@naturalcycles/nodejs-lib 12.82.1 → 12.83.0

package/dist/jwt/jwt.service.d.ts

@@ -18,6 +18,8 @@ export interface JWTServiceCfg {
     privateKey?: string | Buffer;
     /**
      * Recommended: ES256
+     * Keys (private/public) should be generated using proper settings
+     * that fit the used Algorithm.
      */
     algorithm: Algorithm;
     /**
@@ -38,7 +40,10 @@ export interface JWTServiceCfg {
  * Wraps popular `jsonwebtoken` library.
  * You should create one instance of JWTService for each pair of private/public key.
  *
- * Generate key pair like this:
+ * Generate key pair like this.
+ * Please note that parameters should be different for different algorithms.
+ * For ES256 (default algo in JWTService) key should have `prime256v1` parameter:
+ *
  * openssl ecparam -name prime256v1 -genkey -noout -out key.pem
  * openssl ec -in key.pem -pubout > key.pub.pem
  */
@@ -46,7 +51,7 @@ export declare class JWTService {
     cfg: JWTServiceCfg;
     constructor(cfg: JWTServiceCfg);
     sign<T extends AnyObject>(payload: T, schema?: AnySchemaTyped<T>, opt?: SignOptions): JWTString;
-    verify<T extends AnyObject>(token: JWTString, schema?: AnySchemaTyped<T>, opt?: VerifyOptions): T;
+    verify<T extends AnyObject>(token: JWTString, schema?: AnySchemaTyped<T>, opt?: VerifyOptions, publicKey?: string): T;
     decode<T extends AnyObject>(token: JWTString, schema?: AnySchemaTyped<T>): {
         header: JwtHeader;
         payload: T;

package/dist/jwt/jwt.service.js

@@ -11,7 +11,10 @@ const joi_validation_util_1 = require("../validation/joi/joi.validation.util");
  * Wraps popular `jsonwebtoken` library.
  * You should create one instance of JWTService for each pair of private/public key.
  *
- * Generate key pair like this:
+ * Generate key pair like this.
+ * Please note that parameters should be different for different algorithms.
+ * For ES256 (default algo in JWTService) key should have `prime256v1` parameter:
+ *
  * openssl ecparam -name prime256v1 -genkey -noout -out key.pem
  * openssl ec -in key.pem -pubout > key.pub.pem
  */
@@ -31,10 +34,10 @@ class JWTService {
             ...opt,
         });
     }
-    verify(token, schema, opt = {}) {
+    verify(token, schema, opt = {}, publicKey) {
         (0, js_lib_1._assert)(this.cfg.publicKey, 'JWTService: publicKey is required to be able to verify, but not provided');
         try {
-            const data = jsonwebtoken.verify(token, this.cfg.publicKey, {
+            const data = jsonwebtoken.verify(token, publicKey || this.cfg.publicKey, {
                 algorithms: [this.cfg.algorithm],
                 ...this.cfg.verifyOptions,
                 ...opt,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturalcycles/nodejs-lib",
-  "version": "12.82.1",
+  "version": "12.83.0",
   "scripts": {
     "prepare": "husky install",
     "docs-serve": "vuepress dev docs",

package/src/jwt/jwt.service.ts

@@ -28,6 +28,8 @@ export interface JWTServiceCfg {
 
   /**
    * Recommended: ES256
+   * Keys (private/public) should be generated using proper settings
+   * that fit the used Algorithm.
    */
   algorithm: Algorithm
 
@@ -54,7 +56,10 @@ export interface JWTServiceCfg {
  * Wraps popular `jsonwebtoken` library.
  * You should create one instance of JWTService for each pair of private/public key.
  *
- * Generate key pair like this:
+ * Generate key pair like this.
+ * Please note that parameters should be different for different algorithms.
+ * For ES256 (default algo in JWTService) key should have `prime256v1` parameter:
+ *
  * openssl ecparam -name prime256v1 -genkey -noout -out key.pem
  * openssl ec -in key.pem -pubout > key.pub.pem
  */
@@ -87,6 +92,7 @@ export class JWTService {
     token: JWTString,
     schema?: AnySchemaTyped<T>,
     opt: VerifyOptions = {},
+    publicKey?: string, // allows to override public key
   ): T {
     _assert(
       this.cfg.publicKey,
@@ -94,7 +100,7 @@ export class JWTService {
     )
 
     try {
-      const data = jsonwebtoken.verify(token, this.cfg.publicKey, {
+      const data = jsonwebtoken.verify(token, publicKey || this.cfg.publicKey, {
         algorithms: [this.cfg.algorithm],
         ...this.cfg.verifyOptions,
         ...opt,