@oxy.so/core 7.14.1 → 7.16.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oxy.so/core",
-  "version": "7.14.1",
+  "version": "7.16.0",
   "description": "OxyHQ SDK Foundation — API client, authentication, cryptographic identity, and shared utilities",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
@@ -182,7 +182,7 @@
     "@noble/ciphers": "^2.4.0",
     "@noble/hashes": "^2.4.0",
     "@oxy.so/contracts": "6.5.0",
-    "@oxy.so/protocol": "^1.6.0",
+    "@oxy.so/protocol": "^1.6.1",
     "@oxy.so/telemetry": "^2.1.0",
     "@scure/bip39": "^2.4.0",
     "buffer": "^6.0.3",
@@ -198,7 +198,7 @@
     "@react-native-async-storage/async-storage": "<4.0.0",
     "expo-crypto": "<59.0.0",
     "expo-secure-store": "<59.0.0",
-    "express": "^4.0.0",
+    "express": "^4.0.0 || ^5.0.0",
     "@aws-sdk/credential-provider-node": ">=3.972.83 <4",
     "@aws-sdk/credential-provider-ini": ">=3.973.16 <4"
   },
@@ -224,16 +224,16 @@
   },
   "devDependencies": {
     "@react-native-async-storage/async-storage": "^3.1.1",
-    "@types/express": "^4.17.25",
+    "@types/express": "^5.0.6",
     "@types/invariant": "^2.2.37",
-    "@types/node": "^20.19.43",
+    "@types/node": "^26.6.6",
     "expo-crypto": "~58.0.7",
     "expo-secure-store": "~58.0.2",
-    "express": "^4.22.2",
+    "express": "^5.3.0",
     "express-rate-limit": "^8.6.0",
     "jest": "^30.5.2",
     "regexpu-core": "^6.5.3",
-    "typescript": "^5.9.2",
+    "typescript": "~6.0.3",
     "helmet": "^8.3.0",
     "socket.io": "^4.8.4",
     "@aws-sdk/credential-provider-node": "3.972.92",

package/src/server/OxyServer.ts

@@ -1380,7 +1380,7 @@ export class OxyServer extends OxyServices {
     let verified = false;
     try {
       const publicKey = nodeCrypto.createPublicKey({
-        key: jwk as unknown as import('node:crypto').JsonWebKey,
+        key: jwk,
         format: 'jwk',
       });
       verified = nodeCrypto.verify(

package/src/server/middleware.ts

@@ -25,7 +25,6 @@ import {
   type ServiceIntrospection,
 } from '@oxy.so/contracts';
 import { jwtDecode } from 'jwt-decode';
-import type { JsonWebKey } from 'node:crypto';
 import type { ApiError, User } from '../models/interfaces';
 import { loadNodeCrypto } from '@oxy.so/protocol';
 import { logger } from '../logger';
@@ -1759,7 +1758,7 @@ async function verifyServiceTokenSignature(
   const jwk = await resolveServiceTokenPublicKey(header.kid, options.jwksUrl, options.cache);
   let publicKey: Awaited<ReturnType<typeof nodeCrypto.createPublicKey>>;
   try {
-    publicKey = nodeCrypto.createPublicKey({ key: jwk as unknown as JsonWebKey, format: 'jwk' });
+    publicKey = nodeCrypto.createPublicKey({ key: jwk, format: 'jwk' });
   } catch {
     throw new ServiceTokenSignatureError('Service token public key is invalid');
   }