workspaces/cogito-ios-app/Readme.md
Cogito
======
Cogito is an identity management app.
[Documentation][1]
Open Issues
-----------
* The library used for handling the JWTs from the OpenID Connect provider does not check the JWT signature.
* Instead of passing a realm URL for OpenID Connect attestations, webfinger should be used.
* The web app currently sends a string that identifies it by name; this should be replaced with some sort of registry.
[1]: https://cogito.mobi