jose-browser-runtime - npm Package Compare versions

Comparing version 3.11.3 to 3.11.4

dist/browser/runtime/decrypt.js

@@ -14,8 +14,2 @@ import { concat, uint64be } from '../lib/buffer_utils.js';
     }, false, ['sign']);
-    let plaintext;
-    try {
-        plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv, name: 'AES-CBC' }, encKey, ciphertext));
-    }
-    catch (_a) {
-    }
     const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3));
@@ -27,5 +21,14 @@ const expectedTag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3));
     }
+    catch (_a) {
+    }
+    if (!macCheckPassed) {
+        throw new JWEDecryptionFailed();
+    }
+    let plaintext;
+    try {
+        plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv, name: 'AES-CBC' }, encKey, ciphertext));
+    }
     catch (_b) {
     }
-    if (!plaintext || !macCheckPassed) {
+    if (!plaintext) {
         throw new JWEDecryptionFailed();
@@ -32,0 +35,0 @@ }

package.json

 {
   "name": "jose-browser-runtime",
-  "version": "3.11.3",
+  "version": "3.11.4",
   "description": "(Browser Runtime) 'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK with no dependencies",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

123752

increased by0.04%

Lines of code

3107

increased by0.1%

No dependency changes