impierce / identity-wallet

A Tauri-based Identity Wallet for people to manage Decentralized Identities and Verifiable Credentials.

https://www.impierce.com

Apache License 2.0

17 stars 4 forks source link

feat: validate domain linkage #245

Closed daniel-mader closed 2 weeks ago

daniel-mader commented 3 weeks ago

Description of change

Validate any domain linkage credentials (hosted under a .well-known endpoint) to enhance trustworthiness during a login or sharing flow.

Domain validation is performed for:

[x] SIOP
[ ] VP
[ ] VCI

There are UI/UX designs lacking for "Verified" in VP & VCI flows.

Links to any relevant issues

244

How the change has been tested

Automated integration tests against a mock_server:

[x] no .well-known endpoint at all
[x] .well-known endpoint hosts valid DID, but it is different than claimed
[x] .well-known endpoint hosts expected DID

Definition of Done checklist

Add an x to the boxes that are relevant to your changes.

[x] I have followed the contribution guidelines for this project
[x] I have performed a self-review of my own code
[x] I have commented my code, particularly in hard-to-understand areas
[x] I have made corresponding changes to the documentation
[x] I have added tests that prove my fix is effective or that my feature works
[x] New and existing unit tests pass locally with my changes