microsoft / VerifiableCredentials-Verification-SDK-Typescript

An SDK to help Relying Parties manages their Decentralized Identities and Verifiable Credentials.
MIT License
53 stars 14 forks source link

Index Claims Testing Strategy: Audit API and Rules Permissions #100

Closed mauesrog closed 3 years ago

mauesrog commented 3 years ago

Problem: There is a testing gap for the index claim feature. Namely, we currently have no way of ensuring correctness in the IndexClaim View projection.

Solution: Create a highly secure, small API. The Audit API will securely query IndexClaim View projection solely for testing purposes. In order to make sure this API is not publicly consumed, contract rules will now be able to optionally define special permissions for endpoints. See Documentation Links for further information.

Validation: Full coverage unit tests.

Type of change:

Risk:

Work Item links: https://identitydivision.visualstudio.com/Engineering/_workitems/edit/1092987

Documentation Links: https://microsoft.sharepoint.com/:w:/t/ProjectAspen/ERO0LTeEwkhOunaagt1ynWcBGu9RqEP_VowmVUKybIVF4Q?e=oUoz4L