@atproto/jwk-webcrypto 0.3.2 → 0.3.3

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @atproto/jwk-webcrypto
 
+## 0.3.3
+
+### Patch Changes
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update TypeScript build to rely on references to composite internal projects
+
+- [#5099](https://github.com/bluesky-social/atproto/pull/5099) [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Bundle only necessary files in the NPM tarball, including the `CHANGELOG.md` and `README.md` files (if present).
+
+- Updated dependencies [[`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07), [`b43ec31`](https://github.com/bluesky-social/atproto/commit/b43ec31f247f4461725b01226885f88bd430ca07)]:
+  - @atproto/jwk-jose@0.2.3
+  - @atproto/jwk@0.7.3
+
 ## 0.3.2
 
 ### Patch Changes

package/package.json

@@ -1,9 +1,6 @@
 {
   "name": "@atproto/jwk-webcrypto",
-  "version": "0.3.2",
-  "engines": {
-    "node": ">=22"
-  },
+  "version": "0.3.3",
   "license": "MIT",
   "description": "Webcrypto based implementation of @atproto/jwk Key's",
   "keywords": [
@@ -17,6 +14,10 @@
     "url": "https://github.com/bluesky-social/atproto",
     "directory": "packages/oauth/jwk-webcrypto"
   },
+  "files": [
+    "./dist",
+    "./CHANGELOG.md"
+  ],
   "type": "module",
   "exports": {
     ".": {
@@ -24,12 +25,14 @@
       "default": "./dist/index.js"
     }
   },
+  "engines": {
+    "node": ">=22"
+  },
   "dependencies": {
     "zod": "^3.23.8",
-    "@atproto/jwk": "^0.7.2",
-    "@atproto/jwk-jose": "^0.2.2"
+    "@atproto/jwk": "^0.7.3",
+    "@atproto/jwk-jose": "^0.2.3"
   },
-  "devDependencies": {},
   "scripts": {
     "build": "tsgo --build tsconfig.build.json"
   }

package/src/index.ts

@@ -1 +0,0 @@
-export * from './webcrypto-key.js'

package/src/util.ts

@@ -1,122 +0,0 @@
-export type JWSAlgorithm =
-  // HMAC
-  | 'HS256'
-  | 'HS384'
-  | 'HS512'
-  // RSA
-  | 'PS256'
-  | 'PS384'
-  | 'PS512'
-  | 'RS256'
-  | 'RS384'
-  | 'RS512'
-  // EC
-  | 'ES256'
-  | 'ES256K'
-  | 'ES384'
-  | 'ES512'
-  // OKP
-  | 'EdDSA'
-
-export type SubtleAlgorithm = RsaHashedKeyGenParams | EcKeyGenParams
-
-export function toSubtleAlgorithm(
-  alg: string,
-  crv?: string,
-  options?: { modulusLength?: number },
-): SubtleAlgorithm {
-  switch (alg) {
-    case 'PS256':
-    case 'PS384':
-    case 'PS512':
-      return {
-        name: 'RSA-PSS',
-        hash: `SHA-${alg.slice(-3) as '256' | '384' | '512'}`,
-        modulusLength: options?.modulusLength ?? 2048,
-        publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
-      }
-    case 'RS256':
-    case 'RS384':
-    case 'RS512':
-      return {
-        name: 'RSASSA-PKCS1-v1_5',
-        hash: `SHA-${alg.slice(-3) as '256' | '384' | '512'}`,
-        modulusLength: options?.modulusLength ?? 2048,
-        publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
-      }
-    case 'ES256':
-    case 'ES384':
-      return {
-        name: 'ECDSA',
-        namedCurve: `P-${alg.slice(-3) as '256' | '384'}`,
-      }
-    case 'ES512':
-      return {
-        name: 'ECDSA',
-        namedCurve: 'P-521',
-      }
-    default:
-      // https://github.com/w3c/webcrypto/issues/82#issuecomment-849856773
-
-      throw new TypeError(`Unsupported alg "${alg}"`)
-  }
-}
-
-export function fromSubtleAlgorithm(algorithm: KeyAlgorithm): JWSAlgorithm {
-  switch (algorithm.name) {
-    case 'RSA-PSS':
-    case 'RSASSA-PKCS1-v1_5': {
-      const hash = (<RsaHashedKeyAlgorithm>algorithm).hash.name
-      switch (hash) {
-        case 'SHA-256':
-        case 'SHA-384':
-        case 'SHA-512': {
-          const prefix = algorithm.name === 'RSA-PSS' ? 'PS' : 'RS'
-          return `${prefix}${hash.slice(-3) as '256' | '384' | '512'}`
-        }
-        default:
-          throw new TypeError('unsupported RsaHashedKeyAlgorithm hash')
-      }
-    }
-    case 'ECDSA': {
-      const namedCurve = (<EcKeyAlgorithm>algorithm).namedCurve
-      switch (namedCurve) {
-        case 'P-256':
-        case 'P-384':
-        case 'P-512':
-          return `ES${namedCurve.slice(-3) as '256' | '384' | '512'}`
-        case 'P-521':
-          return 'ES512'
-        default:
-          throw new TypeError('unsupported EcKeyAlgorithm namedCurve')
-      }
-    }
-    case 'Ed448':
-    case 'Ed25519':
-      return 'EdDSA'
-    default:
-      // https://github.com/w3c/webcrypto/issues/82#issuecomment-849856773
-
-      throw new TypeError(`Unexpected algorithm "${algorithm.name}"`)
-  }
-}
-
-export function isCryptoKeyPair(
-  v: unknown,
-  extractable?: boolean,
-): v is CryptoKeyPair {
-  return (
-    typeof v === 'object' &&
-    v !== null &&
-    'privateKey' in v &&
-    v.privateKey instanceof CryptoKey &&
-    v.privateKey.type === 'private' &&
-    (extractable == null || v.privateKey.extractable === extractable) &&
-    v.privateKey.usages.includes('sign') &&
-    'publicKey' in v &&
-    v.publicKey instanceof CryptoKey &&
-    v.publicKey.type === 'public' &&
-    v.publicKey.extractable === true &&
-    v.publicKey.usages.includes('verify')
-  )
-}

package/src/webcrypto-key.ts

@@ -1,63 +0,0 @@
-import { Jwk, JwkError, jwkSchema } from '@atproto/jwk'
-import { GenerateKeyPairOptions, JoseKey } from '@atproto/jwk-jose'
-import { fromSubtleAlgorithm, isCryptoKeyPair } from './util.js'
-
-export class WebcryptoKey<J extends Jwk = Jwk> extends JoseKey<J> {
-  // We need to override the static method generate from JoseKey because
-  // the browser needs both the private and public keys
-  static override async generate(
-    allowedAlgos: string[] = ['ES256'],
-    kid: string = crypto.randomUUID(),
-    options?: GenerateKeyPairOptions,
-  ): Promise<WebcryptoKey> {
-    const keyPair = await this.generateKeyPair(allowedAlgos, options)
-
-    // Type safety only: in the browser, 'jose' always generates a CryptoKeyPair
-    if (!isCryptoKeyPair(keyPair)) {
-      throw new TypeError('Invalid CryptoKeyPair')
-    }
-
-    return this.fromKeypair(keyPair, kid)
-  }
-
-  static async fromKeypair(
-    cryptoKeyPair: CryptoKeyPair,
-    kid?: string,
-  ): Promise<WebcryptoKey> {
-    const {
-      alg = fromSubtleAlgorithm(cryptoKeyPair.privateKey.algorithm),
-      ...jwk
-    } = await crypto.subtle.exportKey(
-      'jwk',
-      cryptoKeyPair.privateKey.extractable
-        ? cryptoKeyPair.privateKey
-        : cryptoKeyPair.publicKey,
-    )
-
-    return new WebcryptoKey<Jwk>(
-      jwkSchema.parse({ ...jwk, kid, alg }),
-      cryptoKeyPair,
-    )
-  }
-
-  constructor(
-    jwk: Readonly<J>,
-    readonly cryptoKeyPair: CryptoKeyPair,
-  ) {
-    // Webcrypto keys are bound to a single algorithm
-    if (!jwk.alg) throw new JwkError('JWK "alg" is required for Webcrypto keys')
-
-    super(jwk)
-  }
-
-  get isPrivate() {
-    return true
-  }
-
-  protected override async getKeyObj(alg: string) {
-    if (this.jwk.alg !== alg) {
-      throw new JwkError(`Key cannot be used with algorithm "${alg}"`)
-    }
-    return this.cryptoKeyPair.privateKey
-  }
-}

package/tsconfig.build.json

@@ -1,8 +0,0 @@
-{
-  "extends": ["../../../tsconfig/isomorphic.json"],
-  "compilerOptions": {
-    "rootDir": "./src",
-    "outDir": "./dist",
-  },
-  "include": ["./src"],
-}

package/tsconfig.build.tsbuildinfo

@@ -1 +0,0 @@
-{"version":"7.0.0-dev.20260614.1","root":["./src/index.ts","./src/util.ts","./src/webcrypto-key.ts"]}

package/tsconfig.json

@@ -1,4 +0,0 @@
-{
-  "include": [],
-  "references": [{ "path": "./tsconfig.build.json" }],
-}