nestjs-jwt2 - npm Package Compare versions

Comparing version 1.0.2-beta to 1.0.3-beta

lib/services/jwt.service.d.ts

 export declare class JwtService {
     private readonly cert;
+    private readonly audiences;
+    private readonly issuers;
     constructor();
@@ -4,0 +6,0 @@ validateToken(token: string): Promise<boolean>;

lib/services/jwt.service.js

@@ -29,2 +29,10 @@ "use strict";
         }
+        if (!process.env.JWT_AUDIENCES) {
+            throw new Error('You must provide JWT_AUDIENCES environment variable');
+        }
+        if (!process.env.JWT_ISSUER) {
+            throw new Error('You must provide JWT_ISSUER environment variable');
+        }
+        this.audiences = process.env.JWT_AUDIENCES.split(' ');
+        this.issuers = process.env.JWT_ISSUER.split(' ');
         try {
@@ -39,3 +47,6 @@ this.cert = fs.readFileSync(certPath);
         return new Promise((resolve, reject) => {
-            jwt.verify(token, this.cert, err => {
+            jwt.verify(token, this.cert, {
+                audience: this.audiences,
+                issuer: this.issuers
+            }, err => {
                 if (err) {
@@ -42,0 +53,0 @@ reject();

package.json

 {
   "name": "nestjs-jwt2",
-  "version": "1.0.2-beta",
+  "version": "1.0.3-beta",
   "description": "Jwt utils for nestjs",
@@ -5,0 +5,0 @@ "author": "Julien Dufresne",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

15501

decreased by-31.86%

Number of package files

20

decreased by-33.33%

Lines of code

269

decreased by-37.59%

Number of low supply chain risk alerts

7

increased by40%

No dependency changes