hyperledger / anoncreds-clsignatures-rs

Apache License 2.0
7 stars 12 forks source link

Prevent and detect invalid credentials #20

Closed andrewwhitehead closed 1 year ago

andrewwhitehead commented 1 year ago

It seems to be possible at the moment to leave out schema attributes when issuing. This isn't detected during issuance or credential processing, and only becomes a problem when attempting to present the credential.

I propose to make this more strict this by requiring that all attributes are provided in create_credential, and then checking the same in process_credential on the prover side.