feat: W3C revocation support

.github/workflows/continuous-delivery.yml

@@ -0,0 +1,45 @@
+name: Continous Delivery
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+env:
+  REGISTRY: ghcr.io
+  SERVICE: credo-controller
+
+jobs:
+  build-and-push:
+    name: Push Docker image to GitHub
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Extract Git Tag
+        id: get_tag
+        run: echo "TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and Push Docker Image ${{ env.SERVICE }}
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          push: true
+          tags: |
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.SERVICE }}:${{ env.TAG }}
+            ${{ env.REGISTRY }}/${{ github.repository_owner }}/${{ env.SERVICE }}:latest
+

Dockerfile

@@ -1,48 +1,3 @@
-# FROM ubuntu:20.04
-
-# ENV DEBIAN_FRONTEND noninteractive
-
-# RUN apt-get update -y && apt-get install -y \
-#     software-properties-common \
-#     apt-transport-https \
-#     curl \
-#     # Only needed to build indy-sdk
-#     build-essential
-
-# RUN curl -fsSL https://deb.nodesource.com/setup_18.x | bash -
-
-# # yarn
-# RUN curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | apt-key add - && \
-#     echo "deb https://dl.yarnpkg.com/debian/ stable main" | tee /etc/apt/sources.list.d/yarn.list
-
-# # install depdencies
-# RUN apt-get update -y && apt-get install -y --allow-unauthenticated \
-#     nodejs
-
-# # install depdencies
-# RUN apt-get update -y && apt-get install -y --allow-unauthenticated \
-#     nodejs
-
-# # Install yarn seperately due to `no-install-recommends` to skip nodejs install
-# RUN apt-get install -y --no-install-recommends yarn
-
-# RUN yarn global add patch-package
-# # AFJ specifc setup
-# WORKDIR /www
-
-# COPY bin ./bin
-# COPY package.json ./package.json
-# COPY patches ./patches
-
-# RUN yarn install --production
-
-# COPY build ./build
-# # COPY libindy_vdr.so /usr/lib/
-# # COPY libindy_vdr.so /usr/local/lib/
-
-# ENTRYPOINT [ "./bin/afj-rest.js", "start" ]
-
-
 # Stage 1: Builder stage
 FROM node:18.19.0 AS builder
 
@@ -55,6 +10,7 @@ COPY package.json yarn.lock ./
 COPY . .
 
 # Install dependencies
+RUN rm -rf node_modules
 RUN yarn install --frozen-lockfile
 
 RUN yarn global add patch-package
@@ -75,4 +31,4 @@ COPY --from=builder /app/node_modules ./node_modules
 COPY --from=builder /app/patches ./patches
 
 # Set entry point
-ENTRYPOINT ["node", "./bin/afj-rest.js", "start"]
+ENTRYPOINT ["node", "./bin/afj-rest.js", "start"]

compass.yml

@@ -19,4 +19,4 @@ labels:
   - language:typescript
   - self-sovereign-identity
   - source:github
-customFields: null
+customFields: null

config.json

@@ -0,0 +1,4 @@
+{
+  "port": 4001,
+  "schemaFileServerURL": "https://schema.credebl.id/schemas/"
+}

jest.config.ts

@@ -9,4 +9,4 @@ const config: Config.InitialOptions = {
   testTimeout: 120000,
 }
 
-export default config
+export default config

package.json

@@ -55,6 +55,7 @@
     "@types/node-fetch": "^2.6.4",
     "@types/ref-struct-di": "^1.1.9",
     "@types/ws": "^8.5.4",
+    "@types/uuid": "^8.3.3",
     "axios": "^1.4.0",
     "body-parser": "^1.20.0",
     "cors": "^2.8.5",
@@ -64,14 +65,17 @@
     "joi": "^17.12.3",
     "jsonwebtoken": "^9.0.2",
     "node-fetch": "^2.6.7",
+    "pako": "^2.1.0",
     "patch-package": "^8.0.0",
     "postinstall-postinstall": "^2.1.0",
     "reflect-metadata": "^0.1.13",
     "swagger-ui-express": "^4.4.0",
     "tslog": "^3.3.3",
     "tsoa": "^6.0.1",
     "tsyringe": "^4.8.0",
-    "yargs": "^17.3.1"
+    "uuidv4": "^6.2.13",
+    "yargs": "^17.3.1",
+    "zlib": "^1.0.5"
   },
   "devDependencies": {
     "@types/body-parser": "^1.19.2",
@@ -82,11 +86,11 @@
     "@types/jsonwebtoken": "^9.0.5",
     "@types/multer": "^1.4.7",
     "@types/node": "^18.18.8",
+    "@types/pako": "^2.0.3",
     "@types/ref-array-di": "^1.2.8",
     "@types/ref-struct-di": "^1.1.9",
     "@types/supertest": "^2.0.12",
     "@types/swagger-ui-express": "^4.1.3",
-    "@types/uuid": "^8.3.4",
     "@typescript-eslint/eslint-plugin": "^6.19.1",
     "@typescript-eslint/parser": "^6.19.1",
     "eslint": "^7.32.0",

patches/@credo-ts+core+0.5.3+007+sign-bitstring-credentials.patch

@@ -0,0 +1,21 @@
+diff --git a/node_modules/@credo-ts/core/build/modules/vc/W3cCredentialServiceOptions.d.ts b/node_modules/@credo-ts/core/build/modules/vc/W3cCredentialServiceOptions.d.ts
+index 43f5d7b..6e5cbbc 100644
+--- a/node_modules/@credo-ts/core/build/modules/vc/W3cCredentialServiceOptions.d.ts
++++ b/node_modules/@credo-ts/core/build/modules/vc/W3cCredentialServiceOptions.d.ts
+@@ -7,6 +7,7 @@ import type { W3cCredential } from './models/credential/W3cCredential';
+ import type { W3cPresentation } from './models/presentation/W3cPresentation';
+ import type { JwaSignatureAlgorithm } from '../../crypto/jose/jwa';
+ import type { SingleOrArray } from '../../utils/type';
++import { Credential } from '@hyperledger/anoncreds-nodejs';
+ export type W3cSignCredentialOptions<Format extends ClaimFormat.JwtVc | ClaimFormat.LdpVc | undefined = undefined> = Format extends ClaimFormat.JwtVc ? W3cJwtSignCredentialOptions : Format extends ClaimFormat.LdpVc ? W3cJsonLdSignCredentialOptions : W3cJwtSignCredentialOptions | W3cJsonLdSignCredentialOptions;
+ export type W3cVerifyCredentialOptions<Format extends ClaimFormat.JwtVc | ClaimFormat.LdpVc | undefined = undefined> = Format extends ClaimFormat.JwtVc ? W3cJwtVerifyCredentialOptions : Format extends ClaimFormat.LdpVc ? W3cJsonLdVerifyCredentialOptions : W3cJwtVerifyCredentialOptions | W3cJsonLdVerifyCredentialOptions;
+ export type W3cSignPresentationOptions<Format extends ClaimFormat.JwtVp | ClaimFormat.LdpVp | undefined = undefined> = Format extends ClaimFormat.JwtVp ? W3cJwtSignPresentationOptions : Format extends ClaimFormat.LdpVp ? W3cJsonLdSignPresentationOptions : W3cJwtSignPresentationOptions | W3cJsonLdSignPresentationOptions;
+@@ -21,7 +22,7 @@ interface W3cSignCredentialOptionsBase {
+     /**
+      * The credential to be signed.
+      */
+-    credential: W3cCredential;
++    credential: any;
+     /**
+      * URI of the verificationMethod to be used for signing the credential.
+      *

patches/@digitalcredentials+jsonld+6.0.0+001+sign-bitstring-credentials.patch

@@ -0,0 +1,16 @@
+diff --git a/node_modules/@digitalcredentials/jsonld/lib/context.js b/node_modules/@digitalcredentials/jsonld/lib/context.js
+index 5f0de78..1315061 100644
+--- a/node_modules/@digitalcredentials/jsonld/lib/context.js
++++ b/node_modules/@digitalcredentials/jsonld/lib/context.js
+@@ -920,6 +920,11 @@ api.createTermDefinition = ({
+     if(!_deepCompare(previousMapping, mapping)) {
+       const protectedMode = (options && options.protectedMode) || 'error';
+       if(protectedMode === 'error') {
++        if (term === 'VerifiableCredential' || term === 'VerifiablePresentation') {
++          console.warn("Term is 'VerifiableCredential'. Logging a warning instead of throwing an error.");
++          console.warn('WARNING: protected term redefinition', { term });
++          return;
++        }
+         throw new JsonLdError(
+           `Invalid JSON-LD syntax; tried to redefine "${term}" which is a ` +
+           'protected term.',

samples/cliConfig.json

@@ -43,4 +43,4 @@
   "rpcUrl": "https://rpc-amoy.polygon.technology",
   "fileServerUrl": "https://schema.credebl.id",
   "fileServerToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJBeWFuV29ya3MiLCJpZCI6ImNhZDI3ZjhjLTMyNWYtNDRmZC04ZmZkLWExNGNhZTY3NTMyMSJ9.I3IR7abjWbfStnxzn1BhxhV0OEzt1x3mULjDdUcgWHk"
-}
+}

scripts/taskdef/credo-ecs-taskdef.json

@@ -1,66 +1,59 @@
 {
-    "family": "${FAMILY}",
-    "containerDefinitions": [
+  "family": "${FAMILY}",
+  "containerDefinitions": [
+    {
+      "name": "Platform-admin",
+      "image": "%REPOSITORY_URI%:CREDO_v_%BUILD_NUMBER%",
+      "cpu": 154,
+      "memory": 307,
+      "portMappings": [
         {
-            "name": "Platform-admin",
-            "image": "%REPOSITORY_URI%:CREDO_v_%BUILD_NUMBER%",
-            "cpu": 154,
-            "memory": 307,
-            "portMappings": [
-                {
-                    "containerPort": 8001,
-                    "hostPort": 8001,
-                    "protocol": "tcp"
-                },
-                {
-                    "containerPort": 9001,
-                    "hostPort": 9001,
-                    "protocol": "tcp"
-                }
-            ],
-            "essential": true,
-            "command": [
-                "--auto-accept-connections",
-                "--config",
-                "/config.json"
-            ],
-            "environment": [
-                {
-                    "name": "AFJ_REST_LOG_LEVEL",
-                    "value": "1"
-                }
-            ],
-            "environmentFiles": [
-                {
-                    "value": "${S3_ARN}",
-                    "type": "s3"
-                }
-            ],
-            "mountPoints": [
-                {
-                    "sourceVolume": "config",
-                    "containerPath": "/config.json",
-                    "readOnly": true
-                }
-            ],
-            "volumesFrom": [],
-            "ulimits": []
+          "containerPort": 8001,
+          "hostPort": 8001,
+          "protocol": "tcp"
+        },
+        {
+          "containerPort": 9001,
+          "hostPort": 9001,
+          "protocol": "tcp"
+        }
+      ],
+      "essential": true,
+      "command": ["--auto-accept-connections", "--config", "/config.json"],
+      "environment": [
+        {
+          "name": "AFJ_REST_LOG_LEVEL",
+          "value": "1"
+        }
+      ],
+      "environmentFiles": [
+        {
+          "value": "${S3_ARN}",
+          "type": "s3"
         }
-
-    ],
-    "executionRoleArn": "arn:aws:iam::${ACCOUNT_ID}:role/ecsTaskExecutionRole",
-    "placementConstraints": [],
-    "requiresCompatibilities": [
-        "EC2"
-    ],
-    "cpu": "154",
-    "memory": "307",
-    "volumes": [
+      ],
+      "mountPoints": [
         {
-            "name": "config",
-            "host": {
-                "sourcePath": "${SourcePath}"
-            }
+          "sourceVolume": "config",
+          "containerPath": "/config.json",
+          "readOnly": true
         }
-    ]
-}
+      ],
+      "volumesFrom": [],
+      "ulimits": []
+    }
+  ],
+  "executionRoleArn": "arn:aws:iam::${ACCOUNT_ID}:role/ecsTaskExecutionRole",
+  "placementConstraints": [],
+  "requiresCompatibilities": ["EC2"],
+  "cpu": "154",
+  "memory": "307",
+  "volumes": [
+    {
+      "name": "config",
+      "host": {
+        "sourcePath": "${SourcePath}"
+      }
+    }
+  ]
+}