@pagopa/io-react-native-jwt 1.0.0 → 1.2.0

package/README.md

@@ -5,7 +5,7 @@ Provides much greater performance for decoding, signing and verifying JWTs!
 
 🚀 Use only native functions via the following libraries:
 
-- 🤖 [nimbus-jose-jwt](https://github.com/felx/nimbus-jose-jwt/) on Android
+- 🤖 [nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) on Android
 - 📱 [JOSESwift](https://github.com/airsidemobile/JOSESwift/) on iOS
 
 ## Installation

package/android/build.gradle

@@ -83,7 +83,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native:+"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation 'com.nimbusds:nimbus-jose-jwt:8.0'
+  implementation 'com.nimbusds:nimbus-jose-jwt:9.30.2'
   implementation 'org.bouncycastle:bcprov-jdk15on:[1.56,)'
 
 }

package/android/src/main/java/com/pagopa/ioreactnativejwt/IoReactNativeJwtModule.kt

@@ -7,9 +7,11 @@ import com.facebook.react.bridge.ReactApplicationContext
 import com.facebook.react.bridge.ReactContextBaseJavaModule
 import com.facebook.react.bridge.ReactMethod
 import com.facebook.react.bridge.ReadableMap
+import com.nimbusds.jose.JOSEObject
 import com.nimbusds.jose.JWEEncrypter
 import com.nimbusds.jose.JWEHeader
 import com.nimbusds.jose.JWEObject
+import com.nimbusds.jose.JWSHeader
 import com.nimbusds.jose.Payload
 import com.nimbusds.jose.crypto.ECDSAVerifier
 import com.nimbusds.jose.crypto.RSAEncrypter
@@ -18,9 +20,11 @@ import com.nimbusds.jose.crypto.bc.BouncyCastleProviderSingleton
 import com.nimbusds.jose.crypto.impl.ECDSA.transcodeSignatureToConcat
 import com.nimbusds.jose.jwk.ECKey
 import com.nimbusds.jose.jwk.RSAKey
-import com.nimbusds.jwt.SignedJWT
+import com.nimbusds.jose.util.JSONObjectUtils
+import com.nimbusds.jose.util.StandardCharset
 import org.json.JSONObject
 import java.security.MessageDigest
+import java.text.ParseException
 
 
 class IoReactNativeJwtModule(reactContext: ReactApplicationContext) :
@@ -37,7 +41,21 @@ class IoReactNativeJwtModule(reactContext: ReactApplicationContext) :
   @ReactMethod
   fun verify(token: String, jwk: ReadableMap, promise: Promise) {
     try {
-      val signedJWT = SignedJWT.parse(token)
+
+      val parts = JOSEObject.split(token)
+      if (parts.size != 3) {
+        throw ParseException("Unexpected number of Base64URL parts, must be three", 0)
+      }
+
+      val headerString = parts[0]
+      val headerJson = JSONObjectUtils.parse(headerString.decodeToString(), -1);
+      val header = JWSHeader.parse(headerJson, headerString);
+
+      val payload = Payload(parts[1])
+      val signature = parts[2]
+
+      var signingInput = header.toBase64URL().toString() + '.' + payload.toBase64URL().toString();
+      val signingInputByteArray = signingInput.toByteArray(StandardCharset.UTF_8)
       val jwkJson = JSONObject(jwk.toHashMap())
       var isValid = false
 
@@ -45,12 +63,12 @@ class IoReactNativeJwtModule(reactContext: ReactApplicationContext) :
         val internalJwk = ECKey.parse(jwkJson.toString())
         val verifier = ECDSAVerifier(internalJwk)
         verifier.jcaContext.provider = BouncyCastleProviderSingleton.getInstance()
-        isValid = signedJWT.verify(verifier)
+        isValid = verifier.verify(header, signingInputByteArray, signature);
       } else {
         val internalJwk = RSAKey.parse(jwkJson.toString())
         val verifier = RSASSAVerifier(internalJwk)
         verifier.jcaContext.provider = BouncyCastleProviderSingleton.getInstance()
-        isValid = signedJWT.verify(verifier)
+        isValid = verifier.verify(header, signingInputByteArray, signature);
       }
       promise.resolve(isValid)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pagopa/io-react-native-jwt",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "description": "Native support for JWT",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",
@@ -71,7 +71,7 @@
     "pod-install": "^0.1.0",
     "prettier": "^2.0.5",
     "react": "18.2.0",
-    "react-native": "0.72.1",
+    "react-native": "0.72.12",
     "react-native-builder-bob": "^0.20.0",
     "release-it": "^15.0.0",
     "turbo": "^1.10.7",
@@ -90,7 +90,7 @@
   "engines": {
     "node": ">= 16.0.0"
   },
-  "packageManager": "^yarn@1.22.15",
+  "packageManager": "yarn@1.22.19",
   "jest": {
     "preset": "react-native",
     "modulePathIgnorePatterns": [
@@ -166,6 +166,6 @@
   },
   "dependencies": {
     "abab": "^2.0.6",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   }
 }