@bedrock/vc-delivery 5.3.1 → 5.3.3

package/lib/helpers.js

@@ -13,6 +13,11 @@ import {ZcapClient} from '@digitalbazaar/ezcap';
 
 const {config, util: {BedrockError}} = bedrock;
 
+const ALLOWED_ERROR_KEYS = [
+  'message', 'name', 'type', 'data', 'errors', 'error', 'details', 'cause',
+  'status'
+];
+
 export async function evaluateTemplate({
   workflow, exchange, typedTemplate
 } = {}) {
@@ -106,8 +111,14 @@ export function decodeLocalId({localId} = {}) {
 }
 
 export function stripStacktrace(error) {
-  error = serializeError(error);
-  delete error.stack;
+  // serialize error and allow-list specific properties
+  const serialized = serializeError(error);
+  error = {};
+  for(const key of ALLOWED_ERROR_KEYS) {
+    if(serialized[key] !== undefined) {
+      error[key] = serialized[key];
+    }
+  }
   if(error.errors) {
     error.errors = error.errors.map(stripStacktrace);
   }

package/lib/verify.js

@@ -181,9 +181,9 @@ export async function verifyDidProofJwt({workflow, exchange, jwt} = {}) {
     if(typeof match === 'string') {
       match = didDoc?.verificationMethod?.find?.(e => e.id === vm.id);
     }
-    if(!(match && Array.isArray(match.controller) ?
+    if(!(match && (Array.isArray(match.controller) ?
       match.controller.includes(vm.controller) :
-      match.controller === vm.controller)) {
+      match.controller === vm.controller))) {
       throw new BedrockError(
         `Verification method controller "${issuer}" did not authorize ` +
         `verification method "${vm.id}" for the purpose of "authentication".`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bedrock/vc-delivery",
-  "version": "5.3.1",
+  "version": "5.3.3",
   "type": "module",
   "description": "Bedrock Verifiable Credential Delivery",
   "main": "./lib/index.js",