A library for verifying Authorization Capability (ZCAP) invocations via HTTP signatures
- JavaScript 100%
verifyCapabilityInvocation no longer silently rewrites the invocationTarget to use a different uri scheme than options.url |
||
|---|---|---|
| .github/workflows | ||
| lib | ||
| tests | ||
| .eslintrc.cjs | ||
| .gitignore | ||
| CHANGELOG.md | ||
| karma.conf.cjs | ||
| LICENSE | ||
| package.json | ||
| README.md | ||
http-signature-zcap-verify (@digitalbazaar/http-signature-zcap-verify)
A library for verifying Authorization Capability (ZCAP) invocations via HTTP signatures
Install
- Browsers and Node.js 14+ are supported.
- Web Crypto API required. Older browsers and Node.js 14 must use a polyfill.
To install from NPM:
npm install @digitalbazaar/http-signature-zcap-verify
Example "getVerifier" for "verifyCapabilityInvocation"
import {CryptoLD} from 'crypto-ld';
import {Ed25519VerificationKey2020} from
'@digitalbazaar/ed25519-verification-key-2020';
const cryptoLd = new CryptoLD();
cryptoLd.use(Ed25519VerificationKey2020);
async function getVerifier({keyId, documentLoader}) {
const key = await cryptoLd.fromKeyId({id: keyId, documentLoader});
const verificationMethod = await key.export(
{publicKey: true, includeContext: true});
const verifier = key.verifier();
return {verifier, verificationMethod};
}