jose 4.1.0 → 4.1.4

package/dist/browser/lib/crypto_key.js

@@ -1,4 +1,4 @@
-import { isCloudflareWorkers, isNodeJs } from '../runtime/global.js';
+import { isCloudflareWorkers, isNodeJs } from '../runtime/env.js';
 function unusable(name, prop = 'algorithm.name') {
     return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
 }

package/dist/browser/runtime/asn1.js

@@ -1,4 +1,4 @@
-import globalThis, { isCloudflareWorkers, isNodeJs } from './global.js';
+import { isCloudflareWorkers, isNodeJs } from './env.js';
 import crypto, { isCryptoKey } from './webcrypto.js';
 import invalidKeyInput from '../lib/invalid_key_input.js';
 import { encodeBase64 } from './base64url.js';
@@ -54,8 +54,7 @@ const genericImport = async (replace, keyFormat, pem, alg, options) => {
     var _a;
     let algorithm;
     let keyUsages;
-    const keyData = new Uint8Array(globalThis
-        .atob(pem.replace(replace, ''))
+    const keyData = new Uint8Array(atob(pem.replace(replace, ''))
         .split('')
         .map((c) => c.charCodeAt(0)));
     const isPublic = keyFormat === 'spki';

package/dist/browser/runtime/base64url.js

@@ -1,5 +1,4 @@
 import { encoder, decoder } from '../lib/buffer_utils.js';
-import globalThis from './global.js';
 export const encodeBase64 = (input) => {
     let unencoded = input;
     if (typeof unencoded === 'string') {
@@ -10,14 +9,13 @@ export const encodeBase64 = (input) => {
     for (let i = 0; i < unencoded.length; i += CHUNK_SIZE) {
         arr.push(String.fromCharCode.apply(null, unencoded.subarray(i, i + CHUNK_SIZE)));
     }
-    return globalThis.btoa(arr.join(''));
+    return btoa(arr.join(''));
 };
 export const encode = (input) => {
     return encodeBase64(input).replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
 };
 export const decodeBase64 = (encoded) => {
-    return new Uint8Array(globalThis
-        .atob(encoded)
+    return new Uint8Array(atob(encoded)
         .split('')
         .map((c) => c.charCodeAt(0)));
 };

package/dist/browser/runtime/check_key_length.js

@@ -1,11 +1,4 @@
 export default (alg, key) => {
-    if (alg.startsWith('HS')) {
-        const bitlen = parseInt(alg.substr(-3), 10);
-        const { length } = key.algorithm;
-        if (typeof length !== 'number' || length < bitlen) {
-            throw new TypeError(`${alg} requires symmetric keys to be ${bitlen} bits or larger`);
-        }
-    }
     if (alg.startsWith('RS') || alg.startsWith('PS')) {
         const { modulusLength } = key.algorithm;
         if (typeof modulusLength !== 'number' || modulusLength < 2048) {

package/dist/browser/runtime/env.js

@@ -0,0 +1,11 @@
+export function isCloudflareWorkers() {
+    return typeof WebSocketPair === 'function';
+}
+export function isNodeJs() {
+    try {
+        return process.versions.node !== undefined;
+    }
+    catch (_a) {
+        return false;
+    }
+}

package/dist/browser/runtime/fetch_jwks.js

@@ -1,5 +1,5 @@
 import { JOSEError, JWKSTimeout } from '../util/errors.js';
-import globalThis, { isCloudflareWorkers } from './global.js';
+import { isCloudflareWorkers } from './env.js';
 const fetchJwks = async (url, timeout) => {
     let controller;
     let id;
@@ -11,8 +11,7 @@ const fetchJwks = async (url, timeout) => {
             controller.abort();
         }, timeout);
     }
-    const response = await globalThis
-        .fetch(url.href, {
+    const response = await fetch(url.href, {
         signal: controller ? controller.signal : undefined,
         redirect: 'manual',
         method: 'GET',
@@ -23,8 +22,7 @@ const fetchJwks = async (url, timeout) => {
                 mode: 'cors',
             }
             : undefined),
-    })
-        .catch((err) => {
+    }).catch((err) => {
         if (timedOut)
             throw new JWKSTimeout();
         throw err;

package/dist/browser/runtime/generate.js

@@ -1,4 +1,4 @@
-import { isCloudflareWorkers, isNodeJs } from './global.js';
+import { isCloudflareWorkers, isNodeJs } from './env.js';
 import crypto from './webcrypto.js';
 import { JOSENotSupported } from '../util/errors.js';
 import random from './random.js';

package/dist/browser/runtime/jwk_to_key.js

@@ -1,4 +1,4 @@
-import { isCloudflareWorkers, isNodeJs } from './global.js';
+import { isCloudflareWorkers, isNodeJs } from './env.js';
 import crypto from './webcrypto.js';
 import { JOSENotSupported } from '../util/errors.js';
 import { decode as base64url } from './base64url.js';

package/dist/browser/runtime/subtle_dsa.js

@@ -1,4 +1,4 @@
-import { isCloudflareWorkers, isNodeJs } from './global.js';
+import { isCloudflareWorkers, isNodeJs } from './env.js';
 import { JOSENotSupported } from '../util/errors.js';
 export default function subtleDsa(alg, namedCurve) {
     const length = parseInt(alg.substr(-3), 10);

package/dist/browser/runtime/webcrypto.js

@@ -1,8 +1,12 @@
-import globalThis from './global.js';
-export default globalThis.crypto;
+export default crypto;
 export function isCryptoKey(key) {
-    if (typeof globalThis.CryptoKey === 'undefined') {
+    try {
+        return (key != null &&
+            typeof key.extractable === 'boolean' &&
+            typeof key.algorithm.name === 'string' &&
+            typeof key.type === 'string');
+    }
+    catch (_a) {
         return false;
     }
-    return key != null && key instanceof globalThis.CryptoKey;
 }

package/dist/node/cjs/lib/crypto_key.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkEncCryptoKey = exports.checkSigCryptoKey = void 0;
-const global_js_1 = require("../runtime/global.js");
+const env_js_1 = require("../runtime/env.js");
 function unusable(name, prop = 'algorithm.name') {
     return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
 }
@@ -74,12 +74,12 @@ function checkSigCryptoKey(key, alg, ...usages) {
                 throw unusable(`SHA-${expected}`, 'algorithm.hash');
             break;
         }
-        case (0, global_js_1.isNodeJs)() && 'EdDSA': {
+        case (0, env_js_1.isNodeJs)() && 'EdDSA': {
             if (key.algorithm.name !== 'NODE-ED25519' && key.algorithm.name !== 'NODE-ED448')
                 throw unusable('NODE-ED25519 or NODE-ED448');
             break;
         }
-        case (0, global_js_1.isCloudflareWorkers)() && 'EdDSA': {
+        case (0, env_js_1.isCloudflareWorkers)() && 'EdDSA': {
             if (!isAlgorithm(key.algorithm, 'NODE-ED25519'))
                 throw unusable('NODE-ED25519');
             break;

package/dist/node/cjs/runtime/sign.js

@@ -16,10 +16,6 @@ else {
 const sign = async (alg, key, data) => {
     const keyObject = (0, get_sign_verify_key_js_1.default)(alg, key, 'sign');
     if (alg.startsWith('HS')) {
-        const bitlen = parseInt(alg.substr(-3), 10);
-        if (!keyObject.symmetricKeySize || keyObject.symmetricKeySize << 3 < bitlen) {
-            throw new TypeError(`${alg} requires symmetric keys to be ${bitlen} bits or larger`);
-        }
         const hmac = crypto.createHmac((0, hmac_digest_js_1.default)(alg), keyObject);
         hmac.update(data);
         return hmac.digest();

package/dist/node/esm/lib/crypto_key.js

@@ -1,4 +1,4 @@
-import { isCloudflareWorkers, isNodeJs } from '../runtime/global.js';
+import { isCloudflareWorkers, isNodeJs } from '../runtime/env.js';
 function unusable(name, prop = 'algorithm.name') {
     return new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
 }

package/dist/node/esm/runtime/sign.js

@@ -14,10 +14,6 @@ else {
 const sign = async (alg, key, data) => {
     const keyObject = getSignKey(alg, key, 'sign');
     if (alg.startsWith('HS')) {
-        const bitlen = parseInt(alg.substr(-3), 10);
-        if (!keyObject.symmetricKeySize || keyObject.symmetricKeySize << 3 < bitlen) {
-            throw new TypeError(`${alg} requires symmetric keys to be ${bitlen} bits or larger`);
-        }
         const hmac = crypto.createHmac(hmacDigest(alg), keyObject);
         hmac.update(data);
         return hmac.digest();

package/dist/types/jwks/remote.d.ts

@@ -4,4 +4,8 @@ export interface RemoteJWKSetOptions {
     cooldownDuration?: number;
     agent?: any;
 }
+interface URL {
+    href: string;
+}
 export declare function createRemoteJWKSet(url: URL, options?: RemoteJWKSetOptions): GetKeyFunction<JWSHeaderParameters, FlattenedJWSInput>;
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "4.1.0",
+  "version": "4.1.4",
   "description": "'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto",
   "keywords": [
     "browser",

package/dist/browser/runtime/global.js

@@ -1,27 +0,0 @@
-function getGlobal() {
-    if (typeof globalThis !== 'undefined')
-        return globalThis;
-    if (typeof self !== 'undefined')
-        return self;
-    if (typeof window !== 'undefined')
-        return window;
-    throw new Error('unable to locate global object');
-}
-export default getGlobal();
-export function isCloudflareWorkers() {
-    try {
-        return getGlobal().WebSocketPair !== undefined;
-    }
-    catch (_a) {
-        return false;
-    }
-}
-export function isNodeJs() {
-    var _a, _b;
-    try {
-        return ((_b = (_a = getGlobal().process) === null || _a === void 0 ? void 0 : _a.versions) === null || _b === void 0 ? void 0 : _b.node) !== undefined;
-    }
-    catch (_c) {
-        return false;
-    }
-}