Ensure kid header in TrustMarkStatus

Author: cicnavi

src/Federation/TrustMarkStatus.php

@@ -85,6 +85,17 @@ public function getType(): string
     }
 
 
+    /**
+     * @throws \SimpleSAML\OpenID\Exceptions\TrustMarkStatusException
+     * @throws \SimpleSAML\OpenID\Exceptions\JwsException
+     * @return non-empty-string
+     */
+    public function getKeyId(): string
+    {
+        return parent::getKeyId() ?? throw new TrustMarkStatusException('No KeyId header claim found.');
+    }
+
+
     /**
      * @throws \SimpleSAML\OpenID\Exceptions\JwsException
      * @throws \SimpleSAML\OpenID\Exceptions\TrustMarkException
@@ -97,6 +108,7 @@ protected function validate(): void
             $this->getTrustMark(...),
             $this->getStatus(...),
             $this->getType(...),
+            $this->getKeyId(...),
         );
     }
 }