@virtru/dsp-sdk 0.7.4 → 0.7.6

package/CHANGELOG.md

@@ -1,6 +1,21 @@
 # Change Log - @virtru/dsp-sdk
 
-This log was last generated on Tue, 28 Apr 2026 16:40:32 GMT and should not be manually modified.
+This log was last generated on Thu, 21 May 2026 15:41:46 GMT and should not be manually modified.
+
+## 0.7.6
+Thu, 21 May 2026 15:41:46 GMT
+
+### Patches
+
+- Refresh the DSP SDK dependency so entitlement lookups use the Connect shared service endpoint.
+- Move GetMyEntitlements to the Connect shared service endpoint.
+
+## 0.7.5
+Thu, 14 May 2026 17:39:47 GMT
+
+### Patches
+
+- fix FIPS AES-GCM decrypt to accept payload with authTag appended (opentdf-sdk >=0.16 contract)
 
 ## 0.7.4
 Tue, 28 Apr 2026 16:40:32 GMT

package/dist/src/lib/fips-crypto/symmetric.js

@@ -58,10 +58,11 @@ export async function decrypt(payload, key, iv, algorithm, authTag) {
     const algName = algorithm === AES_CBC_URN ? 'AES-CBC' : 'AES-GCM';
     let payloadBytes = new Uint8Array(payload.asArrayBuffer());
     const ivBytes = new Uint8Array(iv.asArrayBuffer());
-    if (algName === 'AES-GCM') {
-        if (!authTag) {
-            throw new Error('Missing authTag for AES-GCM decryption');
-        }
+    if (algName === 'AES-GCM' && authTag) {
+        // Legacy contract (opentdf-sdk <0.16): authTag passed separately —
+        // recombine for WebCrypto, which expects payload || authTag.
+        // >=0.16 (web-sdk PR #922): the tag is already appended to payload, so
+        // we pass it through unchanged. Mirrors DefaultCryptoService behaviour.
         const tagBytes = new Uint8Array(authTag.asArrayBuffer());
         const combined = new Uint8Array(payloadBytes.length + tagBytes.length);
         combined.set(payloadBytes, 0);

package/dist/src/lib/utils.js

@@ -96,16 +96,13 @@ export async function getUserEntitlements(options) {
         refreshToken: options.refreshToken,
         cryptoService: options.cryptoService,
     });
-    const accessToken = await authProvider.oidcAuth.get();
-    const userEntitlementsResponse = await fetch(`${options.platformEndpoint}/shared/entitlements`, {
-        body: JSON.stringify({}),
-        headers: {
-            Authorization: `Bearer ${accessToken}`,
-            'Content-Type': 'application/json',
-        },
-        method: 'POST',
+    const dspClient = new DSPClient({
+        authProvider,
+        platformUrl: options.platformEndpoint,
     });
-    return (await userEntitlementsResponse.json());
+    return (await dspClient.v1.sharedService.getMyEntitlements({
+        attributeValueFqns: [],
+    }));
 }
 export const flattenObligations = (obligations) => Object.values(obligations).flatMap((feature) => feature?.fully_qualified_names || []);
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@virtru/dsp-sdk",
-  "version": "0.7.4",
+  "version": "0.7.6",
   "license": "SEE LICENSE IN LICENSE",
   "main": "dist/src/index.js",
   "exports": {