Skip to content

Commit

Permalink
Address the 16-year-old criteria
Browse files Browse the repository at this point in the history
  • Loading branch information
robinbaxon committed Jan 28, 2022
1 parent b1b2409 commit 78980ae
Showing 1 changed file with 11 additions and 5 deletions.
16 changes: 11 additions & 5 deletions verification-solution.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,8 +63,6 @@ covid19_smitte_start=yyyy-MM-dd // sampling date of COVID-19 test
covid19_blokeret=false
```



A user which *does have* a negative COVID-19 test OR requested to skip the MSIS lookup, *is at least* 16 years old,
and has not performed the verification flow more than the allowed number of times will have the following claims.

Expand All @@ -74,6 +72,7 @@ covid19_blokeret=false
```



If a user satisfies the requirements for age, but has been blocked due to too many attempts at performing the verification flow,
the blocking claim changes value, and some additional claims are added informing the app of the duration and number of attempts configured for the blocking limit.

Expand All @@ -83,10 +82,17 @@ covid19_limit_duration=24
covid19_limit_count=3
```

Thus, to authorize a user to upload their diagnosis keys using only the DK-compatible claims,
one must require that the `covid19_status` claim is present with a value `positiv` and that the `covid19_blokeret` claim is present with a value `false`.
A user which *is not* at least 16 years old will have the following claims:
```
covid19_blokeret=true
covid19_limit_duration=24
covid19_limit_count=3
```
This user does not get the `role`-claim with a value of `upload-approved` and is blocked from uploading and exchanging their token.

As of february 2022, users get to upload their tokens to retrieve an anonymous token even if they have a `covid19_status `claim with a value of `negativ`

Thus, to authorize a user to upload their diagnosis keys using only the DK-compatible claims,
one must require that the `covid19_blokeret` claim is present with a value `false` and a `role`-claim is present with a value of `upload-approved`

## Anonymous tokens

Expand Down

0 comments on commit 78980ae

Please sign in to comment.