Repository navigation

Ap2/verify cnf and reference binding - #616

Merged

mike-parkhill merged 11 commits into

ap2/verify-cnf-and-reference-binding

Aug 6, 2026

Merged

Ap2/verify cnf and reference binding#616
mike-parkhill merged 11 commits into
masterfrom
ap2/verify-cnf-and-reference-binding

Commits on Jul 31, 2026
- fix(ap2): verify holder key against the Open Mandate's cnf.jwk instead of trusting the caller
  
  mike-parkhill
  and
  claude
  committed
  29dea58
- fix(ap2): remove the caller-supplied-key fallback in Closed Mandate verification
  
  mike-parkhill
  and
  claude
  committed
  36215ea
- fix(ap2): require verification of the Open Mandate's own issuer signature
  
  mike-parkhill
  and
  claude
  committed
  419d884
- fix(ap2): reject envelope typ confusion in Closed Mandate verification
  
  mike-parkhill
  and
  claude
  committed
  6e252d5
- fix(ap2): require and verify the Closed Mandate nonce
  
  mike-parkhill
  and
  claude
  committed
  b900793
- docs(ap2): add example resolving userPublicKey from a User's DID
  
  mike-parkhill
  and
  claude
  committed
  9a2fdb1
- docs(ap2): document the AP2 v0.2 revocation gap and exp's role
  
  mike-parkhill
  and
  claude
  committed
  928ba6f
- update versions
  mike-parkhill
  committed
  2dd4ed2
- fix(ap2): fully resolve openCheckoutMandatePresentation before computing referenceVerified
  
  mike-parkhill
  and
  claude
  committed
  eb7b2bd
- updated changelog
  mike-parkhill
  committed
  17c689e
Commits on Aug 5, 2026
- PR feedback
  mike-parkhill
  committed
  aa06d9f