@stackframe/stack-shared 2.6.6 → 2.6.8

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @stackframe/stack-shared
 
+## 2.6.8
+
+### Patch Changes
+
+- Bugfixes
+  - @stackframe/stack-sc@2.6.8
+
+## 2.6.7
+
+### Patch Changes
+
+- Updated dependencies
+  - @stackframe/stack-sc@2.6.7
+
 ## 2.6.6
 
 ### Patch Changes

package/dist/utils/bytes.d.ts

@@ -2,5 +2,8 @@ export declare function encodeBase32(input: Uint8Array): string;
 export declare function decodeBase32(input: string): Uint8Array;
 export declare function encodeBase64(input: Uint8Array): string;
 export declare function decodeBase64(input: string): Uint8Array;
+export declare function encodeBase64Url(input: Uint8Array): string;
+export declare function decodeBase64Url(input: string): Uint8Array;
 export declare function isBase32(input: string): boolean;
 export declare function isBase64(input: string): boolean;
+export declare function isBase64Url(input: string): boolean;

package/dist/utils/bytes.js

@@ -68,6 +68,20 @@ export function decodeBase64(input) {
     }
     return new Uint8Array(atob(input).split("").map((char) => char.charCodeAt(0)));
 }
+export function encodeBase64Url(input) {
+    const res = encodeBase64(input).replace(/=+$/, "").replace(/\+/g, "-").replace(/\//g, "_");
+    // sanity check
+    if (!isBase64Url(res)) {
+        throw new StackAssertionError("Invalid base64url output; this should never happen");
+    }
+    return res;
+}
+export function decodeBase64Url(input) {
+    if (!isBase64Url(input)) {
+        throw new StackAssertionError("Invalid base64url string");
+    }
+    return decodeBase64(input.replace(/-/g, "+").replace(/_/g, "/") + "====".slice((input.length - 1) % 4 + 1));
+}
 export function isBase32(input) {
     for (const char of input) {
         if (char === " ")
@@ -82,3 +96,7 @@ export function isBase64(input) {
     const regex = /^([0-9a-zA-Z+/]{4})*(([0-9a-zA-Z+/]{2}==)|([0-9a-zA-Z+/]{3}=))?$/;
     return regex.test(input);
 }
+export function isBase64Url(input) {
+    const regex = /^[0-9a-zA-Z_-]+$/;
+    return regex.test(input);
+}

package/dist/utils/jwt.js

@@ -1,6 +1,6 @@
 import elliptic from "elliptic";
 import * as jose from "jose";
-import { encodeBase64 } from "./bytes";
+import { encodeBase64Url } from "./bytes";
 import { getEnvVariable } from "./env";
 import { globalVar } from "./globals";
 import { pick } from "./objects";
@@ -60,9 +60,9 @@ export async function getPrivateJwk(secret) {
     return {
         kty: 'EC',
         crv: 'P-256',
-        d: encodeBase64(priv),
-        x: encodeBase64(publicKey.getX().toBuffer()),
-        y: encodeBase64(publicKey.getY().toBuffer()),
+        d: encodeBase64Url(priv),
+        x: encodeBase64Url(publicKey.getX().toBuffer()),
+        y: encodeBase64Url(publicKey.getY().toBuffer()),
     };
 }
 export async function getPublicJwkSet(secret) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackframe/stack-shared",
-  "version": "2.6.6",
+  "version": "2.6.8",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -38,7 +38,7 @@
     "oauth4webapi": "^2.10.3",
     "semver": "^7.6.3",
     "uuid": "^9.0.1",
-    "@stackframe/stack-sc": "2.6.6"
+    "@stackframe/stack-sc": "2.6.8"
   },
   "devDependencies": {
     "@types/bcrypt": "^5.0.2",