decentralized-identity / decentralized-identity/dwn-sdk-js

Add current time check against to messages received

Open
#533 0 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
TypeScript
Stars
322
Forks
99
PR merge metrics
No merged PRs in 30d

Description

Currently we don't check the `messageTimestamp` against the current server time when authorizing a message. We should do this to prevent blatant backdated "new" message to be accepted.

There will be times when a DWN needs to bringing in messages with an older time stamp, but those fall into the category of "synchronization", which in my mind has a different authorization context.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.