search

microsoft / azure-privacy-sandbox-kms

MIT License
5 stars 10 forks source link

Beejones/key release policy operators #138

Closed beejones closed 2 months ago

beejones commented 2 months ago

Before this change, the key release policy was only using an array of claims which needed to be found in the attestation. The policy is extended with operators. We added two operators: gt: Greater than indicating that the attestation claim must be greater than what is indicated in the policy. gte: Greater than or equal.

The key release policy logic changed completely as also the constitution. New unit tests check the logic of key release policy.

beejones commented 2 months ago

Tests: https://github.com/microsoft/privacy-sandbox-dev/actions/runs/11036104516

beejones commented 2 months ago

new test: https://github.com/microsoft/privacy-sandbox-dev/actions/runs/11067938914