Socket
Socket
Sign inDemoInstall

jose

Package Overview
Dependencies
Maintainers
1
Versions
210
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

jose - npm Package Compare versions

Comparing version 1.17.0 to 1.17.1

9

CHANGELOG.md

@@ -5,2 +5,11 @@ # Change Log

## [1.17.1](https://github.com/panva/jose/compare/v1.17.0...v1.17.1) (2019-12-10)
### Bug Fixes
* properly fail to import unsupported openssh keys ([bee5744](https://github.com/panva/jose/commit/bee574457f29597ccab09d51ac61b85dd7a7146a))
# [1.17.0](https://github.com/panva/jose/compare/v1.16.2...v1.17.0) (2019-12-10)

@@ -7,0 +16,0 @@

4

lib/jwk/import.js

@@ -29,2 +29,4 @@ const { deprecate } = require('util')

const openSSHpublicKey = /^[a-zA-Z0-9-]+ (?:[a-zA-Z0-9+/])*(?:==|=)?(?: .*)?$/
const asKey = (key, parameters, { calculateMissingRSAPrimes = false } = {}) => {

@@ -102,3 +104,3 @@ let privateKey, publicKey, secret

// have them imported as symmetric "oct" keys
if (!key.includes('-----BEGIN')) {
if (!key.includes('-----BEGIN') && !openSSHpublicKey.test(key.toString('ascii').replace(/[\r\n]/g, ''))) {
secret = createSecretKey(Buffer.isBuffer(key) ? key : Buffer.from(key))

@@ -105,0 +107,0 @@ }

@@ -60,2 +60,5 @@ const { strict: assert } = require('assert')

x5c = [...x5c]
Object.freeze(x5c)
x5c.forEach((cert, i) => {

@@ -62,0 +65,0 @@ let publicKey

{
"name": "jose",
"version": "1.17.0",
"version": "1.17.1",
"description": "JSON Web Almost Everything - JWA, JWS, JWE, JWK, JWT, JWKS for Node.js with minimal dependencies",

@@ -5,0 +5,0 @@ "keywords": [

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc