DECODEproject / DECODEproject/credential-issuer

Non reissuable credential code are not reusable for different authorizable attribute id's

Open
#87 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
6
Forks
1
PR merge metrics
No merged PRs in 30d

Description

When trying non reissuable credentials and setting up valid codes such as "1234" for different autorizable attributes, the credential issuer denies a credential if a code has been used *once* for *all of the history of credentials*. That is, the DB is not authorizable attribute speciffic, but rather checks wether the code is present in *all of the set-up credentials*.

This should be made such that codes are speciffic to each authorizable attribyute, IMO. What do you think @puria ?

Contributor guide

Open the contributing guide

Research direction

No file, test, or entry point is named. Start by tracing credential issuance to the database check for non-reissuable codes, then verify that the same code can be accepted for different authorizable attribute IDs while remaining rejected when reused for the same attribute.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, databases
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.