@bedrock/vc-delivery 5.3.0 → 5.3.2

package/lib/helpers.js

@@ -13,6 +13,11 @@ import {ZcapClient} from '@digitalbazaar/ezcap';
 
 const {config, util: {BedrockError}} = bedrock;
 
+const ALLOWED_ERROR_KEYS = [
+  'message', 'name', 'type', 'data', 'errors', 'error', 'details', 'cause',
+  'status'
+];
+
 export async function evaluateTemplate({
   workflow, exchange, typedTemplate
 } = {}) {
@@ -106,8 +111,14 @@ export function decodeLocalId({localId} = {}) {
 }
 
 export function stripStacktrace(error) {
-  error = serializeError(error);
-  delete error.stack;
+  // serialize error and allow-list specific properties
+  const serialized = serializeError(error);
+  error = {};
+  for(const key of ALLOWED_ERROR_KEYS) {
+    if(serialized[key] !== undefined) {
+      error[key] = serialized[key];
+    }
+  }
   if(error.errors) {
     error.errors = error.errors.map(stripStacktrace);
   }

package/lib/verify.js

@@ -159,6 +159,18 @@ export async function verifyDidProofJwt({workflow, exchange, jwt} = {}) {
     }
 
     const vm = await didIo.get({url: kid});
+    if(!vm) {
+      throw new BedrockError(
+        `Verification method identified by "kid" (${kid}) could not be ` +
+        'retrieved.', {
+          name: 'DataError',
+          details: {
+            public: true,
+            httpStatusCode: 400
+          }
+        });
+    }
+
     // `vm.controller` must be the issuer of the DID JWT; also ensure that
     // the specified controller authorized `vm` for the purpose of
     // authentication
@@ -174,8 +186,13 @@ export async function verifyDidProofJwt({workflow, exchange, jwt} = {}) {
       match.controller === vm.controller)) {
       throw new BedrockError(
         `Verification method controller "${issuer}" did not authorize ` +
-        `verification method "${vm.id}" for the purpose of "authentication".`,
-        {name: 'NotAllowedError'});
+        `verification method "${vm.id}" for the purpose of "authentication".`, {
+          name: 'NotAllowedError',
+          details: {
+            public: true,
+            httpStatusCode: 400
+          }
+        });
     }
     let jwk;
     if(isEcdsa) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "5.3.0",
+  "version": "5.3.2",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",