Skip to content

v0.7.0: AP2 mandates (delegated, verified), AP2 receipts

Choose a tag to compare

View all tags
@parafe-dev parafe-dev released this 30 Sep 21:45
v0.7.0
7b692b9

AP2 v0.2 support (AP2 change request Phase 3). Needs a broker with AP2 Phase 3.

Breaking

  • authorization.verified() takes the user-signed AP2 mandate ({ mandate, checkoutJwt?, checkoutHash?, checkoutMandate? }) instead of { instruction, platform, userSignature } (deprecated and already refused by the broker; userSignature now throws).
  • authorization.mandateRefs is MandateRef[] ({ family, closedJwt, sdHash }) instead of string[].

New

  • authorization.delegated() for AP2 open-mandate chains (human not present).
  • verifyMandate() (the broker's POST /ap2/mandates/verify), including who signed the closed and first open mandate (closedBy, openedBy).
  • signAp2Receipt() / recordAp2Receipt(), ap2MandateReferences().
  • The A3 mandate check on acknowledgments, index entries and receipt actions: referenceVerified, mandateRef, mandateVerifiedBy, mandateIssuerSource.
  • README: claim page key fingerprint format; public registry record.
Assets 2
Loading