question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Generalized Verification API in Veramo Core

See original GitHub issue

As an Integrator of Veramo I would like to be able to use a single generalized Verification API that automatically verifies a various set of input data according to a given policy input.

Acceptance Criteria:

  • There should be a single Verification API within Veramo core (Proposal: agent.verify({ payload: {...}, policy: {...} }))
  • The fist step of the verification API is the identification of the payload format and determines what dynamic module is able to verify the given Payload.
  • The generalized verification API allows for the registration of Modules to support new payloads.
  • In the initial Implementation VC-JWT and VC-JSON-LD Credentials are supported with respective VC-JWT and VC-JSON-LD Verification Modules.
  • Furthermore it should be able to Verify Verifiable Presentation Representations of JWT / JSON-LD Credentials
  • The Verification API and the Verification Modules take an optional policy file that is able to influence the verification outcome.
  • Each VC Verification Module is implemented independently, but generally it needs to verify the following. a) Schema / Data format. It needs to verify that the given payload matches the referenced Schema or Context b) Signature Verification. Verify that a Issuer Signature matches the given Credential and Issuer. c) Credential Status: Verify that the Credential Status of the VC is still valid:
  • Policy files can model the following: a) Override certain assumption: Policy may allow to accept revoked credentials or self-signed Signatures. b) Tighten Validation conditions: Further restrict conditions of credential verification (e.g. similar to passing a PE), e.g. where certain values are expected. (Credential issued by specific issuer A) c) Trust Frameworks d) … TBD
  • Fixed Error Types for Verification Errors a) b) c) d)
  • Policy Design, Module Integration and Payload Identification will be design as part of this ticket.

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:5 (5 by maintainers)

github_iconTop GitHub Comments

4reactions
italobbcommented, Feb 12, 2021

I would like to reinforce the importance of this issue hoping it can be prioritized. The usage of the DIF “well-known DID configuration” spec with the purpose of implementing discoverability and interoperability requires such support from Veramo.

0reactions
awoiecommented, Jun 21, 2021

@rado0x54 pls add tasks for this epic.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Performant and modular APIs for Verifiable Data and SSI
ICredentialStatusVerifier. (BETA) This interface defines a plugin that can check the status of a Verifiable Credential. This is used for the discovery of ......
Read more >
Self-sovereign Identity: Development of an Implementation ...
Generalized Verification API in Veramo Core #375,. August 2021. URL: https://github.com/uport-project/veramo. [Ril21]. Riley Hughes.
Read more >
DIF FAQ - Decentralized Identity Foundation
This is the Decentralized Identity Foundation's general-purpose ... can be properly verified by reference to the identities included inside the document.
Read more >
Grammaticalization of the generalized Kampan applicative ...
other Arawak languages, Kampan languages do not have any case marking on core constituents (A, S, O) and possess only one peripheral case...
Read more >
From Monolithic Systems to Microservices: A Comparative ...
For their validation, we applied the non-parametric regression ... For the monolithic design, they used a web API to transmit the request to...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found