Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@sphereon/pex

Package Overview
Dependencies
Maintainers
4
Versions
118
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@sphereon/pex - npm Package Versions

1
1011

1.0.0

Diff

Changelog

Source

v1.0.0 - 2022-01-13

This is the first stable PEX library that has complete support for V1 and V2 of the Presentation Exchange spec.

  • Added:
    • Check for hashlinks in schemas for a V1 specification. If we encounter them we generate a warning we did not verify the hashlink, as unfortunately there are no current typescript libraries that support hashlink decoding.
  • Changed:
    • limitDisclosure and holderDids arguments made optional everywhere. Do note that definitions that use some holder binding and/or selective disclosure require these arguments to be present, so we advise to always populate them
  • Fixed
    • React-native has no support for look-behind in regexes. We used this in escaping JSONLD terms in JSON-paths. Replaced by some typescript logic.
nklomp78
published 0.7.0 •

Changelog

Source

v0.7.0 - 2022-01-11

Escape JsonLD terms in json-paths. This allows path constructs like $..@context to be used in definitions. Improved JWT VC handling.

  • Added:
    • JSonLD terms like @context need to be escaped for the json-path library. As long as the @ is followed by one or more word-characters we internally escape it, so that the json-path library functions as one would expect.
  • Changed:
    • We now have better JWT claim handling. We are using VC values from the JWT if present. Otherwise we use JWT claim values. If both are present we check them to be equal.
    • Documentation updates
  • Fixed:
    • Format minimum was not properly handled the schema check
    • We translate _const and _enum from the OpenAPI models internally to their actual protected typescript keys ( const and enum)
    • Different submission requirements and definition combinations where not counted properly
nklomp78
published 0.6.3-unstable.1 •

nklomp78
published 0.6.3-unstable.0 •

nklomp78
published 0.6.2 •

Changelog

Source

v0.6.2 - 2021-12-31

No exports of internal structures anymore. Split internal and external interfaces and types

  • Changed:
    • Moved internal types to separate file
    • Only export external interfaces and types
nklomp78
published 0.6.2-unstable.0 •

nklomp78
published 0.6.1 •

Changelog

Source

v0.6.1 - 2021-12-31

Small improvements in the Credential interfaces, removal of exposure of internal structures in the PEX class. Small bugfixes

  • Changed:

    • Next to @context evaluation for V1 schema values, we now look at the credentialSchema
    • Seperated Credentials and VerifiableCredential public interfaces into JSON-LD and JWT versions
  • Fixed:

    • We were exposing some internal structures in the PEX class
    • Group validation assumed an array being present, which could be a string
nklomp78
published 0.6.0 •

Changelog

Source

v0.6.0 - 2021-12-29


Breaking change: class and package renamed as of v0.6.0!

As part of introducing Presentation Exchange v1 and v2 feature based detection support to our Presentation Exchange library and not reaching version 1.X yet, we decided to change the name of both the package and the main entry class:

  • The package was changed from @sphereon/pe-js to @sphereon/pex
  • The main class was changed from PEJS to PEX. The latter class has internal feature detection support on the provided definition, delegating the actual implementation to the new PEXv1 or PEXv2 class internally. If you don't want the automatic feature detection you can also choose to use the PEXv1 and PEXv2 classes directly.

Add Presentation Exchange v2 support, separating JWT Verifiable Credentials and JSON-LD VerifiableCredentials

Breaking change: class and package renamed in v0.6.0! As part of introducing Presentation Exchange v1 and v2 feature based detection support to our Presentation Exchange library and not reaching version 1.X yet, we decided to change the name of both the package and the main entry class:

  • The package was changed from @sphereon/pe-js to @sphereon/pex

  • The main class was changed from PEJS to PEX. The latter class has internal feature detection support on the provided definition, delegating the actual implementation to the new PEXv1 or PEXv2 class internally. If you don't want the automatic feature detection you can also choose to use the PEXv1 and PEXv2 classes directly.

  • Added:

    • presentation exchange v2 support
      • supporting method for all the previous methods in v2
      • presentation definition version discovery
      • presentation definition validator for v2
      • frame validation
    • Updated:
      • Json-LD and JWT verifiable credentials are separated internally
      • All the messaged now come from an enum instead of literal strings
      • Dependency versions
1
1011
SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc