IdHub/oidc4vp/views.py

import json

from django.core.mail import send_mail
from django.http import HttpResponse, HttpResponseRedirect

from utils.idhub_ssikit import verify_presentation
from .models import VPVerifyRequest
from django.shortcuts import get_object_or_404
from more_itertools import flatten, unique_everseen


def verify(request):
    assert request.method == "POST"
    # TODO: incorporate request.POST["presentation_submission"] as schema definition
    (presentation_valid, _) = verify_presentation(request.POST["vp_token"])
    if not presentation_valid:
        raise Exception("Failed to verify signature on the given Verifiable Presentation.")
    vp = json.loads(request.POST["vp_token"])
    nonce = vp["nonce"]
    # "vr" = verification_request
    vr = get_object_or_404(VPVerifyRequest, nonce=nonce)  # TODO: return meaningful error, not 404
    # Get a list of all included verifiable credential types
    included_credential_types = unique_everseen(flatten([
        vc["type"] for vc in vp["verifiableCredential"]
    ]))
    # Check that it matches what we requested
    for requested_vc_type in json.loads(vr.expected_credentials):
        if requested_vc_type not in included_credential_types:
            raise Exception("You're missing some credentials we requested!")  # TODO: return meaningful error
    # Perform whatever action we have to do
    action = json.loads(vr.action)
    if action["action"] == "send_mail":
        subject = action["params"]["subject"]
        to_email = action["params"]["to"]
        from_email = "noreply@verifier-portal"
        body = request.POST["vp-token"]
        send_mail(
            subject,
            body,
            from_email,
            [to_email]
        )
    elif action["action"] == "something-else":
        pass
    else:
        raise Exception("Unknown action!")
    # OK! Your verifiable presentation was successfully presented.
    return HttpResponseRedirect(vr.response_or_redirect)