You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Upon receiving credentials in send_credential_request we should make use of identiy.rs's JwtCredentialValidator in conjunction with our own Verifier struct.
Note that the JwtCredentialValidator validates the actual JWT as well as for validation rules according to VC DM 1.1. So that means that for OBv3 additional validation checks need to be performed through schema validation.
We already use this method of verifying for Linked VPs and Domain Linkage, so we can just use it the same way for incoming credentials.
We should also make sure that UniMe validates that the Credentials it receives correspond with the Credential Configurations of the Issuer's metadata.
I'll make this into a seperate Issue
Oran-Dan
changed the title
Add Json schema validation to credential verification process
Add JWT and Json schema validation to credential verification process
Feb 22, 2025
Description
Check incoming credentials if they're valid JWT's and if they comply with their corresponding Json schema.
Motivation
Adds security and improves the verification process
Resources
https://crates.io/crates/jsonschema
To-do List
validate_linked_verifiable_presentations
send_credential_request
The text was updated successfully, but these errors were encountered: