1
0

Compare commits

...

10 Commits

Author SHA1 Message Date
eebc0e988a Bumped version 2021-05-01 16:24:26 +02:00
bf90a7c855 Added typescript support 2021-05-01 16:21:47 +02:00
6e0ce1cf82 Renamed alg to algorithm 2021-05-01 16:21:27 +02:00
4ed24b18c5 Removed unused variable 2021-05-01 15:54:49 +02:00
d12809e15d Fixed typo 2021-02-08 17:01:30 +01:00
7a093c2c85 Fixed typo 2021-02-08 17:00:57 +01:00
14a9631b8b Added LICENSE 2021-02-08 16:37:41 +01:00
c247675832 Updated license 2021-02-05 13:52:41 +01:00
0d3c7d621a Bump version to test github action 2021-02-04 17:49:09 +01:00
62479197f5 Added workflow to publish package 2021-02-04 17:48:13 +01:00
6 changed files with 71 additions and 15 deletions

30
.github/workflows/npm-publish.yml vendored Normal file
View File

@@ -0,0 +1,30 @@
name: Publish NPM Package
on:
release:
types: [created]
jobs:
publish-npm:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-node@v1
with:
node-version: 12
registry-url: https://registry.npmjs.org/
- run: npm publish --access public
env:
NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
publish-gpr:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/setup-node@v1
with:
node-version: 12
registry-url: https://npm.pkg.github.com/
- run: npm publish --access public
env:
NODE_AUTH_TOKEN: ${{secrets.GITHUB_TOKEN}}

21
LICENSE Normal file
View File

@@ -0,0 +1,21 @@
MIT License
Copyright (c) 2021 Tobias Schneider
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

View File

@@ -18,7 +18,7 @@ const jwt = require('@tsndr/cloudflare-worker-jwt')
const token = jwt.sign({ name: 'John Doe', email: 'john.doe@gmail.com' }, 'secret') const token = jwt.sign({ name: 'John Doe', email: 'john.doe@gmail.com' }, 'secret')
// Verifing token // Verifing token
const isValid = jwt.verify(token, secret) const isValid = jwt.verify(token, 'secret')
// Decoding token // Decoding token
const payload = jwt.decode(token) const payload = jwt.decode(token)

7
index.d.ts vendored Normal file
View File

@@ -0,0 +1,7 @@
declare class JWT {
sign(payload: object, secret: string, algorithm?: "HS256" | "HS512"): Promise<string>
verify(token: string, secret: string, algorithm?: "HS256" | "HS512"): Promise<boolean>
decode(token: string): object | null
}
declare const _exports: JWT
export = _exports

View File

@@ -27,22 +27,20 @@ class JWT {
} }
} }
utf8ToUint8Array(str) { utf8ToUint8Array(str) {
const chars = [] return Base64URL.parse(btoa(unescape(encodeURIComponent(str))))
str = btoa(unescape(encodeURIComponent(str)))
return Base64URL.parse(str)
} }
async sign(payload, secret, alg = 'HS256') { async sign(payload, secret, algorithm = 'HS256') {
if (payload === null || typeof payload !== 'object') if (payload === null || typeof payload !== 'object')
throw new Error('payload must be an object') throw new Error('payload must be an object')
if (typeof secret !== 'string') if (typeof secret !== 'string')
throw new Error('secret must be a string') throw new Error('secret must be a string')
if (typeof alg !== 'string') if (typeof algorithm !== 'string')
throw new Error('alg must be a string') throw new Error('algorithm must be a string')
const importAlgorithm = this.algorithms[alg] const importAlgorithm = this.algorithms[algorithm]
if (!importAlgorithm) if (!importAlgorithm)
throw new Error('algorithm not found') throw new Error('algorithm not found')
const payloadAsJSON = JSON.stringify(payload) const payloadAsJSON = JSON.stringify(payload)
const partialToken = `${Base64URL.stringify(this.utf8ToUint8Array(JSON.stringify({ alg, typ: 'JWT' })))}.${Base64URL.stringify(this.utf8ToUint8Array(payloadAsJSON))}` const partialToken = `${Base64URL.stringify(this.utf8ToUint8Array(JSON.stringify({ alg: algorithm, typ: 'JWT' })))}.${Base64URL.stringify(this.utf8ToUint8Array(payloadAsJSON))}`
const key = await crypto.subtle.importKey('raw', this.utf8ToUint8Array(secret), importAlgorithm, false, ['sign']) const key = await crypto.subtle.importKey('raw', this.utf8ToUint8Array(secret), importAlgorithm, false, ['sign'])
const characters = payloadAsJSON.split('') const characters = payloadAsJSON.split('')
const it = this.utf8ToUint8Array(payloadAsJSON).entries() const it = this.utf8ToUint8Array(payloadAsJSON).entries()
@@ -56,17 +54,17 @@ class JWT {
const signature = await crypto.subtle.sign(importAlgorithm.name, key, this.utf8ToUint8Array(partialToken)) const signature = await crypto.subtle.sign(importAlgorithm.name, key, this.utf8ToUint8Array(partialToken))
return `${partialToken}.${Base64URL.stringify(new Uint8Array(signature))}` return `${partialToken}.${Base64URL.stringify(new Uint8Array(signature))}`
} }
async verify(token, secret, alg = 'HS256') { async verify(token, secret, algorithm = 'HS256') {
if (typeof token !== 'string') if (typeof token !== 'string')
throw new Error('token must be a string') throw new Error('token must be a string')
if (typeof secret !== 'string') if (typeof secret !== 'string')
throw new Error('secret must be a string') throw new Error('secret must be a string')
if (typeof alg !== 'string') if (typeof algorithm !== 'string')
throw new Error('alg must be a string') throw new Error('algorithm must be a string')
const tokenParts = token.split('.') const tokenParts = token.split('.')
if (tokenParts.length !== 3) if (tokenParts.length !== 3)
throw new Error('token must have 3 parts') throw new Error('token must have 3 parts')
const importAlgorithm = this.algorithms[alg] const importAlgorithm = this.algorithms[algorithm]
if (!importAlgorithm) if (!importAlgorithm)
throw new Error('algorithm not found') throw new Error('algorithm not found')
const keyData = this.utf8ToUint8Array(secret) const keyData = this.utf8ToUint8Array(secret)

View File

@@ -1,6 +1,6 @@
{ {
"name": "@tsndr/cloudflare-worker-jwt", "name": "@tsndr/cloudflare-worker-jwt",
"version": "1.0.2", "version": "1.0.7",
"description": "A lightweight JWT implementation with ZERO dependencies for Cloudflare Worker", "description": "A lightweight JWT implementation with ZERO dependencies for Cloudflare Worker",
"main": "index.js", "main": "index.js",
"scripts": { "scripts": {
@@ -18,7 +18,7 @@
"cloudflare-worker" "cloudflare-worker"
], ],
"author": "Tobias Schneider", "author": "Tobias Schneider",
"license": "ISC", "license": "MIT",
"bugs": { "bugs": {
"url": "https://github.com/tsndr/cloudflare-worker-jwt/issues" "url": "https://github.com/tsndr/cloudflare-worker-jwt/issues"
}, },