jose

JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes.

MIT License

Downloads

47.9M

Stars

4.9K

Committers

View Code on GitHub View on X

Ecosystems: Bun, Deno, Vercel, Next, Node.js, Cloudflare, Electron

Bot releases are hidden (Show)

jose - v4.15.9

Published by panva 4 months ago

Fixes

add sideEffects:false to nested ESM package.json files (17eef5f)

jose -

Published by panva 4 months ago

Fixes

add a workerd package.json target (e36d69e)

jose -

Published by panva 8 months ago

Fixes

add a maxOutputLength option to zlib inflate (1b91d88), fixes CVE-2024-28176

jose - v2.0.7

Published by panva 8 months ago

Fixes

add a maxOutputLength option to zlib inflate (02a6579), fixes CVE-2024-28176

jose -

Published by panva about 2 years ago

Fixes

limit default PBES2 alg's computational expense (d530c30)

jose -

Published by panva about 2 years ago

Fixes

limit default PBES2 alg's computational expense (c1512be)

jose -

Published by panva about 2 years ago

Fixes

limit default PBES2 alg's computational expense (4e7121a)

jose -

Published by panva over 3 years ago

Bug Fixes

defer AES CBC w/ HMAC decryption after tag verification passes (812e03f), fixes CVE-2021-29443

jose -

Published by panva over 3 years ago

Bug Fixes

defer AES CBC w/ HMAC decryption after tag verification passes (08e1bc5), fixes CVE-2021-29443

jose -

Published by panva over 3 years ago

Features

add named exports for all modules (5cba6b0)

jose -

Published by panva over 3 years ago

Features

publish alternative Node.js and Browser specific distributions (7856dad)

jose -

Published by panva over 3 years ago

Bug Fixes

swallow invalid signature encoding errors (e0adf49)

jose -

Published by panva over 3 years ago

Features

electron >=12.0.0 is now supported (and tested on ci) (8fffd3e)

Bug Fixes

electron: only call (de)cipher.setAAD() when aad is not empty (a5a6c4d)
electron: properly ASN.1 encode [0x00] when converting RSA JWKs (433f020)

jose -

Published by panva over 3 years ago

Bug Fixes

typescript: update maxTokenAge type and examples (2c358e0)

jose -

Published by panva over 3 years ago

Bug Fixes

node runtime json fetch handles connection errors properly (fc584b2)

jose -

Published by panva over 3 years ago

Features

allow CryptoKey instances in a regular non-webcrypto node runtime (e8d41a9)

jose -

Published by panva over 3 years ago

Bug Fixes

export package.json (8c29107), closes #157

jose -

Published by panva over 3 years ago

Bug Fixes

workaround downstream dependency issues messing with http (2e58005), closes #154

jose -

Published by panva almost 4 years ago

Performance

use 'base64url' encoding when available in Node.js runtime (808f06c)
use KeyObject.prototype asymmetricKeyDetails when available (ad88ee2)

jose -

Published by panva almost 4 years ago

Performance

improve base64url encoding when available in Node.js (d5af559)

Package Rankings

Top 0.63% on Npmjs.org

Top 8.17% on Proxy.golang.org

Top 19.68% on Repo1.maven.org

Top 0.67% on Deno.land

Related Projects

oauth4webapi

OAuth 2 / OpenID Connect for JavaScript Runtimes

02 Mar 2022 509