Inform user of revoked credentials#765
Inform user of revoked credentials#765Gavinok wants to merge 5 commits intoopenwallet-foundation:mainfrom
Conversation
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
Pull Request Test Coverage Report for Build 15006433657Details
💛 - Coveralls |
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
esune
left a comment
There was a problem hiding this comment.
Thinking about the message in the UI: can we surface which credential is revoked, or just that "a credential" is revoked? In scenarios where the proof-request includes more than one credential restriction (e.g.: Person credential and LSBC credential for BCGov's lawyer use-case) it would be helpful to know which credential did not pass the revocation check. If this is not possible, we may just want to update the message to indicate that one or more crdentials that are part of the response to the proof-request ae revoked.
Signed-off-by: Gavin Jaeger-Freeborn <gavinfreeborn@google.com>
Ya we can get the cred_def_id so from there we can get the tag. Would that be enough or is there something else we would need? |
|
For
For troubleshooting purposes knowing the |
|
I realized that the revoked field I am using is unfortunately not only filled for revoked fields based on further testing. Jamie has suggested trying to use the |
|
What should be informing us about the revoked credential is the For more context see https://github.com/openwallet-foundation/acapy/blob/main/open-api/swagger.json#L13336 |
This PR resolves #704
I have added a new "Revoked" state to auth sessions that will be displayed as seen below when the provided credential has been revoked
In addition, the failed state has now had the revoked possibility removed from the list of possible errors. Something we should consider looking into is if the other possible errors would make sense. "Expired" credentials could mean a failed requested_predicate which we should specify.
I also am not sure what we could really mean by a "missing" credential. Is this for when a wallet holds a credential which is not on the ledger? This should not be possible with the BC wallet