decentralized-identity / decentralized-identity/dwn-sdk-js
Add current time check against to messages received
Open
feature
- Dominant language
- TypeScript
- Stars
- 322
- Forks
- 99
- PR merge metrics
- No merged PRs in 30d
Description
Currently we don't check the `messageTimestamp` against the current server time when authorizing a message. We should do this to prevent blatant backdated "new" message to be accepted.
There will be times when a DWN needs to bringing in messages with an older time stamp, but those fall into the category of "synchronization", which in my mind has a different authorization context.
Contributor guide
Assessment
This issue has not been assessed yet.