gdc-sdk-node-ts 2.4.16 → 2.4.18

package/dist/node-managed-wallet.js

@@ -221,7 +221,10 @@ export class NodeManagedWallet {
         }
         const privateJwk = entry.privateMaterial;
         const keyObject = createPrivateKey({ key: privateJwk, format: 'jwk' });
-        const signature = cryptoSign(this.resolveNodeDigestForAlgorithm(alg), Buffer.from(payloadBytes), keyObject);
+        // JWS uses the fixed-width IEEE P1363 ECDSA representation (R || S).
+        // Node defaults to ASN.1 DER, which produces a syntactically valid compact
+        // token that every JOSE verifier correctly rejects.
+        const signature = cryptoSign(this.resolveNodeDigestForAlgorithm(alg), Buffer.from(payloadBytes), { key: keyObject, dsaEncoding: 'ieee-p1363' });
         return Buffer.from(signature).toString('base64url');
     }
     /**
@@ -237,7 +240,7 @@ export class NodeManagedWallet {
             return this.cryptography.verifyBytes(Content.base64ToBytes(signature), payloadBytes, jwk);
         }
         const publicKey = createPublicKey({ key: jwk, format: 'jwk' });
-        return cryptoVerify(this.resolveNodeDigestForAlgorithm(algorithm), Buffer.from(payloadBytes), publicKey, Buffer.from(signature, 'base64url'));
+        return cryptoVerify(this.resolveNodeDigestForAlgorithm(algorithm), Buffer.from(payloadBytes), { key: publicKey, dsaEncoding: 'ieee-p1363' }, Buffer.from(signature, 'base64url'));
     }
     /**
      * Encrypts one payload for the provided recipient public JWK.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.4.16",
+  "version": "2.4.18",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,7 +38,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.5.12",
+    "gdc-common-utils-ts": "2.5.15",
     "gdc-sdk-core-ts": "~2.3.18"
   },
   "devDependencies": {