jose 5.2.1 → 5.2.3

package/dist/browser/jwe/compact/decrypt.js

@@ -14,9 +14,9 @@ export async function compactDecrypt(jwe, key, options) {
     }
     const decrypted = await flattenedDecrypt({
         ciphertext,
-        iv: (iv || undefined),
-        protected: protectedHeader || undefined,
-        tag: (tag || undefined),
+        iv: iv || undefined,
+        protected: protectedHeader,
+        tag: tag || undefined,
         encrypted_key: encryptedKey || undefined,
     }, key, options);
     const result = { plaintext: decrypted.plaintext, protectedHeader: decrypted.protectedHeader };

package/dist/browser/jwe/flattened/decrypt.js

@@ -15,14 +15,14 @@ export async function flattenedDecrypt(jwe, key, options) {
     if (jwe.protected === undefined && jwe.header === undefined && jwe.unprotected === undefined) {
         throw new JWEInvalid('JOSE Header missing');
     }
-    if (typeof jwe.iv !== 'string') {
-        throw new JWEInvalid('JWE Initialization Vector missing or incorrect type');
+    if (jwe.iv !== undefined && typeof jwe.iv !== 'string') {
+        throw new JWEInvalid('JWE Initialization Vector incorrect type');
     }
     if (typeof jwe.ciphertext !== 'string') {
         throw new JWEInvalid('JWE Ciphertext missing or incorrect type');
     }
-    if (typeof jwe.tag !== 'string') {
-        throw new JWEInvalid('JWE Authentication Tag missing or incorrect type');
+    if (jwe.tag !== undefined && typeof jwe.tag !== 'string') {
+        throw new JWEInvalid('JWE Authentication Tag incorrect type');
     }
     if (jwe.protected !== undefined && typeof jwe.protected !== 'string') {
         throw new JWEInvalid('JWE Protected Header incorrect type');
@@ -104,17 +104,21 @@ export async function flattenedDecrypt(jwe, key, options) {
     }
     let iv;
     let tag;
-    try {
-        iv = base64url(jwe.iv);
-    }
-    catch {
-        throw new JWEInvalid('Failed to base64url decode the iv');
-    }
-    try {
-        tag = base64url(jwe.tag);
+    if (jwe.iv !== undefined) {
+        try {
+            iv = base64url(jwe.iv);
+        }
+        catch {
+            throw new JWEInvalid('Failed to base64url decode the iv');
+        }
     }
-    catch {
-        throw new JWEInvalid('Failed to base64url decode the tag');
+    if (jwe.tag !== undefined) {
+        try {
+            tag = base64url(jwe.tag);
+        }
+        catch {
+            throw new JWEInvalid('Failed to base64url decode the tag');
+        }
     }
     const protectedHeader = encoder.encode(jwe.protected ?? '');
     let additionalData;

package/dist/browser/jwe/flattened/encrypt.js

@@ -1,6 +1,5 @@
 import { encode as base64url } from '../../runtime/base64url.js';
 import encrypt from '../../runtime/encrypt.js';
-import generateIv from '../../lib/iv.js';
 import encryptKeyManagement from '../../lib/encrypt_key_management.js';
 import { JOSENotSupported, JWEInvalid } from '../../util/errors.js';
 import isDisjoint from '../../lib/is_disjoint.js';
@@ -84,15 +83,8 @@ export class FlattenedEncrypt {
             throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
         }
         let encryptedKey;
-        if (alg === 'dir') {
-            if (this._cek) {
-                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Encryption');
-            }
-        }
-        else if (alg === 'ECDH-ES') {
-            if (this._cek) {
-                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Key Agreement');
-            }
+        if (this._cek && (alg === 'dir' || alg === 'ECDH-ES')) {
+            throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
         }
         let cek;
         {
@@ -117,7 +109,6 @@ export class FlattenedEncrypt {
                 }
             }
         }
-        this._iv || (this._iv = generateIv(enc));
         let additionalData;
         let protectedHeader;
         let aadMember;
@@ -134,12 +125,16 @@ export class FlattenedEncrypt {
         else {
             additionalData = protectedHeader;
         }
-        const { ciphertext, tag } = await encrypt(enc, this._plaintext, cek, this._iv, additionalData);
+        const { ciphertext, tag, iv } = await encrypt(enc, this._plaintext, cek, this._iv, additionalData);
         const jwe = {
             ciphertext: base64url(ciphertext),
-            iv: base64url(this._iv),
-            tag: base64url(tag),
         };
+        if (iv) {
+            jwe.iv = base64url(iv);
+        }
+        if (tag) {
+            jwe.tag = base64url(tag);
+        }
         if (encryptedKey) {
             jwe.encrypted_key = base64url(encryptedKey);
         }

package/dist/browser/jwks/remote.js

@@ -9,7 +9,7 @@ function isCloudflareWorkers() {
 let USER_AGENT;
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
     const NAME = 'jose';
-    const VERSION = 'v5.2.1';
+    const VERSION = 'v5.2.3';
     USER_AGENT = `${NAME}/${VERSION}`;
 }
 class RemoteJWKSet extends LocalJWKSet {

package/dist/browser/lib/aesgcmkw.js

@@ -1,12 +1,14 @@
 import encrypt from '../runtime/encrypt.js';
 import decrypt from '../runtime/decrypt.js';
-import generateIv from './iv.js';
 import { encode as base64url } from '../runtime/base64url.js';
 export async function wrap(alg, key, cek, iv) {
     const jweAlgorithm = alg.slice(0, 7);
-    iv || (iv = generateIv(jweAlgorithm));
-    const { ciphertext: encryptedKey, tag } = await encrypt(jweAlgorithm, cek, key, iv, new Uint8Array(0));
-    return { encryptedKey, iv: base64url(iv), tag: base64url(tag) };
+    const wrapped = await encrypt(jweAlgorithm, cek, key, iv, new Uint8Array(0));
+    return {
+        encryptedKey: wrapped.ciphertext,
+        iv: base64url(wrapped.iv),
+        tag: base64url(wrapped.tag),
+    };
 }
 export async function unwrap(alg, key, encryptedKey, iv, tag) {
     const jweAlgorithm = alg.slice(0, 7);

package/dist/browser/lib/validate_crit.js

@@ -1,6 +1,6 @@
 import { JOSENotSupported } from '../util/errors.js';
 function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
-    if (joseHeader.crit !== undefined && protectedHeader.crit === undefined) {
+    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {
         throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
     }
     if (!protectedHeader || protectedHeader.crit === undefined) {

package/dist/browser/runtime/decrypt.js

@@ -2,7 +2,7 @@ import { concat, uint64be } from '../lib/buffer_utils.js';
 import checkIvLength from '../lib/check_iv_length.js';
 import checkCekLength from './check_cek_length.js';
 import timingSafeEqual from './timing_safe_equal.js';
-import { JOSENotSupported, JWEDecryptionFailed } from '../util/errors.js';
+import { JOSENotSupported, JWEDecryptionFailed, JWEInvalid } from '../util/errors.js';
 import crypto, { isCryptoKey } from './webcrypto.js';
 import { checkEncCryptoKey } from '../lib/crypto_key.js';
 import invalidKeyInput from '../lib/invalid_key_input.js';
@@ -64,6 +64,12 @@ const decrypt = async (enc, cek, ciphertext, iv, tag, aad) => {
     if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {
         throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));
     }
+    if (!iv) {
+        throw new JWEInvalid('JWE Initialization Vector missing');
+    }
+    if (!tag) {
+        throw new JWEInvalid('JWE Authentication Tag missing');
+    }
     checkIvLength(enc, iv);
     switch (enc) {
         case 'A128CBC-HS256':

package/dist/browser/runtime/encrypt.js

@@ -4,6 +4,7 @@ import checkCekLength from './check_cek_length.js';
 import crypto, { isCryptoKey } from './webcrypto.js';
 import { checkEncCryptoKey } from '../lib/crypto_key.js';
 import invalidKeyInput from '../lib/invalid_key_input.js';
+import generateIv from '../lib/iv.js';
 import { JOSENotSupported } from '../util/errors.js';
 import { types } from './is_key_like.js';
 async function cbcEncrypt(enc, plaintext, cek, iv, aad) {
@@ -22,7 +23,7 @@ async function cbcEncrypt(enc, plaintext, cek, iv, aad) {
     }, encKey, plaintext));
     const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3));
     const tag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));
-    return { ciphertext, tag };
+    return { ciphertext, tag, iv };
 }
 async function gcmEncrypt(enc, plaintext, cek, iv, aad) {
     let encKey;
@@ -41,25 +42,32 @@ async function gcmEncrypt(enc, plaintext, cek, iv, aad) {
     }, encKey, plaintext));
     const tag = encrypted.slice(-16);
     const ciphertext = encrypted.slice(0, -16);
-    return { ciphertext, tag };
+    return { ciphertext, tag, iv };
 }
 const encrypt = async (enc, plaintext, cek, iv, aad) => {
     if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) {
         throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));
     }
-    checkIvLength(enc, iv);
+    if (iv) {
+        checkIvLength(enc, iv);
+    }
+    else {
+        iv = generateIv(enc);
+    }
     switch (enc) {
         case 'A128CBC-HS256':
         case 'A192CBC-HS384':
         case 'A256CBC-HS512':
-            if (cek instanceof Uint8Array)
+            if (cek instanceof Uint8Array) {
                 checkCekLength(cek, parseInt(enc.slice(-3), 10));
+            }
             return cbcEncrypt(enc, plaintext, cek, iv, aad);
         case 'A128GCM':
         case 'A192GCM':
         case 'A256GCM':
-            if (cek instanceof Uint8Array)
+            if (cek instanceof Uint8Array) {
                 checkCekLength(cek, parseInt(enc.slice(1, 4), 10));
+            }
             return gcmEncrypt(enc, plaintext, cek, iv, aad);
         default:
             throw new JOSENotSupported('Unsupported JWE Content Encryption Algorithm');

package/dist/node/cjs/jwe/compact/decrypt.js

@@ -17,9 +17,9 @@ async function compactDecrypt(jwe, key, options) {
     }
     const decrypted = await (0, decrypt_js_1.flattenedDecrypt)({
         ciphertext,
-        iv: (iv || undefined),
-        protected: protectedHeader || undefined,
-        tag: (tag || undefined),
+        iv: iv || undefined,
+        protected: protectedHeader,
+        tag: tag || undefined,
         encrypted_key: encryptedKey || undefined,
     }, key, options);
     const result = { plaintext: decrypted.plaintext, protectedHeader: decrypted.protectedHeader };

package/dist/node/cjs/jwe/flattened/decrypt.js

@@ -18,14 +18,14 @@ async function flattenedDecrypt(jwe, key, options) {
     if (jwe.protected === undefined && jwe.header === undefined && jwe.unprotected === undefined) {
         throw new errors_js_1.JWEInvalid('JOSE Header missing');
     }
-    if (typeof jwe.iv !== 'string') {
-        throw new errors_js_1.JWEInvalid('JWE Initialization Vector missing or incorrect type');
+    if (jwe.iv !== undefined && typeof jwe.iv !== 'string') {
+        throw new errors_js_1.JWEInvalid('JWE Initialization Vector incorrect type');
     }
     if (typeof jwe.ciphertext !== 'string') {
         throw new errors_js_1.JWEInvalid('JWE Ciphertext missing or incorrect type');
     }
-    if (typeof jwe.tag !== 'string') {
-        throw new errors_js_1.JWEInvalid('JWE Authentication Tag missing or incorrect type');
+    if (jwe.tag !== undefined && typeof jwe.tag !== 'string') {
+        throw new errors_js_1.JWEInvalid('JWE Authentication Tag incorrect type');
     }
     if (jwe.protected !== undefined && typeof jwe.protected !== 'string') {
         throw new errors_js_1.JWEInvalid('JWE Protected Header incorrect type');
@@ -107,17 +107,21 @@ async function flattenedDecrypt(jwe, key, options) {
     }
     let iv;
     let tag;
-    try {
-        iv = (0, base64url_js_1.decode)(jwe.iv);
-    }
-    catch {
-        throw new errors_js_1.JWEInvalid('Failed to base64url decode the iv');
-    }
-    try {
-        tag = (0, base64url_js_1.decode)(jwe.tag);
+    if (jwe.iv !== undefined) {
+        try {
+            iv = (0, base64url_js_1.decode)(jwe.iv);
+        }
+        catch {
+            throw new errors_js_1.JWEInvalid('Failed to base64url decode the iv');
+        }
     }
-    catch {
-        throw new errors_js_1.JWEInvalid('Failed to base64url decode the tag');
+    if (jwe.tag !== undefined) {
+        try {
+            tag = (0, base64url_js_1.decode)(jwe.tag);
+        }
+        catch {
+            throw new errors_js_1.JWEInvalid('Failed to base64url decode the tag');
+        }
     }
     const protectedHeader = buffer_utils_js_1.encoder.encode(jwe.protected ?? '');
     let additionalData;

package/dist/node/cjs/jwe/flattened/encrypt.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.FlattenedEncrypt = exports.unprotected = void 0;
 const base64url_js_1 = require("../../runtime/base64url.js");
 const encrypt_js_1 = require("../../runtime/encrypt.js");
-const iv_js_1 = require("../../lib/iv.js");
 const encrypt_key_management_js_1 = require("../../lib/encrypt_key_management.js");
 const errors_js_1 = require("../../util/errors.js");
 const is_disjoint_js_1 = require("../../lib/is_disjoint.js");
@@ -95,15 +94,8 @@ class FlattenedEncrypt {
             throw new errors_js_1.JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
         }
         let encryptedKey;
-        if (alg === 'dir') {
-            if (this._cek) {
-                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Encryption');
-            }
-        }
-        else if (alg === 'ECDH-ES') {
-            if (this._cek) {
-                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Key Agreement');
-            }
+        if (this._cek && (alg === 'dir' || alg === 'ECDH-ES')) {
+            throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
         }
         let cek;
         {
@@ -128,7 +120,6 @@ class FlattenedEncrypt {
                 }
             }
         }
-        this._iv ||= (0, iv_js_1.default)(enc);
         let additionalData;
         let protectedHeader;
         let aadMember;
@@ -145,12 +136,16 @@ class FlattenedEncrypt {
         else {
             additionalData = protectedHeader;
         }
-        const { ciphertext, tag } = await (0, encrypt_js_1.default)(enc, this._plaintext, cek, this._iv, additionalData);
+        const { ciphertext, tag, iv } = await (0, encrypt_js_1.default)(enc, this._plaintext, cek, this._iv, additionalData);
         const jwe = {
             ciphertext: (0, base64url_js_1.encode)(ciphertext),
-            iv: (0, base64url_js_1.encode)(this._iv),
-            tag: (0, base64url_js_1.encode)(tag),
         };
+        if (iv) {
+            jwe.iv = (0, base64url_js_1.encode)(iv);
+        }
+        if (tag) {
+            jwe.tag = (0, base64url_js_1.encode)(tag);
+        }
         if (encryptedKey) {
             jwe.encrypted_key = (0, base64url_js_1.encode)(encryptedKey);
         }

package/dist/node/cjs/jwks/remote.js

@@ -12,7 +12,7 @@ function isCloudflareWorkers() {
 let USER_AGENT;
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
     const NAME = 'jose';
-    const VERSION = 'v5.2.1';
+    const VERSION = 'v5.2.3';
     USER_AGENT = `${NAME}/${VERSION}`;
 }
 class RemoteJWKSet extends local_js_1.LocalJWKSet {

package/dist/node/cjs/lib/aesgcmkw.js

@@ -3,13 +3,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.unwrap = exports.wrap = void 0;
 const encrypt_js_1 = require("../runtime/encrypt.js");
 const decrypt_js_1 = require("../runtime/decrypt.js");
-const iv_js_1 = require("./iv.js");
 const base64url_js_1 = require("../runtime/base64url.js");
 async function wrap(alg, key, cek, iv) {
     const jweAlgorithm = alg.slice(0, 7);
-    iv ||= (0, iv_js_1.default)(jweAlgorithm);
-    const { ciphertext: encryptedKey, tag } = await (0, encrypt_js_1.default)(jweAlgorithm, cek, key, iv, new Uint8Array(0));
-    return { encryptedKey, iv: (0, base64url_js_1.encode)(iv), tag: (0, base64url_js_1.encode)(tag) };
+    const wrapped = await (0, encrypt_js_1.default)(jweAlgorithm, cek, key, iv, new Uint8Array(0));
+    return {
+        encryptedKey: wrapped.ciphertext,
+        iv: (0, base64url_js_1.encode)(wrapped.iv),
+        tag: (0, base64url_js_1.encode)(wrapped.tag),
+    };
 }
 exports.wrap = wrap;
 async function unwrap(alg, key, encryptedKey, iv, tag) {

package/dist/node/cjs/lib/validate_crit.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const errors_js_1 = require("../util/errors.js");
 function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
-    if (joseHeader.crit !== undefined && protectedHeader.crit === undefined) {
+    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {
         throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
     }
     if (!protectedHeader || protectedHeader.crit === undefined) {

package/dist/node/cjs/runtime/decrypt.js

@@ -79,6 +79,12 @@ const decrypt = (enc, cek, ciphertext, iv, tag, aad) => {
     else {
         throw new TypeError((0, invalid_key_input_js_1.default)(cek, ...is_key_like_js_1.types, 'Uint8Array'));
     }
+    if (!iv) {
+        throw new errors_js_1.JWEInvalid('JWE Initialization Vector missing');
+    }
+    if (!tag) {
+        throw new errors_js_1.JWEInvalid('JWE Authentication Tag missing');
+    }
     (0, check_cek_length_js_1.default)(enc, key);
     (0, check_iv_length_js_1.default)(enc, iv);
     switch (enc) {

package/dist/node/cjs/runtime/encrypt.js

@@ -9,6 +9,7 @@ const webcrypto_js_1 = require("./webcrypto.js");
 const crypto_key_js_1 = require("../lib/crypto_key.js");
 const is_key_object_js_1 = require("./is_key_object.js");
 const invalid_key_input_js_1 = require("../lib/invalid_key_input.js");
+const iv_js_1 = require("../lib/iv.js");
 const errors_js_1 = require("../util/errors.js");
 const ciphers_js_1 = require("./ciphers.js");
 const is_key_like_js_1 = require("./is_key_like.js");
@@ -27,7 +28,7 @@ function cbcEncrypt(enc, plaintext, cek, iv, aad) {
     const ciphertext = (0, buffer_utils_js_1.concat)(cipher.update(plaintext), cipher.final());
     const macSize = parseInt(enc.slice(-3), 10);
     const tag = (0, cbc_tag_js_1.default)(aad, iv, ciphertext, macSize, macKey, keySize);
-    return { ciphertext, tag };
+    return { ciphertext, tag, iv };
 }
 function gcmEncrypt(enc, plaintext, cek, iv, aad) {
     const keySize = parseInt(enc.slice(1, 4), 10);
@@ -42,7 +43,7 @@ function gcmEncrypt(enc, plaintext, cek, iv, aad) {
     const ciphertext = cipher.update(plaintext);
     cipher.final();
     const tag = cipher.getAuthTag();
-    return { ciphertext, tag };
+    return { ciphertext, tag, iv };
 }
 const encrypt = (enc, plaintext, cek, iv, aad) => {
     let key;
@@ -57,7 +58,12 @@ const encrypt = (enc, plaintext, cek, iv, aad) => {
         throw new TypeError((0, invalid_key_input_js_1.default)(cek, ...is_key_like_js_1.types, 'Uint8Array'));
     }
     (0, check_cek_length_js_1.default)(enc, key);
-    (0, check_iv_length_js_1.default)(enc, iv);
+    if (iv) {
+        (0, check_iv_length_js_1.default)(enc, iv);
+    }
+    else {
+        iv = (0, iv_js_1.default)(enc);
+    }
     switch (enc) {
         case 'A128CBC-HS256':
         case 'A192CBC-HS384':

package/dist/node/esm/jwe/compact/decrypt.js

@@ -14,9 +14,9 @@ export async function compactDecrypt(jwe, key, options) {
     }
     const decrypted = await flattenedDecrypt({
         ciphertext,
-        iv: (iv || undefined),
-        protected: protectedHeader || undefined,
-        tag: (tag || undefined),
+        iv: iv || undefined,
+        protected: protectedHeader,
+        tag: tag || undefined,
         encrypted_key: encryptedKey || undefined,
     }, key, options);
     const result = { plaintext: decrypted.plaintext, protectedHeader: decrypted.protectedHeader };

package/dist/node/esm/jwe/flattened/decrypt.js

@@ -15,14 +15,14 @@ export async function flattenedDecrypt(jwe, key, options) {
     if (jwe.protected === undefined && jwe.header === undefined && jwe.unprotected === undefined) {
         throw new JWEInvalid('JOSE Header missing');
     }
-    if (typeof jwe.iv !== 'string') {
-        throw new JWEInvalid('JWE Initialization Vector missing or incorrect type');
+    if (jwe.iv !== undefined && typeof jwe.iv !== 'string') {
+        throw new JWEInvalid('JWE Initialization Vector incorrect type');
     }
     if (typeof jwe.ciphertext !== 'string') {
         throw new JWEInvalid('JWE Ciphertext missing or incorrect type');
     }
-    if (typeof jwe.tag !== 'string') {
-        throw new JWEInvalid('JWE Authentication Tag missing or incorrect type');
+    if (jwe.tag !== undefined && typeof jwe.tag !== 'string') {
+        throw new JWEInvalid('JWE Authentication Tag incorrect type');
     }
     if (jwe.protected !== undefined && typeof jwe.protected !== 'string') {
         throw new JWEInvalid('JWE Protected Header incorrect type');
@@ -104,17 +104,21 @@ export async function flattenedDecrypt(jwe, key, options) {
     }
     let iv;
     let tag;
-    try {
-        iv = base64url(jwe.iv);
-    }
-    catch {
-        throw new JWEInvalid('Failed to base64url decode the iv');
-    }
-    try {
-        tag = base64url(jwe.tag);
+    if (jwe.iv !== undefined) {
+        try {
+            iv = base64url(jwe.iv);
+        }
+        catch {
+            throw new JWEInvalid('Failed to base64url decode the iv');
+        }
     }
-    catch {
-        throw new JWEInvalid('Failed to base64url decode the tag');
+    if (jwe.tag !== undefined) {
+        try {
+            tag = base64url(jwe.tag);
+        }
+        catch {
+            throw new JWEInvalid('Failed to base64url decode the tag');
+        }
     }
     const protectedHeader = encoder.encode(jwe.protected ?? '');
     let additionalData;

package/dist/node/esm/jwe/flattened/encrypt.js

@@ -1,6 +1,5 @@
 import { encode as base64url } from '../../runtime/base64url.js';
 import encrypt from '../../runtime/encrypt.js';
-import generateIv from '../../lib/iv.js';
 import encryptKeyManagement from '../../lib/encrypt_key_management.js';
 import { JOSENotSupported, JWEInvalid } from '../../util/errors.js';
 import isDisjoint from '../../lib/is_disjoint.js';
@@ -92,15 +91,8 @@ export class FlattenedEncrypt {
             throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
         }
         let encryptedKey;
-        if (alg === 'dir') {
-            if (this._cek) {
-                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Encryption');
-            }
-        }
-        else if (alg === 'ECDH-ES') {
-            if (this._cek) {
-                throw new TypeError('setContentEncryptionKey cannot be called when using Direct Key Agreement');
-            }
+        if (this._cek && (alg === 'dir' || alg === 'ECDH-ES')) {
+            throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
         }
         let cek;
         {
@@ -125,7 +117,6 @@ export class FlattenedEncrypt {
                 }
             }
         }
-        this._iv ||= generateIv(enc);
         let additionalData;
         let protectedHeader;
         let aadMember;
@@ -142,12 +133,16 @@ export class FlattenedEncrypt {
         else {
             additionalData = protectedHeader;
         }
-        const { ciphertext, tag } = await encrypt(enc, this._plaintext, cek, this._iv, additionalData);
+        const { ciphertext, tag, iv } = await encrypt(enc, this._plaintext, cek, this._iv, additionalData);
         const jwe = {
             ciphertext: base64url(ciphertext),
-            iv: base64url(this._iv),
-            tag: base64url(tag),
         };
+        if (iv) {
+            jwe.iv = base64url(iv);
+        }
+        if (tag) {
+            jwe.tag = base64url(tag);
+        }
         if (encryptedKey) {
             jwe.encrypted_key = base64url(encryptedKey);
         }

package/dist/node/esm/jwks/remote.js

@@ -9,7 +9,7 @@ function isCloudflareWorkers() {
 let USER_AGENT;
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
     const NAME = 'jose';
-    const VERSION = 'v5.2.1';
+    const VERSION = 'v5.2.3';
     USER_AGENT = `${NAME}/${VERSION}`;
 }
 class RemoteJWKSet extends LocalJWKSet {

package/dist/node/esm/lib/aesgcmkw.js

@@ -1,12 +1,14 @@
 import encrypt from '../runtime/encrypt.js';
 import decrypt from '../runtime/decrypt.js';
-import generateIv from './iv.js';
 import { encode as base64url } from '../runtime/base64url.js';
 export async function wrap(alg, key, cek, iv) {
     const jweAlgorithm = alg.slice(0, 7);
-    iv ||= generateIv(jweAlgorithm);
-    const { ciphertext: encryptedKey, tag } = await encrypt(jweAlgorithm, cek, key, iv, new Uint8Array(0));
-    return { encryptedKey, iv: base64url(iv), tag: base64url(tag) };
+    const wrapped = await encrypt(jweAlgorithm, cek, key, iv, new Uint8Array(0));
+    return {
+        encryptedKey: wrapped.ciphertext,
+        iv: base64url(wrapped.iv),
+        tag: base64url(wrapped.tag),
+    };
 }
 export async function unwrap(alg, key, encryptedKey, iv, tag) {
     const jweAlgorithm = alg.slice(0, 7);

package/dist/node/esm/lib/validate_crit.js

@@ -1,6 +1,6 @@
 import { JOSENotSupported } from '../util/errors.js';
 function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
-    if (joseHeader.crit !== undefined && protectedHeader.crit === undefined) {
+    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {
         throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
     }
     if (!protectedHeader || protectedHeader.crit === undefined) {

package/dist/node/esm/runtime/decrypt.js

@@ -2,7 +2,7 @@ import { createDecipheriv, KeyObject } from 'node:crypto';
 import checkIvLength from '../lib/check_iv_length.js';
 import checkCekLength from './check_cek_length.js';
 import { concat } from '../lib/buffer_utils.js';
-import { JOSENotSupported, JWEDecryptionFailed } from '../util/errors.js';
+import { JOSENotSupported, JWEDecryptionFailed, JWEInvalid } from '../util/errors.js';
 import timingSafeEqual from './timing_safe_equal.js';
 import cbcTag from './cbc_tag.js';
 import { isCryptoKey } from './webcrypto.js';
@@ -77,6 +77,12 @@ const decrypt = (enc, cek, ciphertext, iv, tag, aad) => {
     else {
         throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));
     }
+    if (!iv) {
+        throw new JWEInvalid('JWE Initialization Vector missing');
+    }
+    if (!tag) {
+        throw new JWEInvalid('JWE Authentication Tag missing');
+    }
     checkCekLength(enc, key);
     checkIvLength(enc, iv);
     switch (enc) {

package/dist/node/esm/runtime/encrypt.js

@@ -7,6 +7,7 @@ import { isCryptoKey } from './webcrypto.js';
 import { checkEncCryptoKey } from '../lib/crypto_key.js';
 import isKeyObject from './is_key_object.js';
 import invalidKeyInput from '../lib/invalid_key_input.js';
+import generateIv from '../lib/iv.js';
 import { JOSENotSupported } from '../util/errors.js';
 import supported from './ciphers.js';
 import { types } from './is_key_like.js';
@@ -25,7 +26,7 @@ function cbcEncrypt(enc, plaintext, cek, iv, aad) {
     const ciphertext = concat(cipher.update(plaintext), cipher.final());
     const macSize = parseInt(enc.slice(-3), 10);
     const tag = cbcTag(aad, iv, ciphertext, macSize, macKey, keySize);
-    return { ciphertext, tag };
+    return { ciphertext, tag, iv };
 }
 function gcmEncrypt(enc, plaintext, cek, iv, aad) {
     const keySize = parseInt(enc.slice(1, 4), 10);
@@ -40,7 +41,7 @@ function gcmEncrypt(enc, plaintext, cek, iv, aad) {
     const ciphertext = cipher.update(plaintext);
     cipher.final();
     const tag = cipher.getAuthTag();
-    return { ciphertext, tag };
+    return { ciphertext, tag, iv };
 }
 const encrypt = (enc, plaintext, cek, iv, aad) => {
     let key;
@@ -55,7 +56,12 @@ const encrypt = (enc, plaintext, cek, iv, aad) => {
         throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array'));
     }
     checkCekLength(enc, key);
-    checkIvLength(enc, iv);
+    if (iv) {
+        checkIvLength(enc, iv);
+    }
+    else {
+        iv = generateIv(enc);
+    }
     switch (enc) {
         case 'A128CBC-HS256':
         case 'A192CBC-HS384':

package/dist/types/key/import.d.ts

@@ -11,6 +11,10 @@ export interface PEMImportOptions {
  * Imports a PEM-encoded SPKI string as a runtime-specific public key representation (KeyObject or
  * CryptoKey).
  *
+ * Note: The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
+ * {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
+ * (1.2.840.113549.1.1.1) instead for all RSA algorithms.
+ *
  * @param spki PEM-encoded SPKI string
  * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
  *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
@@ -21,6 +25,10 @@ export declare function importSPKI<KeyLikeType extends KeyLike = KeyLike>(spki:
  * Imports the SPKI from an X.509 string certificate as a runtime-specific public key representation
  * (KeyObject or CryptoKey).
  *
+ * Note: The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
+ * {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
+ * (1.2.840.113549.1.1.1) instead for all RSA algorithms.
+ *
  * @param x509 X.509 certificate string
  * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
  *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
@@ -31,6 +39,10 @@ export declare function importX509<KeyLikeType extends KeyLike = KeyLike>(x509:
  * Imports a PEM-encoded PKCS#8 string as a runtime-specific private key representation (KeyObject
  * or CryptoKey).
  *
+ * Note: The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
+ * {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
+ * (1.2.840.113549.1.1.1) instead for all RSA algorithms.
+ *
  * @param pkcs8 PEM-encoded PKCS#8 string
  * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used
  *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
@@ -38,10 +50,11 @@ export declare function importX509<KeyLikeType extends KeyLike = KeyLike>(x509:
  */
 export declare function importPKCS8<KeyLikeType extends KeyLike = KeyLike>(pkcs8: string, alg: string, options?: PEMImportOptions): Promise<KeyLikeType>;
 /**
- * Imports a JWK to a runtime-specific key representation (KeyLike). Either JWK "alg" (Algorithm)
- * Parameter must be present or the optional "alg" argument. When running on a runtime using
- * {@link https://www.w3.org/TR/WebCryptoAPI/ Web Cryptography API} the jwk parameters "use",
- * "key_ops", and "ext" are also used in the resulting `CryptoKey`.
+ * Imports a JWK to a runtime-specific key representation (KeyLike). Either the JWK "alg"
+ * (Algorithm) Parameter, or the optional "alg" argument, must be present.
+ *
+ * Note: When the runtime is using {@link https://w3c.github.io/webcrypto/ Web Cryptography API} the
+ * jwk parameters "use", "key_ops", and "ext" are also used in the resulting `CryptoKey`.
  *
  * @param jwk JSON Web Key.
  * @param alg (Only effective in Web Crypto API runtimes) JSON Web Algorithm identifier to be used

package/dist/types/types.d.ts

@@ -264,7 +264,7 @@ export interface FlattenedJWE {
    * The "iv" member MUST be present and contain the value BASE64URL(JWE Initialization Vector) when
    * the JWE Initialization Vector value is non-empty; otherwise, it MUST be absent.
    */
-  iv: string
+  iv?: string
 
   /**
    * The "protected" member MUST be present and contain the value BASE64URL(UTF8(JWE Protected
@@ -277,7 +277,7 @@ export interface FlattenedJWE {
    * The "tag" member MUST be present and contain the value BASE64URL(JWE Authentication Tag) when
    * the JWE Authentication Tag value is non-empty; otherwise, it MUST be absent.
    */
-  tag: string
+  tag?: string
 
   /**
    * The "unprotected" member MUST be present and contain the value JWE Shared Unprotected Header

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "5.2.1",
+  "version": "5.2.3",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "browser",