Skip to content

add guard on /profile/card for solid:oidcIssuer triple #2239

Description

@bourgeoa

Environment

file-system implementation

Description

/profile/card can be deleted/edited without any control (PUT/POST/PATCH/DELETE).
When /profile/card is either

  • deleted
  • void
  • miss the solid:issuer guard on server IDP used at account creation
  • content is not text/turtle RDF
    No user recovery possible and user cannot log anymore by using available authentication library

Real reported cases

Some users

  • deleted /profile/card
  • PUT blank content
  • PUT application/ld+json
    The only solution is to manually edit the server data

Solution

Introduce a guard on /profile/card for

  • solid:oidcIssuer triple
  • and text/turtle contentType for file-system implementation

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions