@thurinlabs/identity-kit 1.0.1 → 1.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -0
- package/dist/embed.global.js +5 -2
- package/dist/embed.global.js.map +1 -1
- package/dist/index.cjs +5 -2
- package/dist/index.cjs.map +1 -1
- package/dist/index.js +5 -2
- package/dist/index.js.map +1 -1
- package/package.json +2 -1
package/dist/index.js
CHANGED
|
@@ -1339,6 +1339,7 @@ function keyIdToBytes(keyId) {
|
|
|
1339
1339
|
}
|
|
1340
1340
|
|
|
1341
1341
|
// src/core/pgp.ts
|
|
1342
|
+
var PGP_CONFIG = { rejectCurves: /* @__PURE__ */ new Set() };
|
|
1342
1343
|
function algorithmName(keyOrSubkey) {
|
|
1343
1344
|
try {
|
|
1344
1345
|
const info = keyOrSubkey.getAlgorithmInfo();
|
|
@@ -1379,7 +1380,9 @@ async function parsePgpKey(armoredKey) {
|
|
|
1379
1380
|
await cert.verify(
|
|
1380
1381
|
key.keyPacket,
|
|
1381
1382
|
cert.signatureType,
|
|
1382
|
-
{ userID: user.userID, key: key.keyPacket }
|
|
1383
|
+
{ userID: user.userID, key: key.keyPacket },
|
|
1384
|
+
void 0,
|
|
1385
|
+
PGP_CONFIG
|
|
1383
1386
|
);
|
|
1384
1387
|
} catch {
|
|
1385
1388
|
continue;
|
|
@@ -1430,7 +1433,7 @@ async function verifyAttestation({
|
|
|
1430
1433
|
return { verified: false, reason: "Key fingerprint mismatch" };
|
|
1431
1434
|
}
|
|
1432
1435
|
const message = await readCleartextMessage({ cleartextMessage: pgpSignature });
|
|
1433
|
-
const { signatures } = await verify({ message, verificationKeys: publicKey });
|
|
1436
|
+
const { signatures } = await verify({ message, verificationKeys: publicKey, config: PGP_CONFIG });
|
|
1434
1437
|
await signatures[0].verified;
|
|
1435
1438
|
const signedText = message.getText();
|
|
1436
1439
|
if (!signedText.toLowerCase().includes(ethAddress.toLowerCase())) {
|