@openid4vc/oauth2 0.6.0 → 0.6.1-alpha-20261001094430

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.mjs CHANGED
@@ -730,7 +730,7 @@ async function verifyDpopJwt(options) {
730
730
  }
731
731
  if (options.request.method !== payload.htm) throw new Oauth2Error(`Dpop jwt contains htm value '${payload.htm}', but expected htm value '${options.request.method}'`);
732
732
  const expectedHtu = htuFromRequestUrl(options.request.url);
733
- if (expectedHtu !== payload.htu) throw new Oauth2Error(`Dpop jwt contains htu value '${payload.htu}', but expected htu value '${expectedHtu}'.`);
733
+ if (expectedHtu !== htuFromRequestUrl(payload.htu)) throw new Oauth2Error(`Dpop jwt contains htu value '${payload.htu}', but expected htu value '${expectedHtu}'.`);
734
734
  const now = options.now ?? /* @__PURE__ */ new Date();
735
735
  if (options.maxProofAgeSeconds !== void 0) {
736
736
  if (options.maxProofAgeSeconds < 0) throw new Oauth2Error(`maxProofAgeSeconds must be greater than or equal to 0, received '${options.maxProofAgeSeconds}'.`);