Socket
Socket
Sign inDemoInstall

node-jose

Package Overview
Dependencies
Maintainers
2
Versions
30
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

node-jose - npm Package Compare versions

Comparing version 1.1.3 to 1.1.4

14

CHANGELOG.md
# Release Notes
## [1.1.4](https://github.com/cisco/node-jose/compare/1.1.3...1.1.4) (2020-03-26)
### Bug Fixes
* fixed issues when used in `react-native` ([8126622](https://github.com/cisco/node-jose/commit/81266229bd966e37433433c0d84d79c2b9d37ee3))
* fixed incorrect usage of `node-forge` buffers ([7e46c1f](https://github.com/cisco/node-jose/commit/7e46c1fa090e7bd09bad420f3c3537429da5cdaa)) ([4014f5c](https://github.com/cisco/node-jose/commit/4014f5c2ceb7bae8b516749f6a329132a115bc24))
* updated dependencies.
### Style
* avoid using var shorthands for UglifyJS's sake ([44edb0a](https://github.com/cisco/node-jose/commit/44edb0a1c53fa5ee80ca34317f47498da3204ee6))
<a name="1.1.3"></a>

@@ -4,0 +18,0 @@ ## [1.1.3](https://github.com/cisco/node-jose/compare/1.1.2...1.1.3) (2019-03-18)

4

lib/algorithms/aes-cbc-hmac-sha2.js

@@ -44,3 +44,3 @@ /*!

var cdata = cipher.output.native();
var cdata = Buffer.from(cipher.output.bytes(), "binary");
return cdata;

@@ -134,3 +134,3 @@ });

var pdata = cipher.output.native();
var pdata = Buffer.from(cipher.output.bytes(), "binary");
return pdata;

@@ -137,0 +137,0 @@ });

@@ -81,3 +81,3 @@ /*!

cipher.finish();
B = cipher.output.native();
B = Buffer.from(cipher.output.bytes(), "binary");

@@ -198,3 +198,3 @@ A = xor(B.slice(0, 8),

cipher.finish();
B = cipher.output.native();
B = Buffer.from(cipher.output.bytes(), "binary");

@@ -201,0 +201,0 @@ A = B.slice(0, 8);

@@ -230,3 +230,3 @@ /*!

data: pdata,
mac,
mac: mac,
valid: true

@@ -233,0 +233,0 @@ };

@@ -34,4 +34,4 @@ /*!

sig.start(md, key.toString("binary"));
sig.update(pdata);
sig = sig.digest().native();
sig.update(pdata.toString("binary"));
sig = Buffer.from(sig.digest().bytes(), "binary");

@@ -116,4 +116,4 @@ return {

vrfy.start(md, new DataBuffer(key));
vrfy.update(pdata);
vrfy = vrfy.digest().native();
vrfy.update(pdata.toString("binary"));
vrfy = Buffer.from(vrfy.digest().bytes(), "binary");

@@ -120,0 +120,0 @@ if (compare(props.length, mac, vrfy)) {

@@ -94,3 +94,3 @@ /*!

var cdata = helpers.nodeCrypto.publicEncrypt({
key,
key: key,
padding: helpers.nodeCrypto.constants[nodeSupport[name]]

@@ -172,3 +172,3 @@ }, pdata);

return helpers.nodeCrypto.privateDecrypt({
key,
key: key,
padding: helpers.nodeCrypto.constants[nodeSupport[name]]

@@ -175,0 +175,0 @@ }, pdata);

@@ -21,4 +21,4 @@ /*!

var digest = forge.md[md].create();
digest.update(pdata);
digest = digest.digest().native();
digest.update(pdata.toString("binary"));
digest = Buffer.from(digest.digest().bytes(), "binary");

@@ -25,0 +25,0 @@ return Promise.resolve(digest);

@@ -12,2 +12,14 @@ /*!

if (typeof Buffer === "undefined") {
(global || window).Buffer = require("buffer").Buffer;
}
if (typeof process === "undefined") {
(global || window).process = require("process");
}
if (!process.version) {
process.version = "";
}
var JWS = require("./jws");

@@ -14,0 +26,0 @@

@@ -474,2 +474,2 @@ /*!

module.exports = forge.util.ByteBuffer = DataBuffer;
module.exports = DataBuffer;
{
"name": "node-jose",
"version": "1.1.3",
"version": "1.1.4",
"description": "A JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers",

@@ -30,11 +30,20 @@ "keywords": [

"browser": {
"crypto": false
"crypto": false,
"zlib": "browserify-zlib"
},
"react-native": {
"crypto": false,
"zlib": "react-zlib-js"
},
"dependencies": {
"base64url": "^3.0.1",
"es6-promise": "^4.2.6",
"lodash": "^4.17.11",
"browserify-zlib": "^0.2.0",
"buffer": "^5.5.0",
"es6-promise": "^4.2.8",
"lodash": "^4.17.15",
"long": "^4.0.0",
"node-forge": "^0.8.1",
"uuid": "^3.3.2"
"node-forge": "^0.8.5",
"process": "^0.11.10",
"react-zlib-js": "^1.0.4",
"uuid": "^3.3.3"
},

@@ -45,6 +54,5 @@ "devDependencies": {

"chai": "^4.0.1",
"conventional-changelog": "^1.1.0",
"del": "^3.0.0",
"eslint-plugin-mocha-no-only": "0.0.6",
"gulp": "^3.8.10",
"gulp": "^4.0.2",
"gulp-eslint": "^4.0.1",

@@ -54,3 +62,3 @@ "gulp-istanbul": "^1.1.1",

"gulp-rename": "^1.2.0",
"gulp-uglify": "^3.0.0",
"gulp-uglify": "^3.0.2",
"gulp-util": "^3.0.7",

@@ -64,3 +72,3 @@ "is-safari": "^1.0.0",

"karma-coverage": "^1.1.1",
"karma-firefox-launcher": "^1.0.1",
"karma-firefox-launcher": "^1.2.0",
"karma-ie-launcher": "^1.0.0",

@@ -75,4 +83,4 @@ "karma-mocha": "^1.3.0",

"run-sequence": "^2.0.0",
"watchify": "^3.7.0",
"webpack": "^4.8.3",
"watchify": "^3.11.1",
"webpack": "^4.39.3",
"webpack-stream": "^4.0.0",

@@ -79,0 +87,0 @@ "yargs": "^11.1.0"

@@ -500,3 +500,2 @@ # node-jose #

* `Boolean`: accepts (if `true`) -- or rejects (if `false`) -- the JWS if the member is present.
* `Function`: takes the JWE decrypt output (just prior to decrypting) and returns a Promise for the processing of the member.

@@ -509,17 +508,2 @@ * `Object`: An object with the following `Function` members:

To simply accept a `crit` header member:
```javascript
var opts = {
handlers: {
"exp": true
}
};
jose.JWS.createVerify(key, opts).
verify(input).
then(function(result) {
// ...
});
```
To perform additional (pre-verify) processing on a `crit` header member:

@@ -720,3 +704,2 @@

* `Boolean`: accepts (if `true`) -- or rejects (if `false`) -- the JWE if the member is present.
* `Function`: takes the JWE decrypt output (just prior to decrypting) and returns a Promise for the processing of the member.

@@ -729,17 +712,2 @@ * `Object`: An object with the following `Function` members:

To simply accept a `crit` header member:
```javascript
var opts = {
handlers: {
"exp": true
}
};
jose.JWE.createDecrypt(key, opts).
decrypt(input).
then(function(result) {
// ...
});
```
To perform additional (pre-decrypt) processing on a `crit` header member:

@@ -746,0 +714,0 @@

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc