Bump github.com/privacybydesign/irmago from 0.12.6 to 0.14.0

[dependabot]

Bumps github.com/privacybydesign/irmago from 0.12.6 to 0.14.0.

Release notes

Sourced from github.com/privacybydesign/irmago's releases.

v0.14.0

Note for users of the irmaclient package (e.g. maintainers of the Yivi app): the KeyshareVerifyPin function requires the renewal endpoint for the keyshare attribute to be present. Therefore, this version should first be deployed on keyshare servers before the client side can be upgraded.

Added

• Option skipExpiryCheck in disclosure requests to allow disclosure of expired credentials (e.g. "skipExpiryCheck": ["irma-demo.sidn-pbdf.email"])
• Option host in session request to overrule host name in IRMA QR if permission has been granted (see below)

  {
    "@context": "https://irma.app/ld/request/disclosure/v2",
    "host": "irma.example.com",
    "disclose": ...
  }
  

  This leads to the following session package:

  {
    "token":"KzxuWKwL5KGLKr4uerws",
    "sessionPtr": {"u":"https://irma.example.com/irma/session/ysDohpoySavbHAUDjmpz","irmaqr":"disclosing"},
    "frontendRequest": {
      "authorization":"qGrMmL8UZwZ88Sq8gobV",
      "minProtocolVersion": "1.0",
      "maxProtocolVersion": "1.1"
    }
  }
  

• Permission option host_perms in the requestor configuration to specify which values a requestor may use for the host option in session requests

  {
    "requestors": {
        "myapp": {
            "disclose_perms": [ "irma-demo.MijnOverheid.ageLower.over18" ],
            "sign_perms": [ "irma-demo.MijnOverheid.ageLower.*" ],
            "issue_perms": [ "irma-demo.MijnOverheid.ageLower" ],
            "host_perms": ["*.example.com"]
            "auth_method": "token",
            "key": "eGE2PSomOT84amVVdTU"
        }
    }
  }
  

• Renewal endpoint for keyshare attribute in the keyshare server (/users/renewKeyshareAttribute)
• Keyshare server /api/v2/prove/... endpoints for the new keyshare protocol

Changed

• KeyshareVerifyPin function in irmaclient ensures the keyshare attribute is valid
• Sending the account expiry email is done when user has only valid e-mail addresses
• Strip unnecessary details from database errors

Fixed

• User account expiry continues when one or more e-mail addresses are marked for revalidation

... (truncated)

Changelog

Sourced from github.com/privacybydesign/irmago's changelog.

[0.14.0] - 2023-10-02

Note for users of the irmaclient package (e.g. maintainers of the Yivi app): the KeyshareVerifyPin function requires the renewal endpoint for the keyshare attribute to be present. Therefore, this version should first be deployed on keyshare servers before the client side can be upgraded.

Added

• Option skipExpiryCheck in disclosure requests to allow disclosure of expired credentials (e.g. "skipExpiryCheck": ["irma-demo.sidn-pbdf.email"])
• Option host in session request to overrule host name in IRMA QR if permission has been granted (see below)

  {
    "@context": "https://irma.app/ld/request/disclosure/v2",
    "host": "irma.example.com",
    "disclose": ...
  }
  

  This leads to the following session package:

  {
    "token":"KzxuWKwL5KGLKr4uerws",
    "sessionPtr": {"u":"https://irma.example.com/irma/session/ysDohpoySavbHAUDjmpz","irmaqr":"disclosing"},
    "frontendRequest": {
      "authorization":"qGrMmL8UZwZ88Sq8gobV",
      "minProtocolVersion": "1.0",
      "maxProtocolVersion": "1.1"
    }
  }
  

• Permission option host_perms in the requestor configuration to specify which values a requestor may use for the host option in session requests

  {
    "requestors": {
        "myapp": {
            "disclose_perms": [ "irma-demo.MijnOverheid.ageLower.over18" ],
            "sign_perms": [ "irma-demo.MijnOverheid.ageLower.*" ],
            "issue_perms": [ "irma-demo.MijnOverheid.ageLower" ],
            "host_perms": ["*.example.com"]
            "auth_method": "token",
            "key": "eGE2PSomOT84amVVdTU"
        }
    }
  }
  

• Renewal endpoint for keyshare attribute in the keyshare server (/users/renewKeyshareAttribute)
• Keyshare server /api/v2/prove/... endpoints for the new keyshare protocol

Changed

• KeyshareVerifyPin function in irmaclient ensures the keyshare attribute is valid
• Sending the account expiry email is done when user has only valid e-mail addresses
• Strip unnecessary details from database errors

Fixed

• User account expiry continues when one or more e-mail addresses are marked for revalidation

... (truncated)

Commits

• 2830249 Merge pull request #349 from privacybydesign/version-bump-v0.14.0
• 36409ad Update release date of v0.14.0
• 097fd5e Docs: re-add unreleased section
• 3bb8a9b Version bump for v0.14.0
• 6fb15fa Merge pull request #240 from privacybydesign/new-keyshare-protocol
• 322f57e Merge branch 'master' into new-keyshare-protocol
• 046f192 Merge pull request #347 from privacybydesign/db-errors
• 063e77e Merge branch 'master' into db-errors
• b12ef55 Merge pull request #348 from privacybydesign/irma-session-host-check
• f468228 Refactor: use path.Match instead of filepath.Match
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #2546.