50 lines
1.9 KiB
Python
50 lines
1.9 KiB
Python
import json
|
|
|
|
from django.core.mail import send_mail
|
|
from django.http import HttpResponse, HttpResponseRedirect
|
|
|
|
from utils.idhub_ssikit import verify_presentation
|
|
from .models import VPVerifyRequest
|
|
from django.shortcuts import get_object_or_404
|
|
from more_itertools import flatten, unique_everseen
|
|
|
|
|
|
def verify(request):
|
|
assert request.method == "POST"
|
|
# TODO: incorporate request.POST["presentation_submission"] as schema definition
|
|
(presentation_valid, _) = verify_presentation(request.POST["vp_token"])
|
|
if not presentation_valid:
|
|
raise Exception("Failed to verify signature on the given Verifiable Presentation.")
|
|
vp = json.loads(request.POST["vp_token"])
|
|
nonce = vp["nonce"]
|
|
# "vr" = verification_request
|
|
vr = get_object_or_404(VPVerifyRequest, nonce=nonce) # TODO: return meaningful error, not 404
|
|
# Get a list of all included verifiable credential types
|
|
included_credential_types = unique_everseen(flatten([
|
|
vc["type"] for vc in vp["verifiableCredential"]
|
|
]))
|
|
# Check that it matches what we requested
|
|
for requested_vc_type in json.loads(vr.expected_credentials):
|
|
if requested_vc_type not in included_credential_types:
|
|
raise Exception("You're missing some credentials we requested!") # TODO: return meaningful error
|
|
# Perform whatever action we have to do
|
|
action = json.loads(vr.action)
|
|
if action["action"] == "send_mail":
|
|
subject = action["params"]["subject"]
|
|
to_email = action["params"]["to"]
|
|
from_email = "noreply@verifier-portal"
|
|
body = request.POST["vp-token"]
|
|
send_mail(
|
|
subject,
|
|
body,
|
|
from_email,
|
|
[to_email]
|
|
)
|
|
elif action["action"] == "something-else":
|
|
pass
|
|
else:
|
|
raise Exception("Unknown action!")
|
|
# OK! Your verifiable presentation was successfully presented.
|
|
return HttpResponseRedirect(vr.response_or_redirect)
|
|
|