idmission-web-sdk 1.0.61 → 1.0.62

package/dist/index.js

@@ -0,0 +1,7 @@
+'use strict'
+
+if (process.env.NODE_ENV === 'production') {
+  module.exports = require('./sdk2.cjs.production.js')
+} else {
+  module.exports = require('./sdk2.cjs.development.js')
+}

package/dist/sdk2.cjs.development.js

@@ -7,7 +7,6 @@ var React = require('react');
 var ReactDOM = require('react-dom/client');
 var styled = require('styled-components');
 var reactI18next = require('react-i18next');
-var jsrsasign = require('jsrsasign');
 var tf = require('@tensorflow/tfjs');
 var useResizeObserver = require('use-resize-observer');
 var LanguageDetector = require('i18next-browser-languagedetector');
@@ -47,7 +46,7 @@ var LanguageDetector__default = /*#__PURE__*/_interopDefaultLegacy(LanguageDetec
 var i18n__default = /*#__PURE__*/_interopDefaultLegacy(i18n);
 var SignatureCanvas__default = /*#__PURE__*/_interopDefaultLegacy(SignatureCanvas);
 
-var webSdkVersion = '1.0.61';
+var webSdkVersion = '1.0.62';
 
 function getPlatform() {
   // eslint-disable-next-line @typescript-eslint/ban-ts-comment
@@ -1108,7 +1107,7 @@ var SubmissionProvider = function SubmissionProvider(_a) {
   React.useEffect(function () {
     (function () {
       return tslib.__awaiter(void 0, void 0, void 0, function () {
-        var parsed, iss, publicKey, resp, e_3, valid, exp;
+        var parsed, iss, publicKey, resp, e_3, valid, parts, e_4, exp;
         return tslib.__generator(this, function (_a) {
           switch (_a.label) {
             case 0:
@@ -1123,28 +1122,44 @@ var SubmissionProvider = function SubmissionProvider(_a) {
               iss = parsed.iss;
               _a.label = 1;
             case 1:
-              _a.trys.push([1, 3,, 4]);
+              _a.trys.push([1, 4,, 5]);
               return [4 /*yield*/, fetch(iss).then(function (r) {
                 return r.json();
               })];
             case 2:
               resp = _a.sent();
-              publicKey = jsrsasign.KEYUTIL.getKey("-----BEGIN PUBLIC KEY-----\n".concat(resp.public_key, "\n-----END PUBLIC KEY-----"));
-              return [3 /*break*/, 4];
+              return [4 /*yield*/, importRsaKey("-----BEGIN PUBLIC KEY-----\n".concat(resp.public_key, "\n-----END PUBLIC KEY-----"))];
             case 3:
+              publicKey = _a.sent();
+              return [3 /*break*/, 5];
+            case 4:
               e_3 = _a.sent();
               console.error('error fetching public key', e_3);
               setTokenError(new TokenPublicKeyError(e_3, iss));
               return [2 /*return*/, setTokenState('PUBLIC_KEY_LOAD_FAILED')];
-            case 4:
+            case 5:
               valid = false;
-              try {
-                valid = jsrsasign.KJUR.jws.JWS.verifyJWT(token, publicKey, {
-                  alg: ['RS256']
-                });
-              } catch (e) {
-                console.error('error validating token', e);
-              }
+              _a.label = 6;
+            case 6:
+              _a.trys.push([6, 8,, 9]);
+              parts = token.split('.');
+              return [4 /*yield*/, window.crypto.subtle.verify({
+                name: 'RSASSA-PKCS1-v1_5'
+              }, publicKey,
+              //from generateKey or importKey above
+              str2ab(parts[1]),
+              //ArrayBuffer of the signature
+              str2ab(parts[2]) //ArrayBuffer of the data
+              )];
+            case 7:
+              _a.sent();
+              valid = true;
+              return [3 /*break*/, 9];
+            case 8:
+              e_4 = _a.sent();
+              console.error('error validating token', e_4);
+              return [3 /*break*/, 9];
+            case 9:
               if (!valid) return [2 /*return*/, setTokenState('INVALID_SIGNATURE')];
               exp = parsed.exp;
               if (Date.now() >= exp * 1000) {
@@ -1211,6 +1226,28 @@ var SubmissionProvider = function SubmissionProvider(_a) {
     onRetry: onRetry
   })));
 };
+function str2ab(str) {
+  var buf = new ArrayBuffer(str.length);
+  var bufView = new Uint8Array(buf);
+  for (var i = 0, strLen = str.length; i < strLen; i++) {
+    bufView[i] = str.charCodeAt(i);
+  }
+  return buf;
+}
+function importRsaKey(pem) {
+  // fetch the part of the PEM string between header and footer
+  var pemHeader = '-----BEGIN PUBLIC KEY-----';
+  var pemFooter = '-----END PUBLIC KEY-----';
+  var pemContents = pem.substring(pemHeader.length, pem.length - pemFooter.length - 1);
+  // base64 decode the string to get the binary data
+  var binaryDerString = window.atob(pemContents);
+  // convert from a binary string to an ArrayBuffer
+  var binaryDer = str2ab(binaryDerString);
+  return window.crypto.subtle.importKey('spki', binaryDer, {
+    name: 'RSASSA-PKCS1-v1_5',
+    hash: 'SHA-256'
+  }, true, ['verify']);
+}
 
 var DocumentType;
 (function (DocumentType) {