jsonld-signatures - npm Package Compare versions

Comparing version 3.1.1 to 3.1.2

CHANGELOG.md

 # jsonld-signatures ChangeLog
 
+## 3.1.2 - 2019-01-08
+
+### Fixed
+- Fix ProofSet suite matching.
+- Ensure proof verification method matches key if given.
+
 ## 3.1.1 - 2019-01-08
@@ -4,0 +10,0 @@

dist/node6/lib/ProofSet.js

@@ -414,24 +414,32 @@ /*!
 
-    return (yield Promise.all(matches.map(proof => {
-      for (const s of suites) {
-        if (s.matchProof({
-          proof,
-          document,
-          documentLoader,
-          expansionMap
-        })) {
-          return s.verifyProof({
+    return (yield Promise.all(matches.map(
+    /*#__PURE__*/
+    function () {
+      var _ref = _asyncToGenerator(function* (proof) {
+        for (const s of suites) {
+          if (yield s.matchProof({
             proof,
             document,
-            purpose,
             documentLoader,
-            expansionMap,
-            compactProof
-          }).catch(error => ({
-            verified: false,
-            error
-          }));
+            expansionMap
+          })) {
+            return s.verifyProof({
+              proof,
+              document,
+              purpose,
+              documentLoader,
+              expansionMap,
+              compactProof
+            }).catch(error => ({
+              verified: false,
+              error
+            }));
+          }
         }
-      }
-    }))).map((r, i) => r ? _objectSpread({
+      });
+
+      return function (_x3) {
+        return _ref.apply(this, arguments);
+      };
+    }()))).map((r, i) => r ? _objectSpread({
       proof: matches[i]
@@ -438,0 +446,0 @@ }, r) : null).filter(r => r);

dist/node6/lib/suites/JwsLinkedDataSignature.js

@@ -227,2 +227,45 @@ /*!
 
+  matchProof({
+    proof,
+    document,
+    purpose,
+    documentLoader,
+    expansionMap
+  }) {
+    var _this5 = this,
+        _superprop_callMatchProof = (..._args2) => super.matchProof(..._args2);
+
+    return _asyncToGenerator(function* () {
+      if (!(yield _superprop_callMatchProof({
+        proof,
+        document,
+        purpose,
+        documentLoader,
+        expansionMap
+      }))) {
+        return false;
+      }
+
+      if (!_this5.key) {
+        // no key specified, so assume this suite matches and it can be retrieved
+        return true;
+      }
+
+      let {
+        verificationMethod
+      } = proof;
+
+      if (!verificationMethod) {
+        verificationMethod = proof.creator;
+      } // only match if the key specified matches the one in the proof
+
+
+      if (typeof verificationMethod === 'object') {
+        return verificationMethod.id === _this5.key.id;
+      }
+
+      return verificationMethod === _this5.key.id;
+    })();
+  }
+
 };

lib/ProofSet.js

@@ -318,5 +318,5 @@ /*!
   // verify each matching proof
-  return (await Promise.all(matches.map(proof => {
+  return (await Promise.all(matches.map(async proof => {
     for(const s of suites) {
-      if(s.matchProof({proof, document, documentLoader, expansionMap})) {
+      if(await s.matchProof({proof, document, documentLoader, expansionMap})) {
         return s.verifyProof({
@@ -323,0 +323,0 @@ proof, document, purpose, documentLoader, expansionMap,

lib/suites/JwsLinkedDataSignature.js

@@ -157,2 +157,23 @@ /*!
   }
+
+  async matchProof({proof, document, purpose, documentLoader, expansionMap}) {
+    if(!await super.matchProof(
+      {proof, document, purpose, documentLoader, expansionMap})) {
+      return false;
+    }
+    if(!this.key) {
+      // no key specified, so assume this suite matches and it can be retrieved
+      return true;
+    }
+
+    let {verificationMethod} = proof;
+    if(!verificationMethod) {
+      verificationMethod = proof.creator;
+    }
+    // only match if the key specified matches the one in the proof
+    if(typeof verificationMethod === 'object') {
+      return verificationMethod.id === this.key.id;
+    }
+    return verificationMethod === this.key.id;
+  }
 };

package.json

 {
   "name": "jsonld-signatures",
-  "version": "3.1.1",
+  "version": "3.1.2",
   "description": "An implementation of the Linked Data Signatures specifications for JSON-LD in JavaScript.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/digitalbazaar/jsonld-signatures",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

675244

increased by1.29%

Lines of code

7272

increased by1.06%

No dependency changes