@vess-id/status-list 0.2.0 → 0.3.0

package/dist/index.js

@@ -1,6 +1,6 @@
 import * as pako from 'pako';
 import { SignJWT, jwtVerify } from 'jose';
-import * as cbor from 'cbor';
+import { encode, Tag, decode } from 'cbor-x';
 import { createSign, createVerify } from 'crypto';
 
 // lib/types/errors.ts
@@ -701,8 +701,8 @@ var ALGORITHM_MAP = {
   // EdDSA (Ed25519)
 };
 function signCOSE(payload, protectedHeader, privateKey) {
-  const protectedHeaderEncoded = cbor.encode(protectedHeader);
-  const sigStructure = cbor.encode([
+  const protectedHeaderEncoded = encode(protectedHeader);
+  const sigStructure = encode([
     "Signature1",
     // Context
     protectedHeaderEncoded,
@@ -725,22 +725,22 @@ function signCOSE(payload, protectedHeader, privateKey) {
     signature
     // Signature
   ];
-  const tagged = new cbor.Tagged(COSE_SIGN1_TAG, coseSign1);
-  return cbor.encode(tagged);
+  const tagged = new Tag(coseSign1, COSE_SIGN1_TAG);
+  return encode(tagged);
 }
 function verifyCOSE(coseSign1, publicKey) {
   try {
-    const decoded = cbor.decode(coseSign1);
-    if (!(decoded instanceof cbor.Tagged) || decoded.tag !== COSE_SIGN1_TAG) {
+    const decoded = decode(coseSign1);
+    if (!(decoded instanceof Tag) || decoded.tag !== COSE_SIGN1_TAG) {
       throw new InvalidTokenFormatError("Invalid COSE Sign1 structure: missing tag 18");
     }
     const [protectedHeaderEncoded, , payload, signature] = decoded.value;
-    const protectedHeader = cbor.decode(protectedHeaderEncoded);
+    const protectedHeader = decode(protectedHeaderEncoded);
     const alg = protectedHeader.get(1);
     if (!alg) {
       throw new InvalidTokenFormatError("Missing algorithm in protected header");
     }
-    const sigStructure = cbor.encode([
+    const sigStructure = encode([
       "Signature1",
       protectedHeaderEncoded,
       new Uint8Array(0),
@@ -912,11 +912,11 @@ function createCWTStatusListPayload(options) {
   return payload;
 }
 function encodeCWTPayload(payload) {
-  return cbor.encode(payload);
+  return encode(payload);
 }
 function parseCWTStatusList(cwtBytes) {
   try {
-    const payload = cbor.decode(cwtBytes);
+    const payload = decode(cwtBytes);
     validateCWTPayload(payload);
     const typedPayload = payload;
     const statusListClaim = typedPayload[CWT_CLAIMS.STATUS_LIST];
@@ -938,14 +938,14 @@ function parseCWTStatusList(cwtBytes) {
 function parseCWTStatusListSigned(cwtBytes, publicKey) {
   try {
     const payloadBytes = verifyCOSE(cwtBytes, publicKey);
-    const payload = cbor.decode(payloadBytes);
+    const payload = decode(payloadBytes);
     validateCWTPayload(payload);
     const typedPayload = payload;
     const statusListClaim = typedPayload[CWT_CLAIMS.STATUS_LIST];
     const statusList = StatusList.decompressFromBytes(statusListClaim.lst, statusListClaim.bits);
-    const decoded = cbor.decode(cwtBytes);
+    const decoded = decode(cwtBytes);
     const [protectedHeaderEncoded] = decoded.value;
-    const protectedHeader = cbor.decode(protectedHeaderEncoded);
+    const protectedHeader = decode(protectedHeaderEncoded);
     return {
       protectedHeader,
       unprotectedHeader: /* @__PURE__ */ new Map(),
@@ -970,12 +970,12 @@ function signCWTStatusList(payload, privateKey, options) {
   if (kid) {
     protectedHeader.set(COSE_HEADERS.KID, kid);
   }
-  const payloadBytes = cbor.encode(payload);
+  const payloadBytes = encode(payload);
   return signCOSE(payloadBytes, protectedHeader, privateKey);
 }
 function extractStatusListReferenceCBOR(credentialCBOR) {
   try {
-    const credential = cbor.decode(credentialCBOR);
+    const credential = decode(credentialCBOR);
     const status = credential.status || credential["status"];
     if (!status || typeof status !== "object") {
       throw new InvalidTokenFormatError("Missing status claim in credential");