Skip to content

Refactor and merge Callbacks#3151

Merged
gerardsn merged 3 commits intomasterfrom
merge-callback-endpoints
May 31, 2024
Merged

Refactor and merge Callbacks#3151
gerardsn merged 3 commits intomasterfrom
merge-callback-endpoints

Conversation

@gerardsn
Copy link
Member

@gerardsn gerardsn commented May 28, 2024

cleanup and merge callbacks. This contains some fixes listed in #3152, but the majority is left for when we have access to a compliant issuer so we can do an end to end test of the flow.

@gerardsn gerardsn marked this pull request as ready for review May 29, 2024 12:10
Comment on lines +218 to +220
if request.Params.State == nil || *request.Params.State == "" {
return nil, oauthError(oauth.InvalidRequest, "missing state parameter")
}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the Callback has an error but is missing the client state, the actual error will not be shown

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

RFC6749 4.1.2.1. Error Response

state
REQUIRED if a "state" parameter was present in the client
authorization request. The exact value received from the
client.

I wasn't sure what to do with this, but I will wrap the error if there is one

"$ref": "#/components/schemas/VerifiableCredential"
default:
$ref: '../common/error_response.yaml'
/iam/oid4vci/callback:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

also add to calback API description that it's used for both calls.

@gerardsn gerardsn requested a review from woutslakhorst May 31, 2024 08:27
@gerardsn gerardsn merged commit 219beee into master May 31, 2024
@gerardsn gerardsn deleted the merge-callback-endpoints branch May 31, 2024 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants