1
0
Форкнуть 0
Граф коммитов

463 Коммитов

Автор SHA1 Сообщение Дата
Brandon Murdoch 256d54c71b
Merge pull request #139 from jcruiz/patch-2
Request Service API notice for VC-SDK
2021-10-13 14:40:58 +01:00
Juan Camilo ruiz 3b6369f967
Request Service API notice for VC-SDK 2021-10-08 14:34:39 +01:00
Guillermo Proano 7553118dc0
Update crypto sdk (#138)
* Update crypto sdk

* force build

* update crypto sdk

* access to internal repo

* add new line

* try this

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-08-11 15:27:18 -07:00
Jorge Ibarra 343b7085b6
Merge pull request #137 from microsoft/joibar/update-crypto-sdk-dependency
Update crypto sdk dependency
2021-08-04 11:06:08 -07:00
Jorge Ibarra 895d04e4ae Missing # character 2021-08-04 08:59:18 -07:00
Jorge Ibarra 1561a6548a Add changelog + bump version 2021-08-04 08:29:30 -07:00
Jorge Ibarra ca440e4f43 Update crypto sdk dependency 2021-08-03 21:27:34 -07:00
Guillermo Proano 2a41074e14
Fix VC forgery bug (#136)
* Fix VC forgery bug

* update versions

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-07-01 12:27:07 -07:00
Guillermo Proano 79ffb63b75
Allow caller to skip checking required input attestations (#134)
* Allow caller to skip checking required input attestations

When attestations are checked by the caller, skip the call to validateAllRequiredInputs

* repub

* do it right

* unwind a bunch of if checks and allow the caller to override validateAllRequiredInputs

* update rev

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-06-07 15:53:56 -07:00
Guillermo Proano 8273d2219a
Modify input attestation path (#133)
* complete siop validation

* refactor, but all tests fail

* tests are passing now?

* now tests fail

* almost there

* new tests

* cleanup

* Add flag indicating whether or not InputModelAttestations populated

* getting there

* fixes

* generate a new package

* make hasAttestations a function

* revert

* bug fixes

* create  a new package

* fix

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-06-03 14:15:30 -07:00
Guillermo Proano 284738407d
Gproano/complete siop validation (#132)
* complete siop validation

* refactor, but all tests fail

* tests are passing now?

* now tests fail

* almost there

* new tests

* cleanup

* PR feedback

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-05-25 16:35:56 -07:00
Guillermo Proano 4d7cfe76b3
Allow a siop token to be prevalidated elsewhere before processing it (#131)
* Allow  a siop token to be prevalidated elsewhere before processing it

* updates

* one more update

* refinements

* add unit tests

* cleanup

* cleanup

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-05-13 15:01:26 -07:00
Mauricio Esquivel Rogel ff2edf8715
Merge pull request #130 from microsoft/maesqui/vulnerability-fixes
Fixed JSONPath vulnerability
2021-05-11 12:58:51 -07:00
Mauricio Esquivel Rogel fcb599c9f4
Merge pull request #129 from microsoft/maesqui/id-token-validation
IdToken Validation
2021-05-10 16:00:37 -07:00
Mauricio Esquivel Rogel 061d134e88 Version update. 2021-05-09 08:28:22 -07:00
Mauricio Esquivel Rogel 233cc0dc90 Fixed vulnerability. 2021-05-09 07:59:30 -07:00
Mauricio Esquivel Rogel 70bcb1be12 More PR feedback. 2021-05-09 06:43:07 -07:00
Mauricio Esquivel Rogel 972a6892bc Delete dead code. 2021-05-09 06:29:16 -07:00
Mauricio Esquivel Rogel 51e5816d67 Updated version. 2021-05-09 04:37:08 -07:00
Mauricio Esquivel Rogel 0ae740bf45 PR feedback. 2021-05-09 04:26:20 -07:00
Mauricio Esquivel Rogel 4b73c71d85 Update version and changelog. 2021-05-07 14:37:10 -07:00
Mauricio Esquivel Rogel 647a98bfb0 Updated unit tests. 2021-05-07 14:32:21 -07:00
Mauricio Esquivel Rogel f4b53285b8 First iteration. 2021-05-06 15:43:22 -07:00
Guillermo Proano 45a1aa8533
Invalid Verifiable Presentation returns IValidatorOptions.invalidTokenError (#128)
* When a VP/VC has been revoked, return IValidatorOptions.invalidTokenError

Use IValidatorOptions.invalidTokenError for the response to a revoked VC
Verify with unit tests

* Standardize invalid Verifiable Presentation to return IValidatorOptions.invalidTokenError

* changelog

* the other place for VPs are validated

* up[date version

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-05-05 13:47:04 -07:00
Guillermo Proano 1111bfaffd
When a VP/VC has been revoked, return IValidatorOptions.invalidTokenError (#127)
Use IValidatorOptions.invalidTokenError for the response to a revoked VC
Verify with unit tests

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-05-03 14:25:14 -07:00
Guillermo Proano e87c080bd0
Self Issued Open Id Invalid Token Handling (#126)
* IValidatorOptions is the pathway to messaging invalid token errors

* DidValidation returns 401 where appropriate

* token validation now reutrns 401

* fix unit tests

* change log

* test tweaks, missing realm settings

* remove realm

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-04-28 16:32:10 -07:00
nithyaganeshng 98419228b1
Merge pull request #125 from microsoft/niganesh/add-codeowners
add codeowners to the repository
2021-04-27 12:10:55 -07:00
nithyaganeshng 15a590a727 add codeowners to the repository 2021-04-27 11:36:01 -07:00
beejones f5b8abbc09
Merge pull request #122 from microsoft/beejones/add-validation-gate
Beejones/add validation safeguards
2021-04-07 19:17:16 +00:00
beejones b7942c6da1 Merge branch 'master' into beejones/add-validation-gate 2021-04-07 09:43:50 +00:00
Guillermo Proano 2098b7fbae
Performance enhancements (#124)
* JsonWebSignatureToken is a class for parsing JWS Compact Token strings

* CLaimToken is now tested

* a few more fixes

* changelog

* order of operations

* just need to purge superfluous spies

* back to 100%

* remove property until needed

Co-authored-by: Guillermo Proano <gproano@microsoft.com>
2021-04-06 11:36:43 -07:00
beejones 8a8968334f update change log 2021-04-06 09:04:30 +00:00
beejones 48c5ad1ae4 Merge branch 'master' into beejones/add-validation-gate 2021-04-06 08:16:42 +00:00
Mauricio Esquivel Rogel cadc9c7873
Merge pull request #123 from microsoft/maesqui/client-api
Client API Integration
2021-04-01 15:18:09 -06:00
Mauricio Esquivel Rogel 7658e4b072 Removed redunant else statements. 2021-03-29 16:21:25 -07:00
Mauricio Esquivel Rogel 1f452593fb PR feedback: attack vector. 2021-03-29 15:42:27 -07:00
Mauricio Esquivel Rogel 476550cd5f Added type check for trusted issuers. 2021-03-26 13:54:04 -07:00
Mauricio Esquivel Rogel 16ac2f6e97 PR feedback. 2021-03-25 22:26:09 -07:00
Mauricio Esquivel Rogel 23325556a3 Change log updated. 2021-03-24 18:38:36 -07:00
Mauricio Esquivel Rogel 38bdcd2197 Package update. 2021-03-24 18:34:00 -07:00
Mauricio Esquivel Rogel 8c0a4b0a4e Finished unit testing. 2021-03-24 18:27:39 -07:00
Mauricio Esquivel Rogel ae5eade7e0 Added unit tests. 2021-03-24 18:10:44 -07:00
Mauricio Esquivel Rogel 8de1d8efd9 IdTokenHint support. 2021-03-24 17:34:37 -07:00
Mauricio Esquivel Rogel db7b6aa11d Added trusted issuers to IdTokenAttestationModel. 2021-03-23 14:11:41 -07:00
beejones a7312b1ef5 add tests 2021-03-18 14:54:14 +00:00
beejones 60abba6e90 add safeguards to VP validation 2021-03-18 13:01:28 +00:00
beejones eecaaac6b0 Add safeguards to builder 2021-03-17 14:36:44 +00:00
beejones e5e1a03229 Add ValidationSafeguard test 2021-03-17 13:18:47 +00:00
beejones fe06405300 Add ValidationSafeguards 2021-03-17 11:17:09 +00:00
beejones 57c748487e setup 2021-03-17 08:56:10 +00:00