unjwt 0.1.2 → 0.2.1

package/README.md

@@ -6,8 +6,8 @@ You may just use [Jose](https://github.com/panva/jose) or one of the other libra
 
 ## Features
 
+- 📦 Works in Node.js, browser and workers
 - 💨 Zero dependencies
-- 📦 Works in every context supporting the Web Crypto API
 
 ## Installation
 

package/dist/crypto/node.d.mts

@@ -0,0 +1,5 @@
+declare const subtle: Crypto['subtle'];
+declare const randomUUID: Crypto['randomUUID'];
+declare const getRandomValues: Crypto['getRandomValues'];
+
+export { getRandomValues, randomUUID, subtle };

package/dist/crypto/node.d.ts

@@ -0,0 +1,5 @@
+declare const subtle: Crypto['subtle'];
+declare const randomUUID: Crypto['randomUUID'];
+declare const getRandomValues: Crypto['getRandomValues'];
+
+export { getRandomValues, randomUUID, subtle };

package/dist/crypto/node.mjs

@@ -0,0 +1,11 @@
+import nodeCrypto from 'node:crypto';
+
+const subtle = nodeCrypto.webcrypto?.subtle || {};
+const randomUUID = () => {
+  return nodeCrypto.randomUUID();
+};
+const getRandomValues = (array) => {
+  return nodeCrypto.webcrypto.getRandomValues(array);
+};
+
+export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.d.mts

@@ -0,0 +1,5 @@
+declare const subtle: Crypto['subtle'];
+declare const randomUUID: Crypto['randomUUID'];
+declare const getRandomValues: Crypto['getRandomValues'];
+
+export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.d.ts

@@ -0,0 +1,5 @@
+declare const subtle: Crypto['subtle'];
+declare const randomUUID: Crypto['randomUUID'];
+declare const getRandomValues: Crypto['getRandomValues'];
+
+export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.mjs

@@ -0,0 +1,10 @@
+const webCrypto = globalThis.crypto;
+const subtle = webCrypto.subtle;
+const randomUUID = () => {
+  return webCrypto.randomUUID();
+};
+const getRandomValues = (array) => {
+  return webCrypto.getRandomValues(array);
+};
+
+export { getRandomValues, randomUUID, subtle };

package/dist/index.d.mts

@@ -47,7 +47,7 @@ interface JWTRegisteredClaims {
 declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
 declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
 
-declare function signJWT<T extends Record<string, any> = Record<string, any>>({ payload, secret, issuer, audience, expires, signatureMethod, hashMethod, }: {
+declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
     payload?: T;
     secret: string;
     issuer: string;
@@ -63,7 +63,7 @@ declare function signJWT<T extends Record<string, any> = Record<string, any>>({
     hashMethod?: string;
 }): Promise<string>;
 
-declare function verifyJWT({ token, secret, issuer, audience, leeway, signatureMethod, hashMethod, }: {
+declare function verifyJWT(options: {
     token: string;
     secret: string;
     issuer: string;

package/dist/index.d.ts

@@ -47,7 +47,7 @@ interface JWTRegisteredClaims {
 declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
 declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
 
-declare function signJWT<T extends Record<string, any> = Record<string, any>>({ payload, secret, issuer, audience, expires, signatureMethod, hashMethod, }: {
+declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
     payload?: T;
     secret: string;
     issuer: string;
@@ -63,7 +63,7 @@ declare function signJWT<T extends Record<string, any> = Record<string, any>>({
     hashMethod?: string;
 }): Promise<string>;
 
-declare function verifyJWT({ token, secret, issuer, audience, leeway, signatureMethod, hashMethod, }: {
+declare function verifyJWT(options: {
     token: string;
     secret: string;
     issuer: string;

package/dist/index.mjs

@@ -1,19 +1,22 @@
+import { subtle } from 'unjwt/crypto';
+
 const DEFAULT_SIGNATURE_METHOD = "HMAC";
 const DEFAULT_HASH_METHODS = "SHA-256";
 const textEncoder = new TextEncoder();
 async function createSignature(key, algorithm, data) {
   const encoded = textEncoder.encode(data);
-  const signature = await crypto.subtle.sign(algorithm, key, encoded);
+  const signature = await subtle.sign(algorithm, key, encoded);
   return encodeToBase64Url(signature);
 }
-async function importKey({
-  secret,
-  usage = "sign",
-  name = DEFAULT_SIGNATURE_METHOD,
-  hash = DEFAULT_HASH_METHODS
-}) {
+async function importKey(options) {
+  const {
+    secret,
+    usage = "sign",
+    name = DEFAULT_SIGNATURE_METHOD,
+    hash = DEFAULT_HASH_METHODS
+  } = { ...options };
   const encodedKey = textEncoder.encode(secret);
-  return await crypto.subtle.importKey(
+  return await subtle.importKey(
     "raw",
     encodedKey,
     { name, hash },
@@ -61,15 +64,16 @@ const headerAlgMap = {
   RSA: "RS",
   ECDSA: "ES"
 };
-async function signJWT({
-  payload = {},
-  secret,
-  issuer,
-  audience,
-  expires = 30,
-  signatureMethod = DEFAULT_SIGNATURE_METHOD,
-  hashMethod = DEFAULT_HASH_METHODS
-}) {
+async function signJWT(options) {
+  const {
+    payload = {},
+    secret,
+    issuer,
+    audience,
+    expires = 30,
+    signatureMethod = DEFAULT_SIGNATURE_METHOD,
+    hashMethod = DEFAULT_HASH_METHODS
+  } = { ...options };
   const key = await importKey({
     secret,
     name: signatureMethod,
@@ -98,23 +102,24 @@ async function signJWT({
   )}.${signature}`;
 }
 
-async function verifyJWT({
-  token,
-  secret,
-  issuer,
-  audience,
-  leeway = 60,
-  signatureMethod = DEFAULT_SIGNATURE_METHOD,
-  hashMethod = DEFAULT_HASH_METHODS
-}) {
-  const [header, payload, signature] = token.split(".");
+async function verifyJWT(options) {
+  const {
+    token,
+    secret,
+    issuer,
+    audience,
+    leeway = 60,
+    signatureMethod = DEFAULT_SIGNATURE_METHOD,
+    hashMethod = DEFAULT_HASH_METHODS
+  } = { ...options };
+  const [header, payload, signature] = String(token).split(".");
   const key = await importKey({
     secret,
     usage: "verify",
     name: signatureMethod,
     hash: hashMethod
   });
-  const isValid = await crypto.subtle.verify(
+  const isValid = await subtle.verify(
     signatureMethod,
     key,
     decodeFromBase64UrlToBuffer(signature),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "unjwt",
   "type": "module",
-  "version": "0.1.2",
+  "version": "0.2.1",
   "packageManager": "pnpm@8.6.12",
   "description": "Easy creation and verification of JSON Web Tokens (JWT)",
   "author": "Johann Schopplich <pkg@johannschopplich.com>",
@@ -26,6 +26,25 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.mjs"
+    },
+    "./crypto": {
+      "browser": "./dist/crypto/web.mjs",
+      "bun": "./dist/crypto/web.mjs",
+      "deno": "./dist/crypto/web.mjs",
+      "edge-light": "./dist/crypto/web.mjs",
+      "edge-routine": "./dist/crypto/web.mjs",
+      "lagon": "./dist/crypto/web.mjs",
+      "netlify": "./dist/crypto/web.mjs",
+      "react-native": "./dist/crypto/web.mjs",
+      "wintercg": "./dist/crypto/web.mjs",
+      "worker": "./dist/crypto/web.mjs",
+      "workerd": "./dist/crypto/web.mjs",
+      "node": {
+        "types": "./dist/crypto/node.d.ts",
+        "import": "./dist/crypto/node.mjs"
+      },
+      "types": "./dist/crypto/web.d.ts",
+      "import": "./dist/crypto/web.mjs"
     }
   },
   "types": "./dist/index.d.ts",
@@ -42,6 +61,7 @@
   },
   "devDependencies": {
     "@antfu/eslint-config": "^0.40.2",
+    "@types/node": "^20.5.0",
     "bumpp": "^9.1.1",
     "eslint": "^8.47.0",
     "typescript": "^5.1.6",