@eudiplo/cli 8.0.2 → 8.1.0-main.1c091cc

package/templates/demo-config/trust-lists/trustlist-580831bc-ef11-43f4-a3be-a2b6bf1b29a3-config.json

@@ -17,102 +17,6 @@
           "locale": "en"
         }
       }
-    ],
-    "data": {
-      "ListAndSchemeInformation": {
-        "LoTEVersionIdentifier": 1,
-        "LoTESequenceNumber": 2,
-        "LoTEType": "http://uri.etsi.org/19602/LoTEType/EUEAAProvidersList",
-        "StatusDeterminationApproach": "http://uri.etsi.org/19602/EUEAAProvidersList/StatusDetn/EU",
-        "SchemeTypeCommunityRules": [
-          {
-            "locale": "en",
-            "uriValue": "http://uri.etsi.org/19602/EUEAAProviders/schemerules/EU"
-          }
-        ],
-        "SchemeTerritory": "EU",
-        "NextUpdate": "2026-02-01T09:40:29.793Z",
-        "SchemeOperatorName": [
-          {
-            "locale": "en",
-            "value": "Root Tenant"
-          }
-        ],
-        "ListIssueDateTime": "2026-01-02T09:40:29.793Z"
-      },
-      "TrustedEntitiesList": [
-        {
-          "TrustedEntityInformation": {
-            "TEInformationURI": [
-              {
-                "locale": "en",
-                "uriValue": "http://example.com/te-info"
-              }
-            ],
-            "TEName": [
-              {
-                "locale": "en",
-                "value": "PID Provider"
-              }
-            ],
-            "TEAddress": {
-              "TEElectronicAddress": [
-                {
-                  "locale": "en",
-                  "uriValue": "mailto:example@example.com"
-                }
-              ],
-              "TEPostalAddress": [
-                {
-                  "Country": "DE",
-                  "locale": "en",
-                  "Locality": "",
-                  "PostalCode": "",
-                  "StreetAddress": ""
-                }
-              ]
-            }
-          },
-          "TrustedEntityServices": [
-            {
-              "ServiceInformation": {
-                "ServiceTypeIdentifier": "http://uri.etsi.org/19602/SvcType/EAA/Issuance",
-                "ServiceName": [
-                  {
-                    "locale": "en",
-                    "value": "EAA-Issuance-Service"
-                  }
-                ],
-                "ServiceDigitalIdentity": {
-                  "X509Certificates": [
-                    {
-                      "val": "MIIBbzCCARagAwIBAgIBATAKBggqhkjOPQQDAjAWMRQwEgYDVQQDEwtSb290IFRlbmFudDAeFw0yNjAxMDIwOTIzMjJaFw0yNzAxMDIwOTIzMjJaMBYxFDASBgNVBAMTC1Jvb3QgVGVuYW50MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHHkkbUgKSkkqXmL8utl+TLWIg8CYQS4WPJ8j/nO44YzU0ljQtPeYS65wtAJklY2sDt9VbzKlHhl/ly67zk2NLKNVMFMwIgYDVR0RBBswGYIXc2VydmljZS5ldWRpLXdhbGxldC5kZXYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdDgQWBBRvQX4DfNolj/xERsq6Mnn0LJ1LZDAKBggqhkjOPQQDAgNHADBEAiAv/7ZiDe2XT+7GNMQGWbEr+IakJ2Y5EMnur10iLIhVZQIgKrri3W2Bq2qSVyiF0w8v+NwM7Iej3vWwt95KZ2EZ1Cg="
-                    }
-                  ]
-                }
-              }
-            },
-            {
-              "ServiceInformation": {
-                "ServiceName": [
-                  {
-                    "locale": "en",
-                    "value": "EAA-Revocation-Service"
-                  }
-                ],
-                "ServiceTypeIdentifier": "http://uri.etsi.org/19602/SvcType/EAA/Revocation",
-                "ServiceDigitalIdentity": {
-                  "X509Certificates": [
-                    {
-                      "val": "MIIBcDCCARagAwIBAgIBATAKBggqhkjOPQQDAjAWMRQwEgYDVQQDEwtSb290IFRlbmFudDAeFw0yNjAxMDIwODQwNDFaFw0yNzAxMDIwODQwNDFaMBYxFDASBgNVBAMTC1Jvb3QgVGVuYW50MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEjl97bi6xKezsht0gbbRpkprPE7Ib926KL7MCbnHtnoGNCEJmvdXuaZm86HO1S6T0+QgH8XyC+8FRNGssEDxkQKNVMFMwIgYDVR0RBBswGYIXc2VydmljZS5ldWRpLXdhbGxldC5kZXYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdDgQWBBQ0c6zxfvAgXDu6ikUlMCge3Yn2LTAKBggqhkjOPQQDAgNIADBFAiEA2/XJ9iirNeYCewMScN2SoGa41T1trYmPfqyqV/BP8+8CIFzOX+GgcnGp4H6qJ3IMueeU8ujXeS3nTHKT6U2yONH6"
-                    }
-                  ]
-                }
-              }
-            }
-          ]
-        }
-      ]
-    }
+    ]
   }
 }

package/templates/docker-compose.yml

@@ -2,12 +2,12 @@
 #
 # Usage:
 #   docker compose up                              # Minimal: just EUDIPLO (SQLite, local storage)
-#   docker compose --profile standard up           # Standard: + Postgres + MinIO
-#   docker compose --profile full up               # Full: + Postgres + MinIO + Vault
+#   docker compose --profile standard up           # Standard: + Postgres + RustFS
+#   docker compose --profile full up               # Full: + Postgres + RustFS + Vault
 #   docker compose --profile postgres --profile s3 up  # Custom components
 #
 # For more information, see the documentation:
-# https://docs.eudiplo.dev/deployment/docker-compose/
+# https://docs.eudiplo.dev/operate/docker-compose/
 
 services:
   # =============================================================================
@@ -28,8 +28,8 @@ services:
       postgres:
         condition: service_healthy
         required: false
-      minio:
-        condition: service_healthy
+      rustfs-init:
+        condition: service_completed_successfully
         required: false
     healthcheck:
       test: ['CMD', 'curl', '-f', 'http://localhost:3000/health']
@@ -62,7 +62,7 @@ services:
       - eudiplo-network
 
   # =============================================================================
-  # STANDARD PROFILE: PostgreSQL + MinIO
+  # STANDARD PROFILE: PostgreSQL + RustFS
   # =============================================================================
 
   postgres:
@@ -87,21 +87,23 @@ services:
     networks:
       - eudiplo-network
 
-  minio:
-    image: quay.io/minio/minio:latest
+  rustfs:
+    image: rustfs/rustfs:1.0.0
     restart: always
     profiles: ['s3', 'standard', 'full']
     ports:
       - '9000:9000'
       - '9001:9001'
     environment:
-      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
-      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
+      RUSTFS_ACCESS_KEY: ${RUSTFS_ACCESS_KEY:-rustfsadmin}
+      RUSTFS_SECRET_KEY: ${RUSTFS_SECRET_KEY:-rustfsadmin}
+      RUSTFS_CONSOLE_ENABLE: "true"
+      RUSTFS_CONSOLE_ADDRESS: ":9001"
     volumes:
-      - minio-data:/data
-    command: server /data --console-address ":9001"
+      - rustfs-data:/data
+    command: ["/data"]
     healthcheck:
-      test: ['CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live']
+      test: ['CMD', 'curl', '-f', 'http://localhost:9000/health/ready']
       interval: 30s
       timeout: 10s
       retries: 3
@@ -109,24 +111,29 @@ services:
     networks:
       - eudiplo-network
 
-  # MinIO bucket initialization job
-  minio-init:
-    image: quay.io/minio/mc:latest
+  # S3 bucket initialization using the AWS CLI
+  rustfs-init:
+    image: amazon/aws-cli:2.37.4
     profiles: ['s3', 'standard', 'full']
     depends_on:
-      minio:
+      rustfs:
         condition: service_healthy
     environment:
-      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
-      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
-      MINIO_BUCKET: ${S3_BUCKET:-uploads}
-    entrypoint: >
-      /bin/sh -c "
-      mc alias set local http://minio:9000 $$MINIO_ROOT_USER $$MINIO_ROOT_PASSWORD;
-      mc mb -p local/$$MINIO_BUCKET || true;
-      mc anonymous set download local/$$MINIO_BUCKET || true;
-      echo 'Bucket created successfully';
-      "
+      AWS_ACCESS_KEY_ID: ${RUSTFS_ACCESS_KEY:-rustfsadmin}
+      AWS_SECRET_ACCESS_KEY: ${RUSTFS_SECRET_KEY:-rustfsadmin}
+      AWS_DEFAULT_REGION: ${S3_REGION:-us-east-1}
+      AWS_CONFIG_FILE: /tmp/aws-config
+      S3_BUCKET: ${S3_BUCKET:-uploads}
+    entrypoint: ['/bin/sh', '-c']
+    command:
+      - |
+        set -eu
+        aws configure set default.s3.addressing_style path
+        s3() { aws --endpoint-url http://rustfs:9000 s3api "$$@"; }
+        s3 head-bucket --bucket "$$S3_BUCKET" 2>/dev/null || s3 create-bucket --bucket "$$S3_BUCKET"
+        printf '{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":"*","Action":["s3:GetObject"],"Resource":["arn:aws:s3:::%s/*"]}]}' "$$S3_BUCKET" > /tmp/bucket-policy.json
+        s3 put-bucket-policy --bucket "$$S3_BUCKET" --policy file:///tmp/bucket-policy.json
+        echo 'Bucket initialized successfully'
     networks:
       - eudiplo-network
 
@@ -164,7 +171,7 @@ volumes:
     driver: local
   postgres-data:
     driver: local
-  minio-data:
+  rustfs-data:
     driver: local
   vault-data:
     driver: local

package/templates/schemas/DCQL.schema.json

@@ -157,10 +157,23 @@
                       "description": "Path to the claim value in presented credentials."
                     },
                     "values": {
-                      "description": "Optional allowed values for the claim.",
+                      "description": "Optional allowed values for the claim. A disclosed value must equal one of them in type and value.",
+                      "minItems": 1,
                       "type": "array",
                       "items": {
-                        "type": "string"
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "integer",
+                            "minimum": -9007199254740991,
+                            "maximum": 9007199254740991
+                          },
+                          {
+                            "type": "boolean"
+                          }
+                        ]
                       }
                     }
                   },
@@ -325,10 +338,23 @@
                       "description": "Path to the claim value in presented credentials."
                     },
                     "values": {
-                      "description": "Optional allowed values for the claim.",
+                      "description": "Optional allowed values for the claim. A disclosed value must equal one of them in type and value.",
+                      "minItems": 1,
                       "type": "array",
                       "items": {
-                        "type": "string"
+                        "anyOf": [
+                          {
+                            "type": "string"
+                          },
+                          {
+                            "type": "integer",
+                            "minimum": -9007199254740991,
+                            "maximum": 9007199254740991
+                          },
+                          {
+                            "type": "boolean"
+                          }
+                        ]
                       }
                     },
                     "intent_to_retain": {

package/templates/schemas/IssuanceConfig.schema.json

@@ -612,6 +612,19 @@
           "type": "null"
         }
       ]
+    },
+    "offerLifetimeSeconds": {
+      "description": "Default lifetime of credential offers in seconds. Can be overridden per offer request. Null or unset: offers do not expire.",
+      "anyOf": [
+        {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 9007199254740991
+        },
+        {
+          "type": "null"
+        }
+      ]
     }
   },
   "required": [