@logto/js 3.0.2 → 4.0.0-alpha.1

package/lib/core/fetch-token.cjs

@@ -20,7 +20,7 @@ const fetchTokenByAuthorizationCode = async ({ clientId, tokenEndpoint, redirect
     const snakeCaseCodeTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: index.ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys__default.default(snakeCaseCodeTokenResponse);
 };
@@ -48,7 +48,7 @@ const fetchTokenByRefreshToken = async (params, requester) => {
     const snakeCaseRefreshTokenTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: index.ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys__default.default(snakeCaseRefreshTokenTokenResponse);
 };

package/lib/core/fetch-token.js

@@ -14,7 +14,7 @@ const fetchTokenByAuthorizationCode = async ({ clientId, tokenEndpoint, redirect
     const snakeCaseCodeTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys(snakeCaseCodeTokenResponse);
 };
@@ -42,7 +42,7 @@ const fetchTokenByRefreshToken = async (params, requester) => {
     const snakeCaseRefreshTokenTokenResponse = await requester(tokenEndpoint, {
         method: 'POST',
         headers: ContentType.formUrlEncoded,
-        body: parameters,
+        body: parameters.toString(),
     });
     return camelcaseKeys(snakeCaseRefreshTokenTokenResponse);
 };

package/lib/core/revoke.cjs

@@ -8,7 +8,7 @@ const revoke = async (revocationEndpoint, clientId, token, requester) => request
     body: new URLSearchParams({
         [index.QueryKey.ClientId]: clientId,
         [index.QueryKey.Token]: token,
-    }),
+    }).toString(),
 });
 
 exports.revoke = revoke;

package/lib/core/revoke.js

@@ -6,7 +6,7 @@ const revoke = async (revocationEndpoint, clientId, token, requester) => request
     body: new URLSearchParams({
         [QueryKey.ClientId]: clientId,
         [QueryKey.Token]: token,
-    }),
+    }).toString(),
 });
 
 export { revoke };

package/lib/core/sign-in.cjs

@@ -1,8 +1,6 @@
 'use strict';
 
 var index = require('../consts/index.cjs');
-require('@silverhand/essentials');
-require('jose');
 var scopes = require('../utils/scopes.cjs');
 
 const codeChallengeMethod = 'S256';

package/lib/core/sign-in.js

@@ -1,6 +1,4 @@
 import { QueryKey, Prompt } from '../consts/index.js';
-import '@silverhand/essentials';
-import 'jose';
 import { withDefaultScopes } from '../utils/scopes.js';
 
 const codeChallengeMethod = 'S256';

package/lib/index.cjs

@@ -32,7 +32,6 @@ exports.LogtoRequestError = errors.LogtoRequestError;
 exports.OidcError = errors.OidcError;
 exports.isLogtoRequestError = errors.isLogtoRequestError;
 exports.decodeIdToken = idToken.decodeIdToken;
-exports.verifyIdToken = idToken.verifyIdToken;
 exports.decodeAccessToken = accessToken.decodeAccessToken;
 exports.withDefaultScopes = scopes.withDefaultScopes;
 exports.isArbitraryObject = arbitraryObject.isArbitraryObject;

package/lib/index.js

@@ -6,7 +6,7 @@ export { generateSignOutUri } from './core/sign-out.js';
 export { fetchUserInfo } from './core/user-info.js';
 export { parseUriParameters, verifyAndParseCodeFromCallbackUri } from './utils/callback-uri.js';
 export { LogtoError, LogtoRequestError, OidcError, isLogtoRequestError } from './utils/errors.js';
-export { decodeIdToken, verifyIdToken } from './utils/id-token.js';
+export { decodeIdToken } from './utils/id-token.js';
 export { decodeAccessToken } from './utils/access-token.js';
 export { withDefaultScopes } from './utils/scopes.js';
 export { isArbitraryObject } from './utils/arbitrary-object.js';

package/lib/utils/id-token.cjs

@@ -1,11 +1,9 @@
 'use strict';
 
 var essentials = require('@silverhand/essentials');
-var jose = require('jose');
 var arbitraryObject = require('./arbitrary-object.cjs');
 var errors = require('./errors.cjs');
 
-const issuedAtTimeTolerance = 300; // 5 minutes
 /* eslint-disable complexity */
 /**
  * @link [ID Token](https://openid.net/specs/openid-connect-core-1_0.html#IDToken)
@@ -42,12 +40,6 @@ function assertIdTokenClaims(data) {
     }
 }
 /* eslint-enable complexity */
-const verifyIdToken = async (idToken, clientId, issuer, jwks) => {
-    const result = await jose.jwtVerify(idToken, jwks, { audience: clientId, issuer });
-    if (Math.abs((result.payload.iat ?? 0) - Date.now() / 1000) > issuedAtTimeTolerance) {
-        throw new errors.LogtoError('id_token.invalid_iat');
-    }
-};
 const decodeIdToken = (token) => {
     const { 1: encodedPayload } = token.split('.');
     if (!encodedPayload) {
@@ -60,4 +52,3 @@ const decodeIdToken = (token) => {
 };
 
 exports.decodeIdToken = decodeIdToken;
-exports.verifyIdToken = verifyIdToken;

package/lib/utils/id-token.d.ts

@@ -1,5 +1,4 @@
 import type { Nullable } from '@silverhand/essentials';
-import type { JWTVerifyGetKey } from 'jose';
 export type IdTokenClaims = {
     /** Issuer of this token. */
     iss: string;
@@ -42,5 +41,4 @@ export type IdTokenClaims = {
     /** Roles that the user has for API resources. */
     roles?: string[];
 } & Record<string, unknown>;
-export declare const verifyIdToken: (idToken: string, clientId: string, issuer: string, jwks: JWTVerifyGetKey) => Promise<void>;
 export declare const decodeIdToken: (token: string) => IdTokenClaims;

package/lib/utils/id-token.js

@@ -1,9 +1,7 @@
 import { urlSafeBase64 } from '@silverhand/essentials';
-import { jwtVerify } from 'jose';
 import { isArbitraryObject } from './arbitrary-object.js';
 import { LogtoError } from './errors.js';
 
-const issuedAtTimeTolerance = 300; // 5 minutes
 /* eslint-disable complexity */
 /**
  * @link [ID Token](https://openid.net/specs/openid-connect-core-1_0.html#IDToken)
@@ -40,12 +38,6 @@ function assertIdTokenClaims(data) {
     }
 }
 /* eslint-enable complexity */
-const verifyIdToken = async (idToken, clientId, issuer, jwks) => {
-    const result = await jwtVerify(idToken, jwks, { audience: clientId, issuer });
-    if (Math.abs((result.payload.iat ?? 0) - Date.now() / 1000) > issuedAtTimeTolerance) {
-        throw new LogtoError('id_token.invalid_iat');
-    }
-};
 const decodeIdToken = (token) => {
     const { 1: encodedPayload } = token.split('.');
     if (!encodedPayload) {
@@ -57,4 +49,4 @@ const decodeIdToken = (token) => {
     return idTokenClaims;
 };
 
-export { decodeIdToken, verifyIdToken };
+export { decodeIdToken };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@logto/js",
-  "version": "3.0.2",
+  "version": "4.0.0-alpha.1",
   "type": "module",
   "main": "./lib/index.cjs",
   "module": "./lib/index.js",
@@ -21,8 +21,7 @@
   },
   "dependencies": {
     "@silverhand/essentials": "^2.8.7",
-    "camelcase-keys": "^7.0.1",
-    "jose": "^5.0.0"
+    "camelcase-keys": "^7.0.1"
   },
   "devDependencies": {
     "@silverhand/eslint-config": "^5.0.0",
@@ -35,6 +34,7 @@
     "jest": "^29.5.0",
     "jest-environment-jsdom": "^29.5.0",
     "jest-matcher-specific-error": "^1.0.0",
+    "jose": "^5.0.0",
     "lint-staged": "^15.0.0",
     "nock": "^13.3.0",
     "prettier": "^3.0.0",