bedrock-edv-storage - npm Package Versions

11.2.0 - 2022-02-05

Added

• Support limit in queries.

11.1.0 - 2022-01-31

Added

• Expose query endpoint at /documents/query to enable zcaps with an invocation target of /documents to query.

11.0.2 - 2022-01-25

Fixed

• Fix bad thrown exception when the same chunk is updated concurrently.

11.0.1 - 2022-01-20

Fixed

• Do not expose details from errors that are not marked public.

11.0.0 - 2022-01-11

Added

• Support IP-based restrictions on accessing EDVs. If an ipAllowList is included in an EDV config then only requests from IPs that match the list will be granted access.

Changed

• BREAKING: Use ezcap-express@5. These changes include major breaking simplifications to ZCAP (zcap@7).

10.2.0 - 2021-11-23

Added

• Do not allow zcap revocations to be stored if the meter associated with an EDV has been disabled. Storage of zcap revocations is permitted if there is no available storage to prevent potential security issues, however, the meter MUST not be disabled to make use of this feature. Very robust rate limiting MUST be applied to the revocation submission endpoint in a deployment to avoid significant storage overflow.

10.1.1 - 2021-11-22

Fixed

• Fixed error message when a configuration update fails.
• Fixed minor documentation typos.

10.1.0 - 2021-11-12

Added

• Added optional explain param to get more details about database performance.
• Added database tests in order to check database performance.

10.0.0 - 2021-09-02

Added

• BREAKING - Add storage and operation metering support. A meter ID must be provided to create a new keystore. This meter ID will be used to report keystore storage and operation usage to the associated meter.
• Added namespaced edvs, docs, and chunks API exports for accessing storage (e.g., edvs.get will return an EDV config). The older storage functions that were namespaced within the function name (e.g., getConfig) are deprecated.
• Requires bedrock-app-identity to configure the identity for edv applications.

Changed

• BREAKING: Simplify zcap revocation model. Now any party that has been delegated a zcap can send it to a revocation address: <edvId>/revocations/<zcap ID> without needing to have an additional zcap delegated to that party. The party must invoke the root zcap for that endpoint, which will be dynamically generated and use the delegator of the zcap as the controller, i.e., the delegator must invoke this root zcap to revoke the zcap they delegated.
• BREAKING: This version of the module presumes that there will be only one public address for accessing EDVs, i.e., the base URL (including the origin) will be the same for every EDV stored. This assumption allows for some storage optimizations.
• BREAKING: The database storage model has changed and is incompatible with previous versions. There is no auto-migration built into this version.
• Use ezcap-express to provide zcap revocation authorization implementation. Remove dependencies that are no longer needed because of this upgrade.

Removed

• BREAKING: Removed deprecated fields option from storage.find APIs. Use options.projection instead.
• BREAKING: This module's JSON schema validators are no longer registered; they should not be modified.

9.0.4 - 2021-08-19

Fixed

• Use bedrock-did-io@4.