-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
updates in CRUD operation section. #2
Conversation
README.md
Outdated
Here is how create operation works: | ||
|
||
- The create DID request is parsed by the ITN agent, which validates its syntax as well as the value of each field to follow specific rules. | ||
- The ITN agent generates the DID identifier based on the `did:itn` method specification, then the network stores the Hash(DID) and Hash(DID Document) in a smart contract on all the utilized ledger (one private and one public) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
DID identifier is generated by the sender, not by ITN Agent.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated.
README.md
Outdated
@@ -126,6 +133,10 @@ Requirements: | |||
- A DID string MUST be provided. | |||
- The provided DID MUST be compliant with the `did:itn` method. | |||
|
|||
Here is how resolve operation works: | |||
|
|||
- The ITN Agent validates the provided DID, retrieves the DID Document from the federated content-addressable storage solution, retrieves the DID Document proof from one or more utilized ledger (either private or public) and returns the DID Document along with the DID Document proof to the requestor. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
ITN Agent is not involved in resolution process. The request goes directly to the DID Resolver.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated.
README.md
Outdated
@@ -137,6 +148,10 @@ Requirements: | |||
- The provided DID string MUST be compliant with the `did:itn` method. | |||
- The provided DID document MUST be compliant with the DID V1.0 DID document specification. | |||
|
|||
Here is how update operation works: | |||
|
|||
- The ITN agent is responsible to verify that the initiator of the update request is the controller of the DID subject that will be updated. The authentication method defined in the DID Document will be used to authenticate the controller. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Update request sender must be specified as a DID Document controller
and is authenticated by verifying the update request signature. It must be signed by the recovery key which is used before to generate the DID identifier.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also we need to mention that DID Document is updated in CAS and in ledgers.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated.
Here is how revoke operation works: | ||
|
||
- The ITN agent is responsible to verify that the initiator of the revoke request is the controller of the DID subject that will be revoked. The authentication method defined in the DID Document will be used to authenticate the controller. Then ITN agent perform the revoke DID operation. | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same as Update DID flow
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated.
Here is how recover operation works: | ||
|
||
- The ITN agent is responsible to verify that the initiator of the recover request is the controller of the DID subject that will be recovered. The authentication method defined in the DID Document will be used to authenticate the controller. Then ITN agent perform the recover DID operation. | ||
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Same as Update DID flow
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated.
@pleerock @AlexMesser cc: @Therecanbeonlyone1969
Please review the updates. These updates are based on the comments from Manu Sporny here is the link
Note: Once we merge this PR - I will comment and reply back to Manu that we have updated the specification for details.