mozilla / openbadges-validator

Tools for validating openbadges assertions
Mozilla Public License 2.0
14 stars 13 forks source link

Properly test for interdependence between hashed/salt/email-related properties #13

Open toolness opened 11 years ago

toolness commented 11 years ago

Currently, the validator doesn't do a great job of testing the interdependence between recipient and salt in 0.5 assertions, or recipient.identity, recipient.hashed, and recipient.salt in 1.0 assertions. It's even mentioned in a TODO in the test suite.

We should fix this, as we want OBI tools to be able to safely assume a validated badge is actually valid.

threeqube commented 11 years ago

We should fix this, as we want OBI tools to be able to safely assume a validated badge is actually valid.

THIS. :+1: