revocation

type MockStatusList2021Issuer struct {
	// contains filtered or unexported fields
}

type MockStatusList2021IssuerMockRecorder struct {
	// contains filtered or unexported fields
}

type MockStatusList2021Verifier struct {
	// contains filtered or unexported fields
}

type MockStatusList2021VerifierMockRecorder struct {
	// contains filtered or unexported fields
}

type ResolveKeyFn func(issuerDID did.DID, at *time.Time, relationType resolver.RelationType) (string, crypto.PublicKey, error)

type Revocation struct {
	// Purpose is the reason for the revocation (e.g., "revocation", "suspension")
	Purpose string
	// RevokedAt is the time when the credential was revoked (Unix timestamp)
	RevokedAt time.Time
}

type SignFn func(ctx context.Context, unsignedCredential vc.VerifiableCredential, kid string) (*vc.VerifiableCredential, error)

type StatusList2021 struct {
	VerifySignature VerifySignFn // injected by verifier
	Sign            SignFn       // injected by issuer, context must contain an audit log
	ResolveKey      ResolveKeyFn // injected by issuer
	// contains filtered or unexported fields
}

type StatusList2021CredentialSubject struct {
	// ID for the credential subject
	ID string `json:"id"`
	// Type MUST be "StatusList2021Credential"
	Type string `json:"type"`
	// StatusPurpose defines the reason credentials are listed. ('revocation', 'suspension')
	StatusPurpose string `json:"statusPurpose"`
	// EncodedList is the GZIP-compressed [RFC1952], base-64 encoded [RFC4648] bitstring values for the associated range
	// of verifiable credential status values. The uncompressed bitstring MUST be at least 16KB in size.
	EncodedList string `json:"encodedList"`
}

type StatusList2021Entry struct {
	// ID is expected to be a URL that identifies the status information associated with the verifiable credential.
	// It MUST NOT be the URL for the status list, which is in StatusListCredential.
	ID string `json:"id,omitempty"`
	// Type MUST be "StatusList2021Entry"
	Type string `json:"type,omitempty"`
	// StatusPurpose indicates what it means if the VerifiableCredential is on the list.
	// The value is arbitrary, with predefined values `revocation` and `suspension`.
	// This value must match credentialSubject.statusPurpose value in the VerifiableCredential.
	StatusPurpose string `json:"statusPurpose,omitempty"`
	// StatusListIndex is an arbitrary size integer greater than or equal to 0, expressed as a string.
	// The value identifies the position in the bitstring of the corresponding StatusListCredential.
	StatusListIndex string `json:"statusListIndex,omitempty"`
	// StatusListCredential property MUST be a URL to the StatusList2021Credential.
	// When the URL is dereferenced, the resulting verifiable credential's type MUST include the "StatusList2021Credential".
	StatusListCredential string `json:"statusListCredential,omitempty"`
}

type StatusList2021Issuer interface {
	// Credential provides a valid StatusList2021Credential with subject ID derived from the issuer and page.
	// It returns the last issued StatusList2021Credential if it is still valid or issues a new StatusList2021Credential.
	Credential(ctx context.Context, issuer did.DID, page int) (*vc.VerifiableCredential, error)
	// Entry creates a StatusList2021Entry that can be added to the credentialStatus of a VC.
	// The corresponding StatusList2021Credential will have a gap in the bitstring if the returned entry does not make it into a VC.
	// If the entry belongs to a new StatusList2021Credential, an empty StatusList2021Credential is issued and stored.
	Entry(ctx context.Context, issuer did.DID, purpose StatusPurpose) (*StatusList2021Entry, error)
	// Revoke by adding the StatusList2021Entry to the list of revocations, and updates the relevant StatusList2021Credential.
	// The credentialID allows reverse search of revocations, its issuer is NOT verified against the entry issuer or VC.
	// Returns types.ErrRevoked if already revoked, or types.ErrNotFound when the entry.StatusListCredential is unknown.
	Revoke(ctx context.Context, credentialID ssi.URI, entry StatusList2021Entry) error
	// GetRevocation checks if the credential, issued locally, was revoked.
	// Returns the revocation information if the credential is revoked, or nil if not revoked.
	// Returns an error if the database query fails.
	GetRevocation(credentialID ssi.URI) (*Revocation, error)
}

type StatusList2021Verifier interface {
	// Verify returns a types.ErrRevoked when the credentialStatus contains a 'StatusList2021Entry' that can be resolved and lists the credential as 'revoked'
	// Other credentialStatus type/statusPurpose are ignored. Verification may fail with other non-standardized errors.
	Verify(credentialToVerify vc.VerifiableCredential) error
}

type StatusPurpose string

type VerifySignFn func(credentialToVerify vc.VerifiableCredential, validateAt *time.Time) error