Versions Compared

Version Old Version 2 New Version 3
Changes made by

Stephen Curran

Stephen Curran

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • ACA-Py Updates:

    • LTS Releases last week – 0.12.4, 1.2.2. The 1.2.lts branch is now separate from main, as we have breaking changes on main.

    • The start up issue with the OATH tests is not resolved. Still intermittent - not Askar and Unix Pipe issue seems not to be the issue. 🤔

    • The removal of the Connections Protocol from ACA-Py and the creation of the Connections Plugin is complete. Testing status?

    • Issue https://github.com/openwallet-foundation/acapy/issues/3462. What’s happening here?

    • Update? Proposal and progress towards enabling major version updates via dependabot PRs – for example this PR (3455) updates multiple important dependencies.

      • More warnings and we’ll have to make a call on ignoring some vs. investing in enabling them.

    • ACA-Py 7.7 on OpenSSF Scorecard – would like to make progress on that. Looking at how to do that. Easy wins? E.g. Token-Permissions (0), CII Best Practices (0). Anyone know how to manage dependencies to a commit?

  • Plugins:

  • Progress on did:webvh plugin to support DIDs and AnonCreds objects. Patrick St-Louis

    • did:webvh Resources: “Attested Resources” in did:webvh for AnonCreds Objects and More

    • did:webvh resources <did>/path/to/file, where the HTTP path defaults to match the DID location (minus .well-known) – any content

    • AttestedResources – the identifier for the resources (the DID URL) commits its content, and there is a proof from the DID Controller.

      • The hash of the resource is hashed to produce the file name: <did>/path/to/<hash>

      • The resource contains a proof of the resource

    • AnonCreds – Schema, CredDef, RevRegDef

      • RevRegEntries are trickier, because the holder doesn’t know the Identifier for the Entry it wants to use. Needs to get a list of the entries and then retrieve the one of interest.

      • Solution: RevRegDef is an attested resource, and has the list of all RevRegEntries (time stamp, DID URL, each an AttestedResource). The list is outside of the RevRegDef resource, so the RevRegDef ID does not change when new RevRegEntries are published. The proof on the RevRegDef does include the list of RevRegEntries.

      • Demo

  • Open Discussion

...