unjwt 0.1.2 → 0.2.0

package/README.md

@@ -6,8 +6,8 @@ You may just use [Jose](https://github.com/panva/jose) or one of the other libra
 
 ## Features
 
-- 💨 Zero dependencies
-- 📦 Works in every context supporting the Web Crypto API
+- 📦 Works in Node, browser and workers
+- 💨 Zero dependencies except [`uncrypto`](https://github.com/unjs/uncrypto) for conditional Web Crypto API support
 
 ## Installation
 

package/dist/index.d.mts

@@ -47,7 +47,7 @@ interface JWTRegisteredClaims {
 declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
 declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
 
-declare function signJWT<T extends Record<string, any> = Record<string, any>>({ payload, secret, issuer, audience, expires, signatureMethod, hashMethod, }: {
+declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
     payload?: T;
     secret: string;
     issuer: string;
@@ -63,7 +63,7 @@ declare function signJWT<T extends Record<string, any> = Record<string, any>>({
     hashMethod?: string;
 }): Promise<string>;
 
-declare function verifyJWT({ token, secret, issuer, audience, leeway, signatureMethod, hashMethod, }: {
+declare function verifyJWT(options: {
     token: string;
     secret: string;
     issuer: string;

package/dist/index.d.ts

@@ -47,7 +47,7 @@ interface JWTRegisteredClaims {
 declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
 declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
 
-declare function signJWT<T extends Record<string, any> = Record<string, any>>({ payload, secret, issuer, audience, expires, signatureMethod, hashMethod, }: {
+declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
     payload?: T;
     secret: string;
     issuer: string;
@@ -63,7 +63,7 @@ declare function signJWT<T extends Record<string, any> = Record<string, any>>({
     hashMethod?: string;
 }): Promise<string>;
 
-declare function verifyJWT({ token, secret, issuer, audience, leeway, signatureMethod, hashMethod, }: {
+declare function verifyJWT(options: {
     token: string;
     secret: string;
     issuer: string;

package/dist/index.mjs

@@ -1,19 +1,22 @@
+import { subtle } from 'uncrypto';
+
 const DEFAULT_SIGNATURE_METHOD = "HMAC";
 const DEFAULT_HASH_METHODS = "SHA-256";
 const textEncoder = new TextEncoder();
 async function createSignature(key, algorithm, data) {
   const encoded = textEncoder.encode(data);
-  const signature = await crypto.subtle.sign(algorithm, key, encoded);
+  const signature = await subtle.sign(algorithm, key, encoded);
   return encodeToBase64Url(signature);
 }
-async function importKey({
-  secret,
-  usage = "sign",
-  name = DEFAULT_SIGNATURE_METHOD,
-  hash = DEFAULT_HASH_METHODS
-}) {
+async function importKey(options) {
+  const {
+    secret,
+    usage = "sign",
+    name = DEFAULT_SIGNATURE_METHOD,
+    hash = DEFAULT_HASH_METHODS
+  } = { ...options };
   const encodedKey = textEncoder.encode(secret);
-  return await crypto.subtle.importKey(
+  return await subtle.importKey(
     "raw",
     encodedKey,
     { name, hash },
@@ -61,15 +64,16 @@ const headerAlgMap = {
   RSA: "RS",
   ECDSA: "ES"
 };
-async function signJWT({
-  payload = {},
-  secret,
-  issuer,
-  audience,
-  expires = 30,
-  signatureMethod = DEFAULT_SIGNATURE_METHOD,
-  hashMethod = DEFAULT_HASH_METHODS
-}) {
+async function signJWT(options) {
+  const {
+    payload = {},
+    secret,
+    issuer,
+    audience,
+    expires = 30,
+    signatureMethod = DEFAULT_SIGNATURE_METHOD,
+    hashMethod = DEFAULT_HASH_METHODS
+  } = { ...options };
   const key = await importKey({
     secret,
     name: signatureMethod,
@@ -98,23 +102,24 @@ async function signJWT({
   )}.${signature}`;
 }
 
-async function verifyJWT({
-  token,
-  secret,
-  issuer,
-  audience,
-  leeway = 60,
-  signatureMethod = DEFAULT_SIGNATURE_METHOD,
-  hashMethod = DEFAULT_HASH_METHODS
-}) {
-  const [header, payload, signature] = token.split(".");
+async function verifyJWT(options) {
+  const {
+    token,
+    secret,
+    issuer,
+    audience,
+    leeway = 60,
+    signatureMethod = DEFAULT_SIGNATURE_METHOD,
+    hashMethod = DEFAULT_HASH_METHODS
+  } = { ...options };
+  const [header, payload, signature] = String(token).split(".");
   const key = await importKey({
     secret,
     usage: "verify",
     name: signatureMethod,
     hash: hashMethod
   });
-  const isValid = await crypto.subtle.verify(
+  const isValid = await subtle.verify(
     signatureMethod,
     key,
     decodeFromBase64UrlToBuffer(signature),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "unjwt",
   "type": "module",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "packageManager": "pnpm@8.6.12",
   "description": "Easy creation and verification of JSON Web Tokens (JWT)",
   "author": "Johann Schopplich <pkg@johannschopplich.com>",
@@ -40,6 +40,9 @@
     "release": "bumpp --commit --push --tag",
     "test:types": "tsc --noEmit"
   },
+  "dependencies": {
+    "uncrypto": "^0.1.3"
+  },
   "devDependencies": {
     "@antfu/eslint-config": "^0.40.2",
     "bumpp": "^9.1.1",