Socket
Socket
Sign inDemoInstall

openid-client

Package Overview
Dependencies
Maintainers
1
Versions
181
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

openid-client - npm Package Compare versions

Comparing version 5.1.1 to 5.1.2

10

lib/client.js

@@ -40,2 +40,4 @@ const { inspect } = require('util');

const retryAttempt = Symbol();
const skipNonceCheck = Symbol();
const skipMaxAgeCheck = Symbol();

@@ -766,3 +768,3 @@ function pickCb(input) {

if (maxAge || (maxAge !== null && this.require_auth_time)) {
if (typeof maxAge === 'number' || (maxAge !== skipMaxAgeCheck && this.require_auth_time)) {
if (!payload.auth_time) {

@@ -782,3 +784,3 @@ throw new RPError({

if (maxAge && payload.auth_time + maxAge < timestamp - this[CLOCK_TOLERANCE]) {
if (typeof maxAge === 'number' && payload.auth_time + maxAge < timestamp - this[CLOCK_TOLERANCE]) {
throw new RPError({

@@ -798,3 +800,3 @@ printf: [

if (nonce !== null && (payload.nonce || nonce !== undefined) && payload.nonce !== nonce) {
if (nonce !== skipNonceCheck && (payload.nonce || nonce !== undefined) && payload.nonce !== nonce) {
throw new RPError({

@@ -1097,3 +1099,3 @@ printf: ['nonce mismatch, expected %s, got: %s', nonce, payload.nonce],

await this.decryptIdToken(tokenset);
await this.validateIdToken(tokenset, null, 'token', null);
await this.validateIdToken(tokenset, skipNonceCheck, 'token', skipMaxAgeCheck);

@@ -1100,0 +1102,0 @@ if (refreshToken instanceof TokenSet && refreshToken.id_token) {

2

package.json
{
"name": "openid-client",
"version": "5.1.1",
"version": "5.1.2",
"description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs",

@@ -5,0 +5,0 @@ "keywords": [

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc