hawk - npm Package Compare versions

Comparing version 9.0.1 to 9.0.2

lib/server.js

@@ -380,3 +380,3 @@ 'use strict';
         id: bewitParts[0],
-        exp: parseInt(bewitParts[1], 10),
+        exp: bewitParts[1],
         mac: bewitParts[2],
@@ -400,8 +400,2 @@ ext: bewitParts[3] || ''
 
-    // Check expiration
-
-    if (bewit.exp * 1000 <= now) {
-        throw Object.assign(Utils.unauthorized('Access expired'), { bewit });
-    }
-
     // Fetch Hawk credentials
@@ -448,2 +442,8 @@
 
+    // Check expiration
+
+    if (parseInt(bewit.exp, 10) * 1000 <= now) {
+        throw Object.assign(Utils.unauthorized('Access expired'), { bewit });
+    }
+
     // Successful authentication
@@ -450,0 +450,0 @@

package.json

 {
   "name": "hawk",
   "description": "HTTP Hawk Authentication Scheme",
-  "version": "9.0.1",
+  "version": "9.0.2",
   "repository": "git://github.com/mozilla/hawk",
@@ -6,0 +6,0 @@ "main": "lib/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes