jose 4.3.4 → 4.3.8

package/dist/node/esm/runtime/node_key.js

@@ -3,10 +3,11 @@ import getNamedCurve from './get_named_curve.js';
 import { JOSENotSupported } from '../util/errors.js';
 import checkModulusLength from './check_modulus_length.js';
 const [major, minor] = process.version
-    .substr(1)
+    .slice(1)
     .split('.')
     .map((str) => parseInt(str, 10));
-const rsaPssParams = major >= 17 || (major === 16 && minor >= 9);
+const electron = 'electron' in process.versions;
+const rsaPssParams = !electron && (major >= 17 || (major === 16 && minor >= 9));
 const PSS = {
     padding: constants.RSA_PKCS1_PSS_PADDING,
     saltLength: constants.RSA_PSS_SALTLEN_DIGEST,
@@ -37,7 +38,7 @@ export default function keyForCrypto(alg, key) {
         case rsaPssParams && 'PS512':
             if (key.asymmetricKeyType === 'rsa-pss') {
                 const { hashAlgorithm, mgf1HashAlgorithm, saltLength } = key.asymmetricKeyDetails;
-                const length = parseInt(alg.substr(-3), 10);
+                const length = parseInt(alg.slice(-3), 10);
                 if (hashAlgorithm !== undefined &&
                     (hashAlgorithm !== `sha${length}` || mgf1HashAlgorithm !== hashAlgorithm)) {
                     throw new TypeError(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${alg}`);

package/dist/node/esm/runtime/pbes2kw.js

@@ -27,17 +27,17 @@ function getPassword(key, alg) {
 export const encrypt = async (alg, key, cek, p2c = Math.floor(Math.random() * 2049) + 2048, p2s = random(new Uint8Array(16))) => {
     checkP2s(p2s);
     const salt = concatSalt(alg, p2s);
-    const keylen = parseInt(alg.substr(13, 3), 10) >> 3;
+    const keylen = parseInt(alg.slice(13, 16), 10) >> 3;
     const password = getPassword(key, alg);
-    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.substr(8, 3)}`);
-    const encryptedKey = await wrap(alg.substr(-6), derivedKey, cek);
+    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.slice(8, 11)}`);
+    const encryptedKey = await wrap(alg.slice(-6), derivedKey, cek);
     return { encryptedKey, p2c, p2s: base64url(p2s) };
 };
 export const decrypt = async (alg, key, encryptedKey, p2c, p2s) => {
     checkP2s(p2s);
     const salt = concatSalt(alg, p2s);
-    const keylen = parseInt(alg.substr(13, 3), 10) >> 3;
+    const keylen = parseInt(alg.slice(13, 16), 10) >> 3;
     const password = getPassword(key, alg);
-    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.substr(8, 3)}`);
-    return unwrap(alg.substr(-6), derivedKey, encryptedKey);
+    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.slice(8, 11)}`);
+    return unwrap(alg.slice(-6), derivedKey, encryptedKey);
 };

package/dist/node/esm/runtime/verify.js

@@ -5,7 +5,7 @@ import nodeKey from './node_key.js';
 import sign from './sign.js';
 import getVerifyKey from './get_sign_verify_key.js';
 const [major, minor] = process.version
-    .substr(1)
+    .slice(1)
     .split('.')
     .map((str) => parseInt(str, 10));
 const oneShotCallbackSupported = major >= 16 || (major === 15 && minor >= 13);

package/dist/types/types.d.ts

@@ -262,7 +262,7 @@ export interface CompactJWSHeaderParameters extends JWSHeaderParameters {
   alg: string
 }
 export interface JWTHeaderParameters extends CompactJWSHeaderParameters {
-  b64: never
+  b64?: true
 }
 export interface CompactJWEHeaderParameters extends JWEHeaderParameters {
   alg: string

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "4.3.4",
+  "version": "4.3.8",
   "description": "'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto",
   "keywords": [
     "browser",

package/dist/node/cjs/runtime/secret_key.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const crypto_1 = require("crypto");
-function getSecretKey(key) {
-    let keyObject;
-    if (key instanceof Uint8Array) {
-        keyObject = (0, crypto_1.createSecretKey)(key);
-    }
-    else {
-        keyObject = key;
-    }
-    return keyObject;
-}
-exports.default = getSecretKey;

package/dist/node/esm/runtime/secret_key.js

@@ -1,11 +0,0 @@
-import { createSecretKey } from 'crypto';
-export default function getSecretKey(key) {
-    let keyObject;
-    if (key instanceof Uint8Array) {
-        keyObject = createSecretKey(key);
-    }
-    else {
-        keyObject = key;
-    }
-    return keyObject;
-}