Files
Max Isbey caa022faba Fold the SEP-2352 issuer-binding rules into one method used at both discovery points
The bound-credential discard and the CIMD keep-but-rebind case were spelled
out inline where PRM names the issuer, and only the former where the issuer
is first learned from AS metadata on the legacy no-PRM path. One method now
applies both rules wherever the issuer becomes known, so a CIMD record's
carried-over tokens are dropped on that path too. A unit test covers it.
2026-08-18 13:52:28 +00:00
..
2024-09-24 22:04:19 +01:00