IAM: OpenID4VP submission handler does not validate submission

nuts-foundation / nuts-node

The reference implementation of the Nuts specification. A decentralized identity network based on the w3c ssi concepts with practical functionality for the healthcare domain.

https://nuts-foundation.gitbook.io

GNU General Public License v3.0

25 stars 16 forks source link

IAM: OpenID4VP submission handler does not validate submission #3058

Closed reinkrul closed 7 months ago

reinkrul commented 7 months ago

Like the s2s handler does (submission.Validate()), but handleAuthorizeResponseSubmission doesn't do this check.

reinkrul commented 7 months ago

It does, PEBKAC