payid-attestation 0.1.0

package/README.md

@@ -0,0 +1,15 @@
+# attestation
+
+To install dependencies:
+
+```bash
+bun install
+```
+
+To run:
+
+```bash
+bun run index.ts
+```
+
+This project was created using `bun init` in bun v1.2.21. [Bun](https://bun.com) is a fast all-in-one JavaScript runtime.

package/index.ts

@@ -0,0 +1 @@
+export * from "./src";

package/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "payid-attestation",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "scripts": {
+    "build": "bun build src/verify.ts --outdir dist --target node"
+  },
+  "devDependencies": {
+    "@types/bun": "latest"
+  },
+  "peerDependencies": {
+    "typescript": "^5"
+  }
+}

package/src/index.ts

@@ -0,0 +1,2 @@
+export * from "./types";
+export * from "./verify";

package/src/types.ts

@@ -0,0 +1,6 @@
+export interface Attestation {
+  issuer: string;
+  issuedAt: number;
+  expiresAt: number;
+  signature: string;
+}

package/src/verify.ts

@@ -0,0 +1,31 @@
+import { ethers, keccak256, toUtf8Bytes, verifyMessage, toBeArray } from "ethers";
+import type { Attestation } from "./types";
+
+export function verifyAttestation(
+  payload: object,
+  proof: Attestation,
+  trustedIssuers: Set<string>
+) {
+  const now = Math.floor(Date.now() / 1000);
+
+  if (!trustedIssuers.has(proof.issuer)) {
+    throw new Error("UNTRUSTED_ATTESTATION_ISSUER");
+  }
+
+  if (proof.expiresAt < now) {
+    throw new Error("ATTESTATION_EXPIRED");
+  }
+
+  const hash = keccak256(
+    toUtf8Bytes(JSON.stringify(payload))
+  );
+
+  const recovered = verifyMessage(
+    toBeArray(hash),
+    proof.signature
+  );
+
+  if (recovered.toLowerCase() !== proof.issuer.toLowerCase()) {
+    throw new Error("INVALID_ATTESTATION_SIGNATURE");
+  }
+}

package/tsconfig.json

@@ -0,0 +1,29 @@
+{
+  "compilerOptions": {
+    // Environment setup & latest features
+    "lib": ["ESNext"],
+    "target": "ESNext",
+    "module": "Preserve",
+    "moduleDetection": "force",
+    "jsx": "react-jsx",
+    "allowJs": true,
+
+    // Bundler mode
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "noEmit": true,
+
+    // Best practices
+    "strict": true,
+    "skipLibCheck": true,
+    "noFallthroughCasesInSwitch": true,
+    "noUncheckedIndexedAccess": true,
+    "noImplicitOverride": true,
+
+    // Some stricter flags (disabled by default)
+    "noUnusedLocals": false,
+    "noUnusedParameters": false,
+    "noPropertyAccessFromIndexSignature": false
+  }
+}