jose 3.12.0 → 3.13.0

package/dist/browser/jwks/remote.js

@@ -1,6 +1,6 @@
 import parseJWK from '../jwk/parse.js';
 import { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';
-import fetchJson from '../runtime/fetch.js';
+import fetchJwks from '../runtime/fetch_jwks.js';
 import isObject from '../lib/is_object.js';
 function getKtyFromAlg(alg) {
     switch (alg.substr(0, 2)) {
@@ -103,7 +103,7 @@ class RemoteJWKSet {
     }
     async reload() {
         if (!this._pendingFetch) {
-            this._pendingFetch = fetchJson(this._url, this._timeoutDuration, this._options)
+            this._pendingFetch = fetchJwks(this._url, this._timeoutDuration, this._options)
                 .then((json) => {
                 if (typeof json !== 'object' ||
                     !json ||

package/dist/browser/runtime/{fetch.js → fetch_jwks.js}

@@ -1,6 +1,6 @@
 import { JOSEError } from '../util/errors.js';
 import globalThis from './global.js';
-const fetch = async (url, timeout) => {
+const fetchJwks = async (url, timeout) => {
     let controller;
     if (typeof AbortController === 'function') {
         controller = new AbortController();
@@ -24,4 +24,4 @@ const fetch = async (url, timeout) => {
         throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');
     }
 };
-export default fetch;
+export default fetchJwks;

package/dist/browser/util/decode_protected_header.js

@@ -1,4 +1,3 @@
-import { ok as assert } from 'assert';
 import { decode as base64url } from './base64url.js';
 import { decoder } from '../lib/buffer_utils.js';
 import isObject from '../lib/is_object.js';
@@ -20,9 +19,13 @@ function decodeProtectedHeader(token) {
         }
     }
     try {
-        assert(typeof protectedB64u === 'string' && protectedB64u);
+        if (typeof protectedB64u !== 'string' || !protectedB64u) {
+            throw new Error();
+        }
         const result = JSON.parse(decoder.decode(base64url(protectedB64u)));
-        assert(isObject(result));
+        if (!isObject(result)) {
+            throw new Error();
+        }
         return result;
     }
     catch (err) {

package/dist/node/cjs/jwks/remote.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.createRemoteJWKSet = void 0;
 const parse_js_1 = require("../jwk/parse.js");
 const errors_js_1 = require("../util/errors.js");
-const fetch_js_1 = require("../runtime/fetch.js");
+const fetch_jwks_js_1 = require("../runtime/fetch_jwks.js");
 const is_object_js_1 = require("../lib/is_object.js");
 function getKtyFromAlg(alg) {
     switch (alg.substr(0, 2)) {
@@ -106,7 +106,7 @@ class RemoteJWKSet {
     }
     async reload() {
         if (!this._pendingFetch) {
-            this._pendingFetch = fetch_js_1.default(this._url, this._timeoutDuration, this._options)
+            this._pendingFetch = fetch_jwks_js_1.default(this._url, this._timeoutDuration, this._options)
                 .then((json) => {
                 if (typeof json !== 'object' ||
                     !json ||

package/dist/node/cjs/runtime/{fetch.js → fetch_jwks.js}

@@ -9,7 +9,7 @@ const protocols = {
     'https:': https_1.get,
     'http:': http_1.get,
 };
-const fetch = async (url, timeout, options) => {
+const fetchJwks = async (url, timeout, options) => {
     if (protocols[url.protocol] === undefined) {
         throw new TypeError('Unsupported URL protocol.');
     }
@@ -33,4 +33,4 @@ const fetch = async (url, timeout, options) => {
         throw new errors_js_1.JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');
     }
 };
-exports.default = fetch;
+exports.default = fetchJwks;

package/dist/node/cjs/runtime/get_named_curve.js

@@ -21,7 +21,7 @@ const namedCurveToJOSE = (namedCurve) => {
         case 'secp256k1':
             return namedCurve;
         default:
-            throw new errors_js_1.JOSENotSupported('unsupported curve for this operation');
+            throw new errors_js_1.JOSENotSupported('unsupported key curve for this operation');
     }
 };
 const getNamedCurve = (key, raw) => {
@@ -67,6 +67,9 @@ const getNamedCurve = (key, raw) => {
                 else if (curveOid.equals(secp256k1)) {
                     namedCurve = 'secp256k1';
                 }
+                else {
+                    throw new errors_js_1.JOSENotSupported('unsupported key curve for this operation');
+                }
             }
             if (raw)
                 return namedCurve;

package/dist/node/cjs/runtime/is_key_object.js

@@ -1,7 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const crypto_1 = require("crypto");
-function isKeyObject(obj) {
-    return obj != null && obj instanceof crypto_1.KeyObject;
+const util = require("util");
+let impl;
+if (util.types.isKeyObject) {
+    impl = function isKeyObject(obj) {
+        return util.types.isKeyObject(obj);
+    };
 }
-exports.default = isKeyObject;
+else {
+    impl = function isKeyObject(obj) {
+        return obj != null && obj instanceof crypto_1.KeyObject;
+    };
+}
+exports.default = impl;

package/dist/node/cjs/runtime/sign.js

@@ -6,9 +6,12 @@ const dsa_digest_js_1 = require("./dsa_digest.js");
 const hmac_digest_js_1 = require("./hmac_digest.js");
 const node_key_js_1 = require("./node_key.js");
 const get_sign_verify_key_js_1 = require("./get_sign_verify_key.js");
-let oneShotSign = crypto.sign;
-if (oneShotSign.length > 3) {
-    oneShotSign = util_1.promisify(oneShotSign);
+let oneShotSign;
+if (crypto.sign.length > 3) {
+    oneShotSign = util_1.promisify(crypto.sign);
+}
+else {
+    oneShotSign = crypto.sign;
 }
 const sign = async (alg, key, data) => {
     const keyObject = get_sign_verify_key_js_1.default(alg, key, 'sign');

package/dist/node/cjs/runtime/verify.js

@@ -11,9 +11,12 @@ const [major, minor] = process.version
     .split('.')
     .map((str) => parseInt(str, 10));
 const oneShotCallbackSupported = major >= 16 || (major === 15 && minor >= 13);
-let oneShotVerify = crypto.verify;
-if (oneShotVerify.length > 4 && oneShotCallbackSupported) {
-    oneShotVerify = util_1.promisify(oneShotVerify);
+let oneShotVerify;
+if (crypto.verify.length > 4 && oneShotCallbackSupported) {
+    oneShotVerify = util_1.promisify(crypto.verify);
+}
+else {
+    oneShotVerify = crypto.verify;
 }
 const verify = async (alg, key, signature, data) => {
     if (alg.startsWith('HS')) {
@@ -30,11 +33,7 @@ const verify = async (alg, key, signature, data) => {
     const keyObject = get_sign_verify_key_js_1.default(alg, key, 'verify');
     const keyInput = node_key_js_1.default(alg, keyObject);
     try {
-        let result = oneShotVerify(algorithm, data, keyInput, signature);
-        if (result instanceof Promise) {
-            result = await result;
-        }
-        return result;
+        return await oneShotVerify(algorithm, data, keyInput, signature);
     }
     catch {
         return false;

package/dist/node/cjs/runtime/webcrypto.js

@@ -2,15 +2,24 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getKeyObject = exports.isCryptoKey = void 0;
 const crypto = require("crypto");
+const util = require("util");
 const webcrypto = crypto.webcrypto;
 exports.default = webcrypto;
-function isCryptoKey(key) {
-    if (webcrypto !== undefined) {
-        return key != null && key instanceof webcrypto.CryptoKey;
-    }
-    return false;
+let impl;
+exports.isCryptoKey = impl;
+if (util.types.isCryptoKey) {
+    exports.isCryptoKey = impl = function isCryptoKey(obj) {
+        return util.types.isCryptoKey(obj);
+    };
+}
+else if (webcrypto) {
+    exports.isCryptoKey = impl = function isCryptoKey(obj) {
+        return obj != null && obj instanceof webcrypto.CryptoKey;
+    };
+}
+else {
+    exports.isCryptoKey = impl = (obj) => false;
 }
-exports.isCryptoKey = isCryptoKey;
 function getHashLength(hash) {
     return parseInt(hash === null || hash === void 0 ? void 0 : hash.name.substr(4), 10);
 }

package/dist/node/cjs/util/decode_protected_header.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.decodeProtectedHeader = void 0;
-const assert_1 = require("assert");
 const base64url_js_1 = require("./base64url.js");
 const buffer_utils_js_1 = require("../lib/buffer_utils.js");
 const is_object_js_1 = require("../lib/is_object.js");
@@ -23,9 +22,13 @@ function decodeProtectedHeader(token) {
         }
     }
     try {
-        assert_1.ok(typeof protectedB64u === 'string' && protectedB64u);
+        if (typeof protectedB64u !== 'string' || !protectedB64u) {
+            throw new Error();
+        }
         const result = JSON.parse(buffer_utils_js_1.decoder.decode(base64url_js_1.decode(protectedB64u)));
-        assert_1.ok(is_object_js_1.default(result));
+        if (!is_object_js_1.default(result)) {
+            throw new Error();
+        }
         return result;
     }
     catch (err) {

package/dist/node/esm/jwks/remote.js

@@ -1,6 +1,6 @@
 import parseJWK from '../jwk/parse.js';
 import { JWKSInvalid, JOSENotSupported, JWKSNoMatchingKey, JWKSMultipleMatchingKeys, } from '../util/errors.js';
-import fetchJson from '../runtime/fetch.js';
+import fetchJwks from '../runtime/fetch_jwks.js';
 import isObject from '../lib/is_object.js';
 function getKtyFromAlg(alg) {
     switch (alg.substr(0, 2)) {
@@ -103,7 +103,7 @@ class RemoteJWKSet {
     }
     async reload() {
         if (!this._pendingFetch) {
-            this._pendingFetch = fetchJson(this._url, this._timeoutDuration, this._options)
+            this._pendingFetch = fetchJwks(this._url, this._timeoutDuration, this._options)
                 .then((json) => {
                 if (typeof json !== 'object' ||
                     !json ||

package/dist/node/esm/runtime/{fetch.js → fetch_jwks.js}

@@ -7,7 +7,7 @@ const protocols = {
     'https:': https,
     'http:': http,
 };
-const fetch = async (url, timeout, options) => {
+const fetchJwks = async (url, timeout, options) => {
     if (protocols[url.protocol] === undefined) {
         throw new TypeError('Unsupported URL protocol.');
     }
@@ -31,4 +31,4 @@ const fetch = async (url, timeout, options) => {
         throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');
     }
 };
-export default fetch;
+export default fetchJwks;

package/dist/node/esm/runtime/get_named_curve.js

@@ -18,7 +18,7 @@ const namedCurveToJOSE = (namedCurve) => {
         case 'secp256k1':
             return namedCurve;
         default:
-            throw new JOSENotSupported('unsupported curve for this operation');
+            throw new JOSENotSupported('unsupported key curve for this operation');
     }
 };
 const getNamedCurve = (key, raw) => {
@@ -64,6 +64,9 @@ const getNamedCurve = (key, raw) => {
                 else if (curveOid.equals(secp256k1)) {
                     namedCurve = 'secp256k1';
                 }
+                else {
+                    throw new JOSENotSupported('unsupported key curve for this operation');
+                }
             }
             if (raw)
                 return namedCurve;

package/dist/node/esm/runtime/is_key_object.js

@@ -1,4 +1,14 @@
 import { KeyObject } from 'crypto';
-export default function isKeyObject(obj) {
-    return obj != null && obj instanceof KeyObject;
+import * as util from 'util';
+let impl;
+if (util.types.isKeyObject) {
+    impl = function isKeyObject(obj) {
+        return util.types.isKeyObject(obj);
+    };
 }
+else {
+    impl = function isKeyObject(obj) {
+        return obj != null && obj instanceof KeyObject;
+    };
+}
+export default impl;

package/dist/node/esm/runtime/sign.js

@@ -4,9 +4,12 @@ import nodeDigest from './dsa_digest.js';
 import hmacDigest from './hmac_digest.js';
 import nodeKey from './node_key.js';
 import getSignKey from './get_sign_verify_key.js';
-let oneShotSign = crypto.sign;
-if (oneShotSign.length > 3) {
-    oneShotSign = promisify(oneShotSign);
+let oneShotSign;
+if (crypto.sign.length > 3) {
+    oneShotSign = promisify(crypto.sign);
+}
+else {
+    oneShotSign = crypto.sign;
 }
 const sign = async (alg, key, data) => {
     const keyObject = getSignKey(alg, key, 'sign');

package/dist/node/esm/runtime/verify.js

@@ -9,9 +9,12 @@ const [major, minor] = process.version
     .split('.')
     .map((str) => parseInt(str, 10));
 const oneShotCallbackSupported = major >= 16 || (major === 15 && minor >= 13);
-let oneShotVerify = crypto.verify;
-if (oneShotVerify.length > 4 && oneShotCallbackSupported) {
-    oneShotVerify = promisify(oneShotVerify);
+let oneShotVerify;
+if (crypto.verify.length > 4 && oneShotCallbackSupported) {
+    oneShotVerify = promisify(crypto.verify);
+}
+else {
+    oneShotVerify = crypto.verify;
 }
 const verify = async (alg, key, signature, data) => {
     if (alg.startsWith('HS')) {
@@ -28,11 +31,7 @@ const verify = async (alg, key, signature, data) => {
     const keyObject = getVerifyKey(alg, key, 'verify');
     const keyInput = nodeKey(alg, keyObject);
     try {
-        let result = oneShotVerify(algorithm, data, keyInput, signature);
-        if (result instanceof Promise) {
-            result = await result;
-        }
-        return result;
+        return await oneShotVerify(algorithm, data, keyInput, signature);
     }
     catch {
         return false;

package/dist/node/esm/runtime/webcrypto.js

@@ -1,12 +1,22 @@
 import * as crypto from 'crypto';
+import * as util from 'util';
 const webcrypto = crypto.webcrypto;
 export default webcrypto;
-export function isCryptoKey(key) {
-    if (webcrypto !== undefined) {
-        return key != null && key instanceof webcrypto.CryptoKey;
-    }
-    return false;
+let impl;
+if (util.types.isCryptoKey) {
+    impl = function isCryptoKey(obj) {
+        return util.types.isCryptoKey(obj);
+    };
+}
+else if (webcrypto) {
+    impl = function isCryptoKey(obj) {
+        return obj != null && obj instanceof webcrypto.CryptoKey;
+    };
+}
+else {
+    impl = (obj) => false;
 }
+export { impl as isCryptoKey };
 function getHashLength(hash) {
     return parseInt(hash === null || hash === void 0 ? void 0 : hash.name.substr(4), 10);
 }

package/dist/node/esm/util/decode_protected_header.js

@@ -1,4 +1,3 @@
-import { ok as assert } from 'assert';
 import { decode as base64url } from './base64url.js';
 import { decoder } from '../lib/buffer_utils.js';
 import isObject from '../lib/is_object.js';
@@ -20,9 +19,13 @@ function decodeProtectedHeader(token) {
         }
     }
     try {
-        assert(typeof protectedB64u === 'string' && protectedB64u);
+        if (typeof protectedB64u !== 'string' || !protectedB64u) {
+            throw new Error();
+        }
         const result = JSON.parse(decoder.decode(base64url(protectedB64u)));
-        assert(isObject(result));
+        if (!isObject(result)) {
+            throw new Error();
+        }
         return result;
     }
     catch (err) {

package/dist/types/jwe/compact/decrypt.d.ts

@@ -4,4 +4,4 @@ export interface CompactDecryptGetKey extends GetKeyFunction<JWEHeaderParameters
 declare function compactDecrypt(jwe: string | Uint8Array, key: KeyLike | CompactDecryptGetKey, options?: DecryptOptions): Promise<CompactDecryptResult>;
 export { compactDecrypt };
 export default compactDecrypt;
-export type { KeyLike, DecryptOptions };
+export type { KeyLike, DecryptOptions, CompactDecryptResult };

package/dist/types/jwe/flattened/decrypt.d.ts

@@ -4,4 +4,4 @@ export interface FlattenedDecryptGetKey extends GetKeyFunction<JWEHeaderParamete
 declare function flattenedDecrypt(jwe: FlattenedJWE, key: KeyLike | FlattenedDecryptGetKey, options?: DecryptOptions): Promise<FlattenedDecryptResult>;
 export { flattenedDecrypt };
 export default flattenedDecrypt;
-export type { KeyLike, FlattenedJWE, JWEHeaderParameters, DecryptOptions };
+export type { KeyLike, FlattenedJWE, JWEHeaderParameters, DecryptOptions, FlattenedDecryptResult };

package/dist/types/jwe/general/decrypt.d.ts

@@ -4,4 +4,4 @@ export interface GeneralDecryptGetKey extends GetKeyFunction<JWEHeaderParameters
 declare function generalDecrypt(jwe: GeneralJWE, key: KeyLike | GeneralDecryptGetKey, options?: DecryptOptions): Promise<GeneralDecryptResult>;
 export { generalDecrypt };
 export default generalDecrypt;
-export type { KeyLike, GeneralJWE, DecryptOptions };
+export type { KeyLike, GeneralJWE, DecryptOptions, GeneralDecryptResult };

package/dist/types/jws/compact/verify.d.ts

@@ -4,4 +4,4 @@ export interface CompactVerifyGetKey extends GetKeyFunction<JWSHeaderParameters,
 declare function compactVerify(jws: string | Uint8Array, key: KeyLike | CompactVerifyGetKey, options?: VerifyOptions): Promise<CompactVerifyResult>;
 export { compactVerify };
 export default compactVerify;
-export type { KeyLike, VerifyOptions };
+export type { KeyLike, VerifyOptions, CompactVerifyResult };

package/dist/types/jws/flattened/verify.d.ts

@@ -4,4 +4,4 @@ export interface FlattenedVerifyGetKey extends GetKeyFunction<JWSHeaderParameter
 declare function flattenedVerify(jws: FlattenedJWSInput, key: KeyLike | FlattenedVerifyGetKey, options?: VerifyOptions): Promise<FlattenedVerifyResult>;
 export { flattenedVerify };
 export default flattenedVerify;
-export type { KeyLike, FlattenedJWSInput, GetKeyFunction, JWSHeaderParameters, VerifyOptions };
+export type { KeyLike, FlattenedJWSInput, GetKeyFunction, JWSHeaderParameters, VerifyOptions, FlattenedVerifyResult, };

package/dist/types/jws/general/verify.d.ts

@@ -4,4 +4,4 @@ export interface GeneralVerifyGetKey extends GetKeyFunction<JWSHeaderParameters,
 declare function generalVerify(jws: GeneralJWSInput, key: KeyLike | GeneralVerifyGetKey, options?: VerifyOptions): Promise<GeneralVerifyResult>;
 export { generalVerify };
 export default generalVerify;
-export type { KeyLike, GeneralJWSInput, VerifyOptions };
+export type { KeyLike, GeneralJWSInput, VerifyOptions, GeneralVerifyResult };

package/dist/types/jwt/decrypt.d.ts

@@ -6,4 +6,4 @@ export interface JWTDecryptGetKey extends GetKeyFunction<JWEHeaderParameters, Fl
 declare function jwtDecrypt(jwt: string | Uint8Array, key: KeyLike | JWTDecryptGetKey, options?: JWTDecryptOptions): Promise<JWTDecryptResult>;
 export { jwtDecrypt };
 export default jwtDecrypt;
-export type { KeyLike, DecryptOptions, JWTPayload, JWTDecryptOptions };
+export type { KeyLike, DecryptOptions, JWTPayload, JWTDecryptOptions, JWTDecryptResult };

package/dist/types/jwt/unsecured.d.ts

@@ -1,12 +1,13 @@
 import type { JWSHeaderParameters, JWTClaimVerificationOptions, JWTPayload } from '../types.d';
 import ProduceJWT from '../lib/jwt_producer.js';
+interface UnsecuredResult {
+    payload: JWTPayload;
+    header: JWSHeaderParameters;
+}
 declare class UnsecuredJWT extends ProduceJWT {
     encode(): string;
-    static decode(jwt: string, options?: JWTClaimVerificationOptions): {
-        payload: JWTPayload;
-        header: JWSHeaderParameters;
-    };
+    static decode(jwt: string, options?: JWTClaimVerificationOptions): UnsecuredResult;
 }
 export { UnsecuredJWT };
 export default UnsecuredJWT;
-export type { JWSHeaderParameters, JWTPayload };
+export type { JWSHeaderParameters, JWTPayload, UnsecuredResult };

package/dist/types/jwt/verify.d.ts

@@ -6,4 +6,4 @@ export interface JWTVerifyGetKey extends GetKeyFunction<JWSHeaderParameters, Fla
 declare function jwtVerify(jwt: string | Uint8Array, key: KeyLike | JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<JWTVerifyResult>;
 export { jwtVerify };
 export default jwtVerify;
-export type { KeyLike, JWTPayload, JWTVerifyOptions, JWSHeaderParameters, GetKeyFunction };
+export type { KeyLike, JWTPayload, JWTVerifyOptions, JWSHeaderParameters, GetKeyFunction, JWTVerifyResult, };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "3.12.0",
+  "version": "3.13.0",
   "description": "Universal 'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK with no dependencies",
   "keywords": [
     "browser",