@sd-jwt/core 0.9.2-next.0 → 0.9.2-next.2

package/dist/index.js

@@ -597,10 +597,34 @@ var GeneralJSON = class _GeneralJSON {
 };
 
 // src/index.ts
+var IANA_HASH_ALGORITHMS = [
+  "sha-256",
+  "sha-256-128",
+  "sha-256-120",
+  "sha-256-96",
+  "sha-256-64",
+  "sha-256-32",
+  "sha-384",
+  "sha-512",
+  "sha3-224",
+  "sha3-256",
+  "sha3-384",
+  "sha3-512",
+  "blake2s-256",
+  "blake2b-256",
+  "blake2b-512",
+  "k12-256",
+  "k12-512"
+];
 var _SDJwtInstance = class _SDJwtInstance {
   constructor(userConfig) {
     this.userConfig = {};
     if (userConfig) {
+      if (userConfig.hashAlg && !IANA_HASH_ALGORITHMS.includes(userConfig.hashAlg)) {
+        throw new import_utils7.SDJWTException(
+          `Invalid hash algorithm: ${userConfig.hashAlg}`
+        );
+      }
       this.userConfig = userConfig;
     }
   }
@@ -852,6 +876,11 @@ var SDJwtGeneralJSONInstance = class {
   constructor(userConfig) {
     this.userConfig = {};
     if (userConfig) {
+      if (userConfig.hashAlg && !IANA_HASH_ALGORITHMS.includes(userConfig.hashAlg)) {
+        throw new import_utils7.SDJWTException(
+          `Invalid hash algorithm: ${userConfig.hashAlg}`
+        );
+      }
       this.userConfig = userConfig;
     }
   }

package/dist/index.mjs

@@ -581,10 +581,34 @@ var GeneralJSON = class _GeneralJSON {
 };
 
 // src/index.ts
+var IANA_HASH_ALGORITHMS = [
+  "sha-256",
+  "sha-256-128",
+  "sha-256-120",
+  "sha-256-96",
+  "sha-256-64",
+  "sha-256-32",
+  "sha-384",
+  "sha-512",
+  "sha3-224",
+  "sha3-256",
+  "sha3-384",
+  "sha3-512",
+  "blake2s-256",
+  "blake2b-256",
+  "blake2b-512",
+  "k12-256",
+  "k12-512"
+];
 var _SDJwtInstance = class _SDJwtInstance {
   constructor(userConfig) {
     this.userConfig = {};
     if (userConfig) {
+      if (userConfig.hashAlg && !IANA_HASH_ALGORITHMS.includes(userConfig.hashAlg)) {
+        throw new SDJWTException6(
+          `Invalid hash algorithm: ${userConfig.hashAlg}`
+        );
+      }
       this.userConfig = userConfig;
     }
   }
@@ -836,6 +860,11 @@ var SDJwtGeneralJSONInstance = class {
   constructor(userConfig) {
     this.userConfig = {};
     if (userConfig) {
+      if (userConfig.hashAlg && !IANA_HASH_ALGORITHMS.includes(userConfig.hashAlg)) {
+        throw new SDJWTException6(
+          `Invalid hash algorithm: ${userConfig.hashAlg}`
+        );
+      }
       this.userConfig = userConfig;
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sd-jwt/core",
-  "version": "0.9.2-next.0+ae5b9d9",
+  "version": "0.9.2-next.2+3c85e8e",
   "description": "sd-jwt draft 7 implementation in typescript",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -38,13 +38,13 @@
   },
   "license": "Apache-2.0",
   "devDependencies": {
-    "@sd-jwt/crypto-nodejs": "0.9.2-next.0+ae5b9d9"
+    "@sd-jwt/crypto-nodejs": "0.9.2-next.2+3c85e8e"
   },
   "dependencies": {
-    "@sd-jwt/decode": "0.9.2-next.0+ae5b9d9",
-    "@sd-jwt/present": "0.9.2-next.0+ae5b9d9",
-    "@sd-jwt/types": "0.9.2-next.0+ae5b9d9",
-    "@sd-jwt/utils": "0.9.2-next.0+ae5b9d9"
+    "@sd-jwt/decode": "0.9.2-next.2+3c85e8e",
+    "@sd-jwt/present": "0.9.2-next.2+3c85e8e",
+    "@sd-jwt/types": "0.9.2-next.2+3c85e8e",
+    "@sd-jwt/utils": "0.9.2-next.2+3c85e8e"
   },
   "publishConfig": {
     "access": "public"
@@ -62,5 +62,5 @@
       "esm"
     ]
   },
-  "gitHead": "ae5b9d98de1ae6e214770f225ea11ab3ebce2872"
+  "gitHead": "3c85e8e283fa53e871a14c321b3a04fc4380b875"
 }

package/src/index.ts

@@ -17,6 +17,7 @@ import {
   type SDJWTConfig,
   type JwtPayload,
   type Signer,
+  type HashAlgorithm,
 } from '@sd-jwt/types';
 import { getSDAlgAndPayload } from '@sd-jwt/decode';
 import { FlattenJSON } from './flattenJSON';
@@ -31,6 +32,26 @@ export * from './generalJSON';
 
 export type SdJwtPayload = Record<string, unknown>;
 
+const IANA_HASH_ALGORITHMS: HashAlgorithm[] = [
+  'sha-256',
+  'sha-256-128',
+  'sha-256-120',
+  'sha-256-96',
+  'sha-256-64',
+  'sha-256-32',
+  'sha-384',
+  'sha-512',
+  'sha3-224',
+  'sha3-256',
+  'sha3-384',
+  'sha3-512',
+  'blake2s-256',
+  'blake2b-256',
+  'blake2b-512',
+  'k12-256',
+  'k12-512',
+];
+
 export class SDJwtInstance<ExtendedPayload extends SdJwtPayload> {
   //header type
   protected type?: string;
@@ -41,6 +62,14 @@ export class SDJwtInstance<ExtendedPayload extends SdJwtPayload> {
 
   constructor(userConfig?: SDJWTConfig) {
     if (userConfig) {
+      if (
+        userConfig.hashAlg &&
+        !IANA_HASH_ALGORITHMS.includes(userConfig.hashAlg)
+      ) {
+        throw new SDJWTException(
+          `Invalid hash algorithm: ${userConfig.hashAlg}`,
+        );
+      }
       this.userConfig = userConfig;
     }
   }
@@ -340,6 +369,14 @@ export class SDJwtGeneralJSONInstance<ExtendedPayload extends SdJwtPayload> {
 
   constructor(userConfig?: SDJWTConfig) {
     if (userConfig) {
+      if (
+        userConfig.hashAlg &&
+        !IANA_HASH_ALGORITHMS.includes(userConfig.hashAlg)
+      ) {
+        throw new SDJWTException(
+          `Invalid hash algorithm: ${userConfig.hashAlg}`,
+        );
+      }
       this.userConfig = userConfig;
     }
   }

package/test/app-e2e.spec.ts

@@ -36,7 +36,7 @@ describe('App', () => {
       signAlg: 'EdDSA',
       verifier,
       hasher: digest,
-      hashAlg: 'SHA-256',
+      hashAlg: 'sha-256',
       saltGenerator: generateSalt,
     });
 
@@ -208,7 +208,7 @@ async function JSONtest(filename: string) {
     signAlg: 'EdDSA',
     verifier,
     hasher: digest,
-    hashAlg: 'SHA-256',
+    hashAlg: 'sha-256',
     saltGenerator: generateSalt,
   });