@entifix/jwt 0.1.0 → 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +21 -0
  2. package/package.json +5 -4
package/README.md ADDED
@@ -0,0 +1,21 @@
1
+ # @entifix/jwt
2
+
3
+ Access tokens, on `jose`. `makeJoseTokenService` implements the `TokenService` port from `@entifix/business`: it signs with RS256 and verifies with the algorithm **pinned**, so a token cannot choose how it is checked. `publicJwks` serves the public key for other services to verify against.
4
+
5
+ ⚠️ `unverifiedClaims` reads a token without checking its signature. Use it to shape a UI, never to make a decision.
6
+
7
+ ## Install
8
+
9
+ ```sh
10
+ pnpm add @entifix/jwt effect
11
+ ```
12
+
13
+ ## Entry points
14
+
15
+ | Import | What it holds |
16
+ | -------------- | ------------------------------------------------------------------------------------------------------------------- |
17
+ | `@entifix/jwt` | `makeJoseTokenService`, `signAccessToken`, `verifyAccessToken`, `publicJwks`, `unverifiedClaims`, `TOKEN_ALGORITHM` |
18
+
19
+ ---
20
+
21
+ Tier 2 (adapters) of entifix — a package depends only on its own tier or below. See [the tiers](https://github.com/r10c-technologies/entifix#the-tiers-and-what-you-are-allowed-to-install). MIT licensed.
package/package.json CHANGED
@@ -1,6 +1,7 @@
1
1
  {
2
2
  "name": "@entifix/jwt",
3
- "version": "0.1.0",
3
+ "version": "0.1.1",
4
+ "description": "RS256 access tokens on jose: sign, verify with the algorithm pinned, and publish the JWKS.",
4
5
  "license": "MIT",
5
6
  "repository": {
6
7
  "type": "git",
@@ -55,12 +56,12 @@
55
56
  "dependencies": {
56
57
  "@swc/helpers": "0.5.23",
57
58
  "jose": "6.2.8",
58
- "@entifix/business": "0.1.0",
59
- "@entifix/core": "0.1.0"
59
+ "@entifix/core": "0.1.1",
60
+ "@entifix/business": "0.1.1"
60
61
  },
61
62
  "devDependencies": {
62
63
  "effect": "3.22.1",
63
- "@entifix/testing-unit": "0.1.0"
64
+ "@entifix/testing-unit": "0.1.1"
64
65
  },
65
66
  "peerDependencies": {
66
67
  "effect": ">=3.22 <4"