@lumjs/encode 2.2.0 → 2.2.2

package/CHANGELOG.md

@@ -6,7 +6,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-## [2.2.0]
+## [2.2.2] - 2026-01-13
+### Fixed
+- A few typos and bugs in the HMAC/HOTP/TOTP libraries I added last time.
+- Added some missing timestamps in this changelog.
+- Fixed references in this changelog.
+### Changed
+- While fixing the broken bits, I made a bunch of previously hard-coded values
+  into options. They'll need to be properly documented at some point.
+- Changed how `hash.getAlgorithm()` works behind the scenes.
+- v2.2.1 never got published for reasons, so no log or tag for it.
+
+## [2.2.0] - 2025-11-18
 ### Added
 - intToBytes() and hexToBytes() functions added to util.js
 - A HMAC wrapper library, and a generic Signature class used by it.
@@ -16,7 +27,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   module, this one has two JS classes and uses the SubtleCrypto API.
 - A TODO file with things I want to do.
 
-## [2.1.0]
+## [2.1.0] - 2025-90-09
 ### Changed
 - The `base64` library now supports the `Uint8Array.fromBase64` static method,
   and the corresponding `toBase64()` instance method. As those are rather new
@@ -52,7 +63,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Initial release.
 
-[Unreleased]: https://github.com/supernovus/lum.encode.js/compare/v2.1.0...HEAD
+[Unreleased]: https://github.com/supernovus/lum.encode.js/compare/v2.2.2...HEAD
+[2.2.2]: https://github.com/supernovus/lum.encode.js/compare/v2.2.0...v2.2.2
+[2.2.0]: https://github.com/supernovus/lum.encode.js/compare/v2.1.0...v2.2.0
 [2.1.0]: https://github.com/supernovus/lum.encode.js/compare/v2.0.0...v2.1.0
 [2.0.0]: https://github.com/supernovus/lum.encode.js/compare/v1.2.0...v2.0.0
 [1.2.0]: https://github.com/supernovus/lum.encode.js/compare/v1.1.0...v1.2.0

package/lib/hash.js

@@ -27,6 +27,11 @@ const ALGO_INFO =
   'SHA-512': {length: 512, block: 1024},
 }
 
+for (let algo in ALGO_INFO) {
+  ALGO_INFO[algo].id = algo;
+  Object.freeze(ALGO_INFO[algo]);
+}
+
 const DATA_ENCODERS = 
 {
   base64, base91,
@@ -184,7 +189,7 @@ module.exports = class
 
     if (id in ALGO_INFO)
     {
-      return Object.assign({id}, ALGO_INFO[id]);
+      return ALGO_INFO[id];
     }
 
     // Invalid algorithm id, nothing to return.
@@ -299,8 +304,8 @@ module.exports = class
   async base64(input, opts=this.defaults.base64)
   {
     const hash = await this.hash(input);
-    const b64str = base64.fromBytes(new Uint8Array(hash));
-    return opts.url ? base64.urlize(b64str) : b64str;
+    const b64str = base64.fromBytes(new Uint8Array(hash), opts);
+    return opts.url ? base64.urlize(b64str, opts) : b64str;
   }
 
   /**
@@ -332,7 +337,7 @@ module.exports = class
 
     if (nba)
     {
-      hash = util.numByteArray(hash);
+      hash = util.numByteArray(hash, nba);
     }
 
     return base91.encode(new Uint8Array(hash));
@@ -343,7 +348,7 @@ module.exports = class
    *
    * @param {(string|object)} input - A value to add to the hash.
    * 
-   * If it is an `object` then it will be processed with the `addWith`
+   * If it is an `object` then it will be processed with the `addUsing`
    * handler. See the constructor for details on supported formats.
    * 
    * String values are simply added _as-is_.

package/lib/hmac.js

@@ -2,8 +2,14 @@
 
 const Signature = require('./signature');
 
+const CKEY = Symbol('@lumjs/encore/hmac~key');
 const HMAC = 'HMAC';
-const DEF_OPTS = { algorithm: 'SHA-256' };
+const DEF_OPTS = {
+  algorithm: 'SHA-256',
+  extractable: false,
+  keyFormat: 'raw', 
+  usages: ['sign'] 
+};
 
 /**
  * The main class to perform HMAC signing.
@@ -31,20 +37,20 @@ class HmacEncoder {
    * @returns {Promise<CryptoKey>}
    */
   async getKey() {
-    if (this._key) {
-      return this._key;
+    if (this[CKEY]) {
+      return this[CKEY];
     }
 
     let hmac = { name: HMAC, hash: this.options.algorithm }
     let key = await crypto.subtle.importKey(
-      "raw",              // Key format
-      this.keyBytes,      // Key data
-      hmac,               // Algorithm
-      false,              // Not extractable
-      ["sign"]            // Usages
+      this.options.keyFormat,   // Key format
+      this.keyBytes,            // Key data
+      hmac,                     // Algorithm
+      this.options.extractable, // Is key extractable
+      this.options.usages,      // Allowed key usages
     );
 
-    this._key = key;
+    this[CKEY] = key;
     return key;
   }
 

package/lib/hotp.js

@@ -3,7 +3,12 @@
 const HmacEncoder = require('./hmac');
 const { intToBytes } = require('./util');
 
-const DEF_OPTS = { algorithm: 'SHA-1', counter: 0, window: 50 };
+const DEF_OPTS = { 
+  algorithm: 'SHA-1',
+  checkSize: 7,
+  counter: 0, 
+  window: 50 
+};
 
 const cp = Object.assign;
 const isError = v => (typeof v === 'function' && Error.isPrototypeOf(v));
@@ -62,7 +67,7 @@ class HOTP {
       (hb[offset + 3] & 0xff);
 
     let v2 = (v1 % 1000000) + '';
-    let code = Array(LEN - v2.length).join('0') + v2;
+    let code = Array(opts.checkSize - v2.length).join('0') + v2;
 
     let res = {
       opts,

package/lib/index.js

@@ -17,6 +17,7 @@ def(exports, 'util', {value: util}, E);
 
 /**
  * @alias module:@lumjs/encode.ord
+ * @deprecated this alias to `util.ord` will be removed in 3.x.
  * @see {@link module:@lumjs/encode/util.ord}
  */
 def(exports, 'ord', util.ord, E);
@@ -24,6 +25,7 @@ def(exports, 'ord', util.ord, E);
 /**
  * @name module:@lumjs/encode.numByteArray
  * @function
+ * @deprecated this alias to `util.numByteArray` will be removed in 3.x.
  * @see {@link module:@lumjs/encode/util.numByteArray}
  */
 def(exports, 'numByteArray', util.numByteArray, E);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lumjs/encode",
-  "version": "2.2.0",
+  "version": "2.2.2",
   "main": "lib/index.js",
   "exports":
   {