dan/jose
1
0
Fork 0
mirror of https://github.com/danbulant/jose synced 2026-05-21 13:28:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
157 commits 10 branches 160 tags 9.9 MiB
Commit graph

44 commits

Author SHA1 Message Date
Filip Skokan
5b53cb0155 fix: limit calculation of missing RSA private components 
- this deprecates the use of `JWK.importKey` in favor of
`JWK.asKey`
- this deprecates the use of `JWKS.KeyStore.fromJWKS` in favor of
`JWKS.asKeyStore`

Both `JWK.importKey` and `JWKS.KeyStore.fromJWKS` could have resulted
in the process getting blocked when large bitsize RSA private keys
were missing their components and could also result in an endless
calculation loop when the private key's private exponent was outright
invalid or tampered with.

The new methods still allow to import private RSA keys with these
optimization key parameters missing but its disabled by default and one
should choose to enable it when working with keys from trusted sources

It is recommended not to use @panva/jose versions with this feature in
its original on-by-default form - v1.1.0 and v1.2.0 These will
 2019-06-20 23:32:13 +02:00
Filip Skokan
9d46c48fd5 feat: add support for JWK x5c, x5t and x5t#S256 2019-05-25 22:34:28 +02:00
Filip Skokan
6e3d6fd111 feat: compute private RSA key p, q, dp, dq, qi when omitted 
resolves #26
 2019-05-23 19:51:45 +02:00
Filip Skokan
b0ff436daf fix: reject rsa keys without all factors and exponents with a specific message 2019-05-23 19:20:30 +02:00
Filip Skokan
23b874cc20 feat: add JWK key_ops support, fix .algorithms() op returns 
BREAKING CHANGE: key.algorithms(op) un+wrapKey was split into correct
wrapKey/unwrapKey/deriveKey returns

BREAKING CHANGE: keystore.all and keystore.get `operation` option was
removed, `key_ops: string[]` supersedes it
 2019-04-23 14:30:51 +02:00
Filip Skokan
1159b0df4e feat: add key.toPEM() export function with optional encryption 2019-04-23 14:30:50 +02:00
Filip Skokan
2dbd3ed43a feat: add OKP Key and EdDSA sign/verify support 
BREAKING CHANGE: node.js minimal version is now v12.0.0 due to its
added EdDSA support (crypto.sign, crypto.verify and eddsa key objects)

resolves #12
 2019-04-23 14:30:49 +02:00
Filip Skokan
e21fea106b revert: add EC P-256K JWK and ES256K sign/verify support 
BREAKING CHANGE: removing ES256K alg and EC P-256K crv support until the
IETF WG decides on what the final names will be.
 2019-04-07 14:13:10 +02:00
Filip Skokan
2ad22792ff refactor: use exported KeyObject when available 2019-03-28 20:51:00 +01:00
Filip Skokan
764b86309c fix: properly restrict EC curves in generate(Sync) 2019-03-28 09:42:27 +01:00
Filip Skokan
fb7ae33ce2 chore: remove done todos 
[skip ci]
 2019-03-27 11:17:59 +01:00
Filip Skokan
2e33e1cc2b feat: add EC P-256K JWK and ES256K sign/verify support 2019-03-27 10:35:02 +01:00
Filip Skokan
c5c985b1ab refactor: use pem from asn1.js 2019-03-26 20:47:01 +01:00
Filip Skokan
12357f8ae1 refactor: source in asn1.js to remove some transitive dependencies 2019-03-26 18:24:10 +01:00
Filip Skokan
6172bcb18e refactor: dry resolveNodeAlg 2019-03-26 12:57:21 +01:00
Filip Skokan
a6d83d1d8e refactor: explicitly check EC curves supported 2019-03-26 09:42:22 +01:00
Filip Skokan
8892994922 refactor: revert the windows fix, bump keyto 2019-03-25 09:49:50 +01:00
Filip Skokan
57f1692d99
fix: key.toJWK() fixed on windows 
* ci: try different os builds
* fix: key.toJWK() fixed on windows

resolves #17
 2019-03-19 18:26:42 +01:00
Filip Skokan
925d47c65f fix: internal symbol method is now really a symbol 2019-03-17 18:34:22 +01:00
Filip Skokan
2ad441831d refactor: use import rather then new 2019-03-11 21:28:45 +01:00
Filip Skokan
6453e1ffc9 refactor: require order and base64url split encode buffer/string 2019-03-06 22:12:43 +01:00
Filip Skokan
d5fc18e4d2 refactor: less relying on KeyObject prototype 2019-03-04 20:04:42 +01:00
Filip Skokan
4460c4c88f refactor: key keyObject property is private 2019-02-28 21:08:31 +01:00
Filip Skokan
ca4355be19 chore: include third party license 2019-02-27 22:51:38 +01:00
Filip Skokan
dba1abdaf3 feat: add JWT.sign/verify/decode 2019-02-27 22:38:30 +01:00
Filip Skokan
e9f5fdcfc8 feat: verify and decrypt complete option returns the matched key as well 2019-02-26 22:45:02 +01:00
Filip Skokan
0a6027d62a refactor: add .d.ts and simplify errors 2019-02-25 21:27:39 +01:00
Filip Skokan
962c1f5021 feat: b64 (rfc7797) support 2019-02-21 22:51:32 +01:00
Filip Skokan
7bc3cc4c71 feat: resolving alg/enc, crit members, add tests 2019-02-20 23:12:08 +01:00
Filip Skokan
869438c798 refactor: jwe/jws serializer detection 2019-02-19 23:30:57 +01:00
Filip Skokan
cc89d4e02b refactor: cleanup, TODO chores 2019-02-10 21:39:59 +01:00
Filip Skokan
775ea638b6 chore: cleanup 2019-02-10 17:45:55 +01:00
Filip Skokan
05251b81c6 feat: add messy encrypt/decrypt structure and shorthands 2019-02-09 20:04:15 +01:00
Filip Skokan
96b2d479b5 refactor: timing safe equal 2019-02-08 21:11:13 +01:00
Filip Skokan
f3265330c8 feat: add ECDH-ES direct and key agreement KW 2019-01-27 19:20:32 +01:00
Filip Skokan
dae457913f feat: add PBES2 KW 2019-01-27 11:17:30 +01:00
Filip Skokan
2e6a9c6aaf refactor: separate uint64be 2019-01-27 07:47:15 +01:00
Filip Skokan
3b278f1b6b feat: add AES GCM encrypt and KW 2019-01-26 19:52:09 +01:00
Filip Skokan
faa45bc03b refactor: remove generic errors 2019-01-20 19:37:27 +01:00
Filip Skokan
7080840f62 feat: verify and decode complete options 2019-01-20 14:26:09 +01:00
Filip Skokan
94b29d1c44 feat: jwt first commit 2019-01-19 00:33:45 +01:00
Filip Skokan
7f84ce9252 feat: add ES521 support, start test suite 2018-11-03 14:30:20 +01:00
Filip Skokan
c1db0702a0 feat: add hmac 2018-11-03 13:21:42 +01:00
Filip Skokan
b8709756f0 chore: initial commit 2018-11-03 12:30:32 +01:00