Dolphin ID Console

FAILURE MODES

Operator checks

EXP

Expired nonces should be rejected before signature verification.

DOM

Domain mismatches should fail even when the signature is otherwise valid.

SIG

Malformed signatures should never create a session or refresh token.