Skip to content

Latest commit

 

History

22 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

varwof-types

Shared type definitions for AIC / Capability / PrincipalUid / DelegationAuthorization in the varwof PKI suite.

⚠️ Preview — Not for production use. APIs and features may change before official release.

License Go Reference

中文

What is varwof-types?

Core shared type definitions for the varwof PKI suite: AIC (Agent Identity Certificate), Capability, PrincipalUid (SPKI key hash), DelegationAuthorization, PrincipalAuthorization, and more. Zero external dependencies. Referenced by core, gateway-core, register, and all other modules.

Quick Start

import pki "github.com/varwof/types"

// Parse AIC from certificate
aic, err := pki.ParseAIC(cert)

// Validate AIC
err = pki.ValidateAIC(aic)

// Match capability with glob pattern
matched := pki.MatchCapability("oracle/mysql:query:users", "oracle/*:query:*")

Installation

go get github.com/varwof/types@v0.1.0

Core Types

Type Description
AIC Agent Identity Certificate extension structure
Capability Capability declaration (schemeId + capabilityId)
PrincipalUid Principal identifier (SPKI public key hash)
DelegationAuthorization Delegation authorization signature (timestamp + nonce)
PrincipalAuthorization Principal authorization policy
GatewaySessionExtension Gateway session execution constraints
MatchCapability Capability glob pattern matching
ValidateAIC AIC validation

Sub-packages

Package Description
aicjwt AIC-JWT (draft-wei-aic-jwt-00) claims model, JWS sign/verify, 11-step validation pipeline

Ecosystem

graph TB
    subgraph varwof["varwof Ecosystem"]
        core["core<br/>PKI CA"]
        gw["gateway<br/>TCP/HTTP/UDP"]
        gwcore["gateway-core<br/>Security Engine"]
        types["types<br/>Shared Types"]
        reg["register<br/>Capability Registry"]
    end
    core --> types
    gwcore --> types
    reg --> types
Loading

types is the type foundation layer of the varwof ecosystem. This project is a member of the Open Invention Network.

Links

Homepage https://varwof.com
Community https://varwof.org
IETF Draft draft-wei-aic-identity-cert
AIC X.509 (docs) draft-wei-aic-identity-cert-00.md (also .xml / .txt / .html)
AIC-JWT (docs) draft-wei-aic-jwt-00.md (also .xml / .txt / .html)
License Apache-2.0
Member Open Invention Network

Community

Questions, feedback, and port status: AIC Discussions

About

Shared type definitions for the Varwof zero-trust PKI — ASN.1 structures for AIC (Agent Identity Certificate) per draft-wei-aic-identity-cert, plus Capability, DelegationAuthorization, PrincipalAuthorization, and DelegationPolicy. OID constants (IANA PEN 66257), validation helpers, GatewaySession types. Pure Go, zero external dependencies.

Resources

Contributing

Security policy

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages