fix(sdjwtvc): skip missing JSON paths in ExtractClaimsByJSONPath

ExtractClaimsByJSONPath previously returned a hard error when any VCTM
JSON path did not match the document data. This caused OIDC RP callback
failures when the credential template (VCTM) defines more claims than
the user's credential_mappings actually provide.

Changed to silently skip unmatched paths — callers already handle
partial results gracefully with 'if !ok { continue }' guards.

Updated tests to reflect the new skip-missing-paths behavior.

Author: leifj

pkg/sdjwtvc/utils.go

@@ -167,7 +167,7 @@ func Base64Decode(s string) (string, error) {
 // ExtractClaimsByJSONPath extracts specific claim values from document data using JSONPath queries.
 // Takes a map of label->JSONPath expressions and returns a map of label->extracted values.
 // Example: {"given-name": "$.name.given"} extracts the value at path $.name.given and maps it to "given-name".
-// Returns an error if any path fails to extract.
+// Paths that do not match any value in the document data are silently skipped.
 func ExtractClaimsByJSONPath(documentData map[string]any, jsonPathMap map[string]string) (map[string]any, error) {
 	v := any(nil)
 
@@ -185,7 +185,8 @@ func ExtractClaimsByJSONPath(documentData map[string]any, jsonPathMap map[string
 	for key, path := range jsonPathMap {
 		result, err := jsonpath.Get(path, v)
 		if err != nil {
-			return nil, fmt.Errorf("failed to get path %s: %w", path, err)
+			// Path not found in document data — skip it.
+			continue
 		}
 
 		reply[key] = result

pkg/sdjwtvc/utils_jsonpath_test.go

@@ -59,10 +59,10 @@ func TestExtractClaimsByJSONPath(t *testing.T) {
 		}
 
 		result, err := ExtractClaimsByJSONPath(documentData, jsonPathMap)
-		// Should return error when path doesn't exist
-		assert.Error(t, err)
-		assert.Nil(t, result)
-		assert.Contains(t, err.Error(), "failed to get path")
+		// Missing paths are silently skipped — only matched paths are returned
+		require.NoError(t, err)
+		assert.Equal(t, "John", result["existing"])
+		assert.NotContains(t, result, "nonexistent")
 	})
 
 	t.Run("empty_document", func(t *testing.T) {
@@ -73,9 +73,9 @@ func TestExtractClaimsByJSONPath(t *testing.T) {
 		}
 
 		result, err := ExtractClaimsByJSONPath(documentData, jsonPathMap)
-		// Should return error when path doesn't exist in empty document
-		assert.Error(t, err)
-		assert.Nil(t, result)
+		// No paths match in empty document — returns empty result, no error
+		require.NoError(t, err)
+		assert.Empty(t, result)
 	})
 
 	t.Run("empty_json_path_map", func(t *testing.T) {