ask-sdk-express-adapter - npm Package Compare versions

Comparing version 2.12.0 to 2.12.1

CHANGELOG.md

@@ -6,2 +6,13 @@ # Change Log
 
+## [2.12.1](https://github.com/alexa/alexa-skills-kit-sdk-for-nodejs/compare/v2.12.0...v2.12.1) (2022-04-01)
+
+
+### Bug Fixes
+
+* fix a incorrect type declaration ([860b2ad](https://github.com/alexa/alexa-skills-kit-sdk-for-nodejs/commit/860b2ada5c3da0dcda4ebc9d624066be58b655d7))
+
+
+
+
+
 # [2.12.0](https://github.com/alexa/alexa-skills-kit-sdk-for-nodejs/compare/v2.11.0...v2.12.0) (2022-01-28)
@@ -8,0 +19,0 @@

dist/verifier/index.js

@@ -32,3 +32,3 @@ "use strict";
 const SIGNATURE_CERT_CHAIN_URL_HEADER = 'SignatureCertChainUrl';
-const SIGNATURE_HEADER = 'Signature';
+const SIGNATURE_HEADER = 'Signature-256';
 const SIGNATURE_FORMAT = 'base64';
@@ -248,3 +248,3 @@ const CERT_CHAIN_URL_PORT = 443;
     _validateRequestBody(pemCert, signature, requestEnvelope) {
-        const verifier = crypto.createVerify('RSA-SHA1');
+        const verifier = crypto.createVerify('RSA-SHA256');
         verifier.update(requestEnvelope, CHARACTER_ENCODING);
@@ -251,0 +251,0 @@ if (!verifier.verify(pemCert, signature, SIGNATURE_FORMAT)) {

package.json

 {
   "name": "ask-sdk-express-adapter",
-  "version": "2.12.0",
+  "version": "2.12.1",
   "description": "Express adapter package for Alexa Skills Kit SDK",
@@ -32,3 +32,3 @@ "main": "dist/index.js",
     "body-parser": "^1.18.2",
-    "node-forge": "^0.10.0",
+    "node-forge": "^1.3.0",
     "semver": "^7.3.4"
@@ -50,3 +50,3 @@ },
     "@typescript-eslint/parser": "^3.9.0",
-    "ask-sdk-core": "^2.12.0",
+    "ask-sdk-core": "^2.12.1",
     "ask-sdk-model": "^1.29.0",
@@ -69,3 +69,3 @@ "chai": "^4.1.2",
   "homepage": "https://github.com/alexa/alexa-skill-sdk-for-nodejs#readme",
-  "gitHead": "9e5e717cd6c45dcc220e0a6ffdafa41123c3d2c8"
+  "gitHead": "3849332e395b11ddeb1fb68a98aed1d2df026a04"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

61626

increased by0.47%

Dependency changes

• + Addednode-forge@1.3.1(transitive)

• - Removednode-forge@0.10.0(transitive)

• Updatednode-forge@^1.3.0