-
Notifications
You must be signed in to change notification settings - Fork 36
Add Status List Token validation for MSO MDoc #476
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
dzarras
merged 8 commits into
eu-digital-identity-wallet:main
from
niscy-eudiw:feat/mso-mdoc-status-list-token-validation
Dec 8, 2025
Merged
Add Status List Token validation for MSO MDoc #476
dzarras
merged 8 commits into
eu-digital-identity-wallet:main
from
niscy-eudiw:feat/mso-mdoc-status-list-token-validation
Dec 8, 2025
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
babisRoutis
previously approved these changes
Dec 8, 2025
babisRoutis
reviewed
Dec 8, 2025
src/main/kotlin/eu/europa/ec/eudi/verifier/endpoint/adapter/out/mso/Cbor.kt
Outdated
Show resolved
Hide resolved
babisRoutis
reviewed
Dec 8, 2025
src/main/kotlin/eu/europa/ec/eudi/verifier/endpoint/adapter/out/mso/MDocStatusReference.kt
Outdated
Show resolved
Hide resolved
f21f41e to
3c9e88f
Compare
This reverts commit f81275a.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The version of the walt.id MSO MDoc credentials library we are using is lacking support for Status List Tokens.
Given we cannot upgrade to the latest version, a workaround is needed for supporting Status List Token validations for MSO MDoc.
Checking https://github.com/ISOWG10/ISO-18013/blob/main/Working%20Documents/Working%20Draft%20ISO_IEC_18013-5_second-edition_CD_ballot_resolution_v3.pdf, we find the following:
Per 12.3.4 Signing method and structure for MSO:
Additionally per 12.3.6.5 Status list details:
This PR introduces Status List Token validation for MSO MDoc as follows:
IssuerAuth, which is aMobileSecurityObjectas aMapElementMapElementcontains the keystatusstatusmust be aMapElementstatuscontains the keystatus_liststatus_listis aMapElementthat can be decoded as aStatusReference- the optionalcertificateelement is ignoredStatusReferencefetch the currentStatusand ensure it isStatus.ValidCloses #474