jws - npm Package Compare versions

Comparing version 3.1.4 to 3.1.5

lib/sign-stream.js

 /*global module*/
-var base64url = require('base64url');
+var Buffer = require('safe-buffer').Buffer;
 var DataStream = require('./data-stream');
@@ -9,2 +9,11 @@ var jwa = require('jwa');
 
+function base64url(string, encoding) {
+  return Buffer
+    .from(string, encoding)
+    .toString('base64')
+    .replace(/=/g, '')
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_');
+}
+
 function jwsSecuredInput(header, payload, encoding) {
@@ -11,0 +20,0 @@ encoding = encoding || 'utf8';

lib/verify-stream.js

 /*global module*/
-var base64url = require('base64url');
+var Buffer = require('safe-buffer').Buffer;
 var DataStream = require('./data-stream');
@@ -23,3 +23,3 @@ var jwa = require('jwa');
   var encodedHeader = jwsSig.split('.', 1)[0];
-  return safeJsonParse(base64url.decode(encodedHeader, 'binary'));
+  return safeJsonParse(Buffer.from(encodedHeader, 'base64').toString('binary'));
 }
@@ -38,3 +38,3 @@
   var payload = jwsSig.split('.')[1];
-  return base64url.decode(payload, encoding);
+  return Buffer.from(payload, 'base64').toString(encoding);
 }
@@ -41,0 +41,0 @@

package.json

 {
   "name": "jws",
-  "version": "3.1.4",
+  "version": "3.1.5",
   "description": "Implementation of JSON Web Signatures",
@@ -27,4 +27,3 @@ "main": "index.js",
   "dependencies": {
-    "base64url": "^2.0.0",
-    "jwa": "^1.1.4",
+    "jwa": "^1.1.5",
     "safe-buffer": "^5.0.1"
@@ -31,0 +30,0 @@ },

readme.md

@@ -119,5 +119,5 @@ # node-jws [![Build Status](https://secure.travis-ci.org/brianloveswords/node-jws.png)](http://travis-ci.org/brianloveswords/node-jws)
 // is equivilant to this:
-const signer = jws.createSign(
+const signer = jws.createSign({
   header: { alg: 'RS256' },
-);
+});
 privateKeyStream.pipe(signer.privateKey);
@@ -124,0 +124,0 @@ payloadStream.pipe(signer.payload);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17500

increased by0.93%

Dependency count

2

decreased by-33.33%

Lines of code

247

increased by3.35%

Worsened metrics

Number of package files

9

decreased by-10%

Dependency changes

• - Removedbase64url@^2.0.0

• - Removedbase64url@2.0.0(transitive)

• Updatedjwa@^1.1.5