microsoft / VerifiableCredentials-Verification-SDK-Typescript

An SDK to help Relying Parties manages their Decentralized Identities and Verifiable Credentials.
MIT License
53 stars 14 forks source link

Self Issued Open Id Invalid Token Handling #126

Closed gproanomsft closed 3 years ago

gproanomsft commented 3 years ago

Problem: VC SDK hard codes the behavior when a token is invalid.

Solution: Allow this to be customizable and default to a 401 for invalid tokens. In accordance to RFC 6750, provide a realm and error property for the WWW-Authenticate header

Validation: Unit tests

Type of change:

Risk: