Ensure VM ID is a string in ControllerProofPurpose.

digitalbazaar · Oct 3, 2024 · b060a3c · b060a3c
1 parent fdaad31
commit b060a3c
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # jsonld-signatures ChangeLog
 
+## 11.3.1 - 2024-10-dd
+
+### Fixed
+- Ensure verification method ID is a string when checking controller
+  proof purpose.
+
 ## 11.3.0 - 2024-08-01
 
 ### Changed

diff --git a/lib/purposes/ControllerProofPurpose.js b/lib/purposes/ControllerProofPurpose.js
@@ -70,6 +70,11 @@ module.exports = class ControllerProofPurpose extends ProofPurpose {
       }
 
       const {id: verificationId} = verificationMethod;
+      if(typeof verificationId !== 'string') {
+        throw new Error(
+          `Verification method ID "${verificationMethod.id}" ` +
+          'must be a string.');
+      }
       const {term, _termDefinedByDIDContext} = this;
 
       // if no `controller` specified, use verification method's