jose 4.3.6 → 4.4.0

package/dist/node/esm/runtime/jwk_to_key.js

@@ -6,7 +6,7 @@ import { setCurve } from './get_named_curve.js';
 import { setModulusLength } from './check_modulus_length.js';
 import Asn1SequenceEncoder from './asn1_sequence_encoder.js';
 const [major, minor] = process.version
-    .substr(1)
+    .slice(1)
     .split('.')
     .map((str) => parseInt(str, 10));
 const jwkImportSupported = major >= 16 || (major === 15 && minor >= 12);

package/dist/node/esm/runtime/key_to_jwk.js

@@ -8,7 +8,7 @@ import isKeyObject from './is_key_object.js';
 import invalidKeyInput from '../lib/invalid_key_input.js';
 import { types } from './is_key_like.js';
 const [major, minor] = process.version
-    .substr(1)
+    .slice(1)
     .split('.')
     .map((str) => parseInt(str, 10));
 const jwkExportSupported = major >= 16 || (major === 15 && minor >= 9);

package/dist/node/esm/runtime/node_key.js

@@ -3,7 +3,7 @@ import getNamedCurve from './get_named_curve.js';
 import { JOSENotSupported } from '../util/errors.js';
 import checkModulusLength from './check_modulus_length.js';
 const [major, minor] = process.version
-    .substr(1)
+    .slice(1)
     .split('.')
     .map((str) => parseInt(str, 10));
 const electron = 'electron' in process.versions;
@@ -38,7 +38,7 @@ export default function keyForCrypto(alg, key) {
         case rsaPssParams && 'PS512':
             if (key.asymmetricKeyType === 'rsa-pss') {
                 const { hashAlgorithm, mgf1HashAlgorithm, saltLength } = key.asymmetricKeyDetails;
-                const length = parseInt(alg.substr(-3), 10);
+                const length = parseInt(alg.slice(-3), 10);
                 if (hashAlgorithm !== undefined &&
                     (hashAlgorithm !== `sha${length}` || mgf1HashAlgorithm !== hashAlgorithm)) {
                     throw new TypeError(`Invalid key for this operation, its RSA-PSS parameters do not meet the requirements of "alg" ${alg}`);

package/dist/node/esm/runtime/pbes2kw.js

@@ -27,17 +27,17 @@ function getPassword(key, alg) {
 export const encrypt = async (alg, key, cek, p2c = Math.floor(Math.random() * 2049) + 2048, p2s = random(new Uint8Array(16))) => {
     checkP2s(p2s);
     const salt = concatSalt(alg, p2s);
-    const keylen = parseInt(alg.substr(13, 3), 10) >> 3;
+    const keylen = parseInt(alg.slice(13, 16), 10) >> 3;
     const password = getPassword(key, alg);
-    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.substr(8, 3)}`);
-    const encryptedKey = await wrap(alg.substr(-6), derivedKey, cek);
+    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.slice(8, 11)}`);
+    const encryptedKey = await wrap(alg.slice(-6), derivedKey, cek);
     return { encryptedKey, p2c, p2s: base64url(p2s) };
 };
 export const decrypt = async (alg, key, encryptedKey, p2c, p2s) => {
     checkP2s(p2s);
     const salt = concatSalt(alg, p2s);
-    const keylen = parseInt(alg.substr(13, 3), 10) >> 3;
+    const keylen = parseInt(alg.slice(13, 16), 10) >> 3;
     const password = getPassword(key, alg);
-    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.substr(8, 3)}`);
-    return unwrap(alg.substr(-6), derivedKey, encryptedKey);
+    const derivedKey = await pbkdf2(password, salt, p2c, keylen, `sha${alg.slice(8, 11)}`);
+    return unwrap(alg.slice(-6), derivedKey, encryptedKey);
 };

package/dist/node/esm/runtime/verify.js

@@ -5,7 +5,7 @@ import nodeKey from './node_key.js';
 import sign from './sign.js';
 import getVerifyKey from './get_sign_verify_key.js';
 const [major, minor] = process.version
-    .substr(1)
+    .slice(1)
     .split('.')
     .map((str) => parseInt(str, 10));
 const oneShotCallbackSupported = major >= 16 || (major === 15 && minor >= 13);

package/dist/types/index.d.ts

@@ -27,6 +27,7 @@ export { SignJWT } from './jwt/sign';
 export { EncryptJWT } from './jwt/encrypt';
 export { calculateJwkThumbprint } from './jwk/thumbprint';
 export { EmbeddedJWK } from './jwk/embedded';
+export { createLocalJWKSet } from './jwks/local';
 export { createRemoteJWKSet } from './jwks/remote';
 export type { RemoteJWKSetOptions } from './jwks/remote';
 export { UnsecuredJWT } from './jwt/unsecured';
@@ -42,4 +43,4 @@ export type { GenerateKeyPairResult, GenerateKeyPairOptions } from './key/genera
 export { generateSecret } from './key/generate_secret';
 export type { GenerateSecretOptions } from './key/generate_secret';
 export * as base64url from './util/base64url';
-export type { KeyLike, JWK, FlattenedJWSInput, GeneralJWSInput, FlattenedJWS, GeneralJWS, JoseHeaderParameters, JWSHeaderParameters, JWEKeyManagementHeaderParameters, FlattenedJWE, GeneralJWE, JWEHeaderParameters, CritOption, DeflateOption, DecryptOptions, EncryptOptions, JWTClaimVerificationOptions, VerifyOptions, SignOptions, JWTPayload, DeflateFunction, InflateFunction, FlattenedDecryptResult, GeneralDecryptResult, CompactDecryptResult, FlattenedVerifyResult, GeneralVerifyResult, CompactVerifyResult, JWTVerifyResult, JWTDecryptResult, ResolvedKey, CompactJWEHeaderParameters, CompactJWSHeaderParameters, JWTHeaderParameters, } from './types';
+export type { KeyLike, JWK, FlattenedJWSInput, GeneralJWSInput, FlattenedJWS, GeneralJWS, JoseHeaderParameters, JWSHeaderParameters, JWEKeyManagementHeaderParameters, FlattenedJWE, GeneralJWE, JWEHeaderParameters, CritOption, DeflateOption, DecryptOptions, EncryptOptions, JWTClaimVerificationOptions, VerifyOptions, SignOptions, JWTPayload, DeflateFunction, InflateFunction, FlattenedDecryptResult, GeneralDecryptResult, CompactDecryptResult, FlattenedVerifyResult, GeneralVerifyResult, CompactVerifyResult, JWTVerifyResult, JWTDecryptResult, ResolvedKey, CompactJWEHeaderParameters, CompactJWSHeaderParameters, JWTHeaderParameters, JSONWebKeySet, } from './types';

package/dist/types/jwks/local.d.ts

@@ -0,0 +1,9 @@
+import type { KeyLike, JWSHeaderParameters, JSONWebKeySet, FlattenedJWSInput, GetKeyFunction } from '../types';
+export declare function isJWKSLike(jwks: unknown): jwks is JSONWebKeySet;
+export declare class LocalJWKSet {
+    protected _jwks?: JSONWebKeySet;
+    private _cached;
+    constructor(jwks: unknown);
+    getKey(protectedHeader: JWSHeaderParameters, token: FlattenedJWSInput): Promise<KeyLike>;
+}
+export declare function createLocalJWKSet(jwks: JSONWebKeySet): GetKeyFunction<JWSHeaderParameters, FlattenedJWSInput>;

package/dist/types/types.d.ts

@@ -262,9 +262,12 @@ export interface CompactJWSHeaderParameters extends JWSHeaderParameters {
   alg: string
 }
 export interface JWTHeaderParameters extends CompactJWSHeaderParameters {
-  b64?: never
+  b64?: true
 }
 export interface CompactJWEHeaderParameters extends JWEHeaderParameters {
   alg: string
   enc: string
 }
+export interface JSONWebKeySet {
+  keys: JWK[]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "4.3.6",
+  "version": "4.4.0",
   "description": "'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto",
   "keywords": [
     "browser",

package/dist/node/cjs/runtime/secret_key.js

@@ -1,14 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const crypto_1 = require("crypto");
-function getSecretKey(key) {
-    let keyObject;
-    if (key instanceof Uint8Array) {
-        keyObject = (0, crypto_1.createSecretKey)(key);
-    }
-    else {
-        keyObject = key;
-    }
-    return keyObject;
-}
-exports.default = getSecretKey;

package/dist/node/esm/runtime/secret_key.js

@@ -1,11 +0,0 @@
-import { createSecretKey } from 'crypto';
-export default function getSecretKey(key) {
-    let keyObject;
-    if (key instanceof Uint8Array) {
-        keyObject = createSecretKey(key);
-    }
-    else {
-        keyObject = key;
-    }
-    return keyObject;
-}