Javascript/Typescript vc_utils package

Jonath-z · August 27, 2024, 6:06pm

Is is possible to have vc_utils as JS/TS lib? The one for only verifying the age is not really usefull

dfinity/internet-identity/blob/main/src/vc_util/src/lib.rs

use crate::issuer_api::CredentialSpec;
use candid::Principal;
use canister_sig_util::{extract_raw_canister_sig_pk_from_der, CanisterSigPublicKey};
use ic_certification::Hash;
use ic_crypto_standalone_sig_verifier::verify_canister_sig;
use ic_types::crypto::threshold_sig::IcRootOfTrust;
use identity_core::common::{Timestamp, Url};
use identity_core::convert::FromJson;
use identity_credential::credential::{Credential, CredentialBuilder, Jwt, Subject};
use identity_credential::error::Error as JwtVcError;
use identity_credential::presentation::{
    JwtPresentationOptions, Presentation, PresentationBuilder, PresentationJwtClaims,
};
use identity_credential::validator::JwtValidationError;
use identity_jose::jwk::{Jwk, JwkParams, JwkParamsOct, JwkType};
use identity_jose::jws::{
    CompactJwsEncoder, Decoder, JwsAlgorithm, JwsHeader, SignatureVerificationError,
    SignatureVerificationErrorKind,
};
use identity_jose::jwt::JwtClaims;

This file has been truncated. show original

jennifertran · August 28, 2024, 3:22pm

There is a JS/TS wrapper for the vc_util Rust crate: internet-identity/src/vc_util_js at main · dfinity/internet-identity · GitHub.

Jonath-z · August 28, 2024, 8:28pm

I saw this one; it’s only verify for age as mentioned in the readme

jennifertran · August 28, 2024, 9:58pm

Ah, yes, I can check if there is a timeline to add more functionality.

frederikrothenberger · August 29, 2024, 6:27am

Hi @Jonath-z

First of all, let me say that the whole vc_util is planned to be replaced in the future. We have moved the code to this repository: GitHub - dfinity/verifiable-credentials-sdk: Repository containing a set of libraries to manage the verifiable credentials in Internet Computer

Now, the current JS/TS libraries that we have do not allow verification of generic VCs. However, building a wrapper from the rust library is pretty straight forward. For example, the entire vc_util_js is just ~42 lines of code.

Of course, it would be much nicer to have a published NPM package, however there are currently no concrete plans to publish such a library from the DFINITY side. I’ll bring it up internally, whether some priorities should be shifted.

Jonath-z · August 29, 2024, 9:29am

Thanks @frederikrothenberger

I think the vc_utils here verifiable-credentials-sdk/rust-packages/ic-verifiable-credentials/src/lib.rs at main · dfinity/verifiable-credentials-sdk · GitHub is generic already and validates the JWS, the vc_utils_js validate only the age and it’s using one of the functions from vc_utils

Topic		Replies	Views
JS/TS IC Signature Verification Library Developers	6	478	February 27, 2024
JWS validation in the VC flow (prepare_credential function) CDK Discussing	13	100	September 10, 2024
Something wrong with call canister directly from plain html JavaScript	0	117	May 10, 2024
AssemblyScript CDK Alpha Examples Developers	7	1060	January 20, 2021
VC issuer written in Typescript with Azle Developers	4	87	September 20, 2024

Javascript/Typescript vc_utils package

Related topics