Skip to content

feat: validate card payload signature#2169

Merged
cozminu merged 10 commits intomainfrom
cu/2104-validate-card-payload-signature
Oct 31, 2025
Merged

feat: validate card payload signature#2169
cozminu merged 10 commits intomainfrom
cu/2104-validate-card-payload-signature

Conversation

@cozminu
Copy link
Copy Markdown
Contributor

@cozminu cozminu commented Oct 31, 2025

@cozminu cozminu self-assigned this Oct 31, 2025
@cozminu cozminu linked an issue Oct 31, 2025 that may be closed by this pull request
6 tasks
@github-actions github-actions bot added package: wallet/backend Wallet backend implementations type: source Source changes labels Oct 31, 2025
if (!data.currencyExponent) throw new Error('Missing currency exponent')

// Only EUR (0978) is supported for now
const currency = uint8ArrayToHex(data.currencyCode)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we allow any currency?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, ignore that, we allow any currency. The currencyCode is not verified against anything from the webhook/outgoingPayment details so it's flexible.

Comment thread packages/wallet/backend/src/interledgerCard/service.ts
Comment thread packages/wallet/backend/src/rafiki/service.ts Outdated
Comment thread packages/wallet/backend/src/rafiki/validation.ts Outdated
@cozminu cozminu changed the title Cu/2104 validate card payload signature feat: validate card payload signature Oct 31, 2025
@cozminu cozminu merged commit 6642919 into main Oct 31, 2025
15 checks passed
@cozminu cozminu deleted the cu/2104-validate-card-payload-signature branch October 31, 2025 18:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

package: wallet/backend Wallet backend implementations type: source Source changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Validate card payload & signature

2 participants