feat(DataIntergrity): control issuer's key is approved for purpose

blockchain-certificates · Dec 2, 2024 · 7f12d97 · 7f12d97
1 parent 1cbdd80
commit 7f12d97
Show file tree

Hide file tree

Showing 3 changed files with 126 additions and 3 deletions.
diff --git a/src/index.ts b/src/index.ts
@@ -137,8 +137,14 @@ export class LDMerkleProof2019 extends LinkedDataProof {
     let verified: boolean;
     let error: string = '';
 
-    if (this.proof.proofPurpose && this.proof.proofPurpose !== this.proofPurpose) {
-      throw new Error(`Invalid proof purpose. Expected ${this.proofPurpose} but received ${this.proof.proofPurpose}`);
+    if (this.proof.proofPurpose) {
+      if (this.proof.proofPurpose !== this.proofPurpose) {
+        throw new Error(`Invalid proof purpose. Expected ${this.proofPurpose} but received ${this.proof.proofPurpose}`);
+      }
+
+      if (this.issuer && !this.issuer[this.proofPurpose]?.includes(this.proof.verificationMethod)) {
+        throw new Error(`The verification method ${this.proof.verificationMethod} is not allowed for the proof purpose ${this.proofPurpose}`);
+      }
     }
 
     try {