@thurinlabs/identity-kit 1.0.0 → 1.0.1

package/dist/index.js

@@ -1625,6 +1625,14 @@ var PROVIDERS = [
     pattern: /^https:\/\/gist\.github\.com\/([^/]+)\/([a-f0-9]+)$/i,
     parse: (m) => ({ user: m[1], gistId: m[2] })
   },
+  {
+    // A repository's description — the form an organisation can use, since
+    // gists belong to user accounts only. Same shape as the Codeberg proof.
+    provider: "github",
+    label: "GitHub",
+    pattern: /^https:\/\/github\.com\/([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+)$/i,
+    parse: (m) => ({ user: m[1], repo: m[2] })
+  },
   {
     provider: "dns",
     label: "DNS",
@@ -1696,6 +1704,7 @@ function containsFingerprintUrl(text, fingerprint) {
   return text.toUpperCase().includes(fingerprint.toUpperCase());
 }
 async function verifyGitHub(proof, fingerprint) {
+  if (proof.repo) return verifyGitHubRepo(proof, fingerprint);
   try {
     const resp = await fetch(`https://api.github.com/gists/${proof.gistId}`);
     if (!resp.ok) return { verified: false, reason: `GitHub API returned ${resp.status}` };
@@ -1713,6 +1722,24 @@ async function verifyGitHub(proof, fingerprint) {
     return { verified: false, reason: `GitHub fetch failed: ${err.message}` };
   }
 }
+async function verifyGitHubRepo(proof, fingerprint) {
+  try {
+    const resp = await fetch(
+      `https://api.github.com/repos/${encodeURIComponent(proof.user)}/${encodeURIComponent(proof.repo)}`
+    );
+    if (!resp.ok) return { verified: false, reason: `GitHub API returned ${resp.status}` };
+    const data = await resp.json();
+    if (data.owner?.login?.toLowerCase() !== proof.user.toLowerCase()) {
+      return { verified: false, reason: "Repository owner does not match claimed account" };
+    }
+    if (data.description && containsFingerprint(data.description, fingerprint)) {
+      return { verified: true };
+    }
+    return { verified: false, reason: "Fingerprint token not found in repository description" };
+  } catch (err) {
+    return { verified: false, reason: `GitHub fetch failed: ${err.message}` };
+  }
+}
 async function verifyDNS(proof, fingerprint) {
   try {
     const resp = await fetch(