@propelauth/node - npm Package Compare versions

Comparing version 2.1.9 to 2.1.10

dist/api/tokenVerificationMetadata.d.ts

@@ -0,1 +1,2 @@
+import * as jose from "jose";
 export declare type TokenVerificationMetadata = {
@@ -5,2 +6,7 @@ verifierKey: string;
 };
+export interface TokenVerificationMetadataWithPublicKey {
+    tokenVerificationMetadata: TokenVerificationMetadata;
+    publicKey: jose.KeyLike;
+}
 export declare function fetchTokenVerificationMetadata(authUrl: URL, integrationApiKey: string, manualTokenVerificationMetadata?: TokenVerificationMetadata): Promise<TokenVerificationMetadata>;
+export declare const getTokenVerificationMetadataPromise: (tokenVerificationMetadataPromise: Promise<TokenVerificationMetadata | void>) => Promise<TokenVerificationMetadataWithPublicKey>;

dist/index.d.ts

@@ -8,2 +8,3 @@ export { AccessToken, CreateAccessTokenRequest } from "./api/accessToken";
 export { AccessTokenCreationException, AddUserToOrgException, ApiKeyCreateException, ApiKeyDeleteException, ApiKeyFetchException, ApiKeyUpdateException, ApiKeyValidateException, BadRequestException, CreateOrgException, CreateUserException, ForbiddenException, MagicLinkCreationException, MigrateUserException, UnauthorizedException, UnexpectedException, UpdateUserEmailException, UpdateUserMetadataException, UserNotFoundException, } from "./exceptions";
-export { CreatedOrg, CreatedUser, InternalOrgMemberInfo, InternalUser, Org, OrgIdToOrgMemberInfo, OrgMemberInfo, toOrgIdToOrgMemberInfo, toUser, User, UserAndOrgMemberInfo, UserMetadata, } from "./user";
+export { LoginMethod, SamlLoginProvider, SocialLoginProvider } from "./loginMethod";
+export { CreatedOrg, CreatedUser, InternalOrgMemberInfo, InternalUser, Org, OrgIdToOrgMemberInfo, OrgMemberInfo, toOrgIdToOrgMemberInfo, toUser, User, UserAndOrgMemberInfo, UserClass, UserMetadata, } from "./user";

dist/user.d.ts

@@ -0,1 +1,5 @@
+import { InternalLoginMethod, LoginMethod } from "./loginMethod";
+export declare type UserProperties = {
+    [key: string]: unknown;
+};
 export declare type User = {
@@ -13,6 +17,30 @@ userId: string;
     };
-    properties?: {
-        [key: string]: unknown;
+    properties?: UserProperties;
+    loginMethod: LoginMethod;
+};
+export declare class UserClass {
+    userId: string;
+    orgIdToUserOrgInfo?: {
+        [orgId: string]: OrgMemberInfo;
     };
-};
+    email: string;
+    firstName?: string;
+    lastName?: string;
+    username?: string;
+    properties?: UserProperties;
+    loginMethod: LoginMethod;
+    legacyUserId?: string;
+    impersonatorUserId?: string;
+    constructor(user: User);
+    getOrg(orgId: string): OrgMemberInfo | undefined;
+    getOrgByName(orgName: string): OrgMemberInfo | undefined;
+    getUserProperty(key: string): unknown | undefined;
+    getOrgs(): OrgMemberInfo[];
+    isImpersonating(): boolean;
+    isRole(orgId: string, role: string): boolean;
+    isAtLeastRole(orgId: string, role: string): boolean;
+    hasPermission(orgId: string, permission: string): boolean;
+    hasAllPermissions(orgId: string, permissions: string[]): boolean;
+    static fromUser(user: User): UserClass;
+}
 export declare type Org = {
@@ -63,3 +91,3 @@ orgId: string;
     readonly orgMetadata: {
-        [key: string]: any;
+        [key: string]: unknown;
     };
@@ -73,2 +101,5 @@ readonly urlSafeOrgName: string;
     }, urlSafeOrgName: string, userAssignedRole: string, userInheritedRolesPlusCurrentRole: string[], userPermissions: string[]);
+    get assignedRole(): string;
+    get permissions(): string[];
+    get inheritedRolesPlusCurrentRole(): string[];
     isRole(role: string): boolean;
@@ -78,5 +109,3 @@ isAtLeastRole(role: string): boolean;
     hasAllPermissions(permissions: string[]): boolean;
-    get assignedRole(): string;
-    get permissions(): string[];
-    get inheritedRolesPlusCurrentRole(): string[];
+    static fromJSON(json: string): OrgMemberInfo;
 }
@@ -110,4 +139,2 @@ export declare type UserAndOrgMemberInfo = {
     username?: string;
-    legacy_user_id?: string;
-    impersonator_user_id?: string;
     metadata?: {
@@ -119,2 +146,5 @@ [key: string]: any;
     };
+    login_method?: InternalLoginMethod;
+    legacy_user_id?: string;
+    impersonator_user_id?: string;
 };
@@ -121,0 +151,0 @@ export declare function toUser(snake_case: InternalUser): User;

package.json

@@ -7,3 +7,3 @@ {
     },
-    "version": "2.1.9",
+    "version": "2.1.10",
     "license": "MIT",
@@ -16,3 +16,3 @@ "keywords": [
     "dependencies": {
-        "jsonwebtoken": "^9.0.0"
+        "jose": "^5.2.0"
     },
@@ -25,3 +25,2 @@ "devDependencies": {
         "@types/jest": "^27.0.1",
-        "@types/jsonwebtoken": "^8.5.1",
         "@types/uuid": "^8.3.1",
@@ -28,0 +27,0 @@ "jest": "^27.0.6",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Dev dependency count

16

decreased by-5.88%

Number of package files

22

increased by4.76%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

3

decreased by-50%

Worsened metrics

Total package byte prevSize

731034

decreased by-82.18%

Lines of code

5942

decreased by-86.5%

Dependency changes

• + Addedjose@^5.2.0

• + Addedjose@5.9.3(transitive)

• - Removedjsonwebtoken@^9.0.0

• - Removedbuffer-equal-constant-time@1.0.1(transitive)

• - Removedecdsa-sig-formatter@1.0.11(transitive)

• - Removedjsonwebtoken@9.0.2(transitive)

• - Removedjwa@1.4.1(transitive)

• - Removedjws@3.2.2(transitive)

• - Removedlodash.includes@4.3.0(transitive)

• - Removedlodash.isboolean@3.0.3(transitive)

• - Removedlodash.isinteger@4.0.4(transitive)

• - Removedlodash.isnumber@3.0.3(transitive)

• - Removedlodash.isplainobject@4.0.6(transitive)

• - Removedlodash.isstring@4.0.1(transitive)

• - Removedlodash.once@4.1.1(transitive)

• - Removedms@2.1.3(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedsemver@7.6.3(transitive)