@adobe/helix-config-storage 2.2.5 → 2.2.6

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [2.2.6](https://github.com/adobe/helix-config-storage/compare/v2.2.5...v2.2.6) (2025-05-13)
+
+
+### Bug Fixes
+
+* escape jti correctly ([#125](https://github.com/adobe/helix-config-storage/issues/125)) ([906c4ba](https://github.com/adobe/helix-config-storage/commit/906c4ba771cea525de5985b76a2556fc901a2206))
+
 ## [2.2.5](https://github.com/adobe/helix-config-storage/compare/v2.2.4...v2.2.5) (2025-05-12)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-config-storage",
-  "version": "2.2.5",
+  "version": "2.2.6",
   "description": "Helix Config Storage",
   "main": "src/index.js",
   "types": "src/index.d.ts",
@@ -46,7 +46,7 @@
     "husky": "9.1.7",
     "json-schema-to-typescript": "15.0.4",
     "junit-report-builder": "5.1.1",
-    "lint-staged": "15.5.1",
+    "lint-staged": "16.0.0",
     "mocha": "11.2.2",
     "mocha-multi-reporters": "1.5.1",
     "mocha-suppress-logs": "0.5.1",

package/src/config-store.js

@@ -13,14 +13,13 @@
 import crypto from 'crypto';
 import { decodeJwt } from 'jose';
 import { HelixStorage } from '@adobe/helix-shared-storage';
-import { sanitizeName } from '@adobe/helix-shared-string';
 import { StatusCodeError } from './status-code-error.js';
 import {
   createToken, createUser,
   migrateToken,
   updateCodeSource,
   updateContentSource,
-  deepGetOrCreate, deepPut, prune, createSecret, migrateSecret, isDeepEqual,
+  deepGetOrCreate, deepPut, prune, createSecret, migrateSecret, isDeepEqual, base64ToBase64Url,
 } from './utils.js';
 import { validate as validateSchema } from './config-validator.js';
 import { getMergedConfig } from './config-merge.js';
@@ -607,7 +606,7 @@ export class ConfigStore {
             throw new StatusCodeError(400, e.message);
           }
         }
-        frag.name = sanitizeName(data.id);
+        frag.name = base64ToBase64Url(data.id);
         frag.type = 'apiKey';
         frag.relPath.push(frag.name);
       }
@@ -618,7 +617,7 @@ export class ConfigStore {
         const oldData = deepGetOrCreate(old, frag.relPath, true);
         data.created = oldData.created || new Date().toISOString();
         // ensure that the name is equal to the sanitized id
-        if (frag.name !== sanitizeName(data.id)) {
+        if (frag.name !== base64ToBase64Url(data.id)) {
           throw new StatusCodeError(400, 'apiKey id mismatch');
         }
       }

package/src/utils.js

@@ -194,6 +194,19 @@ export function createUser() {
   };
 }
 
+/**
+ * converts a base64 to a base64url string.
+ */
+export function base64ToBase64Url(str) {
+  if (!str) {
+    return str;
+  }
+  return str
+    .replaceAll('+', '-')
+    .replaceAll('/', '_')
+    .replaceAll('=', '');
+}
+
 /**
  * migrates an existing jwt token
  * @param key
@@ -211,9 +224,7 @@ export async function migrateToken(key, jwt) {
   if (!jti) {
     throw new StatusCodeError(400, 'unable to migrate jwt: missing jti claim.');
   }
-  const id = jti
-    .replaceAll('/', '_')
-    .replaceAll('+', '-');
+  const id = base64ToBase64Url(jti);
   const hash = crypto
     .createHmac('sha512', key)
     .update(jwt, 'utf-8')