Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access token not verified in the credential endpoint implementation #95

Open
TimoGlastra opened this issue Mar 8, 2024 · 1 comment

Comments

@TimoGlastra
Copy link
Collaborator

When looking at the credential endpoint implementation in the issuer-rest package, I couldn't find any code related to the validation of the access token generated in the access token endpoint.

This endpoint should verify the bearer authorization token passed in the header.

I might be missing where this is happening, so in that case, please point me to the file where this is handled (I'm looking for some util functions I may be able to re-use for the Credo endpoint implementation)

@nklomp
Copy link
Contributor

nklomp commented Mar 12, 2024

Yeah, totally forgot about it, it seems 🤦

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants