Do not set risk in GetSignRequest when flowOptions.AllowedRiskLevel e…

…quals BankIdAllowedRiskLevel.NoRiskLevel (#472) Co-authored-by: Elin Fokine <[email protected]>
ActiveLogin · Oct 18, 2024 · 4f16557 · 4f16557
1 parent 3b2331d
commit 4f16557
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/ActiveLogin.Authentication.BankId.Core/Flow/BankIdFlowService.cs b/src/ActiveLogin.Authentication.BankId.Core/Flow/BankIdFlowService.cs
@@ -159,7 +159,7 @@ private SignRequest GetSignRequest(BankIdFlowOptions flowOptions, BankIdSignData
     {
         var endUserIp = _bankIdEndUserIpResolver.GetEndUserIp();
         var resolvedCertificatePolicies = GetResolvedCertificatePolicies(flowOptions);
-        var resolvedRiskLevel = flowOptions.AllowedRiskLevel.ToString().ToLower();
+        var resolvedRiskLevel = flowOptions.AllowedRiskLevel == Risk.BankIdAllowedRiskLevel.NoRiskLevel ? null : flowOptions.AllowedRiskLevel.ToString().ToLower();
 
         var requestRequirement = new Requirement(resolvedCertificatePolicies, resolvedRiskLevel, flowOptions.RequirePinCode, flowOptions.RequireMrtd, flowOptions.RequiredPersonalIdentityNumber?.To12DigitString());