Socket
Socket
Sign inDemoInstall

openid-client

Package Overview
Dependencies
Maintainers
1
Versions
181
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

openid-client - npm Package Compare versions

Comparing version 5.1.4 to 5.1.5

11

lib/client.js

@@ -782,3 +782,6 @@ const { inspect } = require('util');

if (typeof maxAge === 'number' && payload.auth_time + maxAge < timestamp - this[CLOCK_TOLERANCE]) {
if (
typeof maxAge === 'number' &&
payload.auth_time + maxAge < timestamp - this[CLOCK_TOLERANCE]
) {
throw new RPError({

@@ -798,3 +801,7 @@ printf: [

if (nonce !== skipNonceCheck && (payload.nonce || nonce !== undefined) && payload.nonce !== nonce) {
if (
nonce !== skipNonceCheck &&
(payload.nonce || nonce !== undefined) &&
payload.nonce !== nonce
) {
throw new RPError({

@@ -801,0 +808,0 @@ printf: ['nonce mismatch, expected %s, got: %s', nonce, payload.nonce],

13

lib/helpers/client.js

@@ -93,15 +93,4 @@ const jose = require('jose');

const timestamp = now();
const mTLS = endpoint === 'token' && this.tls_client_certificate_bound_access_tokens;
const audience = [
...new Set(
[
this.issuer.issuer,
this.issuer.token_endpoint,
this.issuer[`${endpoint}_endpoint`],
mTLS && this.issuer.mtls_endpoint_aliases
? this.issuer.mtls_endpoint_aliases.token_endpoint
: undefined,
].filter(Boolean),
),
...new Set([this.issuer.issuer, this.issuer.token_endpoint].filter(Boolean)),
];

@@ -108,0 +97,0 @@

{
"name": "openid-client",
"version": "5.1.4",
"version": "5.1.5",
"description": "OpenID Connect Relying Party (RP, Client) implementation for Node.js runtime, supports passportjs",

@@ -5,0 +5,0 @@ "keywords": [

@@ -11,2 +11,3 @@ /// <reference types="node" />

import * as crypto from 'crypto';
import { format } from 'util';

@@ -576,2 +577,14 @@ export type HttpOptions = Partial<

response?: { body?: UnknownObject | Buffer } & http.IncomingMessage;
constructor(
params: {
error: string;
error_description?: string;
error_uri?: string;
state?: string;
scope?: string;
session_state?: string;
},
response?: { body?: UnknownObject | Buffer } & http.IncomingMessage,
);
}

@@ -591,2 +604,10 @@

auth_time?: number;
constructor(...args: Parameters<typeof format>);
constructor(options: {
message?: string;
printf?: Parameters<typeof format>;
response?: { body?: UnknownObject | Buffer } & http.IncomingMessage;
[key: string]: unknown;
});
}

@@ -593,0 +614,0 @@ }

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc