antarctic 0.2.0 → 0.3.0

package/dist/encoding.d.ts

@@ -0,0 +1,3 @@
+export declare function encodeBase64(bytes: Uint8Array): string;
+export declare function encodeBase64urlNoPadding(bytes: Uint8Array): string;
+export declare function decodeBase64urlIgnorePadding(encoded: string): Uint8Array;

package/dist/encoding.js

@@ -0,0 +1,39 @@
+const base64urlAlphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+function encodeBinaryString(bytes) {
+    let binary = "";
+    // Chunked to stay well under the argument limit for large inputs.
+    for (let i = 0; i < bytes.length; i += 0x8000) {
+        binary += String.fromCharCode(...bytes.subarray(i, i + 0x8000));
+    }
+    return binary;
+}
+export function encodeBase64(bytes) {
+    return btoa(encodeBinaryString(bytes));
+}
+export function encodeBase64urlNoPadding(bytes) {
+    let result = "";
+    for (let i = 0; i < bytes.length; i += 3) {
+        let buffer = 0;
+        let bits = 0;
+        for (let j = 0; j < 3 && i + j < bytes.length; j++) {
+            buffer = (buffer << 8) | bytes[i + j];
+            bits += 8;
+        }
+        for (let j = 0; j < 4 && bits > 0; j++) {
+            bits -= 6;
+            const index = bits >= 0 ? (buffer >> bits) & 0x3f : (buffer << -bits) & 0x3f;
+            result += base64urlAlphabet[index];
+        }
+    }
+    return result;
+}
+export function decodeBase64urlIgnorePadding(encoded) {
+    const normalized = encoded.replaceAll("-", "+").replaceAll("_", "/").replaceAll("=", "");
+    const padded = normalized + "=".repeat((4 - (normalized.length % 4)) % 4);
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}

package/dist/jwt.d.ts

@@ -0,0 +1,3 @@
+export declare function decodeJWT(jwt: string): object;
+export declare function createJWTSignatureMessage(headerJSON: string, payloadJSON: string): Uint8Array;
+export declare function encodeJWT(headerJSON: string, payloadJSON: string, signature: Uint8Array): string;

package/dist/jwt.js

@@ -0,0 +1,38 @@
+import { decodeBase64urlIgnorePadding, encodeBase64urlNoPadding } from "./encoding.js";
+export function decodeJWT(jwt) {
+    const parts = jwt.split(".");
+    if (parts.length !== 3) {
+        throw new Error("Invalid JWT");
+    }
+    let jsonPayload;
+    try {
+        jsonPayload = new TextDecoder().decode(decodeBase64urlIgnorePadding(parts[1]));
+    }
+    catch {
+        throw new Error("Invalid JWT: Invalid base64url encoding");
+    }
+    let payload;
+    try {
+        payload = JSON.parse(jsonPayload);
+    }
+    catch {
+        throw new Error("Invalid JWT: Invalid JSON encoding");
+    }
+    if (typeof payload !== "object" || payload === null) {
+        throw new Error("Invalid JWT: Invalid payload");
+    }
+    return payload;
+}
+export function createJWTSignatureMessage(headerJSON, payloadJSON) {
+    const encoder = new TextEncoder();
+    const encodedHeader = encodeBase64urlNoPadding(encoder.encode(headerJSON));
+    const encodedPayload = encodeBase64urlNoPadding(encoder.encode(payloadJSON));
+    return encoder.encode(encodedHeader + "." + encodedPayload);
+}
+export function encodeJWT(headerJSON, payloadJSON, signature) {
+    const encoder = new TextEncoder();
+    const encodedHeader = encodeBase64urlNoPadding(encoder.encode(headerJSON));
+    const encodedPayload = encodeBase64urlNoPadding(encoder.encode(payloadJSON));
+    const encodedSignature = encodeBase64urlNoPadding(signature);
+    return encodedHeader + "." + encodedPayload + "." + encodedSignature;
+}

package/dist/oauth2.js

@@ -1,4 +1,4 @@
-import * as encoding from "@oslojs/encoding";
+import { encodeBase64urlNoPadding } from "./encoding.js";
 import * as sha2 from "@oslojs/crypto/sha2";
 export class OAuth2Tokens {
     data;
@@ -53,15 +53,15 @@ export class OAuth2Tokens {
 }
 export function createS256CodeChallenge(codeVerifier) {
     const codeChallengeBytes = sha2.sha256(new TextEncoder().encode(codeVerifier));
-    return encoding.encodeBase64urlNoPadding(codeChallengeBytes);
+    return encodeBase64urlNoPadding(codeChallengeBytes);
 }
 export function generateCodeVerifier() {
     const randomValues = new Uint8Array(32);
     crypto.getRandomValues(randomValues);
-    return encoding.encodeBase64urlNoPadding(randomValues);
+    return encodeBase64urlNoPadding(randomValues);
 }
 export function generateState() {
     const randomValues = new Uint8Array(32);
     crypto.getRandomValues(randomValues);
-    return encoding.encodeBase64urlNoPadding(randomValues);
+    return encodeBase64urlNoPadding(randomValues);
 }

package/dist/oidc.js

@@ -1,7 +1,7 @@
-import * as jwt from "@oslojs/jwt";
+import { decodeJWT } from "./jwt.js";
 export function decodeIdToken(idToken) {
     try {
-        return jwt.decodeJWT(idToken);
+        return decodeJWT(idToken);
     }
     catch (e) {
         throw new Error("Invalid ID token", {

package/dist/providers/apple.js

@@ -1,4 +1,4 @@
-import * as jwt from "@oslojs/jwt";
+import { createJWTSignatureMessage, encodeJWT } from "../jwt.js";
 import { createOAuth2Request, sendTokenRequest } from "../request.js";
 import { decodeIdToken } from "../oidc.js";
 import { consumeOAuthState, generateOAuthState, parseCallbackQuery, profileId, profileString, requireAuthConfig, requireProviderOption, resolveAuthConfig, resolveScopes, saveOAuthState } from "../auth.js";
@@ -99,8 +99,8 @@ export class Apple {
         const signature = new Uint8Array(await crypto.subtle.sign({
             name: "ECDSA",
             hash: "SHA-256"
-        }, privateKey, jwt.createJWTSignatureMessage(headerJSON, payloadJSON)));
-        const token = jwt.encodeJWT(headerJSON, payloadJSON, signature);
+        }, privateKey, createJWTSignatureMessage(headerJSON, payloadJSON)));
+        const token = encodeJWT(headerJSON, payloadJSON, signature);
         return token;
     }
 }

package/dist/request.js

@@ -1,4 +1,4 @@
-import * as encoding from "@oslojs/encoding";
+import { encodeBase64 } from "./encoding.js";
 import { OAuth2Tokens } from "./oauth2.js";
 import { trimLeft, trimRight } from "./utils.js";
 export function joinURIAndPath(base, ...path) {
@@ -24,7 +24,7 @@ export function createOAuth2Request(endpoint, body) {
 }
 export function encodeBasicCredentials(username, password) {
     const bytes = new TextEncoder().encode(`${username}:${password}`);
-    return encoding.encodeBase64(bytes);
+    return encodeBase64(bytes);
 }
 export async function sendTokenRequest(request) {
     let response;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "antarctic",
-	"version": "0.2.0",
+	"version": "0.3.0",
 	"description": "High-level OAuth 2.0 clients for popular providers, forked from Arctic",
 	"type": "module",
 	"main": "dist/index.js",
@@ -35,8 +35,6 @@
 		"vitest": "1.6.0"
 	},
 	"dependencies": {
-		"@oslojs/crypto": "1.0.1",
-		"@oslojs/encoding": "1.1.0",
-		"@oslojs/jwt": "0.2.0"
+		"@oslojs/crypto": "1.0.1"
 	}
 }