@twin.org/identity-models 0.9.2-next.9 → 0.9.3-next.1

package/dist/es/index.js

@@ -54,6 +54,8 @@ export * from "./models/IIdentityResolverComponent.js";
 export * from "./models/IIdentityResolverConnector.js";
 export * from "./models/identityMetricIds.js";
 export * from "./models/identityMetrics.js";
+export * from "./models/identitySpanAttributes.js";
+export * from "./models/identitySpanNames.js";
 export * from "./types/did.js";
 export * from "./utils/documentHelper.js";
 export * from "./utils/verificationHelper.js";

package/dist/es/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,yCAAyC,CAAC;AACxD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,iDAAiD,CAAC;AAChE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,iDAAiD,CAAC;AAChE,cAAc,kDAAkD,CAAC;AACjE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,wDAAwD,CAAC;AACvE,cAAc,yDAAyD,CAAC;AACxE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qEAAqE,CAAC;AACpF,cAAc,sEAAsE,CAAC;AACrF,cAAc,qEAAqE,CAAC;AACpF,cAAc,uEAAuE,CAAC;AACtF,cAAc,6EAA6E,CAAC;AAC5F,cAAc,qEAAqE,CAAC;AACpF,cAAc,sEAAsE,CAAC;AACrF,cAAc,uEAAuE,CAAC;AACtF,cAAc,wEAAwE,CAAC;AACvF,cAAc,+EAA+E,CAAC;AAC9F,cAAc,uEAAuE,CAAC;AACtF,cAAc,wEAAwE,CAAC;AACvF,cAAc,mEAAmE,CAAC;AAClF,cAAc,oEAAoE,CAAC;AACnF,cAAc,mEAAmE,CAAC;AAClF,cAAc,yDAAyD,CAAC;AACxE,cAAc,0DAA0D,CAAC;AACzE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,0DAA0D,CAAC;AACzE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,qDAAqD,CAAC;AACpE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,mDAAmD,CAAC;AAClE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nexport * from \"./contextIdHandlers/didContextIdHandler.js\";\nexport * from \"./factories/identityConnectorFactory.js\";\nexport * from \"./factories/identityProfileConnectorFactory.js\";\nexport * from \"./factories/identityResolverConnectorFactory.js\";\nexport * from \"./models/api/identity/IIdentityAlsoKnownAsCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityAlsoKnownAsRemoveRequest.js\";\nexport * from \"./models/api/identity/IIdentityCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityProofCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityProofCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityProofVerifyRequest.js\";\nexport * from \"./models/api/identity/IIdentityProofVerifyResponse.js\";\nexport * from \"./models/api/identity/IIdentityRemoveRequest.js\";\nexport * from \"./models/api/identity/IIdentityServiceCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityServiceCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityServiceRemoveRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialRevokeRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialUnrevokeRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialVerifyDocumentRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialVerifyRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialVerifyResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationVerifyDocumentRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationVerifyRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationVerifyResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerificationMethodCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerificationMethodCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerificationMethodRemoveRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminGetRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminListRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminListResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminRemoveRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminUpdateRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileCreateRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetPublicRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetPublicResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileListRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileListResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileUpdateRequest.js\";\nexport * from \"./models/api/resolver/IIdentityResolveRequest.js\";\nexport * from \"./models/api/resolver/IIdentityResolveResponse.js\";\nexport * from \"./models/IIdentityComponent.js\";\nexport * from \"./models/IIdentityConnector.js\";\nexport * from \"./models/IIdentityProfileComponent.js\";\nexport * from \"./models/IIdentityProfileConnector.js\";\nexport * from \"./models/IIdentityResolverComponent.js\";\nexport * from \"./models/IIdentityResolverConnector.js\";\nexport * from \"./models/identityMetricIds.js\";\nexport * from \"./models/identityMetrics.js\";\nexport * from \"./types/did.js\";\nexport * from \"./utils/documentHelper.js\";\nexport * from \"./utils/verificationHelper.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,cAAc,4CAA4C,CAAC;AAC3D,cAAc,yCAAyC,CAAC;AACxD,cAAc,gDAAgD,CAAC;AAC/D,cAAc,iDAAiD,CAAC;AAChE,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,iDAAiD,CAAC;AAChE,cAAc,kDAAkD,CAAC;AACjE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uDAAuD,CAAC;AACtE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uDAAuD,CAAC;AACtE,cAAc,iDAAiD,CAAC;AAChE,cAAc,wDAAwD,CAAC;AACvE,cAAc,yDAAyD,CAAC;AACxE,cAAc,wDAAwD,CAAC;AACvE,cAAc,qEAAqE,CAAC;AACpF,cAAc,sEAAsE,CAAC;AACrF,cAAc,qEAAqE,CAAC;AACpF,cAAc,uEAAuE,CAAC;AACtF,cAAc,6EAA6E,CAAC;AAC5F,cAAc,qEAAqE,CAAC;AACpF,cAAc,sEAAsE,CAAC;AACrF,cAAc,uEAAuE,CAAC;AACtF,cAAc,wEAAwE,CAAC;AACvF,cAAc,+EAA+E,CAAC;AAC9F,cAAc,uEAAuE,CAAC;AACtF,cAAc,wEAAwE,CAAC;AACvF,cAAc,mEAAmE,CAAC;AAClF,cAAc,oEAAoE,CAAC;AACnF,cAAc,mEAAmE,CAAC;AAClF,cAAc,yDAAyD,CAAC;AACxE,cAAc,0DAA0D,CAAC;AACzE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,4DAA4D,CAAC;AAC3E,cAAc,uDAAuD,CAAC;AACtE,cAAc,0DAA0D,CAAC;AACzE,cAAc,2DAA2D,CAAC;AAC1E,cAAc,oDAAoD,CAAC;AACnE,cAAc,qDAAqD,CAAC;AACpE,cAAc,qDAAqD,CAAC;AACpE,cAAc,sDAAsD,CAAC;AACrE,cAAc,uDAAuD,CAAC;AACtE,cAAc,kDAAkD,CAAC;AACjE,cAAc,mDAAmD,CAAC;AAClE,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,wCAAwC,CAAC;AACvD,cAAc,wCAAwC,CAAC;AACvD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC;AACnD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nexport * from \"./contextIdHandlers/didContextIdHandler.js\";\nexport * from \"./factories/identityConnectorFactory.js\";\nexport * from \"./factories/identityProfileConnectorFactory.js\";\nexport * from \"./factories/identityResolverConnectorFactory.js\";\nexport * from \"./models/api/identity/IIdentityAlsoKnownAsCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityAlsoKnownAsRemoveRequest.js\";\nexport * from \"./models/api/identity/IIdentityCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityProofCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityProofCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityProofVerifyRequest.js\";\nexport * from \"./models/api/identity/IIdentityProofVerifyResponse.js\";\nexport * from \"./models/api/identity/IIdentityRemoveRequest.js\";\nexport * from \"./models/api/identity/IIdentityServiceCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityServiceCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityServiceRemoveRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialRevokeRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialUnrevokeRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialVerifyDocumentRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialVerifyRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiableCredentialVerifyResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationVerifyDocumentRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationVerifyRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerifiablePresentationVerifyResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerificationMethodCreateRequest.js\";\nexport * from \"./models/api/identity/IIdentityVerificationMethodCreateResponse.js\";\nexport * from \"./models/api/identity/IIdentityVerificationMethodRemoveRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminGetRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminListRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminListResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminRemoveRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileAdminUpdateRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileCreateRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetPublicRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetPublicResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileGetResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileListRequest.js\";\nexport * from \"./models/api/profile/IIdentityProfileListResponse.js\";\nexport * from \"./models/api/profile/IIdentityProfileUpdateRequest.js\";\nexport * from \"./models/api/resolver/IIdentityResolveRequest.js\";\nexport * from \"./models/api/resolver/IIdentityResolveResponse.js\";\nexport * from \"./models/IIdentityComponent.js\";\nexport * from \"./models/IIdentityConnector.js\";\nexport * from \"./models/IIdentityProfileComponent.js\";\nexport * from \"./models/IIdentityProfileConnector.js\";\nexport * from \"./models/IIdentityResolverComponent.js\";\nexport * from \"./models/IIdentityResolverConnector.js\";\nexport * from \"./models/identityMetricIds.js\";\nexport * from \"./models/identityMetrics.js\";\nexport * from \"./models/identitySpanAttributes.js\";\nexport * from \"./models/identitySpanNames.js\";\nexport * from \"./types/did.js\";\nexport * from \"./utils/documentHelper.js\";\nexport * from \"./utils/verificationHelper.js\";\n"]}

package/dist/es/models/identitySpanAttributes.js

@@ -0,0 +1,21 @@
+// Copyright 2026 IOTA Stiftung.
+// SPDX-License-Identifier: Apache-2.0.
+/**
+ * The span attribute keys for the identity domain.
+ */
+// eslint-disable-next-line @typescript-eslint/naming-convention
+export const IdentitySpanAttributes = {
+    /**
+     * The id of the identity document the operation is for.
+     */
+    Id: "identity.id",
+    /**
+     * The id of the verification method the operation is for.
+     */
+    VerificationMethodId: "identity.verification-method-id",
+    /**
+     * The id of the service the operation is for.
+     */
+    ServiceId: "identity.service-id"
+};
+//# sourceMappingURL=identitySpanAttributes.js.map

package/dist/es/models/identitySpanAttributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identitySpanAttributes.js","sourceRoot":"","sources":["../../../src/models/identitySpanAttributes.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AAEvC;;GAEG;AACH,gEAAgE;AAChE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC;;OAEG;IACH,EAAE,EAAE,aAAa;IAEjB;;OAEG;IACH,oBAAoB,EAAE,iCAAiC;IAEvD;;OAEG;IACH,SAAS,EAAE,qBAAqB;CACvB,CAAC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * The span attribute keys for the identity domain.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention\nexport const IdentitySpanAttributes = {\n\t/**\n\t * The id of the identity document the operation is for.\n\t */\n\tId: \"identity.id\",\n\n\t/**\n\t * The id of the verification method the operation is for.\n\t */\n\tVerificationMethodId: \"identity.verification-method-id\",\n\n\t/**\n\t * The id of the service the operation is for.\n\t */\n\tServiceId: \"identity.service-id\"\n} as const;\n\n/**\n * Union type of all identity span attribute key string values.\n */\nexport type IdentitySpanAttributes =\n\t(typeof IdentitySpanAttributes)[keyof typeof IdentitySpanAttributes];\n"]}

package/dist/es/models/identitySpanNames.js

@@ -0,0 +1,73 @@
+// Copyright 2026 IOTA Stiftung.
+// SPDX-License-Identifier: Apache-2.0.
+/**
+ * The span names for the identity domain.
+ */
+// eslint-disable-next-line @typescript-eslint/naming-convention
+export const IdentitySpanNames = {
+    /**
+     * Create an identity.
+     */
+    Create: "identity/create",
+    /**
+     * Remove an identity.
+     */
+    Remove: "identity/remove",
+    /**
+     * Create a verification method.
+     */
+    VerificationMethodCreate: "identity/verification-method-create",
+    /**
+     * Remove a verification method.
+     */
+    VerificationMethodRemove: "identity/verification-method-remove",
+    /**
+     * Create a service.
+     */
+    ServiceCreate: "identity/service-create",
+    /**
+     * Remove a service.
+     */
+    ServiceRemove: "identity/service-remove",
+    /**
+     * Add an also known as alias.
+     */
+    AlsoKnownAsAdd: "identity/also-known-as-add",
+    /**
+     * Remove an also known as alias.
+     */
+    AlsoKnownAsRemove: "identity/also-known-as-remove",
+    /**
+     * Create a verifiable credential.
+     */
+    VerifiableCredentialCreate: "identity/verifiable-credential-create",
+    /**
+     * Verify a verifiable credential.
+     */
+    VerifiableCredentialVerify: "identity/verifiable-credential-verify",
+    /**
+     * Revoke a verifiable credential.
+     */
+    VerifiableCredentialRevoke: "identity/verifiable-credential-revoke",
+    /**
+     * Unrevoke a verifiable credential.
+     */
+    VerifiableCredentialUnrevoke: "identity/verifiable-credential-unrevoke",
+    /**
+     * Create a verifiable presentation.
+     */
+    VerifiablePresentationCreate: "identity/verifiable-presentation-create",
+    /**
+     * Verify a verifiable presentation.
+     */
+    VerifiablePresentationVerify: "identity/verifiable-presentation-verify",
+    /**
+     * Create a proof.
+     */
+    ProofCreate: "identity/proof-create",
+    /**
+     * Verify a proof.
+     */
+    ProofVerify: "identity/proof-verify"
+};
+//# sourceMappingURL=identitySpanNames.js.map

package/dist/es/models/identitySpanNames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identitySpanNames.js","sourceRoot":"","sources":["../../../src/models/identitySpanNames.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AAEvC;;GAEG;AACH,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC;;OAEG;IACH,MAAM,EAAE,iBAAiB;IAEzB;;OAEG;IACH,MAAM,EAAE,iBAAiB;IAEzB;;OAEG;IACH,wBAAwB,EAAE,qCAAqC;IAE/D;;OAEG;IACH,wBAAwB,EAAE,qCAAqC;IAE/D;;OAEG;IACH,aAAa,EAAE,yBAAyB;IAExC;;OAEG;IACH,aAAa,EAAE,yBAAyB;IAExC;;OAEG;IACH,cAAc,EAAE,4BAA4B;IAE5C;;OAEG;IACH,iBAAiB,EAAE,+BAA+B;IAElD;;OAEG;IACH,0BAA0B,EAAE,uCAAuC;IAEnE;;OAEG;IACH,0BAA0B,EAAE,uCAAuC;IAEnE;;OAEG;IACH,0BAA0B,EAAE,uCAAuC;IAEnE;;OAEG;IACH,4BAA4B,EAAE,yCAAyC;IAEvE;;OAEG;IACH,4BAA4B,EAAE,yCAAyC;IAEvE;;OAEG;IACH,4BAA4B,EAAE,yCAAyC;IAEvE;;OAEG;IACH,WAAW,EAAE,uBAAuB;IAEpC;;OAEG;IACH,WAAW,EAAE,uBAAuB;CAC3B,CAAC","sourcesContent":["// Copyright 2026 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\n\n/**\n * The span names for the identity domain.\n */\n// eslint-disable-next-line @typescript-eslint/naming-convention\nexport const IdentitySpanNames = {\n\t/**\n\t * Create an identity.\n\t */\n\tCreate: \"identity/create\",\n\n\t/**\n\t * Remove an identity.\n\t */\n\tRemove: \"identity/remove\",\n\n\t/**\n\t * Create a verification method.\n\t */\n\tVerificationMethodCreate: \"identity/verification-method-create\",\n\n\t/**\n\t * Remove a verification method.\n\t */\n\tVerificationMethodRemove: \"identity/verification-method-remove\",\n\n\t/**\n\t * Create a service.\n\t */\n\tServiceCreate: \"identity/service-create\",\n\n\t/**\n\t * Remove a service.\n\t */\n\tServiceRemove: \"identity/service-remove\",\n\n\t/**\n\t * Add an also known as alias.\n\t */\n\tAlsoKnownAsAdd: \"identity/also-known-as-add\",\n\n\t/**\n\t * Remove an also known as alias.\n\t */\n\tAlsoKnownAsRemove: \"identity/also-known-as-remove\",\n\n\t/**\n\t * Create a verifiable credential.\n\t */\n\tVerifiableCredentialCreate: \"identity/verifiable-credential-create\",\n\n\t/**\n\t * Verify a verifiable credential.\n\t */\n\tVerifiableCredentialVerify: \"identity/verifiable-credential-verify\",\n\n\t/**\n\t * Revoke a verifiable credential.\n\t */\n\tVerifiableCredentialRevoke: \"identity/verifiable-credential-revoke\",\n\n\t/**\n\t * Unrevoke a verifiable credential.\n\t */\n\tVerifiableCredentialUnrevoke: \"identity/verifiable-credential-unrevoke\",\n\n\t/**\n\t * Create a verifiable presentation.\n\t */\n\tVerifiablePresentationCreate: \"identity/verifiable-presentation-create\",\n\n\t/**\n\t * Verify a verifiable presentation.\n\t */\n\tVerifiablePresentationVerify: \"identity/verifiable-presentation-verify\",\n\n\t/**\n\t * Create a proof.\n\t */\n\tProofCreate: \"identity/proof-create\",\n\n\t/**\n\t * Verify a proof.\n\t */\n\tProofVerify: \"identity/proof-verify\"\n} as const;\n\n/**\n * Union type of all identity span name string values.\n */\nexport type IdentitySpanNames = (typeof IdentitySpanNames)[keyof typeof IdentitySpanNames];\n"]}

package/dist/es/utils/verificationHelper.js

@@ -75,5 +75,41 @@ export class VerificationHelper {
         }
         return true;
     }
+    /**
+     * Check a verifiable credential is within its validity period.
+     * @param credential The credential to check, either VC data model v1 or v2.
+     * @throws GeneralError if the credential has expired or is not yet valid.
+     */
+    static checkValidityPeriod(credential) {
+        Guards.object(VerificationHelper.CLASS_NAME, "credential", credential);
+        const dated = credential;
+        const notBefore = dated.issuanceDate ?? dated.validFrom;
+        const notAfter = dated.expirationDate ?? dated.validUntil;
+        const now = Date.now();
+        if (Is.stringValue(notBefore)) {
+            if (!Is.dateTimeString(notBefore)) {
+                throw new GeneralError(VerificationHelper.CLASS_NAME, "credentialValidityDateInvalid", {
+                    date: notBefore
+                });
+            }
+            if (new Date(notBefore).getTime() > now) {
+                throw new GeneralError(VerificationHelper.CLASS_NAME, "credentialNotYetValid", {
+                    validFrom: notBefore
+                });
+            }
+        }
+        if (Is.stringValue(notAfter)) {
+            if (!Is.dateTimeString(notAfter)) {
+                throw new GeneralError(VerificationHelper.CLASS_NAME, "credentialValidityDateInvalid", {
+                    date: notAfter
+                });
+            }
+            if (new Date(notAfter).getTime() < now) {
+                throw new GeneralError(VerificationHelper.CLASS_NAME, "credentialExpired", {
+                    validUntil: notAfter
+                });
+            }
+        }
+    }
 }
 //# sourceMappingURL=verificationHelper.js.map

package/dist/es/utils/verificationHelper.js.map

@@ -1 +1 @@
-{"version":3,"file":"verificationHelper.js","sourceRoot":"","sources":["../../../src/utils/verificationHelper.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EAAE,WAAW,EAAkC,MAAM,6BAA6B,CAAC;AAC1F,OAAO,EAAE,GAAG,EAAE,GAAG,EAAqC,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD;;GAEG;AACH,MAAM,OAAO,kBAAkB;IAC9B;;OAEG;IACI,MAAM,CAAU,UAAU,wBAAwC;IAEzE;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,SAAS,CAC5B,QAAoC,EACpC,GAAW;QAKX,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,cAE7B,QAAQ,CACR,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,SAAe,GAAG,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAO,GAAG,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;QACpC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;QACtC,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC;QAE1C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,CAAC;QAC3B,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,CAAC;QAE3B,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,SAAe,GAAG,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,SAAe,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAExD,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAEpD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAE7C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,WAAW,CAC9B,QAAoC,EACpC,cAAiC;QAEjC,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,cAE7B,QAAQ,CACR,CAAC;QACF,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,oBAE7B,cAAc,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,0BAE7B,cAAc,CAAC,KAAK,CACpB,CAAC;QAEF,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAS,cAAc,CAAC,KAAK,CAAC;YACvD,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAE1B,MAAM,aAAa,GAAoC,EAAE,CAAC;QAE1D,KAAK,MAAM,KAAK,IAAI,SAAqB,EAAE,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,uBAAuB,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACjF,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,QAAsB,CAAC;YAE3B,IAAI,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/C,QAAQ,GAAG,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBACtE,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;YACtD,CAAC;YAED,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,CAAC,CAAC;YAEpF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;YAEvF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { GeneralError, Guards, Is } from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport { nameof } from \"@twin.org/nameof\";\nimport { ProofHelper, type IDidDocument, type IProof } from \"@twin.org/standards-w3c-did\";\nimport { Jwk, Jwt, type IJwtHeader, type IJwtPayload } from \"@twin.org/web\";\nimport { DocumentHelper } from \"./documentHelper.js\";\nimport type { IIdentityResolverComponent } from \"../models/IIdentityResolverComponent.js\";\n\n/**\n * Helper methods for verification.\n */\nexport class VerificationHelper {\n\t/**\n\t * Runtime name for the class.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<VerificationHelper>();\n\n\t/**\n\t * Verify the JWT and return the decoded header and payload.\n\t * @param resolver The resolver to use for finding the document.\n\t * @param jwt The token to verify.\n\t * @returns The decoded header and payload.\n\t */\n\tpublic static async verifyJwt<T extends IJwtHeader, U extends IJwtPayload>(\n\t\tresolver: IIdentityResolverComponent,\n\t\tjwt: string\n\t): Promise<{\n\t\theader: T;\n\t\tpayload: U;\n\t}> {\n\t\tGuards.object<IIdentityResolverComponent>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(resolver),\n\t\t\tresolver\n\t\t);\n\t\tGuards.string(VerificationHelper.CLASS_NAME, nameof(jwt), jwt);\n\n\t\tconst jwtDecoded = await Jwt.decode<T, U>(jwt);\n\n\t\tconst jwtHeader = jwtDecoded.header;\n\t\tconst jwtPayload = jwtDecoded.payload;\n\t\tconst jwtSignature = jwtDecoded.signature;\n\n\t\tif (!Is.object(jwtHeader) || !Is.object(jwtPayload) || !Is.uint8Array(jwtSignature)) {\n\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"jwtDecodeFailed\");\n\t\t}\n\n\t\tconst iss = jwtHeader?.iss;\n\t\tconst kid = jwtHeader?.kid;\n\n\t\tGuards.stringValue(VerificationHelper.CLASS_NAME, nameof(iss), iss);\n\t\tGuards.stringValue(VerificationHelper.CLASS_NAME, nameof(kid), kid);\n\n\t\tconst didDocument = await resolver.identityResolve(iss);\n\n\t\tconst jwk = DocumentHelper.getJwk(didDocument, kid);\n\n\t\tconst publicKey = await Jwk.toCryptoKey(jwk);\n\n\t\treturn Jwt.verify(jwt, publicKey);\n\t}\n\n\t/**\n\t * Verify the proof for the document.\n\t * @param resolver The resolver to use for finding the document.\n\t * @param secureDocument The secure document to verify.\n\t * @returns True if all proofs in the document are verified successfully.\n\t */\n\tpublic static async verifyProof(\n\t\tresolver: IIdentityResolverComponent,\n\t\tsecureDocument: IJsonLdNodeObject\n\t): Promise<boolean> {\n\t\tGuards.object<IIdentityResolverComponent>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(resolver),\n\t\t\tresolver\n\t\t);\n\t\tGuards.object<IJsonLdNodeObject>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(secureDocument),\n\t\t\tsecureDocument\n\t\t);\n\t\tGuards.object<IJsonLdNodeObject>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(secureDocument.proof),\n\t\t\tsecureDocument.proof\n\t\t);\n\n\t\tconst proofList = Is.array<IProof>(secureDocument.proof)\n\t\t\t? secureDocument.proof\n\t\t\t: [secureDocument.proof];\n\n\t\tconst documentCache: { [key: string]: IDidDocument } = {};\n\n\t\tfor (const proof of proofList as IProof[]) {\n\t\t\tif (!Is.stringValue(proof?.verificationMethod)) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"proofMissingVerificationMethod\");\n\t\t\t}\n\n\t\t\tconst proofVerificationMethod = DocumentHelper.parseId(proof.verificationMethod);\n\t\t\tif (!Is.stringValue(proofVerificationMethod.fragment)) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"proofMissingVerificationMethod\");\n\t\t\t}\n\n\t\t\tlet document: IDidDocument;\n\n\t\t\tif (documentCache[proofVerificationMethod.id]) {\n\t\t\t\tdocument = documentCache[proofVerificationMethod.id];\n\t\t\t} else {\n\t\t\t\tdocument = await resolver.identityResolve(proofVerificationMethod.id);\n\t\t\t\tdocumentCache[proofVerificationMethod.id] = document;\n\t\t\t}\n\n\t\t\tconst verificationJwk = DocumentHelper.getJwk(document, proofVerificationMethod.id);\n\n\t\t\tconst verified = await ProofHelper.verifyProof(secureDocument, proof, verificationJwk);\n\n\t\t\tif (!verified) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\t\treturn true;\n\t}\n}\n"]}
+{"version":3,"file":"verificationHelper.js","sourceRoot":"","sources":["../../../src/utils/verificationHelper.ts"],"names":[],"mappings":"AAAA,gCAAgC;AAChC,uCAAuC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAG1D,OAAO,EACN,WAAW,EAIX,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAqC,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD;;GAEG;AACH,MAAM,OAAO,kBAAkB;IAC9B;;OAEG;IACI,MAAM,CAAU,UAAU,wBAAwC;IAEzE;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,SAAS,CAC5B,QAAoC,EACpC,GAAW;QAKX,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,cAE7B,QAAQ,CACR,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,UAAU,SAAe,GAAG,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAO,GAAG,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;QACpC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC;QACtC,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC;QAE1C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,CAAC;QAC3B,MAAM,GAAG,GAAG,SAAS,EAAE,GAAG,CAAC;QAE3B,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,SAAe,GAAG,CAAC,CAAC;QACpE,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,UAAU,SAAe,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAExD,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAEpD,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAE7C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,WAAW,CAC9B,QAAoC,EACpC,cAAiC;QAEjC,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,cAE7B,QAAQ,CACR,CAAC;QACF,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,oBAE7B,cAAc,CACd,CAAC;QACF,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,0BAE7B,cAAc,CAAC,KAAK,CACpB,CAAC;QAEF,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAS,cAAc,CAAC,KAAK,CAAC;YACvD,CAAC,CAAC,cAAc,CAAC,KAAK;YACtB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAE1B,MAAM,aAAa,GAAoC,EAAE,CAAC;QAE1D,KAAK,MAAM,KAAK,IAAI,SAAqB,EAAE,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,uBAAuB,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACjF,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,QAAsB,CAAC;YAE3B,IAAI,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/C,QAAQ,GAAG,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBACtE,aAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC;YACtD,CAAC;YAED,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,CAAC,CAAC;YAEpF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;YAEvF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,mBAAmB,CAAC,UAAoC;QACrE,MAAM,CAAC,MAAM,CACZ,kBAAkB,CAAC,UAAU,gBAE7B,UAAU,CACV,CAAC;QAEF,MAAM,KAAK,GAAG,UAKb,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,SAAS,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,+BAA+B,EAAE;oBACtF,IAAI,EAAE,SAAS;iBACf,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;gBACzC,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,uBAAuB,EAAE;oBAC9E,SAAS,EAAE,SAAS;iBACpB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,IAAI,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,+BAA+B,EAAE;oBACtF,IAAI,EAAE,QAAQ;iBACd,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;gBACxC,MAAM,IAAI,YAAY,CAAC,kBAAkB,CAAC,UAAU,EAAE,mBAAmB,EAAE;oBAC1E,UAAU,EAAE,QAAQ;iBACpB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC","sourcesContent":["// Copyright 2024 IOTA Stiftung.\n// SPDX-License-Identifier: Apache-2.0.\nimport { GeneralError, Guards, Is } from \"@twin.org/core\";\nimport type { IJsonLdNodeObject } from \"@twin.org/data-json-ld\";\nimport { nameof } from \"@twin.org/nameof\";\nimport {\n\tProofHelper,\n\ttype IDidDocument,\n\ttype IDidVerifiableCredential,\n\ttype IProof\n} from \"@twin.org/standards-w3c-did\";\nimport { Jwk, Jwt, type IJwtHeader, type IJwtPayload } from \"@twin.org/web\";\nimport { DocumentHelper } from \"./documentHelper.js\";\nimport type { IIdentityResolverComponent } from \"../models/IIdentityResolverComponent.js\";\n\n/**\n * Helper methods for verification.\n */\nexport class VerificationHelper {\n\t/**\n\t * Runtime name for the class.\n\t */\n\tpublic static readonly CLASS_NAME: string = nameof<VerificationHelper>();\n\n\t/**\n\t * Verify the JWT and return the decoded header and payload.\n\t * @param resolver The resolver to use for finding the document.\n\t * @param jwt The token to verify.\n\t * @returns The decoded header and payload.\n\t */\n\tpublic static async verifyJwt<T extends IJwtHeader, U extends IJwtPayload>(\n\t\tresolver: IIdentityResolverComponent,\n\t\tjwt: string\n\t): Promise<{\n\t\theader: T;\n\t\tpayload: U;\n\t}> {\n\t\tGuards.object<IIdentityResolverComponent>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(resolver),\n\t\t\tresolver\n\t\t);\n\t\tGuards.string(VerificationHelper.CLASS_NAME, nameof(jwt), jwt);\n\n\t\tconst jwtDecoded = await Jwt.decode<T, U>(jwt);\n\n\t\tconst jwtHeader = jwtDecoded.header;\n\t\tconst jwtPayload = jwtDecoded.payload;\n\t\tconst jwtSignature = jwtDecoded.signature;\n\n\t\tif (!Is.object(jwtHeader) || !Is.object(jwtPayload) || !Is.uint8Array(jwtSignature)) {\n\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"jwtDecodeFailed\");\n\t\t}\n\n\t\tconst iss = jwtHeader?.iss;\n\t\tconst kid = jwtHeader?.kid;\n\n\t\tGuards.stringValue(VerificationHelper.CLASS_NAME, nameof(iss), iss);\n\t\tGuards.stringValue(VerificationHelper.CLASS_NAME, nameof(kid), kid);\n\n\t\tconst didDocument = await resolver.identityResolve(iss);\n\n\t\tconst jwk = DocumentHelper.getJwk(didDocument, kid);\n\n\t\tconst publicKey = await Jwk.toCryptoKey(jwk);\n\n\t\treturn Jwt.verify(jwt, publicKey);\n\t}\n\n\t/**\n\t * Verify the proof for the document.\n\t * @param resolver The resolver to use for finding the document.\n\t * @param secureDocument The secure document to verify.\n\t * @returns True if all proofs in the document are verified successfully.\n\t */\n\tpublic static async verifyProof(\n\t\tresolver: IIdentityResolverComponent,\n\t\tsecureDocument: IJsonLdNodeObject\n\t): Promise<boolean> {\n\t\tGuards.object<IIdentityResolverComponent>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(resolver),\n\t\t\tresolver\n\t\t);\n\t\tGuards.object<IJsonLdNodeObject>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(secureDocument),\n\t\t\tsecureDocument\n\t\t);\n\t\tGuards.object<IJsonLdNodeObject>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(secureDocument.proof),\n\t\t\tsecureDocument.proof\n\t\t);\n\n\t\tconst proofList = Is.array<IProof>(secureDocument.proof)\n\t\t\t? secureDocument.proof\n\t\t\t: [secureDocument.proof];\n\n\t\tconst documentCache: { [key: string]: IDidDocument } = {};\n\n\t\tfor (const proof of proofList as IProof[]) {\n\t\t\tif (!Is.stringValue(proof?.verificationMethod)) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"proofMissingVerificationMethod\");\n\t\t\t}\n\n\t\t\tconst proofVerificationMethod = DocumentHelper.parseId(proof.verificationMethod);\n\t\t\tif (!Is.stringValue(proofVerificationMethod.fragment)) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"proofMissingVerificationMethod\");\n\t\t\t}\n\n\t\t\tlet document: IDidDocument;\n\n\t\t\tif (documentCache[proofVerificationMethod.id]) {\n\t\t\t\tdocument = documentCache[proofVerificationMethod.id];\n\t\t\t} else {\n\t\t\t\tdocument = await resolver.identityResolve(proofVerificationMethod.id);\n\t\t\t\tdocumentCache[proofVerificationMethod.id] = document;\n\t\t\t}\n\n\t\t\tconst verificationJwk = DocumentHelper.getJwk(document, proofVerificationMethod.id);\n\n\t\t\tconst verified = await ProofHelper.verifyProof(secureDocument, proof, verificationJwk);\n\n\t\t\tif (!verified) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t}\n\t\treturn true;\n\t}\n\n\t/**\n\t * Check a verifiable credential is within its validity period.\n\t * @param credential The credential to check, either VC data model v1 or v2.\n\t * @throws GeneralError if the credential has expired or is not yet valid.\n\t */\n\tpublic static checkValidityPeriod(credential: IDidVerifiableCredential): void {\n\t\tGuards.object<IDidVerifiableCredential>(\n\t\t\tVerificationHelper.CLASS_NAME,\n\t\t\tnameof(credential),\n\t\t\tcredential\n\t\t);\n\n\t\tconst dated = credential as {\n\t\t\tissuanceDate?: string;\n\t\t\tvalidFrom?: string;\n\t\t\texpirationDate?: string;\n\t\t\tvalidUntil?: string;\n\t\t};\n\t\tconst notBefore = dated.issuanceDate ?? dated.validFrom;\n\t\tconst notAfter = dated.expirationDate ?? dated.validUntil;\n\t\tconst now = Date.now();\n\n\t\tif (Is.stringValue(notBefore)) {\n\t\t\tif (!Is.dateTimeString(notBefore)) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"credentialValidityDateInvalid\", {\n\t\t\t\t\tdate: notBefore\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (new Date(notBefore).getTime() > now) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"credentialNotYetValid\", {\n\t\t\t\t\tvalidFrom: notBefore\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\tif (Is.stringValue(notAfter)) {\n\t\t\tif (!Is.dateTimeString(notAfter)) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"credentialValidityDateInvalid\", {\n\t\t\t\t\tdate: notAfter\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (new Date(notAfter).getTime() < now) {\n\t\t\t\tthrow new GeneralError(VerificationHelper.CLASS_NAME, \"credentialExpired\", {\n\t\t\t\t\tvalidUntil: notAfter\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n}\n"]}

package/dist/types/index.d.ts

@@ -52,6 +52,8 @@ export * from "./models/IIdentityResolverComponent.js";
 export * from "./models/IIdentityResolverConnector.js";
 export * from "./models/identityMetricIds.js";
 export * from "./models/identityMetrics.js";
+export * from "./models/identitySpanAttributes.js";
+export * from "./models/identitySpanNames.js";
 export * from "./types/did.js";
 export * from "./utils/documentHelper.js";
 export * from "./utils/verificationHelper.js";

package/dist/types/models/identitySpanAttributes.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The span attribute keys for the identity domain.
+ */
+export declare const IdentitySpanAttributes: {
+    /**
+     * The id of the identity document the operation is for.
+     */
+    readonly Id: "identity.id";
+    /**
+     * The id of the verification method the operation is for.
+     */
+    readonly VerificationMethodId: "identity.verification-method-id";
+    /**
+     * The id of the service the operation is for.
+     */
+    readonly ServiceId: "identity.service-id";
+};
+/**
+ * Union type of all identity span attribute key string values.
+ */
+export type IdentitySpanAttributes = (typeof IdentitySpanAttributes)[keyof typeof IdentitySpanAttributes];

package/dist/types/models/identitySpanNames.d.ts

@@ -0,0 +1,73 @@
+/**
+ * The span names for the identity domain.
+ */
+export declare const IdentitySpanNames: {
+    /**
+     * Create an identity.
+     */
+    readonly Create: "identity/create";
+    /**
+     * Remove an identity.
+     */
+    readonly Remove: "identity/remove";
+    /**
+     * Create a verification method.
+     */
+    readonly VerificationMethodCreate: "identity/verification-method-create";
+    /**
+     * Remove a verification method.
+     */
+    readonly VerificationMethodRemove: "identity/verification-method-remove";
+    /**
+     * Create a service.
+     */
+    readonly ServiceCreate: "identity/service-create";
+    /**
+     * Remove a service.
+     */
+    readonly ServiceRemove: "identity/service-remove";
+    /**
+     * Add an also known as alias.
+     */
+    readonly AlsoKnownAsAdd: "identity/also-known-as-add";
+    /**
+     * Remove an also known as alias.
+     */
+    readonly AlsoKnownAsRemove: "identity/also-known-as-remove";
+    /**
+     * Create a verifiable credential.
+     */
+    readonly VerifiableCredentialCreate: "identity/verifiable-credential-create";
+    /**
+     * Verify a verifiable credential.
+     */
+    readonly VerifiableCredentialVerify: "identity/verifiable-credential-verify";
+    /**
+     * Revoke a verifiable credential.
+     */
+    readonly VerifiableCredentialRevoke: "identity/verifiable-credential-revoke";
+    /**
+     * Unrevoke a verifiable credential.
+     */
+    readonly VerifiableCredentialUnrevoke: "identity/verifiable-credential-unrevoke";
+    /**
+     * Create a verifiable presentation.
+     */
+    readonly VerifiablePresentationCreate: "identity/verifiable-presentation-create";
+    /**
+     * Verify a verifiable presentation.
+     */
+    readonly VerifiablePresentationVerify: "identity/verifiable-presentation-verify";
+    /**
+     * Create a proof.
+     */
+    readonly ProofCreate: "identity/proof-create";
+    /**
+     * Verify a proof.
+     */
+    readonly ProofVerify: "identity/proof-verify";
+};
+/**
+ * Union type of all identity span name string values.
+ */
+export type IdentitySpanNames = (typeof IdentitySpanNames)[keyof typeof IdentitySpanNames];

package/dist/types/utils/verificationHelper.d.ts

@@ -1,4 +1,5 @@
 import type { IJsonLdNodeObject } from "@twin.org/data-json-ld";
+import { type IDidVerifiableCredential } from "@twin.org/standards-w3c-did";
 import { type IJwtHeader, type IJwtPayload } from "@twin.org/web";
 import type { IIdentityResolverComponent } from "../models/IIdentityResolverComponent.js";
 /**
@@ -26,4 +27,10 @@ export declare class VerificationHelper {
      * @returns True if all proofs in the document are verified successfully.
      */
     static verifyProof(resolver: IIdentityResolverComponent, secureDocument: IJsonLdNodeObject): Promise<boolean>;
+    /**
+     * Check a verifiable credential is within its validity period.
+     * @param credential The credential to check, either VC data model v1 or v2.
+     * @throws GeneralError if the credential has expired or is not yet valid.
+     */
+    static checkValidityPeriod(credential: IDidVerifiableCredential): void;
 }

package/docs/changelog.md

@@ -1,5 +1,65 @@
 # Changelog
 
+## [0.9.3-next.1](https://github.com/iotaledger/twin-identity/compare/identity-models-v0.9.3-next.0...identity-models-v0.9.3-next.1) (2026-08-26)
+
+
+### Features
+
+* add addAlsoKnownAs to identity connector ([#117](https://github.com/iotaledger/twin-identity/issues/117)) ([aa27cff](https://github.com/iotaledger/twin-identity/commit/aa27cff88e61e7c8c6e32aeb437fb01c6ee9f57a))
+* add context id features ([#62](https://github.com/iotaledger/twin-identity/issues/62)) ([e02ecca](https://github.com/iotaledger/twin-identity/commit/e02ecca9c45a849104bfbf7bc18a1f44e6eea8a1))
+* add context id long method ([#182](https://github.com/iotaledger/twin-identity/issues/182)) ([8e04625](https://github.com/iotaledger/twin-identity/commit/8e04625812cd3b8680ce837fadbb0bce046a5c2f))
+* add expiration date option to vc creation ([73e05e1](https://github.com/iotaledger/twin-identity/commit/73e05e1ae61112c7e056889969751f4ff82d9f29))
+* add identity remove ([eebc13f](https://github.com/iotaledger/twin-identity/commit/eebc13f4c2cd994d2d9cce4da2128fb346c80ba7))
+* add idHelper class ([57c8bdb](https://github.com/iotaledger/twin-identity/commit/57c8bdb81efaa163b5e83f8a7f16f3764d12fd75))
+* add optional jwt payload and headers to vc and vp tokens ([#135](https://github.com/iotaledger/twin-identity/issues/135)) ([aa1de0f](https://github.com/iotaledger/twin-identity/commit/aa1de0f63be95ff62bae3c699aabc85ea93d74c2))
+* add proof to vcs and verify vs documents ([#103](https://github.com/iotaledger/twin-identity/issues/103)) ([b60bf0c](https://github.com/iotaledger/twin-identity/commit/b60bf0cb7d453d67574c5c0e4f769e67cf7cd6d1))
+* add telemetry metrics ([#132](https://github.com/iotaledger/twin-identity/issues/132)) ([b51cd78](https://github.com/iotaledger/twin-identity/commit/b51cd7816905fd55e250035daf1b8f2047cba83d))
+* add validate-locales ([04d74b4](https://github.com/iotaledger/twin-identity/commit/04d74b4d1ebe42672e8ca75a7bdb8e3556afd0be))
+* admin endpoints ([#199](https://github.com/iotaledger/twin-identity/issues/199)) ([da6c189](https://github.com/iotaledger/twin-identity/commit/da6c18963ed551451d919e36aedc1dd8b005a12f))
+* common connector tests ([4f9642c](https://github.com/iotaledger/twin-identity/commit/4f9642ceb09843870909fc6819bf69fb20ef952a))
+* eslint migration to flat config ([fd6246d](https://github.com/iotaledger/twin-identity/commit/fd6246d566280b6d5d10a108eb1e92c4b510f2f2))
+* expanded cli methods ([#121](https://github.com/iotaledger/twin-identity/issues/121)) ([80a52b7](https://github.com/iotaledger/twin-identity/commit/80a52b779237cd633d1f2813fa976585cef6e551))
+* health and key removal ([934391f](https://github.com/iotaledger/twin-identity/commit/934391f9307beda34bc594e3aa506137e3df631b))
+* health and key removal ([#191](https://github.com/iotaledger/twin-identity/issues/191)) ([8504101](https://github.com/iotaledger/twin-identity/commit/8504101a7a08b2a042a4e59f666c245308527088))
+* identity key separator use slash ([1319d0d](https://github.com/iotaledger/twin-identity/commit/1319d0d07164a36b3ec279e6421b8835ffefc3d3))
+* remove auth generator ([#98](https://github.com/iotaledger/twin-identity/issues/98)) ([a8969e8](https://github.com/iotaledger/twin-identity/commit/a8969e85a5a2804abfc787406e2d12eb168dd978))
+* separate vc verification routes with query and body ([ea7d891](https://github.com/iotaledger/twin-identity/commit/ea7d8910472150cf76dbd51e282625e70226d9b3))
+* tracing ([#205](https://github.com/iotaledger/twin-identity/issues/205)) ([add81ab](https://github.com/iotaledger/twin-identity/commit/add81ab4a258078c34ef0c57681d1675c81f8e2c))
+* typescript 6 update ([e8806ad](https://github.com/iotaledger/twin-identity/commit/e8806ad6858c37be3c0f54c41cf654023773bef3))
+* update did context handler definition ([02aa59a](https://github.com/iotaledger/twin-identity/commit/02aa59ae8100b1afb2325ea858411fc3e4d9d1e9))
+* update framework core ([c824497](https://github.com/iotaledger/twin-identity/commit/c82449709af0215eb7af496cf687c93fb30b5ae0))
+* use shared store mechanism ([#27](https://github.com/iotaledger/twin-identity/issues/27)) ([ce41f3f](https://github.com/iotaledger/twin-identity/commit/ce41f3fc3da1b206ec06da7ea5b2c968f788804d))
+
+
+### Bug Fixes
+
+* didContextIdHandler tests ([dc7b555](https://github.com/iotaledger/twin-identity/commit/dc7b5558e47117475b7f1fa1686d3ed7e0906563))
+* enforce credentialStatus, validity period and assertionMethod scope on object-form verification ([#215](https://github.com/iotaledger/twin-identity/issues/215)) ([8e6eb92](https://github.com/iotaledger/twin-identity/commit/8e6eb920564e0fe4ebdc984bdf682b7779f747d0))
+* Import path and bump version ([#21](https://github.com/iotaledger/twin-identity/issues/21)) ([ccea845](https://github.com/iotaledger/twin-identity/commit/ccea845bf32562267280bc1b3dde1c9af1a00360))
+* Install sdk-wasm ([#20](https://github.com/iotaledger/twin-identity/issues/20)) ([75ec14e](https://github.com/iotaledger/twin-identity/commit/75ec14e072f8c219863a1c028a3b0783802086e9))
+* query params force coercion ([d9347d2](https://github.com/iotaledger/twin-identity/commit/d9347d29d4a9cc58759f30f5d8526de864ea7522))
+* stricter pathParam types ([a174cdf](https://github.com/iotaledger/twin-identity/commit/a174cdf0ca4272bee35fcf20ab7e8e4e17b8b6f4))
+* use base64Url for tenant id short form so it doesn't include slash ([53b9e27](https://github.com/iotaledger/twin-identity/commit/53b9e27351f20e2689734581c252a23527657926))
+* Use resolver component ([#22](https://github.com/iotaledger/twin-identity/issues/22)) ([d0b3a32](https://github.com/iotaledger/twin-identity/commit/d0b3a321c7f9f966d397a880d752e9f2c0a98a27))
+
+## [0.9.2](https://github.com/iotaledger/twin-identity/compare/identity-models-v0.9.2...identity-models-v0.9.2) (2026-08-24)
+
+
+### Features
+
+* release to production ([dabf4c5](https://github.com/iotaledger/twin-identity/commit/dabf4c5bb19e04c09bfbc8533f23dc9d42b35e4c))
+* release to production ([8450ad7](https://github.com/iotaledger/twin-identity/commit/8450ad727e0c4d665f2ce483e41798c2ff5b7d55))
+* release to production ([#161](https://github.com/iotaledger/twin-identity/issues/161)) ([ad151fa](https://github.com/iotaledger/twin-identity/commit/ad151facfcaadc1d183d935a6db525379d48002f))
+* release to production ([#179](https://github.com/iotaledger/twin-identity/issues/179)) ([062816b](https://github.com/iotaledger/twin-identity/commit/062816b110776b7e60f89b04142d42c6f24890a8))
+* release to production ([#210](https://github.com/iotaledger/twin-identity/issues/210)) ([aec2d45](https://github.com/iotaledger/twin-identity/commit/aec2d45ed55b8bf96638dee835f54629170943ad))
+
+## [0.9.2-next.10](https://github.com/iotaledger/twin-identity/compare/identity-models-v0.9.2-next.9...identity-models-v0.9.2-next.10) (2026-08-20)
+
+
+### Features
+
+* tracing ([#205](https://github.com/iotaledger/twin-identity/issues/205)) ([add81ab](https://github.com/iotaledger/twin-identity/commit/add81ab4a258078c34ef0c57681d1675c81f8e2c))
+
 ## [0.9.2-next.9](https://github.com/iotaledger/twin-identity/compare/identity-models-v0.9.2-next.8...identity-models-v0.9.2-next.9) (2026-08-14)
 
 

package/docs/reference/classes/VerificationHelper.md

@@ -85,3 +85,27 @@ The secure document to verify.
 `Promise`\<`boolean`\>
 
 True if all proofs in the document are verified successfully.
+
+***
+
+### checkValidityPeriod() {#checkvalidityperiod}
+
+> `static` **checkValidityPeriod**(`credential`): `void`
+
+Check a verifiable credential is within its validity period.
+
+#### Parameters
+
+##### credential
+
+`IDidVerifiableCredential`
+
+The credential to check, either VC data model v1 or v2.
+
+#### Returns
+
+`void`
+
+#### Throws
+
+GeneralError if the credential has expired or is not yet valid.

package/docs/reference/index.md

@@ -61,6 +61,8 @@
 ## Type Aliases
 
 - [IdentityMetricIds](type-aliases/IdentityMetricIds.md)
+- [IdentitySpanAttributes](type-aliases/IdentitySpanAttributes.md)
+- [IdentitySpanNames](type-aliases/IdentitySpanNames.md)
 
 ## Variables
 
@@ -69,3 +71,5 @@
 - [IdentityResolverConnectorFactory](variables/IdentityResolverConnectorFactory.md)
 - [IdentityMetricIds](variables/IdentityMetricIds.md)
 - [IdentityMetrics](variables/IdentityMetrics.md)
+- [IdentitySpanAttributes](variables/IdentitySpanAttributes.md)
+- [IdentitySpanNames](variables/IdentitySpanNames.md)

package/docs/reference/type-aliases/IdentitySpanAttributes.md

@@ -0,0 +1,5 @@
+# Type Alias: IdentitySpanAttributes
+
+> **IdentitySpanAttributes** = *typeof* [`IdentitySpanAttributes`](../variables/IdentitySpanAttributes.md)\[keyof *typeof* [`IdentitySpanAttributes`](../variables/IdentitySpanAttributes.md)\]
+
+Union type of all identity span attribute key string values.

package/docs/reference/type-aliases/IdentitySpanNames.md

@@ -0,0 +1,5 @@
+# Type Alias: IdentitySpanNames
+
+> **IdentitySpanNames** = *typeof* [`IdentitySpanNames`](../variables/IdentitySpanNames.md)\[keyof *typeof* [`IdentitySpanNames`](../variables/IdentitySpanNames.md)\]
+
+Union type of all identity span name string values.

package/docs/reference/variables/IdentitySpanAttributes.md

@@ -0,0 +1,25 @@
+# Variable: IdentitySpanAttributes
+
+> `const` **IdentitySpanAttributes**: `object`
+
+The span attribute keys for the identity domain.
+
+## Type Declaration
+
+### Id {#id}
+
+> `readonly` **Id**: `"identity.id"` = `"identity.id"`
+
+The id of the identity document the operation is for.
+
+### VerificationMethodId {#verificationmethodid}
+
+> `readonly` **VerificationMethodId**: `"identity.verification-method-id"` = `"identity.verification-method-id"`
+
+The id of the verification method the operation is for.
+
+### ServiceId {#serviceid}
+
+> `readonly` **ServiceId**: `"identity.service-id"` = `"identity.service-id"`
+
+The id of the service the operation is for.

package/docs/reference/variables/IdentitySpanNames.md

@@ -0,0 +1,103 @@
+# Variable: IdentitySpanNames
+
+> `const` **IdentitySpanNames**: `object`
+
+The span names for the identity domain.
+
+## Type Declaration
+
+### Create {#create}
+
+> `readonly` **Create**: `"identity/create"` = `"identity/create"`
+
+Create an identity.
+
+### Remove {#remove}
+
+> `readonly` **Remove**: `"identity/remove"` = `"identity/remove"`
+
+Remove an identity.
+
+### VerificationMethodCreate {#verificationmethodcreate}
+
+> `readonly` **VerificationMethodCreate**: `"identity/verification-method-create"` = `"identity/verification-method-create"`
+
+Create a verification method.
+
+### VerificationMethodRemove {#verificationmethodremove}
+
+> `readonly` **VerificationMethodRemove**: `"identity/verification-method-remove"` = `"identity/verification-method-remove"`
+
+Remove a verification method.
+
+### ServiceCreate {#servicecreate}
+
+> `readonly` **ServiceCreate**: `"identity/service-create"` = `"identity/service-create"`
+
+Create a service.
+
+### ServiceRemove {#serviceremove}
+
+> `readonly` **ServiceRemove**: `"identity/service-remove"` = `"identity/service-remove"`
+
+Remove a service.
+
+### AlsoKnownAsAdd {#alsoknownasadd}
+
+> `readonly` **AlsoKnownAsAdd**: `"identity/also-known-as-add"` = `"identity/also-known-as-add"`
+
+Add an also known as alias.
+
+### AlsoKnownAsRemove {#alsoknownasremove}
+
+> `readonly` **AlsoKnownAsRemove**: `"identity/also-known-as-remove"` = `"identity/also-known-as-remove"`
+
+Remove an also known as alias.
+
+### VerifiableCredentialCreate {#verifiablecredentialcreate}
+
+> `readonly` **VerifiableCredentialCreate**: `"identity/verifiable-credential-create"` = `"identity/verifiable-credential-create"`
+
+Create a verifiable credential.
+
+### VerifiableCredentialVerify {#verifiablecredentialverify}
+
+> `readonly` **VerifiableCredentialVerify**: `"identity/verifiable-credential-verify"` = `"identity/verifiable-credential-verify"`
+
+Verify a verifiable credential.
+
+### VerifiableCredentialRevoke {#verifiablecredentialrevoke}
+
+> `readonly` **VerifiableCredentialRevoke**: `"identity/verifiable-credential-revoke"` = `"identity/verifiable-credential-revoke"`
+
+Revoke a verifiable credential.
+
+### VerifiableCredentialUnrevoke {#verifiablecredentialunrevoke}
+
+> `readonly` **VerifiableCredentialUnrevoke**: `"identity/verifiable-credential-unrevoke"` = `"identity/verifiable-credential-unrevoke"`
+
+Unrevoke a verifiable credential.
+
+### VerifiablePresentationCreate {#verifiablepresentationcreate}
+
+> `readonly` **VerifiablePresentationCreate**: `"identity/verifiable-presentation-create"` = `"identity/verifiable-presentation-create"`
+
+Create a verifiable presentation.
+
+### VerifiablePresentationVerify {#verifiablepresentationverify}
+
+> `readonly` **VerifiablePresentationVerify**: `"identity/verifiable-presentation-verify"` = `"identity/verifiable-presentation-verify"`
+
+Verify a verifiable presentation.
+
+### ProofCreate {#proofcreate}
+
+> `readonly` **ProofCreate**: `"identity/proof-create"` = `"identity/proof-create"`
+
+Create a proof.
+
+### ProofVerify {#proofverify}
+
+> `readonly` **ProofVerify**: `"identity/proof-verify"` = `"identity/proof-verify"`
+
+Verify a proof.

package/locales/en.json

@@ -2,7 +2,10 @@
 	"error": {
 		"verificationHelper": {
 			"jwtDecodeFailed": "Decoding the JWT failed",
-			"proofMissingVerificationMethod": "The proof is missing the verification method"
+			"proofMissingVerificationMethod": "The proof is missing the verification method",
+			"credentialNotYetValid": "The credential is not valid until \"{validFrom}\"",
+			"credentialExpired": "The credential expired at \"{validUntil}\"",
+			"credentialValidityDateInvalid": "The credential validity date is not a valid ISO 8601 timestamp \"{date}\""
 		},
 		"documentHelper": {
 			"verificationMethodNotFound": "The verification method \"{methodName}\" of type \"{methodType}\" could not be found",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@twin.org/identity-models",
-	"version": "0.9.2-next.9",
+	"version": "0.9.3-next.1",
 	"description": "Shared identity models and contracts for consistent data structures across services, connectors, and clients.",
 	"repository": {
 		"type": "git",