Verifier Configuration Reference

This reference documents the configuration options for the verifier service.

Core Configuration

This section documents the complete configuration provided by Vidos.

{
    "cors": {
        "enabled": false,
        "origin": ["*"],
        "credentials": false,
        "allowMethods": ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
        "exposeHeaders": [],
        "allowHeaders": [],
        "maxAge": 86400
    },
    "policies": {
        "credentialSchema": {
            "validation": {
                "onInvalid": "error",
                "onUnsupported": "warning"
            },
            "skip": false
        },
        "credentialStatus": {
            "skip": false,
            "onMissing": "valid",
            "onUnsupported": "warning",
            "statusTypes": {
                "bitstringStatusList": {
                    "statusChecks": {
                        "revocation": {
                            "onMissingStatus": "valid",
                            "onRevocation": "error"
                        },
                        "suspension": {
                            "onMissingStatus": "valid",
                            "onSuspension": "error"
                        }
                    }
                },
                "credentialStatus2021": {
                    "statusChecks": {
                        "revocation": {
                            "onMissingStatus": "valid",
                            "onRevocation": "error"
                        },
                        "suspension": {
                            "onMissingStatus": "valid",
                            "onSuspension": "error"
                        }
                    }
                }
            }
        },
        "format": {
            "standards": {
                "w3c": {
                    "vc-data-model": {
                        "v1.1": {
                            "enabled": true
                        },
                        "v2.0": {
                            "enabled": true
                        }
                    }
                },
                "iso": {
                    "18013-5:2021": {
                        "enabled": true
                    }
                }
            }
        },
        "notAfter": {
            "credentials": {
                "verifiableCredential": {
                    "enabled": true,
                    "onOutOfRange": "error",
                    "onMissingDate": "warning",
                    "tolerance": 300000
                },
                "verifiablePresentation": {
                    "enabled": true,
                    "onOutOfRange": "error",
                    "onMissingDate": "warning",
                    "tolerance": 300000
                }
            },
            "skip": false
        },
        "notBefore": {
            "skip": false,
            "credentials": {
                "verifiableCredential": {
                    "enabled": true,
                    "onOutOfRange": "error",
                    "onMissingDate": "warning",
                    "tolerance": 300000
                },
                "verifiablePresentation": {
                    "enabled": true,
                    "onOutOfRange": "error",
                    "onMissingDate": "warning",
                    "tolerance": 300000
                }
            }
        },
        "proof": {
            "skip": false,
            "formats": {
                "jwt": {
                    "enabled": true,
                    "proofPurpose": "assertionMethod"
                },
                "w3c": {
                    "enabled": true,
                    "proofPurpose": {
                        "assertionMethod": {
                            "enabled": true
                        },
                        "authentication": {
                            "enabled": true,
                            "challenge": "",
                            "domain": ""
                        }
                    },
                    "suites": {
                        "community": {
                            "di-eddsa-2020": {
                                "enabled": true
                            }
                        },
                        "vc-data-integrity": {
                            "1.0": {
                                "enabled": true,
                                "cryptosuite": {
                                    "bbs-2023": {
                                        "enabled": true,
                                        "expectedPresentationHeader": ""
                                    },
                                    "ecdsa-jcs-2019": {
                                        "enabled": true
                                    },
                                    "ecdsa-rdfc-2019": {
                                        "enabled": true
                                    },
                                    "ecdsa-sd-2023": {
                                        "enabled": true
                                    },
                                    "eddsa-2022": {
                                        "enabled": true
                                    },
                                    "eddsa-jcs-2022": {
                                        "enabled": true
                                    },
                                    "eddsa-rdfc-2022": {
                                        "enabled": true
                                    }
                                }
                            }
                        }
                    }
                }
            }
        }
    },
    "resolver": {
        "type": "managed"
    }
}

Configuration Schema

The complete JSON Schema for the verifier configuration is available:

Download verifier.schema.json

Configuration Options

cors Configuration

For CORS configuration options see the CORS Configuration Reference.

resolver Configuration

Controls which resolver service to use for DID (Decentralized Identifier) resolution and other resource lookups. See Service Instance configuration

Example managed resolver configuration:

{
    "resolver": {
        "type": "managed"
    }
}

Example custom resolver instance configuration:

{
    "resolver": {
        "type": "instance",
        "resourceId": "my-resolver-instance",
        "serviceRole": {
            "owner": "account",
            "resourceId": "my-resolver"
        }
    }
}

The verifier uses the resolver service to:

Resolve DIDs referenced in credentials
Fetch verification methods and public keys
Verify proof chains
Retrieve status information and schemas

policies Configuration

The policies section consists of independent verification policies that can be configured separately. Each policy controls a specific aspect of credential verification and can be integrated with the Authorizer service for comprehensive verification flows. Policies can be:

Enabled or disabled independently using skip: true/false
Configured with different validation behaviors (error/warning)
Set with policy-specific parameters

The verifier supports the following independent policies:

credentialSchema: Schema validation against the credential type
credentialStatus: Status checks (revocation/suspension)
format: Format and version validation
notAfter: Expiration validation
notBefore: Not-yet-valid validation
proof: Cryptographic proof verification

Example of policy mix-and-match:

{
    "policies": {
        "credentialSchema": {
            "skip": true
        },
        "credentialStatus": {
            "skip": false,
            "onMissing": "valid",
            "onUnsupported": "warning"
        },
        "notAfter": {
            "skip": false,
            "credentials": {
                "verifiableCredential": {
                    "enabled": true,
                    "onOutOfRange": "error"
                }
            }
        },
        "proof": {
            "skip": false,
            "formats": {
                "jwt": {
                    "enabled": true
                },
                "w3c": {
                    "enabled": false
                }
            }
        }
    }
}

Each policy section below details its specific configuration options.

credentialSchema

Controls schema validation for credentials.

Type: object
Properties:
- skip: boolean
- validation:
  - onInvalid: "error" | "warning" | "valid"
  - onSchemaError: "error" | "warning" | "valid"
  - onUnsupported: "error" | "warning" | "valid"
Description: Configures schema validation behavior and error handling
See: W3C VC Data Model - Credential Schema

Example credential with schema:

{
    "@context": ["https://www.w3.org/2018/credentials/v1", "https://www.w3.org/2018/credentials/examples/v1"],
    "type": ["VerifiableCredential", "UniversityDegreeCredential"],
    "credentialSchema": {
        "id": "https://example.org/examples/degree.json",
        "type": "JsonSchemaValidator2018"
    }
}

Example configuration:

{
    "credentialSchema": {
        "validation": {
            "onInvalid": "error",
            "onSchemaError": "warning",
            "onUnsupported": "warning"
        },
        "skip": false
    }
}

credentialStatus

Controls credential status validation.

Type: object
Properties:
- skip: boolean
- onMissing: "valid" | "error"
- onUnsupported: "error" | "warning"
- statusTypes: Configuration for different status list types
Description: Configures how different types of credential status are verified
See: W3C VC Status List v2021

Example configuration:

{
    "credentialStatus": {
        "skip": false,
        "onMissing": "valid",
        "onUnsupported": "warning",
        "statusTypes": {
            "bitstringStatusList": {
                "statusChecks": {
                    "revocation": {
                        "onMissingStatus": "valid",
                        "onRevocation": "error"
                    },
                    "suspension": {
                        "onMissingStatus": "valid",
                        "onSuspension": "error"
                    }
                }
            }
        }
    }
}

Status Check Options

Action	Description	Use Case
`onRevocation`	What happens when a credential is revoked	Check revocation status
`onSuspension`	What happens when a credential is suspended	Check suspension status
`onMissingStatus`	Action when status information is missing	Handle incomplete status

format

Controls credential format validation.

Type: object
Properties:
- standards: Supported credential format standards
  - w3c: W3C Verifiable Credentials Data Model
  - iso: ISO standard formats
Description: Configures supported credential format standards and versions

Example configuration:

{
    "format": {
        "standards": {
            "w3c": {
                "vc-data-model": {
                    "v1.1": {
                        "enabled": true
                    },
                    "v2.0": {
                        "enabled": true
                    }
                }
            },
            "iso": {
                "18013-5:2021": {
                    "enabled": true
                }
            }
        }
    }
}

notAfter/notBefore

Controls temporal validation of credentials.

Type: object
Properties:
- skip: boolean
- credentials:
  - verifiableCredential:
    - enabled: boolean
    - onOutOfRange: "error" | "warning"
    - onMissingDate: "error" | "warning"
    - tolerance: Time tolerance in milliseconds
  - verifiablePresentation: Same structure as verifiableCredential
Description: Configures temporal validity checks

Example configuration:

{
    "notAfter": {
        "credentials": {
            "verifiableCredential": {
                "enabled": true,
                "onOutOfRange": "error",
                "onMissingDate": "warning",
                "tolerance": 300000
            }
        },
        "skip": false
    }
}

Temporal Validation Options

Option	Description	Use Case
`onOutOfRange`	Action when current time is outside valid range	Enforce time validity
`onMissingDate`	Action when required dates are missing	Handle incomplete credentials
`tolerance`	Time buffer in milliseconds	Allow for clock skew

proof

Controls validation of cryptographic proofs.

Type: object
Properties:
- skip: boolean
- formats: Supported proof formats
  - jwt: JWT proof format configuration
  - w3c: W3C proof format configuration

Example JWT configuration:

{
    "proof": {
        "formats": {
            "jwt": {
                "enabled": true,
                "proofPurpose": "assertionMethod"
            }
        }
    }
}

Example W3C configuration:

{
    "proof": {
        "formats": {
            "w3c": {
                "enabled": true,
                "proofPurpose": {
                    "assertionMethod": {
                        "enabled": true
                    }
                },
                "suites": {
                    "community": {
                        "di-eddsa-2020": {
                            "enabled": true
                        }
                    }
                }
            }
        }
    }
}

Supported Proof Formats

JWT Proofs

Supports JWT/JWS-based proofs with configurable proof purposes.

W3C Data Integrity

Supports Data Integrity proofs with multiple cryptosuites:

Suite	Description	Best For
`bbs-2023`	BBS+ signatures with selective disclosure	Privacy-preserving credentials
`ecdsa-jcs-2019`	ECDSA with JSON canonicalization	Cross-platform compatibility
`ecdsa-rdfc-2019`	ECDSA with RDF canonicalization	Semantic web applications
`ecdsa-sd-2023`	ECDSA with selective disclosure	Privacy-preserving presentations
`eddsa-2022`	EdDSA base suite	High performance verification

Error Handling

The verifier supports three validation outcomes:

error: Stops processing
warning: Continues processing
valid: Successful validation

Common scenarios:

Scenario	Default Action	Configuration Option
Credential fails schema validation	Error	`credentialSchema.validation.onInvalid`
Schema load error	Warning	`credentialSchema.validation.onSchemaError`
Unsupported schema validation type	Warning	`credentialSchema.validation.onUnsupported`
Missing status	Valid	`credentialStatus.onMissing`
Expired credential	Error	`notAfter.credentials.verifiableCredential.onOutOfRange`
Missing dates	Warning	`notAfter.credentials.verifiableCredential.onMissingDate`
Revoked credential	Error	`credentialStatus.statusTypes.bitstringStatusList.statusChecks.revocation.onRevocation`

Additional Resources

ON THIS PAGE

#Verifier Configuration Reference

#Core Configuration

#Configuration Schema

#Configuration Options

#cors Configuration

#resolver Configuration

#policies Configuration

#credentialSchema

#credentialStatus

#Status Check Options

#format

#notAfter/notBefore

#Temporal Validation Options

#proof

#Supported Proof Formats

#JWT Proofs

#W3C Data Integrity

#Error Handling

#Additional Resources

Verifier Configuration Reference

Core Configuration

Configuration Schema

Configuration Options

cors Configuration

resolver Configuration

policies Configuration

credentialSchema

credentialStatus

Status Check Options

format

notAfter/notBefore

Temporal Validation Options

proof

Supported Proof Formats

JWT Proofs

W3C Data Integrity

Error Handling

Additional Resources