fix: do not fallback to any verifier on empty provider

Signed-off-by: Árpád Csepi <csepi.arpad@outlook.com>

Author: arpad-csepi

dir-sdk-python/agntcy/dir_sdk/client/dirctl/verification.py

@@ -50,7 +50,8 @@ def _run_verify(config: Config, req: sign_v1.VerifyRequest, output_path: str) ->
     elif provider.HasField("any"):
         _verify_with_any(config, req.record_ref, provider.any, effective_output_path, extra_mounts=extra_mounts)
     else:
-       _verify_with_any(config, req.record_ref, provider.any, effective_output_path, extra_mounts=extra_mounts)
+        msg = "Unsupported verification provider in request"
+        raise RuntimeError(msg)
 
 
 def _verify_with_key(

dir-sdk-python/agntcy/dir_sdk/tests/test_client.py

@@ -282,14 +282,16 @@ def test_sign_and_verify(self) -> None:
         provider_url = shell_env.get("OIDC_PROVIDER_URL", "")
         client_id = shell_env.get("OIDC_CLIENT_ID", "sigstore")
 
-        oidc_options = sign_v1.SignOptionsOIDC(oidc_provider_url=provider_url, oidc_client_id=client_id)
-        oidc_provider = sign_v1.SignWithOIDC(id_token=token, options=oidc_options)
+        sign_oidc_options = sign_v1.SignOptionsOIDC(oidc_provider_url=provider_url, oidc_client_id=client_id)
+        oidc_provider = sign_v1.SignWithOIDC(id_token=token, options=sign_oidc_options)
         request_oidc_provider = sign_v1.SignRequestProvider(oidc=oidc_provider)
         oidc_request = sign_v1.SignRequest(
             record_ref=record_refs[1],
             provider=request_oidc_provider,
         )
 
+        verify_oidc_options = sign_v1.VerifyOptionsOIDC()
+
         try:
             # Sign and verify using Key signing
             self.client.sign(key_request)
@@ -305,7 +307,7 @@ def test_sign_and_verify(self) -> None:
 
             verify_index = 0
             for ref in record_refs:
-                response = self.client.verify(sign_v1.VerifyRequest(record_ref=ref))
+                response = self.client.verify(sign_v1.VerifyRequest(record_ref=ref, provider=sign_v1.VerifyRequestProvider(any=sign_v1.VerifyWithAny(oidc_options=verify_oidc_options))))
 
                 assert response.success is True