fission-codes / auth-lobby

The authentication service that Fission services run.
https://auth.fission.codes
GNU Affero General Public License v3.0
12 stars 1 forks source link

Fix closed UCAN definition #69

Closed expede closed 3 years ago

expede commented 3 years ago

I think this was probably introduced as a typo.

main is set to fail if there's a proof in the UCAN. It's valid to have a proof: you need to show that you have the ability to delegate the requested resources (which doesn't seem to be checked right now?) What a closed UCAN is trying to do is not delegate anything, since at this stage you are just proving that you are who you claim to be (bootstrapping a secure channel).

This PR checks the correct field ✅ (No potency = authN only)