This is a Google App Script that is used to automate validating form results by asserting the Linux Foundation CKA and CKAD certificates. The script uses the fact that Linux Foundation had started issuing digital badge ids for their Kubernetes certificates. Using the digital badges it is possible to automate validation of the certificate. The App Script uses a registration email, the digital badge id and the current date for validation. The validation is implemented with OBI Assertion API.
The script installs a time based trigger that runs every 6 hours and executes a validation function. The function reads information from two sheets: "Responses" and "Legacy Responses" and refreshes the list of validated emails together with the a code of the badge to the "Automation" sheet. The "Responses" sheet is used by the Google Form that allows to post the digital badge id and the email of the certificate owner while the "Legacy Responses" sheet stores the static information from "legacy" submitters.
The script differentiates between different Kubernetes certificates using Credly (former YourAcclaim) badge URLs:
| Badge | URL |
|---|---|
| CKA | https://api.credly.com/api/v1/obi/v2/issuers/f4b8d042-0072-4a1a-8d00-260b513026e8/badge_classes/64567b66-def2-4c84-be6c-2586962fccd3 |
| CKAD | https://api.credly.com/api/v1/obi/v2/issuers/f4b8d042-0072-4a1a-8d00-260b513026e8/badge_classes/067f5afd-160d-42df-961e-31d19e117173 |
| CKS | https://api.credly.com/api/v1/obi/v2/issuers/f4b8d042-0072-4a1a-8d00-260b513026e8/badge_classes/efc98036-fdf4-4c5c-b6ca-34e58c8d61bd |
The validation process issues assertion request to the OBI endpoint and validates the following:
- A response code is 200
- The badge is not expired at the validation date/time
- The email of the badge owner matches the submitted email
- The badge URL is in the supported list of the badges
ℹ️ NOTE: Other types of the ownership validation beside the email aren't supported
Execute the Bash script to run one time validation vs. the registration email and the badge id. The script will validate if the certificate is valid for today's date:
bash <(curl -s https://raw.githubusercontent.com/minherz/lf_certificate_assertion/master/validate.sh)The script validates expiration and identity of the recipient. But it does not validate which LF badge the digitial badge belongs to.