@icapps/tree-house-authentication - npm Package Compare versions

Comparing version 3.1.6 to 4.0.0

build/config/jwt.config.d.ts

@@ -9,1 +9,5 @@ import { Algorithm } from 'jsonwebtoken';
 };
+export declare const DEFAULT_JWT_DECODE_OPTIONS: {
+    complete: boolean;
+    json: boolean;
+};

build/config/jwt.config.js

@@ -10,1 +10,5 @@ "use strict";
 };
+exports.DEFAULT_JWT_DECODE_OPTIONS = {
+    complete: false,
+    json: false,
+};

build/index.d.ts

 import * as saml from './lib/saml-authentication';
+export * from './lib/sso-authentication';
 export * from './lib/jwt-authentication';
@@ -3,0 +4,0 @@ export * from './lib/session-authentication';

build/index.js

@@ -8,2 +8,3 @@ "use strict";
 exports.saml = saml;
+__export(require("./lib/sso-authentication"));
 __export(require("./lib/jwt-authentication"));
@@ -10,0 +11,0 @@ __export(require("./lib/session-authentication"));

build/lib/jwt-authentication.d.ts

@@ -1,7 +0,11 @@
-import { SignOptions } from 'jsonwebtoken';
+/// <reference types="node" />
+import { SignOptions, DecodeOptions } from 'jsonwebtoken';
 export declare function createJwt(payload: Object, options?: CustomSignOptions): Promise<{}>;
 export declare function authenticateJwt(token: string, options?: CustomSignOptions): Promise<{}>;
-export declare function decodeJwt(token: string): null | object | string;
+export declare function decodeJwt(token: string, options?: DecodeOptions): null | {
+    [key: string]: any;
+} | string;
+export declare function verifyJwt(token: string, secretOrKey: string | Buffer, jwtSettings: SignOptions): Promise<{}>;
 export interface CustomSignOptions extends SignOptions {
     secretOrKey: string;
 }

build/lib/jwt-authentication.js

@@ -28,4 +28,4 @@ "use strict";
 exports.authenticateJwt = authenticateJwt;
-function decodeJwt(token) {
-    return jsonwebtoken_1.decode(token);
+function decodeJwt(token, options = jwt_config_1.DEFAULT_JWT_DECODE_OPTIONS) {
+    return jsonwebtoken_1.decode(token, options);
 }
@@ -51,1 +51,2 @@ exports.decodeJwt = decodeJwt;
 }
+exports.verifyJwt = verifyJwt;

package.json

 {
   "name": "@icapps/tree-house-authentication",
-  "version": "3.1.6",
+  "version": "4.0.0",
   "description": "Tree House Authentication module",
@@ -24,8 +24,10 @@ "main": "build/index.js",
   "dependencies": {
-    "bcrypt": "~3.0.7",
+    "bcrypt": "~3.0.8",
     "express-session": "~1.17.0",
     "jsonwebtoken": "~8.5.1",
+    "jwks-rsa": "~1.7.0",
     "ldapjs": "~1.0.2",
+    "openid-client": "~3.14.1",
     "qrcode": "~1.4.4",
-    "samlify": "~2.6.2",
+    "samlify": "~2.7.1",
     "speakeasy": "~2.0.0"
@@ -35,10 +37,10 @@ },
     "@types/bcrypt": "~3.0.0",
-    "@types/express-session": "~1.15.16",
-    "@types/jest": "~24.9.0",
-    "@types/jsonwebtoken": "~8.3.6",
-    "@types/ldapjs": "~1.0.4",
+    "@types/express-session": "~1.17.0",
+    "@types/jest": "~25.1.5",
+    "@types/jsonwebtoken": "~8.3.8",
+    "@types/ldapjs": "~1.0.6",
     "@types/qrcode": "~1.3.4",
     "@types/speakeasy": "~2.0.5",
-    "coveralls": "~3.0.9",
-    "jest": "~24.9.0",
+    "coveralls": "~3.0.11",
+    "jest": "~25.2.7",
     "node-mocks-http": "~1.8.1",
@@ -48,9 +50,9 @@ "np": "~5.2.1",
     "supertest": "~4.0.2",
-    "ts-jest": "~24.3.0",
+    "ts-jest": "~25.3.0",
     "tslint-config-airbnb": "~5.11.2",
-    "tslint": "~5.20.1",
-    "typescript": "~3.7.5"
+    "tslint": "~6.1.1",
+    "typescript": "~3.8.3"
   },
   "engines": {
-    "node": ">=8.0.0"
+    "node": ">=10.13.0"
   },
@@ -57,0 +59,0 @@ "directories": {

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

25679

increased by12.78%

Number of package files

26

increased by8.33%

Lines of code

364

increased by21.33%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

9

increased by28.57%

Dependency changes

• + Addedjwks-rsa@~1.7.0

• + Addedopenid-client@~3.14.1

• + Added@authenio/xml-encryption@1.3.0(transitive)

• + Added@panva/asn1.js@1.0.0(transitive)

• + Added@sindresorhus/is@0.14.0(transitive)

• + Added@szmarczak/http-timer@1.1.2(transitive)

• + Added@types/body-parser@1.19.5(transitive)

• + Added@types/connect@3.4.38(transitive)

• + Added@types/express@5.0.0(transitive)

• + Added@types/express-jwt@0.0.42(transitive)

• + Added@types/express-serve-static-core@5.0.6(transitive)

• + Added@types/express-unless@2.0.3(transitive)

• + Added@types/got@9.6.12(transitive)

• + Added@types/http-errors@2.0.4(transitive)

• + Added@types/mime@1.3.5(transitive)

• + Added@types/node@22.13.9(transitive)

• + Added@types/qs@6.9.18(transitive)

• + Added@types/range-parser@1.2.7(transitive)

• + Added@types/send@0.17.4(transitive)

• + Added@types/serve-static@1.15.7(transitive)

• + Added@types/tough-cookie@4.0.5(transitive)

• + Added@types/xmldom@0.1.34(transitive)

• + Addedaggregate-error@3.1.0(transitive)

• + Addedajv@6.12.6(transitive)

• + Addedasynckit@0.4.0(transitive)

• + Addedaws-sign2@0.7.0(transitive)

• + Addedaws4@1.13.2(transitive)

• + Addedbase64url@3.0.1(transitive)

• + Addedbcrypt-pbkdf@1.0.2(transitive)

• + Addedcacheable-request@6.1.0(transitive)

• + Addedcall-bind-apply-helpers@1.0.2(transitive)

• + Addedcaseless@0.12.0(transitive)

• + Addedclean-stack@2.2.0(transitive)

• + Addedclone-response@1.0.3(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addeddebug@4.4.0(transitive)

• + Addeddecompress-response@3.3.0(transitive)

• + Addeddefer-to-connect@1.1.3(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addeddunder-proto@1.0.1(transitive)

• + Addedduplexer3@0.1.5(transitive)

• + Addedecc-jsbn@0.1.2(transitive)

• + Addedend-of-stream@1.4.4(transitive)

• + Addedes-object-atoms@1.1.1(transitive)

• + Addedes-set-tostringtag@2.1.0(transitive)

• + Addedescape-html@1.0.3(transitive)

• + Addedexpress-unless@2.1.3(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedextsprintf@1.3.0(transitive)

• + Addedfast-deep-equal@3.1.3(transitive)

• + Addedfast-json-stable-stringify@2.1.0(transitive)

• + Addedforever-agent@0.6.1(transitive)

• + Addedform-data@2.3.32.5.3(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedget-intrinsic@1.3.0(transitive)

• + Addedget-proto@1.0.1(transitive)

• + Addedget-stream@4.1.05.2.0(transitive)

• + Addedgetpass@0.1.7(transitive)

• + Addedgot@9.6.0(transitive)

• + Addedhar-schema@2.0.0(transitive)

• + Addedhar-validator@5.1.5(transitive)

• + Addedhas-symbols@1.1.0(transitive)

• + Addedhas-tostringtag@1.0.2(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addedhttp-cache-semantics@4.1.1(transitive)

• + Addedhttp-signature@1.2.0(transitive)

• + Addedindent-string@4.0.0(transitive)

• + Addedis-typedarray@1.0.0(transitive)

• + Addedisstream@0.1.2(transitive)

• + Addedjose@1.28.2(transitive)

• + Addedjsbn@0.1.1(transitive)

• + Addedjson-buffer@3.0.0(transitive)

• + Addedjson-schema@0.4.0(transitive)

• + Addedjson-schema-traverse@0.4.1(transitive)

• + Addedjsprim@1.4.2(transitive)

• + Addedjwks-rsa@1.7.0(transitive)

• + Addedkeyv@3.1.0(transitive)

• + Addedlimiter@1.1.5(transitive)

• + Addedlodash.clonedeep@4.5.0(transitive)

• + Addedlowercase-keys@1.0.12.0.0(transitive)

• + Addedlru-cache@5.1.16.0.0(transitive)

• + Addedlru-memoizer@2.3.0(transitive)

• + Addedmake-error@1.3.6(transitive)

• + Addedmath-intrinsics@1.1.0(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addedmimic-response@1.0.1(transitive)

• + Addednode-forge@0.10.0(transitive)

• + Addednormalize-url@4.5.1(transitive)

• + Addedoauth-sign@0.9.0(transitive)

• + Addedobject-hash@2.2.0(transitive)

• + Addedoidc-token-hash@5.1.0(transitive)

• + Addedopenid-client@3.14.2(transitive)

• + Addedp-any@3.0.0(transitive)

• + Addedp-cancelable@1.1.02.1.1(transitive)

• + Addedp-some@5.0.0(transitive)

• + Addedpako@1.0.11(transitive)

• + Addedperformance-now@2.1.0(transitive)

• + Addedprepend-http@2.0.0(transitive)

• + Addedpsl@1.15.0(transitive)

• + Addedpump@3.0.2(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedqs@6.5.3(transitive)

• + Addedrequest@2.88.2(transitive)

• + Addedresponselike@1.0.2(transitive)

• + Addedsamlify@2.7.7(transitive)

• + Addedsshpk@1.18.0(transitive)

• + Addedto-readable-stream@1.0.0(transitive)

• + Addedtough-cookie@2.5.0(transitive)

• + Addedtunnel-agent@0.6.0(transitive)

• + Addedtweetnacl@0.14.5(transitive)

• + Addedundici-types@6.20.0(transitive)

• + Addeduri-js@4.4.1(transitive)

• + Addedurl-parse-lax@3.0.0(transitive)

• + Addedverror@1.10.0(transitive)

• + Addedxml-crypto@2.1.5(transitive)

• + Addedxmldom@0.6.0(transitive)

• + Addedyallist@4.0.0(transitive)

• - Removed@authenio/xml-encryption@0.11.3(transitive)

• - Removed@sentry-internal/tracing@7.120.3(transitive)

• - Removed@sentry/core@7.120.3(transitive)

• - Removed@sentry/integrations@7.120.3(transitive)

• - Removed@sentry/node@7.120.3(transitive)

• - Removed@sentry/types@7.120.3(transitive)

• - Removed@sentry/utils@7.120.3(transitive)

• - Removedasync@2.6.4(transitive)

• - Removedboolean@3.2.0(transitive)

• - Removeddefine-data-property@1.1.4(transitive)

• - Removeddefine-properties@1.2.1(transitive)

• - Removeddeflate-js@0.2.3(transitive)

• - Removeddetect-node@2.1.0(transitive)

• - Removedejs@2.7.4(transitive)

• - Removedes6-error@4.1.1(transitive)

• - Removedescape-string-regexp@4.0.0(transitive)

• - Removedglobal-agent@3.0.0(transitive)

• - Removedglobalthis@1.0.4(transitive)

• - Removedhas-property-descriptors@1.0.2(transitive)

• - Removedimmediate@3.0.6(transitive)

• - Removedlie@3.1.1(transitive)

• - Removedlocalforage@1.10.0(transitive)

• - Removedmatcher@3.0.0(transitive)

• - Removednode-forge@0.7.60.8.5(transitive)

• - Removedobject-keys@1.1.1(transitive)

• - Removedroarr@2.15.4(transitive)

• - Removedsamlify@2.6.3(transitive)

• - Removedsemver@7.7.1(transitive)

• - Removedsemver-compare@1.0.0(transitive)

• - Removedserialize-error@7.0.1(transitive)

• - Removedsnyk@1.1295.4(transitive)

• - Removedsprintf-js@1.1.3(transitive)

• - Removedtype-fest@0.13.1(transitive)

• - Removedxml-crypto@1.5.6(transitive)

• - Removedxmldom@0.1.31(transitive)

• Updatedbcrypt@~3.0.8

• Updatedsamlify@~2.7.1