[Tools] verify nested JWS - Githubissues

italia / spid-cie-oidc-django

The SPID/CIE OIDC Federation SDK, written in Python

Apache License 2.0

23 stars 25 forks source link

[Tools] verify nested JWS #240

Closed peppelinux closed 2 years ago

peppelinux commented 2 years ago

https://github.com/italia/spid-cie-oidc-django/blob/main/spid_cie_oidc/onboarding/views.py#L272

the tool should verify also the encrypted JWS as they come from userinfo endpoint

peppelinux commented 2 years ago

Done here https://github.com/italia/spid-cie-oidc-django/commit/158840b776945f9acc5688f087148ed570c7e46d