unjwt 0.3.0 → 0.4.0

package/dist/index.cjs

@@ -1,146 +0,0 @@
-'use strict';
-
-const crypto = require('unjwt/crypto');
-
-const DEFAULT_SIGNATURE_METHOD = "HMAC";
-const DEFAULT_HASH_METHODS = "SHA-256";
-const textEncoder = new TextEncoder();
-async function createSignature(key, algorithm, data) {
-  const encoded = textEncoder.encode(data);
-  const signature = await crypto.subtle.sign(algorithm, key, encoded);
-  return encodeToBase64Url(signature);
-}
-async function importKey(options) {
-  const {
-    secret,
-    usage = "sign",
-    name = DEFAULT_SIGNATURE_METHOD,
-    hash = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const encodedKey = textEncoder.encode(secret);
-  return await crypto.subtle.importKey(
-    "raw",
-    encodedKey,
-    { name, hash },
-    false,
-    [usage]
-  );
-}
-function encodeToBase64Url(input) {
-  let data;
-  if (typeof input === "string")
-    data = textEncoder.encode(input);
-  else if (input instanceof ArrayBuffer)
-    data = new Uint8Array(input);
-  else
-    data = textEncoder.encode(JSON.stringify(input));
-  const base64 = btoa(String.fromCodePoint(...data));
-  return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function decodeFromBase64Url(base64Url) {
-  const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-  return atob(base64);
-}
-function decodeFromBase64UrlToBuffer(base64Url) {
-  const bytes = decodeFromBase64Url(base64Url);
-  const buffer = Uint8Array.from(bytes, (c) => c.codePointAt(0));
-  return buffer.buffer;
-}
-
-function decodeJWT(token) {
-  try {
-    return _decodeJWT(token);
-  } catch {
-  }
-}
-function _decodeJWT(token) {
-  const parts = String(token).split(".");
-  if (parts.length !== 3)
-    throw new Error("Invalid token format");
-  const [, payload] = parts;
-  return JSON.parse(decodeFromBase64Url(payload));
-}
-
-const headerAlgMap = {
-  HMAC: "HS",
-  RSA: "RS",
-  ECDSA: "ES"
-};
-async function signJWT(options) {
-  const {
-    payload = {},
-    secret,
-    issuer,
-    audience,
-    expires = 30,
-    signatureMethod = DEFAULT_SIGNATURE_METHOD,
-    hashMethod = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const key = await importKey({
-    secret,
-    name: signatureMethod,
-    hash: hashMethod
-  });
-  const header = {
-    typ: "JWT",
-    alg: `${headerAlgMap[signatureMethod]}${hashMethod.split("-")[1]}`
-  };
-  const iat = Math.floor(Date.now() / 1e3);
-  const exp = iat + expires * 24 * 60 * 60;
-  const jwtPayload = {
-    ...payload,
-    iss: issuer,
-    aud: audience,
-    iat,
-    exp
-  };
-  const signature = await createSignature(
-    key,
-    signatureMethod,
-    `${encodeToBase64Url(header)}.${encodeToBase64Url(jwtPayload)}`
-  );
-  return `${encodeToBase64Url(header)}.${encodeToBase64Url(
-    jwtPayload
-  )}.${signature}`;
-}
-
-async function verifyJWT(options) {
-  const {
-    token,
-    secret,
-    issuer,
-    audience,
-    leeway = 60,
-    signatureMethod = DEFAULT_SIGNATURE_METHOD,
-    hashMethod = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const [header, payload, signature] = String(token).split(".");
-  const key = await importKey({
-    secret,
-    usage: "verify",
-    name: signatureMethod,
-    hash: hashMethod
-  });
-  const isValid = await crypto.subtle.verify(
-    signatureMethod,
-    key,
-    decodeFromBase64UrlToBuffer(signature),
-    textEncoder.encode(`${header}.${payload}`)
-  );
-  if (!isValid)
-    throw new Error("Invalid JWT signature");
-  let decodedPayload;
-  try {
-    decodedPayload = JSON.parse(decodeFromBase64Url(payload));
-  } catch {
-    throw new Error("Invalid JWT payload");
-  }
-  const now = Math.floor(Date.now() / 1e3);
-  if (issuer !== decodedPayload.iss || (Array.isArray(decodedPayload.aud) ? !decodedPayload.aud.includes(audience) : audience !== decodedPayload.aud) || decodedPayload.exp && now > decodedPayload.exp + leeway || decodedPayload.nbf && now < decodedPayload.nbf - leeway)
-    throw new Error("Invalid JWT claims");
-}
-
-exports._decodeJWT = _decodeJWT;
-exports.decodeJWT = decodeJWT;
-exports.signJWT = signJWT;
-exports.verifyJWT = verifyJWT;

package/dist/index.d.cts

@@ -1,79 +0,0 @@
-/** Recognized JWT Claims Set members */
-interface JWTRegisteredClaims {
-    /**
-     * JWT Issuer
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.1 RFC7519#section-4.1.1}
-     */
-    iss?: string;
-    /**
-     * JWT Subject
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.2 RFC7519#section-4.1.2}
-     */
-    sub?: string;
-    /**
-     * JWT Audience
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.3 RFC7519#section-4.1.3}
-     */
-    aud?: string | string[];
-    /**
-     * JWT ID
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 RFC7519#section-4.1.7}
-     */
-    jti?: string;
-    /**
-     * JWT Not Before
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.5 RFC7519#section-4.1.5}
-     */
-    nbf?: number;
-    /**
-     * JWT Expiration Time
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.4 RFC7519#section-4.1.4}
-     */
-    exp?: number;
-    /**
-     * JWT Issued At
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
-     */
-    iat?: number;
-}
-
-declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
-declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
-
-declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
-    payload?: T;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /**
-     * Expiration time in days
-     * @default 30
-     */
-    expires?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<string>;
-
-declare function verifyJWT(options: {
-    token: string;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /** @default 60 */
-    leeway?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<void>;
-
-export { type JWTRegisteredClaims, _decodeJWT, decodeJWT, signJWT, verifyJWT };