Compare commits
7 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| eebc0e988a | |||
| bf90a7c855 | |||
| 6e0ce1cf82 | |||
| 4ed24b18c5 | |||
| d12809e15d | |||
| 7a093c2c85 | |||
| 14a9631b8b |
21
LICENSE
Normal file
21
LICENSE
Normal file
@@ -0,0 +1,21 @@
|
||||
MIT License
|
||||
|
||||
Copyright (c) 2021 Tobias Schneider
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
of this software and associated documentation files (the "Software"), to deal
|
||||
in the Software without restriction, including without limitation the rights
|
||||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
copies of the Software, and to permit persons to whom the Software is
|
||||
furnished to do so, subject to the following conditions:
|
||||
|
||||
The above copyright notice and this permission notice shall be included in all
|
||||
copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
SOFTWARE.
|
||||
@@ -18,7 +18,7 @@ const jwt = require('@tsndr/cloudflare-worker-jwt')
|
||||
const token = jwt.sign({ name: 'John Doe', email: 'john.doe@gmail.com' }, 'secret')
|
||||
|
||||
// Verifing token
|
||||
const isValid = jwt.verify(token, secret)
|
||||
const isValid = jwt.verify(token, 'secret')
|
||||
|
||||
// Decoding token
|
||||
const payload = jwt.decode(token)
|
||||
|
||||
7
index.d.ts
vendored
Normal file
7
index.d.ts
vendored
Normal file
@@ -0,0 +1,7 @@
|
||||
declare class JWT {
|
||||
sign(payload: object, secret: string, algorithm?: "HS256" | "HS512"): Promise<string>
|
||||
verify(token: string, secret: string, algorithm?: "HS256" | "HS512"): Promise<boolean>
|
||||
decode(token: string): object | null
|
||||
}
|
||||
declare const _exports: JWT
|
||||
export = _exports
|
||||
22
index.js
22
index.js
@@ -27,22 +27,20 @@ class JWT {
|
||||
}
|
||||
}
|
||||
utf8ToUint8Array(str) {
|
||||
const chars = []
|
||||
str = btoa(unescape(encodeURIComponent(str)))
|
||||
return Base64URL.parse(str)
|
||||
return Base64URL.parse(btoa(unescape(encodeURIComponent(str))))
|
||||
}
|
||||
async sign(payload, secret, alg = 'HS256') {
|
||||
async sign(payload, secret, algorithm = 'HS256') {
|
||||
if (payload === null || typeof payload !== 'object')
|
||||
throw new Error('payload must be an object')
|
||||
if (typeof secret !== 'string')
|
||||
throw new Error('secret must be a string')
|
||||
if (typeof alg !== 'string')
|
||||
throw new Error('alg must be a string')
|
||||
const importAlgorithm = this.algorithms[alg]
|
||||
if (typeof algorithm !== 'string')
|
||||
throw new Error('algorithm must be a string')
|
||||
const importAlgorithm = this.algorithms[algorithm]
|
||||
if (!importAlgorithm)
|
||||
throw new Error('algorithm not found')
|
||||
const payloadAsJSON = JSON.stringify(payload)
|
||||
const partialToken = `${Base64URL.stringify(this.utf8ToUint8Array(JSON.stringify({ alg, typ: 'JWT' })))}.${Base64URL.stringify(this.utf8ToUint8Array(payloadAsJSON))}`
|
||||
const partialToken = `${Base64URL.stringify(this.utf8ToUint8Array(JSON.stringify({ alg: algorithm, typ: 'JWT' })))}.${Base64URL.stringify(this.utf8ToUint8Array(payloadAsJSON))}`
|
||||
const key = await crypto.subtle.importKey('raw', this.utf8ToUint8Array(secret), importAlgorithm, false, ['sign'])
|
||||
const characters = payloadAsJSON.split('')
|
||||
const it = this.utf8ToUint8Array(payloadAsJSON).entries()
|
||||
@@ -56,17 +54,17 @@ class JWT {
|
||||
const signature = await crypto.subtle.sign(importAlgorithm.name, key, this.utf8ToUint8Array(partialToken))
|
||||
return `${partialToken}.${Base64URL.stringify(new Uint8Array(signature))}`
|
||||
}
|
||||
async verify(token, secret, alg = 'HS256') {
|
||||
async verify(token, secret, algorithm = 'HS256') {
|
||||
if (typeof token !== 'string')
|
||||
throw new Error('token must be a string')
|
||||
if (typeof secret !== 'string')
|
||||
throw new Error('secret must be a string')
|
||||
if (typeof alg !== 'string')
|
||||
throw new Error('alg must be a string')
|
||||
if (typeof algorithm !== 'string')
|
||||
throw new Error('algorithm must be a string')
|
||||
const tokenParts = token.split('.')
|
||||
if (tokenParts.length !== 3)
|
||||
throw new Error('token must have 3 parts')
|
||||
const importAlgorithm = this.algorithms[alg]
|
||||
const importAlgorithm = this.algorithms[algorithm]
|
||||
if (!importAlgorithm)
|
||||
throw new Error('algorithm not found')
|
||||
const keyData = this.utf8ToUint8Array(secret)
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@tsndr/cloudflare-worker-jwt",
|
||||
"version": "1.0.4",
|
||||
"version": "1.0.7",
|
||||
"description": "A lightweight JWT implementation with ZERO dependencies for Cloudflare Worker",
|
||||
"main": "index.js",
|
||||
"scripts": {
|
||||
|
||||
Reference in New Issue
Block a user