add nonce and aud check

Signed-off-by: F-Node-Karlsruhe <[email protected]>
european-epc-competence-center · Apr 23, 2024 · 5695e62 · 5695e62
1 parent 3908b7c
commit 5695e62
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/api/src/services/verifier/sdjwt.ts b/api/src/services/verifier/sdjwt.ts
@@ -52,6 +52,12 @@ export async function verifySDJWT(
         header.kid as string
       );
       const verify = await ES256.getVerifier(publicKey);
+      if (nonce && payload.nonce !== nonce) {
+        return false;
+      }
+      if (aud && payload.aud !== aud) {
+        return false;
+      }
       return verify(data, signature);
     };