microsoft / VerifiableCredentials-Verification-SDK-Typescript

An SDK to help Relying Parties manages their Decentralized Identities and Verifiable Credentials.
MIT License
53 stars 14 forks source link

Beejones/add validation safeguards #122

Closed beejones closed 3 years ago

beejones commented 3 years ago

Problem: An app can send many times the same VC in a VP in order to do a DOS attack.

Solution: Added validation safeguards which limits the number of tokens that can be in a SIOP and the size of the token.

Validation: Added new unit tests

Type of change:

Risk: