@atproto/xrpc-server 0.4.0 → 0.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atproto/xrpc-server",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "license": "MIT",
   "description": "atproto HTTP API (XRPC) server library",
   "keywords": [
@@ -24,8 +24,8 @@
     "ws": "^8.12.0",
     "zod": "^3.21.4",
     "@atproto/common": "^0.3.3",
-    "@atproto/crypto": "^0.2.3",
-    "@atproto/lexicon": "^0.3.0"
+    "@atproto/crypto": "^0.3.0",
+    "@atproto/lexicon": "^0.3.1"
   },
   "devDependencies": {
     "@types/express": "^4.17.13",
@@ -36,8 +36,8 @@
     "jose": "^4.15.4",
     "key-encoder": "^2.0.3",
     "multiformats": "^9.9.0",
-    "@atproto/crypto": "^0.2.3",
-    "@atproto/xrpc": "^0.4.0"
+    "@atproto/crypto": "^0.3.0",
+    "@atproto/xrpc": "^0.4.1"
   },
   "scripts": {
     "test": "jest",

package/src/auth.ts

@@ -71,7 +71,7 @@ export const verifyJwt = async (
   const sigBytes = ui8.fromString(sig, 'base64url')
   const verifySignatureWithKey = (key: string) => {
     return crypto.verifySignature(key, msgBytes, sigBytes, {
-      lowS: false,
+      allowMalleableSig: true,
     })
   }
 

package/src/server.ts

@@ -248,11 +248,9 @@ export class Server {
         }
 
         // handle rate limits
-        if (consumeRateLimit) {
-          const result = await consumeRateLimit(reqCtx)
-          if (result instanceof RateLimitExceededError) {
-            return next(result)
-          }
+        const result = await consumeRateLimit(reqCtx)
+        if (result instanceof RateLimitExceededError) {
+          return next(result)
         }
 
         // run the handler

package/src/util.ts

@@ -60,7 +60,7 @@ export function decodeQueryParam(
   if (type === 'float') {
     return Number(String(value))
   } else if (type === 'integer') {
-    return Number(String(value)) | 0
+    return parseInt(String(value), 10) || 0
   } else if (type === 'boolean') {
     return value === 'true'
   }