- Use
@bedrock/[email protected]
to getcheckTargetScopedAccessToken()
feature for verifying oauth2 access tokens.
- BREAKING: Update peer dependencies:
@bedrock/did-context@6
@bedrock/[email protected]
@bedrock/security-context@9
@bedrock/veres-one-context@16
- Update minor dependencies.
- Update test dependencies.
- Use
@digitalbazaar/ed25519-multikey
to resolve ed25519 verification methods. No changes to deployments are expected.
- Allow service object config IDs to be provided by a client if the extending service code overrides the default validation schema; by default, this is still prohibited.
- Surface meter usage check errors during service instance creation.
- Pass existing configuration via
existingConfig
tovalidateConfigFn
when theop
isupdate
. This feature enables, for example, services to check new configs against the existing config to prevent certain changes or to carry over defaults.
- BREAKING: Drop support for Node.js < 18.
- Use
@digitalbazaar/ed25519-signature-2020@5
. - Use
cidr-regex@4
. This version is pure ESM. - Update peer deps:
- Use
@bedrock/did-context@5
. - Use
@bedrock/jsonld-document-loader@4
. - Use
@bedrock/meter-usage-reporter@9
. - Use
@bedrock/oauth2-verifier@2
. - Use
@bedrock/security-context@8
. - Use
@bedrock/veres-one-context@15
.
- Use
- Update test deps.
- Fix meter usage aggregator function signature.
- Ensure that
op
is set toupdate
invalidateConfigFn
when called during a config update.
- BREAKING: Update peer dep
@bedrock/did-io
to v10.
- Update
validateConfigFn()
error to be thrown as aBedrockError
so that validation error messages may appear in the top level apps instead of as unspecifiedOperationError
s;OperationError
s are already possible via other error conditions, so this adds a new possible error type for app-specific config validation errors.
- Fix zcap validation; allow non-required zcaps to be added to configs defined by custom services.
- Use
@bedrock/oauth2-verifier
to provide oauth2 access token verification. - BREAKING: Change
supportedAlgorithms
in oauth2 authorization config toallowedAlgorithms
to better reflect proper semantics.
- BREAKING: Remove
issuerConfig
and from configuration; the same config options are now available via@bedrock/oauth2-verifier
.
- Ensure root path in oauth2 scope is treated as full access
(for given scope
action
) for the targeted service object.
- Fix typo in oauth2 scope attenuation checker.
- Enable individual service objects to be configured to support
OAuth2-based authorization. Adding an
authorization.oauth2.issuerConfigUrl
option with the URL to the OAuth2 authorization server's well-known metadata URL to a service object's config (on creation or via a later update) will enable OAuth2-based authz for that service object.
- BREAKING: Require Node.js >=16.
- Use
package.json
files
field. - Update dependencies.
- BREAKING: Update peer dependencies:
@bedrock/did-io@9
@bedrock/meter-usage-reporter@8
@bedrock/zcap-storage@8
- Lint module.
- Support IPv6 CIDRs in
ipAllowList
.- Switching from
netmask
toipaddr.js
to support IPv6.
- Switching from
- Include full error as non-public cause in onError handler.
- BREAKING: Update peer deps:
@bedrock/core@6
@bedrock/did-context@4
@bedrock/did-io@8
@bedrock/express@8
@bedrock/jsonld-document-loader@3
@bedrock/meter-usage-reporter@7
@bedrock/mongodb@10
@bedrock/security-context@7
@bedrock/validation@7
@bedrock/veres-one-context@14
@bedrock/zcap-storage@7
.
- BREAKING: Rename package to
@bedrock/service-core
. - BREAKING: Convert to module (ESM).
- BREAKING: Remove default export.
- BREAKING: Require node 14.x.
- Fix peer dependency specification (missing
^
) ofbedrock-veres-one-context@12
.
- Add missing peer dependencies
[email protected]
,[email protected]
and[email protected]
. - Add missing dependency
@digitalbazaar/ed25519-signature-2020
in test.
- Add
config.authorizeZcapInvocationOptions
to allow configuration ofauthorizeZcapInvocation
middleware inezcap-express
.
- BREAKING: Make default TTL for zcaps 1 year.
- BREAKING: Move zcap revocations to
/zcaps/revocations
to better future proof. - BREAKING: Use
@digitalbazaar/ezcap-express@6
.
- See git history for changes.