jose

Features

• add requiredClaims JWT validation option (eeea91d)

This release contains only minor code refactoring, documentation, and IntelliSense updates.

Fixes

• workerd: avoid "The script will never generate a response" edge cases completely (96a8c99), closes #355 #509

Features

• types: allow generics to aid in CryptoKey or KeyObject narrowing of KeyLike (6effa4d)

Fixes

• make jose.EmbeddedJWK arguments optional (20610a9)

Fixes

• types: declare explicit return from EmbeddedJWK (46934ac)

Refactor

• clarify when alg is used and required on key imports (19e525f)
• node: have node:crypto deal with x509 parsing (45bb45d)

Features

• enable key iteration over JWKSMultipleMatchingKeys (a278acd)

const JWKS = jose.createRemoteJWKSet(new URL('https://www.googleapis.com/oauth2/v3/certs'))

const options = {
  issuer: 'urn:example:issuer',
  audience: 'urn:example:audience',
}
const { payload, protectedHeader } = await jose
  .jwtVerify(jwt, JWKS, options)
  .catch(async (error) => {
    if (error?.code === 'ERR_JWKS_MULTIPLE_MATCHING_KEYS') {
      for await (const publicKey of error) {
        try {
          return await jose.jwtVerify(jwt, publicKey, options)
        } catch (innerError) {
          if (innerError?.code === 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED') {
            continue
          }
          throw innerError
        }
      }
      throw new jose.errors.JWSSignatureVerificationFailed()
    }

    throw error
  })
console.log(protectedHeader)
console.log(payload)

Fixes

• build: ignore deno files in npm publishes (b3d6a11)

Fixes

• CF Workers: improve miniflare compat with different Node.js versions, get ready for future non-proprietary support (3406b9f), closes #446 #495 #497

Refactor

• node: dry node version checks (aff2f7c)

This release contains only code refactoring, documentation updates, and Node.js CITGM related test updates.

Features

• add bun as a supported runtime (3a63631)

Fixes

• respect JWK ext for symmetric keys (20557fc)

Fixes

• typo in importPKSC8 error message (#468) (746bc64)
• workaround for invalid use checks on CF Workers and Deno (e4d04eb)

v4.10.1, v4.10.2, and v4.10.3 contain only code refactoring, documentation updates, and updates necessary to include jose in the Node.js CITGM builds.

Features

• Curve25519, and Curve448 support for WebCryptoAPI runtimes based on Secure Curves in the Web Cryptography API (fea359a)

Fixes

• importX509: handle length encodings better (47d0d77), closes #459

Refactor

• update CEK length validation error message (81a92a9)
• update key input validation error messages (2eac34a)
• update keylike description for WinterCG (6741679)

Fixes

• limit default PBES2 alg's computational expense (03d6d01)

Fixes

• limit default PBES2 alg's computational expense (d530c30)

Fixes

• limit default PBES2 alg's computational expense (c1512be)

Fixes

• limit default PBES2 alg's computational expense (4e7121a)