unjwt 0.3.0 → 0.5.0

package/package.json

@@ -1,104 +1,64 @@
 {
   "name": "unjwt",
-  "type": "module",
-  "version": "0.3.0",
-  "packageManager": "pnpm@8.8.0",
-  "description": "Easy creation and verification of JSON Web Tokens (JWT)",
-  "author": "Johann Schopplich <pkg@johannschopplich.com>",
+  "version": "0.5.0",
+  "description": "Low-level JWT utilities",
+  "repository": "sandros94/unjwt",
   "license": "MIT",
-  "homepage": "https://github.com/johannschopplich/unjwt#readme",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/johannschopplich/unjwt.git"
-  },
-  "bugs": {
-    "url": "https://github.com/johannschopplich/unjwt/issues"
-  },
-  "keywords": [
-    "cloudflare",
-    "jwt",
-    "serverless",
-    "token",
-    "worker"
-  ],
   "sideEffects": false,
+  "type": "module",
+  "author": {
+    "name": "Sandro Circi",
+    "email": "sandro.circi@digitoolmedia.com"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.mts",
-      "import": {
-        "types": "./dist/index.d.mts",
-        "default": "./dist/index.mjs"
-      },
-      "require": {
-        "types": "./dist/index.d.cts",
-        "default": "./dist/index.cjs"
-      },
       "default": "./dist/index.mjs"
     },
-    "./crypto": {
-      "browser": "./dist/crypto/web.mjs",
-      "bun": "./dist/crypto/web.mjs",
-      "deno": "./dist/crypto/web.mjs",
-      "edge-light": "./dist/crypto/web.mjs",
-      "edge-routine": "./dist/crypto/web.mjs",
-      "lagon": "./dist/crypto/web.mjs",
-      "netlify": "./dist/crypto/web.mjs",
-      "react-native": "./dist/crypto/web.mjs",
-      "wintercg": "./dist/crypto/web.mjs",
-      "worker": "./dist/crypto/web.mjs",
-      "workerd": "./dist/crypto/web.mjs",
-      "node": {
-        "import": {
-          "types": "./dist/crypto/node.d.mts",
-          "default": "./dist/crypto/node.mjs"
-        },
-        "require": {
-          "types": "./dist/crypto/node.d.cts",
-          "default": "./dist/crypto/node.cjs"
-        }
-      },
-      "types": "./dist/crypto/web.d.mts",
-      "import": {
-        "types": "./dist/crypto/web.d.mts",
-        "default": "./dist/crypto/web.mjs"
-      },
-      "require": {
-        "types": "./dist/crypto/web.d.cts",
-        "default": "./dist/crypto/web.cjs"
-      },
-      "default": "./dist/crypto/web.mjs"
+    "./jwe": {
+      "types": "./dist/jwe.d.mts",
+      "default": "./dist/jwe.mjs"
+    },
+    "./jwk": {
+      "types": "./dist/jwk.d.mts",
+      "default": "./dist/jwk.mjs"
+    },
+    "./jws": {
+      "types": "./dist/jws.d.mts",
+      "default": "./dist/jws.mjs"
+    },
+    "./utils": {
+      "types": "./dist/utils.d.mts",
+      "default": "./dist/utils.mjs"
     }
   },
-  "main": "./dist/index.cjs",
+  "main": "./dist/index.mjs",
   "module": "./dist/index.mjs",
-  "types": "./dist/index.d.ts",
-  "typesVersions": {
-    "*": {
-      "*": [
-        "*",
-        "dist/*",
-        "dist/*.d.ts",
-        "dist/*/index.d.ts"
-      ]
-    }
-  },
+  "types": "./dist/index.d.mts",
   "files": [
     "dist"
   ],
   "scripts": {
     "build": "unbuild",
-    "dev": "unbuild --stub",
-    "lint": "eslint .",
-    "lint:fix": "eslint . --fix",
-    "release": "bumpp --commit --push --tag",
-    "test:types": "tsc --noEmit"
+    "dev": "vitest dev",
+    "lint": "eslint . && prettier -c .",
+    "lint:fix": "automd && eslint . --fix && prettier -w .",
+    "prepack": "pnpm build",
+    "release": "pnpm test && pnpm prepack && changelogen --release --push --publish",
+    "test": "pnpm lint && pnpm test:types && vitest run --coverage --slowTestThreshold=500",
+    "test:types": "tsc --noEmit --skipLibCheck"
   },
   "devDependencies": {
-    "@antfu/eslint-config": "^1.0.0-beta.17",
-    "@types/node": "^20.7.1",
-    "bumpp": "^9.2.0",
-    "eslint": "^8.50.0",
-    "typescript": "^5.2.2",
-    "unbuild": "^2.0.0"
-  }
+    "@types/node": "^22.13.13",
+    "@vitest/coverage-v8": "^3.1.2",
+    "automd": "^0.4.0",
+    "changelogen": "^0.6.1",
+    "eslint": "^9.23.0",
+    "eslint-config-unjs": "^0.4.2",
+    "prettier": "^3.5.3",
+    "typescript": "^5.8.2",
+    "unbuild": "^3.5.0",
+    "vitest": "^3.1.2"
+  },
+  "packageManager": "pnpm@10.7.0"
 }

package/dist/crypto/node.cjs

@@ -1,19 +0,0 @@
-'use strict';
-
-const nodeCrypto = require('node:crypto');
-
-function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e.default : e; }
-
-const nodeCrypto__default = /*#__PURE__*/_interopDefaultCompat(nodeCrypto);
-
-const subtle = nodeCrypto__default.webcrypto?.subtle || {};
-const randomUUID = () => {
-  return nodeCrypto__default.randomUUID();
-};
-const getRandomValues = (array) => {
-  return nodeCrypto__default.webcrypto.getRandomValues(array);
-};
-
-exports.getRandomValues = getRandomValues;
-exports.randomUUID = randomUUID;
-exports.subtle = subtle;

package/dist/crypto/node.d.cts

@@ -1,5 +0,0 @@
-declare const subtle: Crypto['subtle'];
-declare const randomUUID: Crypto['randomUUID'];
-declare const getRandomValues: Crypto['getRandomValues'];
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/node.d.mts

@@ -1,5 +0,0 @@
-declare const subtle: Crypto['subtle'];
-declare const randomUUID: Crypto['randomUUID'];
-declare const getRandomValues: Crypto['getRandomValues'];
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/node.d.ts

@@ -1,5 +0,0 @@
-declare const subtle: Crypto['subtle'];
-declare const randomUUID: Crypto['randomUUID'];
-declare const getRandomValues: Crypto['getRandomValues'];
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/node.mjs

@@ -1,11 +0,0 @@
-import nodeCrypto from 'node:crypto';
-
-const subtle = nodeCrypto.webcrypto?.subtle || {};
-const randomUUID = () => {
-  return nodeCrypto.randomUUID();
-};
-const getRandomValues = (array) => {
-  return nodeCrypto.webcrypto.getRandomValues(array);
-};
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.cjs

@@ -1,14 +0,0 @@
-'use strict';
-
-const webCrypto = globalThis.crypto;
-const subtle = webCrypto.subtle;
-const randomUUID = () => {
-  return webCrypto.randomUUID();
-};
-const getRandomValues = (array) => {
-  return webCrypto.getRandomValues(array);
-};
-
-exports.getRandomValues = getRandomValues;
-exports.randomUUID = randomUUID;
-exports.subtle = subtle;

package/dist/crypto/web.d.cts

@@ -1,5 +0,0 @@
-declare const subtle: Crypto['subtle'];
-declare const randomUUID: Crypto['randomUUID'];
-declare const getRandomValues: Crypto['getRandomValues'];
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.d.mts

@@ -1,5 +0,0 @@
-declare const subtle: Crypto['subtle'];
-declare const randomUUID: Crypto['randomUUID'];
-declare const getRandomValues: Crypto['getRandomValues'];
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.d.ts

@@ -1,5 +0,0 @@
-declare const subtle: Crypto['subtle'];
-declare const randomUUID: Crypto['randomUUID'];
-declare const getRandomValues: Crypto['getRandomValues'];
-
-export { getRandomValues, randomUUID, subtle };

package/dist/crypto/web.mjs

@@ -1,10 +0,0 @@
-const webCrypto = globalThis.crypto;
-const subtle = webCrypto.subtle;
-const randomUUID = () => {
-  return webCrypto.randomUUID();
-};
-const getRandomValues = (array) => {
-  return webCrypto.getRandomValues(array);
-};
-
-export { getRandomValues, randomUUID, subtle };

package/dist/index.cjs

@@ -1,146 +0,0 @@
-'use strict';
-
-const crypto = require('unjwt/crypto');
-
-const DEFAULT_SIGNATURE_METHOD = "HMAC";
-const DEFAULT_HASH_METHODS = "SHA-256";
-const textEncoder = new TextEncoder();
-async function createSignature(key, algorithm, data) {
-  const encoded = textEncoder.encode(data);
-  const signature = await crypto.subtle.sign(algorithm, key, encoded);
-  return encodeToBase64Url(signature);
-}
-async function importKey(options) {
-  const {
-    secret,
-    usage = "sign",
-    name = DEFAULT_SIGNATURE_METHOD,
-    hash = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const encodedKey = textEncoder.encode(secret);
-  return await crypto.subtle.importKey(
-    "raw",
-    encodedKey,
-    { name, hash },
-    false,
-    [usage]
-  );
-}
-function encodeToBase64Url(input) {
-  let data;
-  if (typeof input === "string")
-    data = textEncoder.encode(input);
-  else if (input instanceof ArrayBuffer)
-    data = new Uint8Array(input);
-  else
-    data = textEncoder.encode(JSON.stringify(input));
-  const base64 = btoa(String.fromCodePoint(...data));
-  return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function decodeFromBase64Url(base64Url) {
-  const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-  return atob(base64);
-}
-function decodeFromBase64UrlToBuffer(base64Url) {
-  const bytes = decodeFromBase64Url(base64Url);
-  const buffer = Uint8Array.from(bytes, (c) => c.codePointAt(0));
-  return buffer.buffer;
-}
-
-function decodeJWT(token) {
-  try {
-    return _decodeJWT(token);
-  } catch {
-  }
-}
-function _decodeJWT(token) {
-  const parts = String(token).split(".");
-  if (parts.length !== 3)
-    throw new Error("Invalid token format");
-  const [, payload] = parts;
-  return JSON.parse(decodeFromBase64Url(payload));
-}
-
-const headerAlgMap = {
-  HMAC: "HS",
-  RSA: "RS",
-  ECDSA: "ES"
-};
-async function signJWT(options) {
-  const {
-    payload = {},
-    secret,
-    issuer,
-    audience,
-    expires = 30,
-    signatureMethod = DEFAULT_SIGNATURE_METHOD,
-    hashMethod = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const key = await importKey({
-    secret,
-    name: signatureMethod,
-    hash: hashMethod
-  });
-  const header = {
-    typ: "JWT",
-    alg: `${headerAlgMap[signatureMethod]}${hashMethod.split("-")[1]}`
-  };
-  const iat = Math.floor(Date.now() / 1e3);
-  const exp = iat + expires * 24 * 60 * 60;
-  const jwtPayload = {
-    ...payload,
-    iss: issuer,
-    aud: audience,
-    iat,
-    exp
-  };
-  const signature = await createSignature(
-    key,
-    signatureMethod,
-    `${encodeToBase64Url(header)}.${encodeToBase64Url(jwtPayload)}`
-  );
-  return `${encodeToBase64Url(header)}.${encodeToBase64Url(
-    jwtPayload
-  )}.${signature}`;
-}
-
-async function verifyJWT(options) {
-  const {
-    token,
-    secret,
-    issuer,
-    audience,
-    leeway = 60,
-    signatureMethod = DEFAULT_SIGNATURE_METHOD,
-    hashMethod = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const [header, payload, signature] = String(token).split(".");
-  const key = await importKey({
-    secret,
-    usage: "verify",
-    name: signatureMethod,
-    hash: hashMethod
-  });
-  const isValid = await crypto.subtle.verify(
-    signatureMethod,
-    key,
-    decodeFromBase64UrlToBuffer(signature),
-    textEncoder.encode(`${header}.${payload}`)
-  );
-  if (!isValid)
-    throw new Error("Invalid JWT signature");
-  let decodedPayload;
-  try {
-    decodedPayload = JSON.parse(decodeFromBase64Url(payload));
-  } catch {
-    throw new Error("Invalid JWT payload");
-  }
-  const now = Math.floor(Date.now() / 1e3);
-  if (issuer !== decodedPayload.iss || (Array.isArray(decodedPayload.aud) ? !decodedPayload.aud.includes(audience) : audience !== decodedPayload.aud) || decodedPayload.exp && now > decodedPayload.exp + leeway || decodedPayload.nbf && now < decodedPayload.nbf - leeway)
-    throw new Error("Invalid JWT claims");
-}
-
-exports._decodeJWT = _decodeJWT;
-exports.decodeJWT = decodeJWT;
-exports.signJWT = signJWT;
-exports.verifyJWT = verifyJWT;

package/dist/index.d.cts

@@ -1,79 +0,0 @@
-/** Recognized JWT Claims Set members */
-interface JWTRegisteredClaims {
-    /**
-     * JWT Issuer
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.1 RFC7519#section-4.1.1}
-     */
-    iss?: string;
-    /**
-     * JWT Subject
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.2 RFC7519#section-4.1.2}
-     */
-    sub?: string;
-    /**
-     * JWT Audience
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.3 RFC7519#section-4.1.3}
-     */
-    aud?: string | string[];
-    /**
-     * JWT ID
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 RFC7519#section-4.1.7}
-     */
-    jti?: string;
-    /**
-     * JWT Not Before
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.5 RFC7519#section-4.1.5}
-     */
-    nbf?: number;
-    /**
-     * JWT Expiration Time
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.4 RFC7519#section-4.1.4}
-     */
-    exp?: number;
-    /**
-     * JWT Issued At
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
-     */
-    iat?: number;
-}
-
-declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
-declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
-
-declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
-    payload?: T;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /**
-     * Expiration time in days
-     * @default 30
-     */
-    expires?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<string>;
-
-declare function verifyJWT(options: {
-    token: string;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /** @default 60 */
-    leeway?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<void>;
-
-export { type JWTRegisteredClaims, _decodeJWT, decodeJWT, signJWT, verifyJWT };