dwn-sdk-js icon indicating copy to clipboard operation
dwn-sdk-js copied to clipboard

Add current time check against to messages received

Open thehenrytsai opened this issue 1 year ago • 0 comments

Currently we don't check the messageTimestamp against the current server time when authorizing a message. We should do this to prevent blatant backdated "new" message to be accepted.

There will be times when a DWN needs to bringing in messages with an older time stamp, but those fall into the category of "synchronization", which in my mind has a different authorization context.

thehenrytsai avatar Oct 03 '23 16:10 thehenrytsai