jose - npm Package Compare versions

Comparing version 3.6.2 to 3.7.0

CHANGELOG.md

@@ -5,2 +5,15 @@ # Changelog
 
+## [3.7.0](https://github.com/panva/jose/compare/v3.6.2...v3.7.0) (2021-03-02)
+
+
+### Features
+
+* electron >=12.0.0 is now supported (and tested on ci) ([8fffd3e](https://github.com/panva/jose/commit/8fffd3e2e1ec0c5f3517a779b42974a4c1beae27))
+
+
+### Bug Fixes
+
+* **electron:** only call (de)cipher.setAAD() when aad is not empty ([a5a6c4d](https://github.com/panva/jose/commit/a5a6c4dc9f459b88de5f243cf1d4ea620def8d98))
+* **electron:** properly ASN.1 encode [0x00] when converting RSA JWKs ([433f020](https://github.com/panva/jose/commit/433f020246a9131f63705a3e1aa99492dac50947))
+
 ## [3.6.2](https://github.com/panva/jose/compare/v3.6.1...v3.6.2) (2021-02-16)
@@ -7,0 +20,0 @@

dist/node/cjs/runtime/decrypt.js

@@ -51,3 +51,5 @@ "use strict";
         cipher.setAuthTag(tag);
-        cipher.setAAD(aad);
+        if (aad.byteLength) {
+            cipher.setAAD(aad);
+        }
         return buffer_utils_js_1.concat(cipher.update(ciphertext), cipher.final());
@@ -54,0 +56,0 @@ }

dist/node/cjs/runtime/encrypt.js

@@ -27,3 +27,5 @@ "use strict";
     const cipher = crypto_1.createCipheriv(algorithm, cek, iv, { authTagLength: 16 });
-    cipher.setAAD(aad);
+    if (aad.byteLength) {
+        cipher.setAAD(aad);
+    }
     const ciphertext = buffer_utils_js_1.concat(cipher.update(plaintext), cipher.final());
@@ -30,0 +32,0 @@ const tag = cipher.getAuthTag();

dist/node/cjs/runtime/jwk_to_key.js

@@ -20,3 +20,3 @@ "use strict";
             if (isPrivate) {
-                enc.unsignedInteger(Buffer.from([0x00]));
+                enc.zero();
                 enc.unsignedInteger(modulus);
@@ -23,0 +23,0 @@ enc.unsignedInteger(exponent);

dist/node/esm/runtime/decrypt.js

@@ -49,3 +49,5 @@ import { getCiphers, KeyObject, createDecipheriv } from 'crypto';
         cipher.setAuthTag(tag);
-        cipher.setAAD(aad);
+        if (aad.byteLength) {
+            cipher.setAAD(aad);
+        }
         return concat(cipher.update(ciphertext), cipher.final());
@@ -52,0 +54,0 @@ }

dist/node/esm/runtime/encrypt.js

@@ -25,3 +25,5 @@ import { KeyObject, createCipheriv } from 'crypto';
     const cipher = createCipheriv(algorithm, cek, iv, { authTagLength: 16 });
-    cipher.setAAD(aad);
+    if (aad.byteLength) {
+        cipher.setAAD(aad);
+    }
     const ciphertext = concat(cipher.update(plaintext), cipher.final());
@@ -28,0 +30,0 @@ const tag = cipher.getAuthTag();

dist/node/esm/runtime/jwk_to_key.js

@@ -18,3 +18,3 @@ import { createPrivateKey, createPublicKey, createSecretKey } from 'crypto';
             if (isPrivate) {
-                enc.unsignedInteger(Buffer.from([0x00]));
+                enc.zero();
                 enc.unsignedInteger(modulus);
@@ -21,0 +21,0 @@ enc.unsignedInteger(exponent);

package.json

 {
   "name": "jose",
-  "version": "3.6.2",
+  "version": "3.7.0",
   "description": "Universal 'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK with no dependencies",
@@ -5,0 +5,0 @@ "keywords": [

README.md

@@ -117,3 +117,3 @@ # jose
 | Node.js | LTS ^12.19.0 || ^14.15.0 | |
-| Electron | `process.version` must match<br> the Node.js supported versions. So 12+</sup> | see <sup>[1]</sup> |
+| Electron | ^12.0.0 | see <sup>[1]</sup> |
 | Deno | ✕ | needs [Web Cryptography API integration](https://github.com/denoland/deno/issues/1891) first |
@@ -133,3 +133,3 @@ | React Native | ✕ | has no available and usable crypto runtime |
   - A128KW, A192KW, A256KW, and all composite algorithms utilizing those
-  - secp256k1 EC curves
+  - secp256k1 EC curve
   - Ed448, X25519, and X448 OKP Sub Types  
@@ -136,0 +136,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

478901

increased by0.13%

Lines of code

10932

increased by0.07%

No dependency changes