Missing kid
when resolving DIDs with multiple keys should fail
#3649
Labels
breaking-change
Will require manual intervention for version update
bug_report
Suspected bugs, awaiting triage
dcp
Milestone
Bug Report
Describe the Bug
When resolving public keys from DID documents (e.g.
SelfIssuedTokenVerifier
), the current implementation takes thekid
("key-id") to resolve the verification method from the did.If the
kid
isnull
, the first verification method is resolved.This is incorrect.
Expected Behavior
If
kid == null
, and the DID only contains one verification method, return it.If
kid != null
, and the DID contains a verification method with that ID, return it.In all other cases, return an error.
The text was updated successfully, but these errors were encountered: