passport-keycloak-bearer - npm Package Compare versions

Comparing version 2.2.0 to 2.3.0

package.json

 {
   "name": "passport-keycloak-bearer",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "HTTP Bearer authentication strategy for Passport and Keycloak",
@@ -51,3 +51,3 @@ "keywords": [
   "devDependencies": {
-    "chai": "^4.3.4",
+    "chai": "^4.3.7",
     "chai-passport-strategy": "^1.0.1",
@@ -54,0 +54,0 @@ "eslint": "^7.32.0",

src/oidcMatadata.js

@@ -16,6 +16,7 @@ const axios = require('axios');
   getKeysFromResponse(body) {
-    if (!body.keys || body.keys.length === 0) {
+    const rsaKeys = body.keys && body.keys.filter((key) => key.kty === "RSA");
+    if (!rsaKeys || rsaKeys.length === 0) {
       throw new Error('We got no AAD signing Keys');
     }
-    return body.keys.map((key) => ({
+    return rsaKeys.map((key) => ({
       ...key,
@@ -22,0 +23,0 @@ pemKey: rsaPublicKeyPem(key.n, key.e),

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

14938

increased by0.5%

Lines of code

210

increased by0.48%

No dependency changes