net.neodb.profile

Documentation

Link from this ATProto account to the owner's NeoDB identity, modeled on FEP-c390 identity proofs with the direction mirrored: the record living in the DID's repo proves the DID side (only the DID holder can write here), while the proof, signed with the ActivityPub actor's federation key, proves the NeoDB side. Verifiers must check that 'did' equals the repo's DID and that the proof's verificationMethod belongs to 'actor'.

main record

Record Key literal:self Fixed literal value

Properties

actor string uri Required

ActivityPub actor id of the owner's NeoDB identity.

createdAt string datetime Required

When the ATProto account was linked to the NeoDB identity.

did string did Required

DID of this repo; bound into the signed statement so the record cannot be replayed in another repo.

handle string Required

Fediverse handle of the identity, user@instance.

proof ref net.neodb.profile#proof Optional

No description available.

url string uri Required

Profile page on the originating NeoDB instance.

View raw schema

{
  "key": "literal:self",
  "type": "record",
  "record": {
    "type": "object",
    "required": [
      "did",
      "actor",
      "url",
      "handle",
      "createdAt"
    ],
    "properties": {
      "did": {
        "type": "string",
        "format": "did",
        "description": "DID of this repo; bound into the signed statement so the record cannot be replayed in another repo."
      },
      "url": {
        "type": "string",
        "format": "uri",
        "description": "Profile page on the originating NeoDB instance."
      },
      "actor": {
        "type": "string",
        "format": "uri",
        "description": "ActivityPub actor id of the owner's NeoDB identity."
      },
      "proof": {
        "ref": "net.neodb.profile#proof",
        "type": "ref"
      },
      "handle": {
        "type": "string",
        "description": "Fediverse handle of the identity, user@instance."
      },
      "createdAt": {
        "type": "string",
        "format": "datetime",
        "description": "When the ATProto account was linked to the NeoDB identity."
      }
    }
  },
  "description": "Link from this ATProto account to the owner's NeoDB identity, modeled on FEP-c390 identity proofs with the direction mirrored: the record living in the DID's repo proves the DID side (only the DID holder can write here), while the proof, signed with the ActivityPub actor's federation key, proves the NeoDB side. Verifiers must check that 'did' equals the repo's DID and that the proof's verificationMethod belongs to 'actor'."
}

proof object

W3C Data Integrity style proof (cf. FEP-c390 / FEP-8b32). Cryptosuite rsa-pkcs1-sha256-jcs follows the eddsa-jcs-2022 procedure with RSA, since ActivityPub federation keys are RSA: the signature is RSASSA-PKCS1-v1_5 with SHA-256 over sha256(JCS(proof minus proofValue)) || sha256(JCS(record minus proof)), JCS canonicalization per RFC 8785, proofValue base64-encoded. verificationMethod is the actor's public key as published in its ActivityPub actor document.

Properties

created string datetime Required

An RFC 3339 formatted timestamp.

cryptosuite string Required

No description available.

Known values: rsa-pkcs1-sha256-jcs

proofPurpose string Required

No description available.

Known values: assertionMethod

proofValue string Required

No description available.

type string Required

No description available.

Known values: DataIntegrityProof

verificationMethod string uri Required

A valid URI.

View raw schema

{
  "type": "object",
  "required": [
    "type",
    "cryptosuite",
    "created",
    "verificationMethod",
    "proofPurpose",
    "proofValue"
  ],
  "properties": {
    "type": {
      "type": "string",
      "knownValues": [
        "DataIntegrityProof"
      ]
    },
    "created": {
      "type": "string",
      "format": "datetime"
    },
    "proofValue": {
      "type": "string"
    },
    "cryptosuite": {
      "type": "string",
      "knownValues": [
        "rsa-pkcs1-sha256-jcs"
      ]
    },
    "proofPurpose": {
      "type": "string",
      "knownValues": [
        "assertionMethod"
      ]
    },
    "verificationMethod": {
      "type": "string",
      "format": "uri"
    }
  },
  "description": "W3C Data Integrity style proof (cf. FEP-c390 / FEP-8b32). Cryptosuite rsa-pkcs1-sha256-jcs follows the eddsa-jcs-2022 procedure with RSA, since ActivityPub federation keys are RSA: the signature is RSASSA-PKCS1-v1_5 with SHA-256 over sha256(JCS(proof minus proofValue)) || sha256(JCS(record minus proof)), JCS canonicalization per RFC 8785, proofValue base64-encoded. verificationMethod is the actor's public key as published in its ActivityPub actor document."
}