paseto - npm Package Compare versions

Comparing version 2.1.1 to 2.1.2

lib/help/crypto_worker.js

@@ -124,8 +124,6 @@ const { parentPort, Worker, isMainThread } = require('worker_threads')
       const t2 = methods.hmac('sha384', preAuth, ak)
+      if (!timingSafeEqual(t, t2)) return false
       const payload = methods.decrypt('aes-256-ctr', c, ek, n.slice(16))
+      if (!payload) return false
 
-      if (!timingSafeEqual(t, t2) || !payload) {
-        return false
-      }
-
       return payload
@@ -132,0 +130,0 @@ },

lib/v1/verify.js

@@ -33,3 +33,3 @@ const {
     if (complete) {
-      return { payload: m, footer, version: 'v2', purpose: 'public' }
+      return { payload: m, footer, version: 'v1', purpose: 'public' }
     }
@@ -36,0 +36,0 @@

package.json

 {
   "name": "paseto",
-  "version": "2.1.1",
+  "version": "2.1.2",
   "description": "PASETO for Node.js with no dependencies",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

50797

decreased by-5.83%

Number of package files

35

decreased by-2.78%

Lines of code

1258

decreased by-0.08%

No dependency changes