https://api-test.ebsi.eu/trusted-issuers-registry/v4/issuers/ myIssuer.did /attributes/ vcTAO.reservedAttributeId
61
+ set user.accreditationUrl vcTAO.url
62
+ conformance clientMockInitiate
63
+ conformance check tao_register_verifiable_accreditation_to_accredit
64
+
65
+ # request credential to onboard sub-account
66
+ conformance check tao_request_verifiable_authorisation_to_onboard_subaccount
67
+
68
+ # validate credential and register sub-account
69
+ conformance check tao_validate_verifiable_authorisation_to_onboard_subaccount
70
+
71
+ # request VerifiableAccreditationToAttest for sub-account (TI)
72
+ conformance check tao_request_verifiable_accreditation_to_attest_subaccount
73
+
74
+ # validate and register credential for sub-account
75
+ conformance check tao_validate_verifiable_accreditation_to_attest_subaccount
76
+
77
+ # request VerifiableAccreditationToAccredit for sub-account (TAO)
78
+ conformance check tao_request_verifiable_accreditation_to_accredit_subaccount
79
+
80
+ # validate and register credential for sub-account
81
+ conformance check tao_validate_verifiable_accreditation_to_accredit_subaccount
82
+
83
+ # revoke credentials issued to subaccount
84
+ subaccount: compute subaccountDid myIssuer.did
85
+ attributes: tir get /issuers/ subaccount /attributes
86
+ t: authorisation auth tir_write_presentation ES256
87
+ using token t.access_token
88
+ tir setAttributeMetadata subaccount attributes.items.0.id revoked myIssuer.did vcTAO.reservedAttributeId
89
+ tir setAttributeMetadata subaccount attributes.items.1.id revoked myIssuer.did vcTAO.reservedAttributeId
90
+ conformance check tao_revoke_rights_subaccount
91
+
92
+ # request VerifiableAuthorisationForTrustChain (Root TAO)
93
+ vcRootTAO: conformance getCredential roottao ES256 vcOnboard.vc
94
+ conformance check rtao_request_verifiableauthorisationfortrustchain
95
+
96
+ # register the credential for RootTAO
97
+ t: authorisation auth tir_write_presentation ES256
98
+ using token t.access_token
99
+ tir setAttributeData myIssuer.did vcRootTAO.reservedAttributeId vcRootTAO.vc
100
+ conformance check rtao_register_verifiableauthorisationfortrustchain
101
+
102
+ # request CTAAQualificationCredential
103
+ ctaaQualification: conformance getCredential qualification
104
+ conformance check request_ctaaqualificationcredential
105
+
106
106
  # ACCREDIT AND AUTHORIZE TESTS FINISHED!!
@@ -1,29 +1,29 @@
1
- using user ES256 did2
2
-
3
- c0: conformance holder CTWalletCrossInTime inTime
4
- conformance check ct_wallet_cross_in_time
5
-
6
- c1: conformance holder CTWalletCrossDeferred deferred
7
- conformance check ct_wallet_cross_deferred
8
-
9
- c2: conformance holder CTWalletCrossPreAuthorised preAuthorised
10
- conformance check ct_wallet_cross_pre_authorised
11
-
12
- c3: conformance holder CTWalletSameInTime inTime
13
- conformance check ct_wallet_same_in_time
14
-
15
- c4: conformance holder CTWalletSameDeferred deferred
16
- conformance check ct_wallet_same_deferred
17
-
18
- c5: conformance holder CTWalletSamePreAuthorised preAuthorised
19
- conformance check ct_wallet_same_pre_authorised
20
-
21
- set credentials []
22
- set credentials.0 c0
23
- set credentials.1 c1
24
- set credentials.2 c2
25
- set credentials.3 c3
26
- set credentials.4 c4
27
- set credentials.5 c5
28
- conformance holder CTWalletQualificationCredential inTime ES256 credentials
29
- conformance check request_ct_wallet_qualification_credential
1
+ using user ES256 did2
2
+
3
+ c0: conformance holder CTWalletCrossInTime inTime
4
+ conformance check ct_wallet_cross_in_time
5
+
6
+ c1: conformance holder CTWalletCrossDeferred deferred
7
+ conformance check ct_wallet_cross_deferred
8
+
9
+ c2: conformance holder CTWalletCrossPreAuthorised preAuthorised
10
+ conformance check ct_wallet_cross_pre_authorised
11
+
12
+ c3: conformance holder CTWalletSameInTime inTime
13
+ conformance check ct_wallet_same_in_time
14
+
15
+ c4: conformance holder CTWalletSameDeferred deferred
16
+ conformance check ct_wallet_same_deferred
17
+
18
+ c5: conformance holder CTWalletSamePreAuthorised preAuthorised
19
+ conformance check ct_wallet_same_pre_authorised
20
+
21
+ set credentials []
22
+ set credentials.0 c0
23
+ set credentials.1 c1
24
+ set credentials.2 c2
25
+ set credentials.3 c3
26
+ set credentials.4 c4
27
+ set credentials.5 c5
28
+ conformance holder CTWalletQualificationCredential inTime ES256 credentials
29
+ conformance check request_ct_wallet_qualification_credential
@@ -1,27 +1,27 @@
1
- using user ES256 did2
2
- set user.issuerState issuer-state
3
- conformance clientMockInitiate
4
-
5
- jwks: conformance get /issuer-mock/jwks
6
- issuerMockDidNP: compute did2 jwks.keys.0
7
-
8
- set preAuthPayload {"authorization_details":[{"type":"openid_credential","format":"jwt_vc","types":["VerifiableCredential","VerifiableAttestation","CTWalletSamePreAuthorised"],"locations":[""]}]}
9
- set preAuthPayload.iss user.clientId
10
- set preAuthPayload.sub issuerMockDidNP
11
- set preAuthPayload.client_id issuerMockDidNP
12
- set preAuthPayload.authorization_details[0].locations[0] user.clientId
13
- set preAuthHeaders {}
14
- set preAuthHeaders.kid user.keys.ES256.id
15
- preAuthorizedCode: compute signJwt preAuthPayload ES256 preAuthHeaders
16
- userPin: compute userPin issuerMockDidNP
17
-
18
- conformance check issue_to_holder_initiate_ct_wallet_same_in_time
19
- conformance check issue_to_holder_validate_ct_wallet_same_in_time
20
- conformance check issue_to_holder_initiate_ct_wallet_same_deferred
21
- conformance check issue_to_holder_validate_ct_wallet_same_deferred
22
- conformance check issue_to_holder_initiate_ct_wallet_same_pre_authorised preAuthorizedCode userPin
23
- conformance check issue_to_holder_validate_ct_wallet_same_pre_authorised preAuthorizedCode userPin
24
-
25
- compute wait 11
26
- conformance holder CTIssueQualificationCredential inTime ES256 empty skip-credential-offer
1
+ using user ES256 did2
2
+ set user.issuerState issuer-state
3
+ conformance clientMockInitiate
4
+
5
+ jwks: conformance get /issuer-mock/jwks
6
+ issuerMockDidNP: compute did2 jwks.keys.0
7
+
8
+ set preAuthPayload {"authorization_details":[{"type":"openid_credential","format":"jwt_vc","types":["VerifiableCredential","VerifiableAttestation","CTWalletSamePreAuthorised"],"locations":[""]}]}
9
+ set preAuthPayload.iss user.clientId
10
+ set preAuthPayload.sub issuerMockDidNP
11
+ set preAuthPayload.client_id issuerMockDidNP
12
+ set preAuthPayload.authorization_details[0].locations[0] user.clientId
13
+ set preAuthHeaders {}
14
+ set preAuthHeaders.kid user.keys.ES256.id
15
+ preAuthorizedCode: compute signJwt preAuthPayload ES256 preAuthHeaders
16
+ userPin: compute userPin issuerMockDidNP
17
+
18
+ conformance check issue_to_holder_initiate_ct_wallet_same_in_time
19
+ conformance check issue_to_holder_validate_ct_wallet_same_in_time
20
+ conformance check issue_to_holder_initiate_ct_wallet_same_deferred
21
+ conformance check issue_to_holder_validate_ct_wallet_same_deferred
22
+ conformance check issue_to_holder_initiate_ct_wallet_same_pre_authorised preAuthorizedCode userPin
23
+ conformance check issue_to_holder_validate_ct_wallet_same_pre_authorised preAuthorizedCode userPin
24
+
25
+ compute wait 11
26
+ conformance holder CTIssueQualificationCredential inTime ES256 empty skip-credential-offer
27
27
  conformance check request_ct_issue_to_holder_qualification_credential
@@ -1,2 +1,2 @@
1
- using user ES256 did2
1
+ using user ES256 did2
2
2
  cPda1: conformance holder VerifiablePortableDocumentA1 deferred
@@ -1,7 +1,7 @@
1
- using user ES256
2
- conformance clientMockInitiate
3
- conformance check verifier_id_token_exchange
4
- conformance check verifier_vp_valid_vc
5
- conformance check verifier_vp_expired_vc
6
- conformance check verifier_vp_revoked_vc
1
+ using user ES256
2
+ conformance clientMockInitiate
3
+ conformance check verifier_id_token_exchange
4
+ conformance check verifier_vp_valid_vc
5
+ conformance check verifier_vp_expired_vc
6
+ conformance check verifier_vp_revoked_vc
7
7
  conformance check verifier_vp_not_yet_valid_vc