Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

proof request attribute groupName is the same as another one #586

Closed
berendsliedrecht opened this issue Dec 22, 2021 · 0 comments
Closed

Comments

@berendsliedrecht
Copy link
Contributor

berendsliedrecht commented Dec 22, 2021

When we receive a proofrequest it should not be possible for any groupName to be the same. e.g. When we receive a proof request with groupName foo, bar and foo it will not retrieve the correct credentials from Indy as we include foo twice.

This should be fixed IMO when generating a proof request on the verifier side. However it might be very useful to check if there are non-unique keys when receiving a proof request and logging a warning or handling it at least in some way.

tl;dr

We can receive proof request with non-unique groupNames. This will result in unexpected behaviour and we will not be able to fulfil the proof request.

Places we need to check for the proof request keys: (proofService)

  • When we receive a proof request
    • processRequest in service
  • When we send a proof request
    • createRequest
    • createRequestAsResponse

What to check:

  • Check whether proof request attributes keys and predicate keys do not overlap.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant