Only return full 500 stack trace to authenticated admin users

2026-01-23 08:17:57 -05:00 · 2021-02-25 19:12:18 -05:00
parent f2d8c9e5be
commit f088074d48
1 changed files with 23 additions and 10 deletions
--- a/api/src/middleware/error-handler.ts
+++ b/api/src/middleware/error-handler.ts
@@ -53,17 +53,30 @@ const errorHandler: ErrorRequestHandler = (err, req, res, next) => {

 			res.status(500);

-			payload = {
-				errors: [
-					{
-						message: err.message,
-						extensions: {
-							...err.extensions,
-							code: 'INTERNAL_SERVER_ERROR',
+			if (req.accountability?.admin === true) {
+				payload = {
+					errors: [
+						{
+							message: err.message,
+							extensions: {
+								...err.extensions,
+								code: 'INTERNAL_SERVER_ERROR',
+							},
 						},
-					},
-				],
-			};
+					],
+				};
+			} else {
+				payload = {
+					errors: [
+						{
+							message: 'An unexpected error occurred.',
+							extensions: {
+								code: 'INTERNAL_SERVER_ERROR',
+							},
+						},
+					],
+				};
+			}
 		}
 	}