feat: implement vc api verifier router

Signed-off-by: toanNgo <toan.ngo@gosource.com.au>

packages/cli/package.json

@@ -45,6 +45,7 @@
     "@vckit/example-documents": "^1.0.0-beta.4",
     "@vckit/remote-client": "^1.0.0-beta.4",
     "@vckit/remote-server": "^1.0.0-beta.4",
+    "@vckit/vc-api": "^1.0.0-beta.2",
     "@vckit/renderer": "workspace:1.0.0-beta.2",
     "@veramo/credential-eip712": "^5.1.2",
     "@veramo/credential-ld": "^5.1.2",

packages/vc-api/README.md

@@ -1,39 +1,90 @@
-# vc-api agent router
+# vc-api
 
-- This agent router conform to vc-api standard that to achieve interoperability's goal between various parties.
+- This agent router conform to vc-api standard that to achieve interoperbaility’s goal between various parties.
 
 ## Usage
 
-- This plugin follow the `veramo` architecture , so you can configure it with `agent.yml`
+- This plugin follow the `veramo` architecture , so you can configure it with `agent.yml` . For example:
 
 ```jsx
-# API base path
-    - - /issuer
-      - $require: '@vckit/vc-api-issuer?t=function#AgentRouter'
+
+    - - /vc-api
+      - $require: '@vckit/vc-api?t=function#IssuerRouter'
         $args:
           - createCredential: createVerifiableCredential
             updateCredentialStatus: updateVerifiableCredentialStatus
+            config:
+							proofFormat: OpenAttestationMerkleProofSignature2018
+							save: false
+      - $require: '@vckit/vc-api?t=function#VerifierRouter'
+        $args:
+          - verifyCredential: verifyCredential
+            verifyPresentation: verifyPresentation
 ```
 
 ## Test with test-suite
 
-- Clone the test suite: https://github.com/w3c-ccg/vc-api-issuer-test-suite
-- Go to `node_modules/vc-api-test-suite-implementations/implementations` , create files except the index file
+- Clone the test suite: https://github.com/w3c-ccg/vc-api-issuer-test-suite and https://github.com/w3c-ccg/vc-api-verifier-test-suite
+
+    ```jsx
+    {
+      "name": "GoSource",
+      "implementation": "GoSource Verifiable Credentials",
+      "issuers": [{
+        "id": "YOUR_DID_MANAGED_BY_YOUR_MKS",
+        "endpoint": "http://localhost:3332/issuer/credentials/issue",
+        "tags": ["vc-api", "Ed25519Signature2020"]
+      }],
+      "verifiers": [{
+        "id": "YOUR_DID_MANAGED_BY_YOUR_MKS",
+        "endpoint": "http://localhost:3332/verifier/credentials/verify",
+        "method": "POST",
+        "tags": ["vc-api"]
+      }]
+    }
+    ```
+
 - Create new implementation file:
 
-```jsx
-{
-  "name": "GoSource",
-  "implementation": "GoSource Verifiable Credentials",
-  "issuers": [{
-    "id": "YOUR_DID_MANAGED_BY_YOUR_KMS",
-    "endpoint": "http://localhost:3332/agent/credentials/issue",
-    "options": {
-      "type": "Ed25519Signature2020"
-    },
-    "tags": ["vc-api", "Ed25519Signature2020"]
-  }]
-}
-```
-
 - Run the test command `npm run test`
+- Test result
+- Issuer test result
+
+    ```jsx
+    ✓ MUST successfully issue a credential.
+    ✓ Request body MUST have property "credential".
+    ✓ credential MUST have property "@context".
+    ✓ credential "@context" MUST be an array.
+    ✓ credential "@context" items MUST be strings.
+    ✓ credential MUST have property "type"
+    ✓ "credential.type" MUST be an array.
+    ✓ "credential.type" items MUST be strings
+    ✓ credential MUST have property "issuer"
+    ✓ "credential.issuer" MUST be a string or an object
+    ✓ credential MUST have property "credentialSubject"
+    ✓ "credential.credentialSubject" MUST be an object
+    ✓ credential MAY have property "expirationDate"
+    ```
+
+- Verifier test result
+
+```jsx
+✓ MUST verify a valid VC.
+✓ MUST not verify if "@context" property is missing.
+✓ MUST not verify if "type" property is missing.
+✓ MUST not verify if "issuer" property is missing.
+✓ MUST not verify if "credentialSubject" property is missing.
+✓ MUST not verify if "proof" property is missing.
+✓ MUST not verify if "proof.type" property is missing.
+✓ MUST not verify if "proof.created" property is missing.
+✓ MUST not verify if "proof.verificationMethod" property is missing.
+✓ MUST not verify if "proof.proofValue" property is missing.
+✓ MUST not verify if "proof.proofPurpose" property is missing.
+✓ MUST not verify if "@context" is not an array.
+✓ MUST not verify if "@context" items are not strings.
+✓ MUST not verify if "type" is not an array.
+✓ MUST not verify if "type" items are not strings.
+✓ MUST not verify if "issuer" is not an object or a string.
+✓ MUST not verify if "credentialSubject" is not an object.
+✓ MUST not verify if "proof" is not an object.
+```

packages/vc-api/src/config/index.ts

@@ -3,7 +3,9 @@ import { ProofFormat } from '@vckit/core-types';
 export type IssuerConfiguration = {
   proofFormat: ProofFormat;
   removeOriginalFields: boolean;
-  save: boolean
+  save: boolean;
+
+  [x: string]: any;
 };
 
 export const configuration: IssuerConfiguration = {

packages/vc-api/src/index.ts

@@ -1 +1,2 @@
 export { IssuerRouter, IssuerRouterOptions } from './issuer-router.js'
+export { VerifierRouter, VerifierRouterOptions } from './verifier-router.js'

packages/vc-api/src/issuer-router.ts

@@ -1,9 +1,18 @@
 import { IAgent, VerifiableCredential } from '@vckit/core-types';
 import { Request, Response, NextFunction, Router, json } from 'express';
-import { validateCredentialPayload, validateUpdateStatusCredentialPayload } from './middlewares/index.js';
-import { IssueCredentialRequestPayload, UpdateCredentialStatusRequestPayload } from './types/index.js';
+import {
+  validateCredentialPayload,
+  validateUpdateStatusCredentialPayload,
+} from './middlewares/index.js';
+import {
+  IssueCredentialRequestPayload,
+  UpdateCredentialStatusRequestPayload,
+} from './types/index.js';
 import { mapCredentialPayload, mapCredentialResponse } from './utils/index.js';
-import { configuration } from './config/index.js';
+import {
+  IssuerConfiguration,
+  configuration as DEFAULT_CONFIG,
+} from './config/index.js';
 import { validationResult } from 'express-validator';
 
 interface RequestWithAgent extends Request {
@@ -15,14 +24,16 @@ interface RequestWithAgent extends Request {
  */
 export interface IssuerRouterOptions {
   /**
-   * Agaent method to create credential
+   * Agent method to create credential
    */
   createCredential: string;
 
   /**
    * Agent method to update credential status (revocation)
    */
   updateCredentialStatus: string;
+
+  config?: IssuerConfiguration;
 }
 
 /**
@@ -37,6 +48,7 @@ export interface IssuerRouterOptions {
 export const IssuerRouter = ({
   createCredential,
   updateCredentialStatus,
+  config,
 }: IssuerRouterOptions): Router => {
   const router = Router();
   router.use(json({ limit: '10mb' }));
@@ -50,23 +62,23 @@ export const IssuerRouter = ({
       if (!errors.isEmpty()) {
         return res.status(400).json({ description: errors.array() });
       }
-      
+
       if (!req.agent) {
         throw Error('Agent not available');
       }
 
       try {
         const payload = mapCredentialPayload(
           req.body as IssueCredentialRequestPayload,
-          configuration
+          { ...DEFAULT_CONFIG, ...config }
         );
         const result = (await req.agent.execute(
           createCredential,
           payload
         )) as VerifiableCredential;
         res.status(201).json(mapCredentialResponse(result));
       } catch (e: any) {
-        return res.status(400).json({ error: e.message });
+        return res.status(500).json({ error: e.message });
       }
     }
   );

packages/vc-api/src/middlewares/index.ts

@@ -1 +1,2 @@
 export * from './issuer.js'
+export * from './verifier.js'

packages/vc-api/src/middlewares/issuer.ts

@@ -1,12 +1,13 @@
 import { check, oneOf } from 'express-validator';
+import { checkArray, checkObject, checkString } from './verifier';
 
 /**
  * Validate the input for issuing verifiable credential that use vc-kit.
  */
 
 export const validateCredentialPayload = () => {
   return [
-    check('credential').isObject().notEmpty(),
+    checkObject({ path: 'credential' }),
     ...validateContext(),
     ...validateIssuer(),
     ...validateCredentialSubject(),
@@ -17,30 +18,19 @@ export const validateCredentialPayload = () => {
 
 export const validateUpdateStatusCredentialPayload = () => {
   return [
-    check('credentialId', 'credentialId must be a string')
-      .isString()
-      .notEmpty(),
-    check('credentialStatus', 'credentialStatus must be an array').isArray({
-      min: 1,
-    }),
-    check('credentialStatus.*.type', 'credentialStatus.type must be a string')
-      .isString()
-      .notEmpty(),
-    check(
-      'credentialStatus.*.status',
-      'credentialStatus.status must be a string'
-    )
-      .isString()
-      .notEmpty(),
+    checkString({ path: 'credentialId' }),
+    checkArray({ path: 'credentialStatus' }),
+    checkString({ path: 'credentialStatus.*.type' }),
+    checkString({ path: 'credentialStatus.*.id' }),
   ];
 };
 
 const validateContext = () => {
   return [
     oneOf(
       [
-        check('credential.@context').isArray({ min: 1 }),
-        check('credential.@context').isString().notEmpty(),
+        checkArray({ path: 'credential.@context' }),
+        checkString({ path: 'credential.@context' }),
       ],
       { message: 'credential.@context must be an array or string' }
     ),
@@ -51,8 +41,8 @@ const validateIssuer = () => {
   return [
     oneOf(
       [
-        check('credential.issuer').isObject().notEmpty(),
-        check('credential.issuer').isString().notEmpty(),
+        checkString({ path: 'credential.issuer' }),
+        checkObject({ path: 'credential.issuer' }),
       ],
       { message: 'credential.issuer must be string or an object' }
     ),
@@ -61,21 +51,18 @@ const validateIssuer = () => {
 
 const validateCredentialSubject = () => {
   return [
-    check(
-      'credential.credentialSubject',
-      'credential.credentialSubject must be an object'
-    )
-      .isObject()
-      .notEmpty(),
+    checkObject({
+      path: 'credential.credentialSubject',
+    }),
   ];
 };
 
 const validateType = () => {
   return [
     oneOf(
       [
-        check('credential.type').isArray({ min: 1 }),
-        check('credential.type').isString().notEmpty(),
+        checkArray({ path: 'credential.type' }),
+        checkString({ path: 'credential.type' }),
       ],
       { message: 'credential.type must be an array or string' }
     ),
@@ -84,24 +71,9 @@ const validateType = () => {
 
 const validateOptions = () => {
   return [
-    check('options.created', 'options.created must be a string')
-      .optional()
-      .isString()
-      .notEmpty(),
-    check('options.challenge', 'options.created must be a string')
-      .optional()
-      .isString()
-      .notEmpty(),
-    check('options.credentialStatus', 'options.created must be an object')
-      .optional()
-      .isObject()
-      .notEmpty(),
-    check(
-      'options.credentialStatus.type',
-      'options.credentialStatus.type must be a string'
-    )
-      .optional()
-      .isObject()
-      .notEmpty(),
+    checkString({ path: 'options.created' }).optional(),
+    checkString({ path: 'options.challenge' }).optional(),
+    checkObject({ path: 'options.credentialStatus' }).optional(),
+    checkString({ path: 'options.credentialStatus.type' }).optional(),
   ];
 };