v4.13.0

Features

• types: allow generics to aid in CryptoKey or KeyObject narrowing of KeyLike (6effa4d)

Fixes

• make jose.EmbeddedJWK arguments optional (20610a9)

v4.12.2

Fixes

• types: declare explicit return from EmbeddedJWK (46934ac)

v4.12.1

Refactor

• clarify when alg is used and required on key imports (19e525f)
• node: have node:crypto deal with x509 parsing (45bb45d)

v4.12.0

Features

• enable key iteration over JWKSMultipleMatchingKeys (a278acd)

const JWKS = jose.createRemoteJWKSet(new URL('https://www.googleapis.com/oauth2/v3/certs'))

const options = {
  issuer: 'urn:example:issuer',
  audience: 'urn:example:audience',
}
const { payload, protectedHeader } = await jose
  .jwtVerify(jwt, JWKS, options)
  .catch(async (error) => {
    if (error?.code === 'ERR_JWKS_MULTIPLE_MATCHING_KEYS') {
      for await (const publicKey of error) {
        try {
          return await jose.jwtVerify(jwt, publicKey, options)
        } catch (innerError) {
          if (innerError?.code === 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED') {
            continue
          }
          throw innerError
        }
      }
      throw new jose.errors.JWSSignatureVerificationFailed()
    }

    throw error
  })
console.log(protectedHeader)
console.log(payload)

v4.11.4

Fixes

• build: ignore deno files in npm publishes (b3d6a11)

v4.11.3

Fixes

• CF Workers: improve miniflare compat with different Node.js versions, get ready for future non-proprietary support (3406b9f), closes #446 #495 #497

v4.11.2

Refactor

• node: dry node version checks (aff2f7c)

v4.11.1

This release contains only code refactoring, documentation updates, and Node.js CITGM related test updates.

v4.11.0

Features

• add bun as a supported runtime (3a63631)

Fixes

• respect JWK ext for symmetric keys (20557fc)

v4.10.4

Fixes

• typo in importPKSC8 error message (#468) (746bc64)
• workaround for invalid use checks on CF Workers and Deno (e4d04eb)