-
Notifications
You must be signed in to change notification settings - Fork 75
Inform user of revoked credentials #765
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
Pull Request Test Coverage Report for Build 15006433657Details
💛 - Coveralls |
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thinking about the message in the UI: can we surface which credential is revoked, or just that "a credential" is revoked? In scenarios where the proof-request includes more than one credential restriction (e.g.: Person credential and LSBC credential for BCGov's lawyer use-case) it would be helpful to know which credential did not pass the revocation check. If this is not possible, we may just want to update the message to indicate that one or more crdentials that are part of the response to the proof-request ae revoked.
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
Ya we can get the cred_def_id so from there we can get the tag. Would that be enough or is there something else we would need? |
For
For troubleshooting purposes knowing the |
I realized that the revoked field I am using is unfortunately not only filled for revoked fields based on further testing. Jamie has suggested trying to use the |
What should be informing us about the revoked credential is the For more context see https://github.com/openwallet-foundation/acapy/blob/main/open-api/swagger.json#L13336 |
This PR resolves #704
I have added a new "Revoked" state to auth sessions that will be displayed as seen below when the provided credential has been revoked
In addition, the failed state has now had the revoked possibility removed from the list of possible errors. Something we should consider looking into is if the other possible errors would make sense. "Expired" credentials could mean a failed requested_predicate which we should specify.
I also am not sure what we could really mean by a "missing" credential. Is this for when a wallet holds a credential which is not on the ledger? This should not be possible with the BC wallet