Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Require client authentication in the evaluation endpoint #199

Merged

Conversation

wcalderipe
Copy link
Collaborator

No description provided.

Move the evaluation to its own controller.

Add E2E tests for the evaluation.
@wcalderipe wcalderipe self-assigned this Mar 27, 2024
@wcalderipe wcalderipe marked this pull request as ready for review March 27, 2024 19:15
Comment on lines +31 to +33
const aliceSignature = await signJwt(payload, secp256k1PrivateKeyToJwk(UNSAFE_PRIVATE_KEY.Alice))
const bobSignature = await signJwt(payload, secp256k1PrivateKeyToJwk(UNSAFE_PRIVATE_KEY.Bob))
const carolSignature = await signJwt(payload, secp256k1PrivateKeyToJwk(UNSAFE_PRIVATE_KEY.Carol))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

did you intentionally remove { alg: SigningAlg.EIP191 } so it's not using EIP191 to sign things now?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It'll use the JWK alg that in this case is ES256K. Is that wrong?

@wcalderipe wcalderipe merged commit 47eafd8 into main Mar 28, 2024
2 checks passed
@wcalderipe wcalderipe deleted the feature/require-client-auth-in-the-evaluation-endpoint branch May 27, 2024 09:17
mattschoch pushed a commit that referenced this pull request Jun 19, 2024
* Require client ID in the evaluation endpoint

Move the evaluation to its own controller.

Add E2E tests for the evaluation.

* Require client secret on the evaluation endpoint
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants