Skip to content

fix: enforce subject and access ownership checks for grants#2199

Open
adrianboros wants to merge 1 commit into
mainfrom
adrian/int1-644-check-grant-subject-ownership
Open

fix: enforce subject and access ownership checks for grants#2199
adrianboros wants to merge 1 commit into
mainfrom
adrian/int1-644-check-grant-subject-ownership

Conversation

@adrianboros
Copy link
Copy Markdown
Contributor

Context

This continues the work started in #2172

The change is aligned with:

Changes

  • Check ownership for the access identifier when present
  • Check ownership for the subject identifier when present
  • Reject the interaction unless all present identifiers belong to the current user

@adrianboros adrianboros requested a review from dragosp1011 May 23, 2026 08:18
@github-actions github-actions Bot added package: wallet/backend Wallet backend implementations type: source Source changes labels May 23, 2026
@adrianboros adrianboros requested a review from Tymmmy May 23, 2026 08:18
@adrianboros adrianboros changed the title fix(wallet): enforce subject and access ownership checks for grants fix: enforce subject and access ownership checks for grants May 23, 2026
@adrianboros adrianboros self-assigned this May 23, 2026
@adrianboros adrianboros changed the title fix: enforce subject and access ownership checks for grants fix: enforce subject and access ownership checks for grants May 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

package: wallet/backend Wallet backend implementations type: source Source changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant