Add a watcher mechanism to the vlei-verifier service that regularly interacts with configured witness APIs to ensure robust and up-to-date credential validation. This functionality should include the following:
✅ Features to Implement:
-
Revocation Status Checks:
-
Issuer Chain Validation:
-
Upon credential presentation, query witnesses to obtain information about the issuer of the credential.
-
Recursively traverse the issuer chain by requesting issuer information for each parent issuer, up to the root of trust.
-
Ensure the entire chain of trust is valid and unrevoked.
-
Configuration:
📌 Goal:
Ensure vlei-verifier can independently verify credential authenticity and revocation status using witness-provided information, strengthening the trust model and supporting automated validation pipelines.
Add a watcher mechanism to the
vlei-verifierservice that regularly interacts with configured witness APIs to ensure robust and up-to-date credential validation. This functionality should include the following:✅ Features to Implement:
Revocation Status Checks:
Periodically query witness APIs to retrieve information about credential revocations.
Maintain a local cache or store to quickly determine the revocation status during verification.
Issuer Chain Validation:
Upon credential presentation, query witnesses to obtain information about the issuer of the credential.
Recursively traverse the issuer chain by requesting issuer information for each parent issuer, up to the root of trust.
Ensure the entire chain of trust is valid and unrevoked.
Configuration:
Allow configuration of witness endpoints and polling intervals.
Optionally support on-demand (lazy) vs scheduled (eager) retrieval strategies.
📌 Goal:
Ensure
vlei-verifiercan independently verify credential authenticity and revocation status using witness-provided information, strengthening the trust model and supporting automated validation pipelines.