ipld@ipld/dag-ucan
An implementation of UCANs in IPLD via Advanced Data Layout (ADL), designed for use with multiformats.
Overview
This library provides an ADL for representing UCANs natively in IPLD. It implements UCAN IPLD specification and uses DAG-CBOR as a primary encoding, which is hash consistent and more compact than a secondary RAW JWT encoding. Every UCAN in either encoding can be formatted into a valid JWT string and consumed by other spec compliant UCAN implementations. However UCANs issued by other libraries may end up in represented in secondory RAW JWT encoding, that is because whitespaces and key order in JWT affects signatures and there for can't be represented accurately in CBOR. When parsing UCANs library will use CBOR representation and fallback to RAW JWT, which allows interop with all existing tokens in the wild.
API
import * as UCAN from "@ipld/dag-ucan"UCAN.parse(jwt: string): UCAN.View
Parses UCAN formatted as JWT string into a representatino that can be encoded, formatted and queried.
const ucan = UCAN.parse(jwt)
ucan.issuer.did() // did:key:z6Mkk89bC3JrVqKie71YEcc5M1SMVxuCgNx6zLZ8SYJsxALiUCAN.format(ucan: UCAN.UCAN): string
Formats UCAN into a JWT string.
UCAN.format(UCAN.parse(jwt)) === jwt // trueUCAN.encode(ucan: UCAN.UCAN): Uint8Array
Encodes UCAN into a binary representation.
UCAN.encode(UCAN.parse(jwt)) // Uint8Array(679)UCAN.decode(bytes: Uint8Array): UCAN.UCAN
Decodes UCAN from binary representation into object representation.
UCAN.decode(UCAN.encode(ucan))UCAN.issue(options: UCAN.UCANOptions): Promise<UCAN.UCAN>
Issues a signed UCAN.
Please note that no capability or time bound validation takes place.
const ucan = await UCAN.issue({
issuer: alice,
audience: bob,
capabilities: [
{
can: "fs/read",
with: `storage://${alice.did()}/public/photos/`,
},
{
can: "pin/add",
with: alice.did(),
},
],
})Embedding Proofs
While not recommended, it is possible to inline proofs inside a single UCAN using CIDs with identity multihash:
import { identity } from "multiformats/hashes/identity"
const proof = await UCAN.issue({
issuer: alice,
audience: bob,
capabilities: [{ can: "store/add", with: alice.did() }],
})
const delegation = await UCAN.issue({
issuer: bob,
audience: mallory,
capabilities: proof.capabilities,
proofs: [await UCAN.link(proof, { hasher: identity })],
})License
Licensed under either of
- Apache 2.0, (LICENSE-APACHE / http://www.apache.org/licenses/LICENSE-2.0)
- MIT (LICENSE-MIT / http://opensource.org/licenses/MIT)
Contribute
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.