@logto/js 3.0.1 → 4.0.0-alpha.0

package/lib/consts/index.cjs

@@ -52,15 +52,15 @@ exports.Prompt = void 0;
     Prompt["Login"] = "login";
 })(exports.Prompt || (exports.Prompt = {}));
 
-Object.defineProperty(exports, 'ReservedResource', {
+Object.defineProperty(exports, "ReservedResource", {
     enumerable: true,
     get: function () { return openid.ReservedResource; }
 });
-Object.defineProperty(exports, 'ReservedScope', {
+Object.defineProperty(exports, "ReservedScope", {
     enumerable: true,
     get: function () { return openid.ReservedScope; }
 });
-Object.defineProperty(exports, 'UserScope', {
+Object.defineProperty(exports, "UserScope", {
     enumerable: true,
     get: function () { return openid.UserScope; }
 });

package/lib/core/fetch-token.cjs

@@ -20,7 +20,7 @@ const fetchTokenByAuthorizationCode = async ({ clientId, tokenEndpoint, redirect
     const snakeCaseCodeTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: index.ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys__default.default(snakeCaseCodeTokenResponse);
 };
@@ -48,7 +48,7 @@ const fetchTokenByRefreshToken = async (params, requester) => {
     const snakeCaseRefreshTokenTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: index.ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys__default.default(snakeCaseRefreshTokenTokenResponse);
 };

package/lib/core/fetch-token.js

@@ -14,7 +14,7 @@ const fetchTokenByAuthorizationCode = async ({ clientId, tokenEndpoint, redirect
     const snakeCaseCodeTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys(snakeCaseCodeTokenResponse);
 };
@@ -42,7 +42,7 @@ const fetchTokenByRefreshToken = async (params, requester) => {
     const snakeCaseRefreshTokenTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys(snakeCaseRefreshTokenTokenResponse);
 };

package/lib/core/sign-in.cjs

@@ -1,8 +1,6 @@
 'use strict';
 
 var index = require('../consts/index.cjs');
-require('@silverhand/essentials');
-require('jose');
 var scopes = require('../utils/scopes.cjs');
 
 const codeChallengeMethod = 'S256';

package/lib/core/sign-in.js

@@ -1,6 +1,4 @@
 import { QueryKey, Prompt } from '../consts/index.js';
-import '@silverhand/essentials';
-import 'jose';
 import { withDefaultScopes } from '../utils/scopes.js';
 
 const codeChallengeMethod = 'S256';

package/lib/index.cjs

@@ -32,32 +32,31 @@ exports.LogtoRequestError = errors.LogtoRequestError;
 exports.OidcError = errors.OidcError;
 exports.isLogtoRequestError = errors.isLogtoRequestError;
 exports.decodeIdToken = idToken.decodeIdToken;
-exports.verifyIdToken = idToken.verifyIdToken;
 exports.decodeAccessToken = accessToken.decodeAccessToken;
 exports.withDefaultScopes = scopes.withDefaultScopes;
 exports.isArbitraryObject = arbitraryObject.isArbitraryObject;
 exports.ContentType = index.ContentType;
-Object.defineProperty(exports, 'Prompt', {
+Object.defineProperty(exports, "Prompt", {
 	enumerable: true,
 	get: function () { return index.Prompt; }
 });
-Object.defineProperty(exports, 'QueryKey', {
+Object.defineProperty(exports, "QueryKey", {
 	enumerable: true,
 	get: function () { return index.QueryKey; }
 });
-Object.defineProperty(exports, 'TokenGrantType', {
+Object.defineProperty(exports, "TokenGrantType", {
 	enumerable: true,
 	get: function () { return index.TokenGrantType; }
 });
-Object.defineProperty(exports, 'ReservedResource', {
+Object.defineProperty(exports, "ReservedResource", {
 	enumerable: true,
 	get: function () { return openid.ReservedResource; }
 });
-Object.defineProperty(exports, 'ReservedScope', {
+Object.defineProperty(exports, "ReservedScope", {
 	enumerable: true,
 	get: function () { return openid.ReservedScope; }
 });
-Object.defineProperty(exports, 'UserScope', {
+Object.defineProperty(exports, "UserScope", {
 	enumerable: true,
 	get: function () { return openid.UserScope; }
 });

package/lib/index.js

@@ -6,7 +6,7 @@ export { generateSignOutUri } from './core/sign-out.js';
 export { fetchUserInfo } from './core/user-info.js';
 export { parseUriParameters, verifyAndParseCodeFromCallbackUri } from './utils/callback-uri.js';
 export { LogtoError, LogtoRequestError, OidcError, isLogtoRequestError } from './utils/errors.js';
-export { decodeIdToken, verifyIdToken } from './utils/id-token.js';
+export { decodeIdToken } from './utils/id-token.js';
 export { decodeAccessToken } from './utils/access-token.js';
 export { withDefaultScopes } from './utils/scopes.js';
 export { isArbitraryObject } from './utils/arbitrary-object.js';

package/lib/utils/id-token.cjs

@@ -1,11 +1,9 @@
 'use strict';
 
 var essentials = require('@silverhand/essentials');
-var jose = require('jose');
 var arbitraryObject = require('./arbitrary-object.cjs');
 var errors = require('./errors.cjs');
 
-const issuedAtTimeTolerance = 300; // 5 minutes
 /* eslint-disable complexity */
 /**
  * @link [ID Token](https://openid.net/specs/openid-connect-core-1_0.html#IDToken)
@@ -42,12 +40,6 @@ function assertIdTokenClaims(data) {
     }
 }
 /* eslint-enable complexity */
-const verifyIdToken = async (idToken, clientId, issuer, jwks) => {
-    const result = await jose.jwtVerify(idToken, jwks, { audience: clientId, issuer });
-    if (Math.abs((result.payload.iat ?? 0) - Date.now() / 1000) > issuedAtTimeTolerance) {
-        throw new errors.LogtoError('id_token.invalid_iat');
-    }
-};
 const decodeIdToken = (token) => {
     const { 1: encodedPayload } = token.split('.');
     if (!encodedPayload) {
@@ -60,4 +52,3 @@ const decodeIdToken = (token) => {
 };
 
 exports.decodeIdToken = decodeIdToken;
-exports.verifyIdToken = verifyIdToken;

package/lib/utils/id-token.d.ts

@@ -1,5 +1,4 @@
 import type { Nullable } from '@silverhand/essentials';
-import type { JWTVerifyGetKey } from 'jose';
 export type IdTokenClaims = {
     /** Issuer of this token. */
     iss: string;
@@ -42,5 +41,4 @@ export type IdTokenClaims = {
     /** Roles that the user has for API resources. */
     roles?: string[];
 } & Record<string, unknown>;
-export declare const verifyIdToken: (idToken: string, clientId: string, issuer: string, jwks: JWTVerifyGetKey) => Promise<void>;
 export declare const decodeIdToken: (token: string) => IdTokenClaims;

package/lib/utils/id-token.js

@@ -1,9 +1,7 @@
 import { urlSafeBase64 } from '@silverhand/essentials';
-import { jwtVerify } from 'jose';
 import { isArbitraryObject } from './arbitrary-object.js';
 import { LogtoError } from './errors.js';
 
-const issuedAtTimeTolerance = 300; // 5 minutes
 /* eslint-disable complexity */
 /**
  * @link [ID Token](https://openid.net/specs/openid-connect-core-1_0.html#IDToken)
@@ -40,12 +38,6 @@ function assertIdTokenClaims(data) {
     }
 }
 /* eslint-enable complexity */
-const verifyIdToken = async (idToken, clientId, issuer, jwks) => {
-    const result = await jwtVerify(idToken, jwks, { audience: clientId, issuer });
-    if (Math.abs((result.payload.iat ?? 0) - Date.now() / 1000) > issuedAtTimeTolerance) {
-        throw new LogtoError('id_token.invalid_iat');
-    }
-};
 const decodeIdToken = (token) => {
     const { 1: encodedPayload } = token.split('.');
     if (!encodedPayload) {
@@ -57,4 +49,4 @@ const decodeIdToken = (token) => {
     return idTokenClaims;
 };
 
-export { decodeIdToken, verifyIdToken };
+export { decodeIdToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/js",
-  "version": "3.0.1",
+  "version": "4.0.0-alpha.0",
   "type": "module",
   "main": "./lib/index.cjs",
   "module": "./lib/index.js",
@@ -20,25 +20,25 @@
     "directory": "packages/js"
   },
   "dependencies": {
-    "@silverhand/essentials": "^2.6.2",
-    "camelcase-keys": "^7.0.1",
-    "jose": "^5.0.0"
+    "@silverhand/essentials": "^2.8.7",
+    "camelcase-keys": "^7.0.1"
   },
   "devDependencies": {
-    "@silverhand/eslint-config": "^4.0.1",
-    "@silverhand/ts-config": "^4.0.0",
+    "@silverhand/eslint-config": "^5.0.0",
+    "@silverhand/ts-config": "^5.0.0",
     "@swc/core": "^1.3.50",
     "@swc/jest": "^0.2.24",
     "@types/jest": "^29.5.1",
-    "@types/node": "^18.0.0",
+    "@types/node": "^20.0.0",
     "eslint": "^8.44.0",
     "jest": "^29.5.0",
     "jest-environment-jsdom": "^29.5.0",
     "jest-matcher-specific-error": "^1.0.0",
+    "jose": "^5.0.0",
     "lint-staged": "^15.0.0",
     "nock": "^13.3.0",
     "prettier": "^3.0.0",
-    "rollup": "^3.20.2",
+    "rollup": "^4.0.0",
     "text-encoder": "^0.0.4",
     "type-fest": "^4.0.0",
     "typescript": "^5.0.0"