Ensure that when invoking a capability with a chain depth of 2, i.e., it is delegated directly from the root capability, that expires is properly checked against the current date or other date param.

9.0.0

published 9.0.0 • 2 years ago

Changelog

BREAKING: Use jsonld-signatures@11 to get better safe mode protections when canonizing.

8.0.0

published 8.0.0 • 3 years ago

Changelog

published 7.2.2 • 3 years ago

Changelog

Ensure a zcap is not delegated after its parent (during delegation proof generation).

published 7.2.1 • 3 years ago

Changelog

Ensure maxClockSkew is considered when checking maxDelegationTtl against current time.
Use karma@6.3.16 to address reported vulnerability with dev dependency karma.

published 7.2.0 • 3 years ago

Changelog

Include capability and verificationMethod as details when a zcap invocation/delegation fails verification because the capability controller does not match the verification method (or its controller). If this information causes undesirable correlation, i.e., the controller of a root zcap is private in some way, do not include it when transmitting errors to a client. This information can be omitted by deleting details from the error or constructing a new error that omits details.