search

credential-handler / authn.io

Credential Mediator Polyfill
https://github.com/w3c-ccg/credential-handler-api
Other
44 stars 8 forks source link

Stop sending `credentialRequestOrigin` (send as `null`) when using `url` to send requests #149

Open dlongley opened 1 year ago

dlongley commented 1 year ago

The mediator can send a trusted credentialRequestOrigin value and that's useful, however, some other non-mediator party could send an invalid value. Wallets that receive CHAPI requests via url should not trust this value and should use the the origin in the protocols URL of choice instead.

dlongley commented 6 days ago

Related: #165.