jose

Bug Fixes

• defer AES CBC w/ HMAC decryption after tag verification passes (812e03f), fixes CVE-2021-29443

Bug Fixes

• defer AES CBC w/ HMAC decryption after tag verification passes (08e1bc5), fixes CVE-2021-29443

Bug Fixes

• defer AES CBC w/ HMAC decryption after tag verification passes (579485c), fixes CVE-2021-29443, CVE-2021-29444
  , CVE-2021-29445, and CVE-2021-29446

Bug Fixes

• node: check CryptoKey algorithm & usage before exporting KeyObject (dab4b2f)

Bug Fixes

• assert KeyLike input types, change "any" types to "unknown" (edb83a8)

Bug Fixes

• node: crypto.verify callback invocation with a private keyobject (d3d4acd)

Features

• export error codes as static properties (89d8003), closes #170

Features

• node: use libuv threadpool to sign in node >= 15.12.0 (cf5074e)
• node: use libuv threadpool to verify in node >= 15.12.0 (ae9a7f4)
• node: use native JWK export in node >= 15.9.0 (7f3cc44)
• node: use native JWK import in node >= 15.12.0 (f0c2a64)

Features

• add named exports for all modules (5cba6b0)

Features

• publish alternative Node.js and Browser specific distributions (7856dad)

Bug Fixes

• swallow invalid signature encoding errors (e0adf49)

Features

• electron >=12.0.0 is now supported (and tested on ci) (8fffd3e)

Bug Fixes

• electron: only call (de)cipher.setAAD() when aad is not empty (a5a6c4d)
• electron: properly ASN.1 encode [0x00] when converting RSA JWKs (433f020)

Bug Fixes

• typescript: update maxTokenAge type and examples (2c358e0)

Bug Fixes

• node runtime json fetch handles connection errors properly (fc584b2)

Features

• allow CryptoKey instances in a regular non-webcrypto node runtime (e8d41a9)

Bug Fixes

• export package.json (8c29107), closes #157

Bug Fixes

• workaround downstream dependency issues messing with http (2e58005), closes #154

Performance

• use 'base64url' encoding when available in Node.js runtime (808f06c)
• use KeyObject.prototype asymmetricKeyDetails when available (ad88ee2)

Performance

• improve base64url encoding when available in Node.js (d5af559)

Bug Fixes

• workaround for RangeError in browser runtime base64url (ed32b0d)