openapi-explorer 0.8.284 → 0.8.287

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openapi-explorer",
-  "version": "0.8.284",
+  "version": "0.8.287",
   "description": "OpenAPI Explorer - API viewer with dynamically generated components, documentation, and interaction console",
   "author": "Rhosys Developers <developers@rhosys.ch>",
   "repository": {
@@ -53,7 +53,6 @@
     "openapi-data-validator": "^2.0.40",
     "path-browserify": "^1.0.1",
     "prismjs": "^1.23.0",
-    "randombytes": "^2.1.0",
     "regex-to-strings": "^2.0.3",
     "swagger-client": "^3.13"
   },

package/src/components/api-request.js

@@ -1035,6 +1035,12 @@ export default class ApiRequest extends LitElement {
       let respText;
       tryBtnEl.disabled = true;
       const fetchStart = new Date();
+
+      this.responseMessage = '';
+      this.responseUrl = '';
+      this.responseHeaders = '';
+      this.responseText = '';
+
       fetchResponse = await fetch(fetchRequestObject);
       this.responseElapsedMs = new Date() - fetchStart;
       tryBtnEl.disabled = false;
@@ -1111,9 +1117,8 @@ export default class ApiRequest extends LitElement {
       this.dispatchEvent(new CustomEvent('response', responseEvent));
     } catch (error) {
       tryBtnEl.disabled = false;
-      this.responseMessage = `${error.message} (CORS or Network Issue)`;
-      this.responseUrl = '';
-      this.responseHeaders = '';
+      this.responseMessage = `${error.message} (Check the browser network tab for more information.)`;
+      this.responseStatus = 'error';
       const responseEvent = {
         bubbles: true,
         composed: true,

package/src/templates/security-scheme-template.js

@@ -2,7 +2,6 @@ import { html } from 'lit-element';
 import { unsafeHTML } from 'lit-html/directives/unsafe-html';
 import { marked } from 'marked';
 import base64url from 'base64url';
-import randomBytes from 'randombytes';
 
 function onApiKeyChange(apiKeyId, e) {
   let apiKeyValue = '';
@@ -181,11 +180,13 @@ async function onInvokeOAuthFlow(apiKeyId, flowType, authUrl, tokenUrl, e) {
     const authUrlObj = new URL(authUrl);
     const authCodeParams = new URLSearchParams(authUrlObj.search);
     if (flowType === 'authorizationCode') {
-      authCodeParams.set('nonce', randomBytes(64).toString('hex'));
+      const randomBytes = new Uint32Array(3);
+      (window.crypto || window.msCrypto).getRandomValues(randomBytes);
+      authCodeParams.set('nonce', randomBytes.toString('hex').split(',').join(''));
       grantType = 'authorization_code';
       responseType = 'code';
-      const codeVerifier = randomBytes(64).toString('hex');
-      const hash = await window.crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
+      const codeVerifier = randomBytes.toString('hex').split(',').join('');
+      const hash = await (window.crypto || window.msCrypto).subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
       const codeChallenge = base64url(hash);
 
       authCodeParams.set('code_challenge', codeChallenge);