Downloads

The AIDID RP SDK and the prose-spec bundle, served as static files from this site. There is no registry account and no server of ours in the loop.

Both bundles are static files. Installing or unpacking them gives you the RP SDK and the specs; it does not give you a DID, MSG, or a production login.

@aidid/login

sdk · 0.1.0
Install or unpack
npm install https://aidid.im/download/aidid-login-0.1.0.tgz
Fileaidid-login-0.1.0.tgz
Bytes106390 bytes (103.9 kB)
SHA-256dadfec05bf8a0f257ab7ca8f54de2085efbe8d75fc50dd110ff866cab0a641cd
SRI (sha384)sha384-DBCWJFn0MJEC6+bjerjS+my/UioxhhL+4J488vyfBPmnJSwNGcGYF9lunvpoo4ee
LicenseMIT
Version0.1.0
Inside the SDK tarball
  • .package/src/index.js
  • typespackage/types/index.d.ts
  • demopackage/examples/node/offline-demo.mjs
  • vectorpackage/fixtures/offline-signin-vector.json
  • manifestpackage/package.json

Notes: Pure ESM (`type: module`). The signature verifier is the only module that imports the optional peer dependency `@msg-chain/sdk`, so `npm install` will warn about it; without it the offline demo cannot do real Dilithium-5 signing. Everything else (message building, request/response verification, registry lookup) is dependency-free.

Open the file ↗

AIDID prose specs (v1)

specs · v1
Install or unpack
tar -xzf aidid-specs-v1.tgz
Fileaidid-specs-v1.tgz
Bytes195798 bytes (191.2 kB)
SHA-256f53f9465d720dad5913219b4b8058ef5df67199ae1ebd463ae2938a75517292f
SRI (sha384)sha384-xqSvy+AtmbqWeLxSwBdJY6DBDQj2hsc3a1k1989Lhrzv/Zi0g3cW4l919kvM4mf5
Licenseunspecified (see specs/README.md)
Versionv1
Inside the SDK tarball
  • specsspecs/

Notes: The seven hand-written v1 documents under `docs/specs/` that every published JSON Schema names in its `x-aidid.spec.doc`. They normally live in a private repository; this bundle is generated at build time. The authoritative document versions are listed in `specs/README.md`.

Open the file ↗

How to verify a download

Every file is published with its byte length, its SHA-256 and its Subresource Integrity hash. Download it, hash it locally, and compare the printed value with the SHA-256 above, character for character, before you install or unpack it. If they differ, do not use the file.

  1. 1. Download the file:

    curl -sSLO https://aidid.im/download/aidid-login-0.1.0.tgz
curl -sSLO https://aidid.im/download/aidid-specs-v1.tgz

  2. 2. Hash it locally (either command works):

    sha256sum aidid-login-0.1.0.tgz   # or: shasum -a 256 aidid-login-0.1.0.tgz
sha256sum aidid-specs-v1.tgz   # or: shasum -a 256 aidid-specs-v1.tgz

  3. 3. Compare with the published value. On macOS / Linux, `shasum -a 256 FILE` and `sha256sum FILE` print the same digest.

    • aidid-login-0.1.0.tgzdadfec05bf8a0f257ab7ca8f54de2085efbe8d75fc50dd110ff866cab0a641cd
    • aidid-specs-v1.tgzf53f9465d720dad5913219b4b8058ef5df67199ae1ebd463ae2938a75517292f

What the SRI hash is for

The sha384 value is the browser Subresource Integrity hash for the same bytes. Put it on a script or module tag and the browser refuses to execute the file when it does not match; for the SDK tarball, which npm installs, the SHA-256 comparison above is the check.