hyperledger / identus-edge-agent-sdk-ts

Apache License 2.0
15 stars 8 forks source link

feat: add sdk jwt revocation verification #231

Closed elribonazo closed 4 weeks ago

elribonazo commented 1 month ago

Description:

Implementing JWT Revocation proof verification, the edge agent.

RXDB is using crypto-js and firebase with 2 medium severity vulnerabilities.

  1. crypto-js is used by the encryption-plugin that is bundled by default and that peace of code has been removed from the package and dist folders.
  2. the replication plugin firebase store has a vulnerability on firebase npm package which we are also not using but as its bundled by default we have removed the package and the dist folders.

All is programmatically done through preinstall and postinstall hooks in npm, please check that out.


I've started upgrading the RXDB storages to the latest version of rxdb but still in future version patching will be required for the firebase dependency. Will work as a side work on upgrading the sdk to the latest version just for better performance.

Checklist:

github-actions[bot] commented 1 month ago
Lines Statements Branches Functions
Coverage: 74%
75% (2779/3705) 64.25% (1343/2090) 80.38% (717/892)

JUnit

Tests Skipped Failures Errors Time
496 6 :zzz: 0 :x: 0 :fire: 1m 14s :stopwatch: