fix(sd-jwt): additional check for 'kty' claim

Signed-off-by: Berend Sliedrecht <blu3beri@proton.me>
openwallet-foundation · Oct 30, 2023 · 413b6af · 413b6af
1 parent 7385737
commit 413b6af
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/packages/sd-jwt/src/SdJwtService.ts b/packages/sd-jwt/src/SdJwtService.ts
@@ -76,6 +76,12 @@ export class SdJwtService {
       let key = signerKey
 
       if (publicKeyJwk) {
+        if (!('kty' in publicKeyJwk)) {
+          throw new SdJwtError(
+            'Key type (kty) claim could not be found in the JWK of the confirmation (cnf) claim. Only JWK is supported right now'
+          )
+        }
+
         const jwk = getJwkFromJson(publicKeyJwk as JwkJson)
         key = Key.fromPublicKey(jwk.publicKey, jwk.keyType)
       }

diff --git a/packages/sd-jwt/tests/sdJwtVc.e2e.test.ts b/packages/sd-jwt/tests/sdJwtVc.e2e.test.ts
@@ -1,10 +1,10 @@
+import type { Key } from '@aries-framework/core'
+
 import { AskarModule } from '@aries-framework/askar'
 import {
   Agent,
   DidKey,
   DidsModule,
-  Key,
-  KeyDidCreateOptions,
   KeyDidRegistrar,
   KeyDidResolver,
   KeyType,