exchange

commit 9e4210203f4cfa90b1d34f6553f9773c05cabdec
parent b452a20f1260485b22c6899bb03c1fed504669ea
Author: Christian Grothoff <christian@grothoff.org>
Date:   Thu, 16 May 2024 20:36:28 +0200

add KYC auth signature check

Diffstat:
M
src/exchange/taler-exchange-httpd_kyc-check.c
 | 
28
+++++++++++++++++++++++++++-

1 file changed, 27 insertions(+), 1 deletion(-)
diff --git a/src/exchange/taler-exchange-httpd_kyc-check.c b/src/exchange/taler-exchange-httpd_kyc-check.c
@@ -290,7 +290,33 @@ TEH_handler_kyc_check (
     }
   }
 
-  // FIXME: check signature!
+  if (GNUNET_OK !=
+      TALER_account_kyc_auth_verify (&account_pub,
+                                     &kyp->account_sig))
+  {
+    char *diag;
+    MHD_RESULT mret;
+
+    json_decref (jrules);
+    jrules = NULL;
+    if (GNUNET_is_zero (&account_pub))
+    {
+      return TALER_MHD_reply_with_error (
+        rc->connection,
+        MHD_HTTP_CONFLICT,
+        TALER_EC_EXCHANGE_KYC_CHECK_AUTHORIZATION_KEY_UNKNOWN,
+        NULL);
+    }
+    diag = GNUNET_STRINGS_data_to_string_alloc (&account_pub,
+                                                sizeof (account_pub));
+    mret = TALER_MHD_reply_with_error (
+      rc->connection,
+      MHD_HTTP_FORBIDDEN,
+      TALER_EC_EXCHANGE_KYC_CHECK_AUTHORIZATION_FAILED,
+      diag);
+    GNUNET_free (diag);
+    return mret;
+  }
 
   jlimits = TALER_KYCLOGIC_rules_to_limits (jrules);
   if (NULL == jlimits)