opencrvs / opencrvs-core

A global solution to civil registration
https://www.opencrvs.org
Other
90 stars 73 forks source link

Pass record-specific token to country config when registering a event #7849

Open naftis opened 1 month ago

naftis commented 1 month ago

Currently, the registrar's token is passed to country-config, so it can call core back to confirm or reject the registration. We need to amend this so, that we create a record-specific token using the token exchange endpoint.

This enables us to send the record-specific token to MOSIP, so the access is limited if the token is leaked and we can control the tokens time to live.

Dev tasks

naftis commented 2 weeks ago

@onnee04 the end-to-end tests are sufficient to QA this ticket