A span of time.
An implementor of IJwsVerifier that can handle the
+EcDSA algorithm.
An implementor of IJwsVerifier that can handle the
EdDSA algorithm.
Controls validation behaviour when checking whether or not a credential has been revoked by its
+credentialStatus.
Validate the status if supported, reject any unsupported
+credentialStatus types.
Only RevocationBitmap2022 is currently supported.
This is the default.
+Validate the status if supported, skip any unsupported
+credentialStatus types.
Skip all status checks.
+Declares how credential subjects must relate to the presentation holder.
See also the Subject-Holder Relationship section of the specification.
@@ -271,9 +290,14 @@ This variant is the default.The holder is not required to have any kind of relationship to any credential subject.
Purpose of a StatusList2021.
+Declares when validation should return if an error occurs.
@@ -284,34 +308,14 @@ This variant is the default.Return after the first error occurs.
Controls validation behaviour when checking whether or not a credential has been revoked by its
-credentialStatus.
Validate the status if supported, reject any unsupported
-credentialStatus types.
Only RevocationBitmap2022 is currently supported.
This is the default.
-Validate the status if supported, skip any unsupported
-credentialStatus types.
Skip all status checks.
-Purpose of a StatusList2021.
-Initializes the console error panic hook for better error messages
stringEncode the given bytes in url-safe base64.
+Uint8ArrayDecode the given url-safe base64-encoded slice into its raw bytes.
+VerificationMethod](#VerificationMethod) \| undefined
* [.attachMethodRelationship(didUrl, relationship)](#CoreDocument+attachMethodRelationship) ⇒ boolean
* [.detachMethodRelationship(didUrl, relationship)](#CoreDocument+detachMethodRelationship) ⇒ boolean
- * [.verifyJws(jws, options, signatureVerifier, [detachedPayload])](#CoreDocument+verifyJws) ⇒ [DecodedJws](#DecodedJws)
+ * [.verifyJws(jws, options, [signatureVerifier], [detachedPayload])](#CoreDocument+verifyJws) ⇒ [DecodedJws](#DecodedJws)
* [.revokeCredentials(serviceQuery, indices)](#CoreDocument+revokeCredentials)
* [.unrevokeCredentials(serviceQuery, indices)](#CoreDocument+unrevokeCredentials)
* [.clone()](#CoreDocument+clone) ⇒ [CoreDocument](#CoreDocument)
@@ -832,7 +842,7 @@ Detaches the given relationship from the given method, if the method exists.
-### coreDocument.verifyJws(jws, options, signatureVerifier, [detachedPayload]) ⇒ [DecodedJws](#DecodedJws)
+### coreDocument.verifyJws(jws, options, [signatureVerifier], [detachedPayload]) ⇒ [DecodedJws](#DecodedJws)
Decodes and verifies the provided JWS according to the passed `options` and `signatureVerifier`.
If no `signatureVerifier` argument is provided a default verifier will be used that is (only) capable of
verifying EdDSA signatures.
@@ -849,7 +859,7 @@ or set explicitly in the `options`.
| --- | --- |
| jws | [Jws](#Jws) |
| options | [JwsVerificationOptions](#JwsVerificationOptions) |
-| signatureVerifier | IJwsVerifier |
+| [signatureVerifier] | IJwsVerifier \| undefined |
| [detachedPayload] | string \| undefined |
@@ -2034,6 +2044,43 @@ Deserializes an instance from a JSON object.
| --- | --- |
| json | any |
+
+
+## EcDSAJwsVerifier
+An implementor of `IJwsVerifier` that can handle the
+`EcDSA` algorithm.
+
+**Kind**: global class
+
+* [EcDSAJwsVerifier](#EcDSAJwsVerifier)
+ * [new EcDSAJwsVerifier()](#new_EcDSAJwsVerifier_new)
+ * [.verify(alg, signingInput, decodedSignature, publicKey)](#EcDSAJwsVerifier+verify)
+
+
+
+### new EcDSAJwsVerifier()
+Constructs an EcDSAJwsVerifier.
+
+
+
+### ecDSAJwsVerifier.verify(alg, signingInput, decodedSignature, publicKey)
+Verify a JWS signature secured with the `EcDSA` algorithm.
+Only the `ES256` and `ES256K` curves are supported for now.
+
+# Warning
+
+This function does not check the `alg` property in the protected header. Callers are expected to assert this
+prior to calling the function.
+
+**Kind**: instance method of [EcDSAJwsVerifier](#EcDSAJwsVerifier)
+
+| Param | Type |
+| --- | --- |
+| alg | JwsAlgorithm |
+| signingInput | Uint8Array |
+| decodedSignature | Uint8Array |
+| publicKey | [Jwk](#Jwk) |
+
## EdDSAJwsVerifier
@@ -2315,7 +2362,7 @@ if the object is being concurrently modified.
* [.resolveMethod(query, [scope])](#IotaDocument+resolveMethod) ⇒ [VerificationMethod](#VerificationMethod) \| undefined
* [.attachMethodRelationship(didUrl, relationship)](#IotaDocument+attachMethodRelationship) ⇒ boolean
* [.detachMethodRelationship(didUrl, relationship)](#IotaDocument+detachMethodRelationship) ⇒ boolean
- * [.verifyJws(jws, options, signatureVerifier, [detachedPayload])](#IotaDocument+verifyJws) ⇒ [DecodedJws](#DecodedJws)
+ * [.verifyJws(jws, options, [signatureVerifier], [detachedPayload])](#IotaDocument+verifyJws) ⇒ [DecodedJws](#DecodedJws)
* [.pack()](#IotaDocument+pack) ⇒ Uint8Array
* [.packWithEncoding(encoding)](#IotaDocument+packWithEncoding) ⇒ Uint8Array
* [.metadata()](#IotaDocument+metadata) ⇒ [IotaDocumentMetadata](#IotaDocumentMetadata)
@@ -2556,7 +2603,7 @@ Detaches the given relationship from the given method, if the method exists.
-### iotaDocument.verifyJws(jws, options, signatureVerifier, [detachedPayload]) ⇒ [DecodedJws](#DecodedJws)
+### iotaDocument.verifyJws(jws, options, [signatureVerifier], [detachedPayload]) ⇒ [DecodedJws](#DecodedJws)
Decodes and verifies the provided JWS according to the passed `options` and `signatureVerifier`.
If no `signatureVerifier` argument is provided a default verifier will be used that is (only) capable of
verifying EdDSA signatures.
@@ -2572,7 +2619,7 @@ take place.
| --- | --- |
| jws | [Jws](#Jws) |
| options | [JwsVerificationOptions](#JwsVerificationOptions) |
-| signatureVerifier | IJwsVerifier |
+| [signatureVerifier] | IJwsVerifier \| undefined |
| [detachedPayload] | string \| undefined |
@@ -4653,7 +4700,7 @@ A type for decoding and validating [Credential](#Credential).
**Kind**: global class
* [JwtCredentialValidator](#JwtCredentialValidator)
- * [new JwtCredentialValidator(signatureVerifier)](#new_JwtCredentialValidator_new)
+ * [new JwtCredentialValidator([signatureVerifier])](#new_JwtCredentialValidator_new)
* _instance_
* [.validate(credential_jwt, issuer, options, fail_fast)](#JwtCredentialValidator+validate) ⇒ [DecodedJwtCredential](#DecodedJwtCredential)
* [.verifySignature(credential, trustedIssuers, options)](#JwtCredentialValidator+verifySignature) ⇒ [DecodedJwtCredential](#DecodedJwtCredential)
@@ -4668,7 +4715,7 @@ A type for decoding and validating [Credential](#Credential).
-### new JwtCredentialValidator(signatureVerifier)
+### new JwtCredentialValidator([signatureVerifier])
Creates a new [JwtCredentialValidator](#JwtCredentialValidator). If a `signatureVerifier` is provided it will be used when
verifying decoded JWS signatures, otherwise the default which is only capable of handling the `EdDSA`
algorithm will be used.
@@ -4676,7 +4723,7 @@ algorithm will be used.
| Param | Type |
| --- | --- |
-| signatureVerifier | IJwsVerifier |
+| [signatureVerifier] | IJwsVerifier \| undefined |
@@ -4847,21 +4894,21 @@ A validator for a Domain Linkage Configuration and Credentials.
**Kind**: global class
* [JwtDomainLinkageValidator](#JwtDomainLinkageValidator)
- * [new JwtDomainLinkageValidator(signatureVerifier)](#new_JwtDomainLinkageValidator_new)
+ * [new JwtDomainLinkageValidator([signatureVerifier])](#new_JwtDomainLinkageValidator_new)
* [.validateLinkage(issuer, configuration, domain, options)](#JwtDomainLinkageValidator+validateLinkage)
* [.validateCredential(issuer, credentialJwt, domain, options)](#JwtDomainLinkageValidator+validateCredential)
-### new JwtDomainLinkageValidator(signatureVerifier)
+### new JwtDomainLinkageValidator([signatureVerifier])
Creates a new [JwtDomainLinkageValidator](#JwtDomainLinkageValidator). If a `signatureVerifier` is provided it will be used when
-verifying decoded JWS signatures, otherwise the default which is only capable of handling the `EdDSA`
-algorithm will be used.
+verifying decoded JWS signatures, otherwise the default which is capable of handling the `EdDSA`, `ES256`, `ES256K`
+algorithms will be used.
| Param | Type |
| --- | --- |
-| signatureVerifier | IJwsVerifier |
+| [signatureVerifier] | IJwsVerifier \| undefined |
@@ -5011,7 +5058,7 @@ Deserializes an instance from a JSON object.
**Kind**: global class
* [JwtPresentationValidator](#JwtPresentationValidator)
- * [new JwtPresentationValidator(signatureVerifier)](#new_JwtPresentationValidator_new)
+ * [new JwtPresentationValidator([signatureVerifier])](#new_JwtPresentationValidator_new)
* _instance_
* [.validate(presentationJwt, holder, validation_options)](#JwtPresentationValidator+validate) ⇒ [DecodedJwtPresentation](#DecodedJwtPresentation)
* _static_
@@ -5020,7 +5067,7 @@ Deserializes an instance from a JSON object.
-### new JwtPresentationValidator(signatureVerifier)
+### new JwtPresentationValidator([signatureVerifier])
Creates a new [JwtPresentationValidator](#JwtPresentationValidator). If a `signatureVerifier` is provided it will be used when
verifying decoded JWS signatures, otherwise the default which is only capable of handling the `EdDSA`
algorithm will be used.
@@ -5028,7 +5075,7 @@ algorithm will be used.
| Param | Type |
| --- | --- |
-| signatureVerifier | IJwsVerifier |
+| [signatureVerifier] | IJwsVerifier \| undefined |
@@ -6536,14 +6583,14 @@ A type for decoding and validating [Credential](#Credential).
**Kind**: global class
* [SdJwtCredentialValidator](#SdJwtCredentialValidator)
- * [new SdJwtCredentialValidator(signatureVerifier)](#new_SdJwtCredentialValidator_new)
+ * [new SdJwtCredentialValidator([signatureVerifier])](#new_SdJwtCredentialValidator_new)
* [.validateCredential(sd_jwt, issuer, options, fail_fast)](#SdJwtCredentialValidator+validateCredential) ⇒ [DecodedJwtCredential](#DecodedJwtCredential)
* [.verifySignature(credential, trustedIssuers, options)](#SdJwtCredentialValidator+verifySignature) ⇒ [DecodedJwtCredential](#DecodedJwtCredential)
* [.validateKeyBindingJwt(sdJwt, holder, options)](#SdJwtCredentialValidator+validateKeyBindingJwt) ⇒ [KeyBindingJwtClaims](#KeyBindingJwtClaims)
-### new SdJwtCredentialValidator(signatureVerifier)
+### new SdJwtCredentialValidator([signatureVerifier])
Creates a new `SdJwtCredentialValidator`. If a `signatureVerifier` is provided it will be used when
verifying decoded JWS signatures, otherwise the default which is only capable of handling the `EdDSA`
algorithm will be used.
@@ -6551,7 +6598,7 @@ algorithm will be used.
| Param | Type |
| --- | --- |
-| signatureVerifier | IJwsVerifier |
+| [signatureVerifier] | IJwsVerifier \| undefined |
@@ -7657,9 +7704,36 @@ Deserializes an instance from a JSON object.
| --- | --- |
| json | any |
-
+
+
+## StatusCheck
+Controls validation behaviour when checking whether or not a credential has been revoked by its
+[`credentialStatus`](https://www.w3.org/TR/vc-data-model/#status).
+
+**Kind**: global variable
+
+
+## Strict
+Validate the status if supported, reject any unsupported
+[`credentialStatus`](https://www.w3.org/TR/vc-data-model/#status) types.
+
+Only `RevocationBitmap2022` is currently supported.
+
+This is the default.
+
+**Kind**: global variable
+
+
+## SkipUnsupported
+Validate the status if supported, skip any unsupported
+[`credentialStatus`](https://www.w3.org/TR/vc-data-model/#status) types.
+
+**Kind**: global variable
+
+
+## SkipAll
+Skip all status checks.
-## PresentationProofAlgorithm
**Kind**: global variable
@@ -7668,33 +7742,42 @@ Declares how credential subjects must relate to the presentation holder.
See also the [Subject-Holder Relationship](https://www.w3.org/TR/vc-data-model/#subject-holder-relationships) section of the specification.
+## CredentialStatus
**Kind**: global variable
-
+
-## AlwaysSubject
-The holder must always match the subject on all credentials, regardless of their [`nonTransferable`](https://www.w3.org/TR/vc-data-model/#nontransferable-property) property.
-This variant is the default.
+## encodeB64(data) ⇒ string
+Encode the given bytes in url-safe base64.
-**Kind**: global variable
-
+**Kind**: global function
+
+| Param | Type |
+| --- | --- |
+| data | Uint8Array |
+
+
+
+## decodeB64(data) ⇒ Uint8Array
+Decode the given url-safe base64-encoded slice into its raw bytes.
-## SubjectOnNonTransferable
-The holder must match the subject only for credentials where the [`nonTransferable`](https://www.w3.org/TR/vc-data-model/#nontransferable-property) property is `true`.
+**Kind**: global variable
+
+## PresentationProofAlgorithm
**Kind**: global variable
-
+
-## Any
-The holder is not required to have any kind of relationship to any credential subject.
+## StatusPurpose
+Purpose of a [StatusList2021](#StatusList2021).
**Kind**: global variable
## ProofAlgorithm
**Kind**: global variable
-
+
-## StateMetadataEncoding
+## CredentialStatus
**Kind**: global variable
@@ -7714,36 +7797,9 @@ Return all errors that occur during validation.
Return after the first error occurs.
**Kind**: global variable
-
-
-## StatusCheck
-Controls validation behaviour when checking whether or not a credential has been revoked by its
-[`credentialStatus`](https://www.w3.org/TR/vc-data-model/#status).
-
-**Kind**: global variable
-
-
-## Strict
-Validate the status if supported, reject any unsupported
-[`credentialStatus`](https://www.w3.org/TR/vc-data-model/#status) types.
-
-Only `RevocationBitmap2022` is currently supported.
-
-This is the default.
-
-**Kind**: global variable
-
-
-## SkipUnsupported
-Validate the status if supported, skip any unsupported
-[`credentialStatus`](https://www.w3.org/TR/vc-data-model/#status) types.
-
-**Kind**: global variable
-
-
-## SkipAll
-Skip all status checks.
+
+## StateMetadataEncoding
**Kind**: global variable
@@ -7752,43 +7808,11 @@ Skip all status checks.
## PayloadType
-**Kind**: global variable
-
-
-## StatusPurpose
-Purpose of a [StatusList2021](#StatusList2021).
-
**Kind**: global variable
## MethodRelationship
**Kind**: global variable
-
-
-## CredentialStatus
-**Kind**: global variable
-
-
-## encodeB64(data) ⇒ string
-Encode the given bytes in url-safe base64.
-
-**Kind**: global function
-
-| Param | Type |
-| --- | --- |
-| data | Uint8Array |
-
-
-
-## decodeB64(data) ⇒ Uint8Array
-Decode the given url-safe base64-encoded slice into its raw bytes.
-
-**Kind**: global function
-
-| Param | Type |
-| --- | --- |
-| data | Uint8Array |
-
## verifyEd25519(alg, signingInput, decodedSignature, publicKey)
@@ -7817,3 +7841,25 @@ prior to calling the function.
Initializes the console error panic hook for better error messages
**Kind**: global function
+
+
+## encodeB64(data) ⇒ string
+Encode the given bytes in url-safe base64.
+
+**Kind**: global function
+
+| Param | Type |
+| --- | --- |
+| data | Uint8Array |
+
+
+
+## decodeB64(data) ⇒ Uint8Array
+Decode the given url-safe base64-encoded slice into its raw bytes.
+
+**Kind**: global function
+
+| Param | Type |
+| --- | --- |
+| data | Uint8Array |
+
diff --git a/bindings/wasm/src/credential/domain_linkage_validator.rs b/bindings/wasm/src/credential/domain_linkage_validator.rs
index a38639d853..37674e21b7 100644
--- a/bindings/wasm/src/credential/domain_linkage_validator.rs
+++ b/bindings/wasm/src/credential/domain_linkage_validator.rs
@@ -24,11 +24,11 @@ pub struct WasmJwtDomainLinkageValidator {
#[wasm_bindgen(js_class = JwtDomainLinkageValidator)]
impl WasmJwtDomainLinkageValidator {
/// Creates a new {@link JwtDomainLinkageValidator}. If a `signatureVerifier` is provided it will be used when
- /// verifying decoded JWS signatures, otherwise the default which is only capable of handling the `EdDSA`
- /// algorithm will be used.
+ /// verifying decoded JWS signatures, otherwise a default verifier capable of handling the `EdDSA`, `ES256`, `ES256K`
+ /// algorithms will be used.
#[wasm_bindgen(constructor)]
#[allow(non_snake_case)]
- pub fn new(signatureVerifier: IJwsVerifier) -> WasmJwtDomainLinkageValidator {
+ pub fn new(signatureVerifier: Option