@peac/protocol 0.15.1 → 0.15.2

package/dist/_internal/signature.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Internal Ed25519 signature-width guard for the verification paths.
+ *
+ * NOT re-exported from the package barrel (`index.ts` does
+ * `export * from './verify'` / `'./verify-local'`, so anything exported from
+ * those modules becomes public API). Keep this helper in `_internal` so the
+ * guard adds no public surface.
+ */
+/** Ed25519 signatures are fixed-width 64 bytes (RFC 8032 / RFC 8709). */
+export declare const ED25519_SIGNATURE_BYTES = 64;
+/**
+ * Return the decoded byte length of a compact JWS signature segment, or `null`
+ * when the token is not a well-formed three-part compact JWS or the signature
+ * segment is not decodable base64url. Those `null` cases are deliberately left
+ * to the existing format/verification error paths (this guard does not change
+ * their classification); only a well-formed token whose signature decodes to a
+ * non-64-byte width is surfaced to the caller as a wrong-length signature.
+ */
+export declare function ed25519SignatureByteLength(jws: string): number | null;
+//# sourceMappingURL=signature.d.ts.map

package/dist/_internal/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/_internal/signature.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAE1C;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUrE"}

package/dist/index.cjs

@@ -2209,6 +2209,18 @@ async function resolveJWKS(issuerUrl, options) {
     revokedKeys
   };
 }
+var ED25519_SIGNATURE_BYTES = 64;
+function ed25519SignatureByteLength(jws) {
+  const parts = jws.split(".");
+  if (parts.length !== 3) {
+    return null;
+  }
+  try {
+    return crypto$1.base64urlDecode(parts[2]).length;
+  } catch {
+    return null;
+  }
+}
 
 // src/verify.ts
 function jwkToPublicKey(jwk) {
@@ -2306,6 +2318,23 @@ async function verifyReceipt(optionsOrJws) {
       };
     }
     const publicKey = jwkToPublicKey(jwk);
+    const signatureBytes = ed25519SignatureByteLength(receiptJws);
+    if (signatureBytes !== null && signatureBytes !== ED25519_SIGNATURE_BYTES) {
+      const durationMs = performance.now() - startTime;
+      fireTelemetryHook(telemetry?.onReceiptVerified, {
+        receiptHash: hashReceipt(receiptJws),
+        valid: false,
+        reasonCode: "invalid_signature",
+        issuer: payload.iss,
+        kid: header.kid,
+        durationMs
+      });
+      return {
+        ok: false,
+        reason: "invalid_signature",
+        details: "Ed25519 signature has invalid length"
+      };
+    }
     const result = await crypto$1.verify(receiptJws, publicKey);
     if (!result.valid) {
       const durationMs = performance.now() - startTime;
@@ -2341,7 +2370,7 @@ async function verifyReceipt(optionsOrJws) {
         ...jwksFetchTime && { jwks_fetch_ms: jwksFetchTime }
       }
     };
-  } catch (err) {
+  } catch {
     const durationMs = performance.now() - startTime;
     fireTelemetryHook(telemetry?.onReceiptVerified, {
       receiptHash: hashReceipt(receiptJws),
@@ -2352,7 +2381,7 @@ async function verifyReceipt(optionsOrJws) {
     return {
       ok: false,
       reason: "verification_error",
-      details: err instanceof Error ? err.message : String(err)
+      details: "Unexpected verification error."
     };
   }
 }
@@ -2665,11 +2694,18 @@ async function verifyLocal(jws, publicKey, options = {}) {
         message: `Invalid receipt payload: ${syntaxMessage}`
       };
     }
-    const message = err instanceof Error ? err.message : String(err);
+    const signatureBytes = ed25519SignatureByteLength(jws);
+    if (signatureBytes !== null && signatureBytes !== ED25519_SIGNATURE_BYTES) {
+      return {
+        valid: false,
+        code: "E_INVALID_SIGNATURE",
+        message: "Ed25519 signature has invalid length"
+      };
+    }
     return {
       valid: false,
       code: "E_INTERNAL",
-      message: `Unexpected verification error: ${message}`
+      message: "Unexpected verification error."
     };
   }
 }