@cfworker/jwt 4.0.4 → 4.0.6

package/dist/parse.d.ts

@@ -1,2 +1,2 @@
 import { DecodedJwt, JwtParseResult } from './types.js';
-export declare function parseJwt(encodedToken: string, issuer: string, audience: string, resolveKey?: (decoded: DecodedJwt) => Promise<CryptoKey | null>): Promise<JwtParseResult>;
+export declare function parseJwt(encodedToken: string, issuer: string | string[], audience: string, resolveKey?: (decoded: DecodedJwt) => Promise<CryptoKey | null>): Promise<JwtParseResult>;

package/dist/parse.js

@@ -55,10 +55,10 @@ export async function parseJwt(encodedToken, issuer, audience, resolveKey = getK
             reason: `Invalid JWT audience claim (aud) ${JSON.stringify(aud)}. Expected a string or a non-empty array of strings.`
         };
     }
-    if (iss !== issuer) {
+    if (!(iss === issuer || (Array.isArray(issuer) && issuer.includes(iss)))) {
         return {
             valid: false,
-            reason: `Invalid JWT issuer claim (iss) ${JSON.stringify(decoded.payload.iss)}. Expected "${issuer}".`
+            reason: `Invalid JWT issuer claim (iss) ${JSON.stringify(decoded.payload.iss)}. Expected ${JSON.stringify(issuer)}.`
         };
     }
     if (typeof exp !== 'number') {

package/dist/types.d.ts

@@ -11,6 +11,7 @@ export interface JwtHeader {
     typ?: string;
     alg: string;
     kid: string;
+    jku?: string;
 }
 export interface RawJwt {
     header: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cfworker/jwt",
-  "version": "4.0.4",
+  "version": "4.0.6",
   "description": "Tiny lib for decoding JWTs and verifying signatures, using native crypto APIs",
   "keywords": [
     "jwt",

package/src/parse.ts

@@ -11,7 +11,7 @@ const skewMs = 30 * 1000;
  */
 export async function parseJwt(
   encodedToken: string,
-  issuer: string,
+  issuer: string | string[],
   audience: string,
   resolveKey: (decoded: DecodedJwt) => Promise<CryptoKey | null> = getKey
 ): Promise<JwtParseResult> {
@@ -78,12 +78,12 @@ export async function parseJwt(
     };
   }
 
-  if (iss !== issuer) {
+  if (!(iss === issuer || (Array.isArray(issuer) && issuer.includes(iss)))) {
     return {
       valid: false,
       reason: `Invalid JWT issuer claim (iss) ${JSON.stringify(
         decoded.payload.iss
-      )}. Expected "${issuer}".`
+      )}. Expected ${JSON.stringify(issuer)}.`
     };
   }
 

package/src/types.ts

@@ -12,6 +12,7 @@ export interface JwtHeader {
   typ?: string;
   alg: string;
   kid: string;
+  jku?: string;
 }
 
 export interface RawJwt {