DPP Service Validator · OwnYourData

All services

Eclipse BaSyx DPP API

Entry from our research · information as of 2026-10-18

Operator
Fraunhofer IESE · DE
Web page
https://dpp.basyx.org/
Source code
https://github.com/eclipse-basyx/basyx-go-components
Licence
MIT (SPDX: MIT)
Checks
10 of 10 passed · 2 warnings · full, weekly, on our own test instance (version 1.1.2)
Test instance
Current release of the Docker images of the project: the DPP API with a PostgreSQL database, configured as in the DPP API example of the project, without access control. The test passport is the sample passport of that release, created with POST /v1/dpps. Setup
Listed since
2026-10-18
Entry
services/eclipse-basyx-dpp-api.yaml

Software to run on one's own servers, distributed as Docker images; there is no public instance. We check it once a week on a short-lived test instance of our own. The sample passport is not published under a product identifier, so it is not checked with dpplint.

This list is part of a research project and shares what we currently know. It makes no claim to be complete and is not a legal assessment. Entries from our research come from public information and may be incomplete or out of date. The operator can correct or take over this entry, or ask for its removal: how to add or correct a service.

Example passports · dpplint

No public example passport.

Service checks · dpp-validator

Run 2026-10-18T21:03:51Z · dpp-criteria 08ee851 · JSON

10 of 10 automated checks passed (0 failed, 2 with warnings, 5 skipped: 5 not applicable) · on our own test instance: Eclipse BaSyx DPP API 1.1.2 (release)
Proposed criteria, not counted: 0 of 0 automated checks passed
CriterionRequirement and findingsLevelResult
DPP-API-015 v1 Lifecycle API provides ReadDPPIdsByProductIds
  • warning: step 1 (POST /dppsByProductIds): HTTP status 400 is listed in warn_if_status
 MUSTwarning
DPP-API-022 v1 Unknown passport ID is answered with 404
  • warning: step 1 (GET /dpps/{randomId}): $.message selects nothing, expected a value
 MUSTwarning
DPP-API-007 v2 Errors use the EN 18222 status codes MUSTpassed
DPP-API-013 v1 Lifecycle API provides ReadDPPById MUSTpassed
DPP-API-014 v1 Lifecycle API provides ReadDPPByProductId MUSTpassed
DPP-API-019 v1 Lifecycle API provides ReadDPPVersionByIdAndDate SHOULDpassed
DPP-API-020 v1 API paths carry the version prefix v1/ MUSTpassed
DPP-API-021 v2 elementIdPath uses RFC 9535 JSONPath MUSTpassed
DPP-API-023 v1 API honours the representation query flag MUSTpassed
DPP-DEX-004 v1 API responses are JSON MUSTpassed
DPP-DEX-002 v1 HTTPS with a valid certificate
  • checked on our own test instance: certificate, TLS and HTTP versions would describe our test environment, not the software
 MUSTskipped
not applicable
DPP-DEX-003 v1 TLS 1.2 or higher, older versions refused
  • checked on our own test instance: certificate, TLS and HTTP versions would describe our test environment, not the software
 MUSTskipped
not applicable
DPP-DEX-005 v1 HTTP/2 is supported
  • checked on our own test instance: certificate, TLS and HTTP versions would describe our test environment, not the software
 MUSTskipped
not applicable
DPP-DEX-006 v1 HTTP versions below HTTP/2 are not used
  • checked on our own test instance: certificate, TLS and HTTP versions would describe our test environment, not the software
 MUSTskipped
not applicable
DPP-SEC-001 v3 Passport cannot be changed without authorisation
  • checked on our own test instance. The test instance runs without access control, as in the example of the project, so the result would describe our configuration rather than the software.
 MUSTskipped
not applicable
DPP-ACC-003 v1 Controlled data elements are delivered per role (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-006 v1 Controlled data elements are not delivered without authorisation (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-008 v1 Access policy defines element-level rights, granting and revocation (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-012 v1 Fine-granular read of a controlled element without credentials is refused (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-ACC-014 v1 Access to controlled data is logged tamper-evidently (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable
DPP-API-016 v1 Lifecycle API provides UpdateDPPById (proposed, not counted)
  • needs test credentials of the operator (automated-auth), not supported in this version
 MUSTskipped
needs credentials
DPP-BAT-004 v2 Battery passport releases Annex XIII point 3 data only to authorities (proposed, not counted)
  • the service does not declare battery, access-levels
 MUSTskipped
not applicable
DPP-OPS-006 v1 Separate test and production environments (proposed, not counted)
  • self-declared criterion: declarations are not evaluated in this version and never count as passed
 SHOULDskipped
not evaluated
DPP-STO-017 v1 Archived versions keep the access restrictions (proposed, not counted)
  • the service does not declare access-levels
 MUSTskipped
not applicable

Results of automated checks only. They are no certification and establish no presumption of conformity.