DECODEproject / DECODEproject/credential-issuer
Non reissuable credential code are not reusable for different authorizable attribute id's
- Dominant language
- Python
- Stars
- 6
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
When trying non reissuable credentials and setting up valid codes such as "1234" for different autorizable attributes, the credential issuer denies a credential if a code has been used *once* for *all of the history of credentials*. That is, the DB is not authorizable attribute speciffic, but rather checks wether the code is present in *all of the set-up credentials*.
This should be made such that codes are speciffic to each authorizable attribyute, IMO. What do you think @puria ?
Contributor guide
Research direction
No file, test, or entry point is named. Start by tracing credential issuance to the database check for non-reissuable codes, then verify that the same code can be accepted for different authorizable attribute IDs while remaining rejected when reused for the same attribute.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authentication, databases
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 32/100