Skip to content

Certificate verification checks status but not expiry #770

Description

@feyishola

findByVerificationCode in certificate-verification.service.ts:21-38 filters on status = 'active' but never checks expiresAt, even though the entity exposes an isExpired() getter (certificate.entity.ts:174-177). Any certificate whose expiresAt has passed but which has not yet been swept by the expiration job verifies as fully valid and even emits a CERTIFICATE_VERIFIED webhook. Fix: add AND (certificate.expiresAt IS NULL OR certificate.expiresAt > NOW()) to the query, or reject when isExpired().

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

Stellar WaveIssues in the Stellar wave programbackendbugSomething isn't working

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions