- Include a TypeScript definition file
- deps: tsscmp@1.0.6
- Use
crypto.timingSafeEqualwhen available
- Use
- deps: uid-safe@2.1.5
- perf: remove only trailing
=
- perf: remove only trailing
- Remove
base64-urldependency
- deps: uid-safe@2.1.4
- Remove
base64-urldependency
- Remove
- deps: base64-url@1.3.3
- deps: uid-safe@2.1.3
- deps: base64-url@1.3.3
- deps: tsscmp@1.0.5
- Use
tsscmpmodule for timing-safe token verification - deps: base64-url@1.2.2
- deps: uid-safe@2.1.1
- deps: base64-url@1.2.2
- deps: rndm@1.2.0
- deps: uid-safe@2.1.0
- Use
random-bytesfor byte source
- Use
- Remove
tokenizeexport - Remove
tokenizeoption - Return a prototype-based object rather than functions
- This means the resulting functions need to be called as methods
- Throw when missing secret to
tokens.create() - deps: uid-safe@~2.0.0
- Use global
Promisewhen returning a promise
- Use global
- Fix compatibility with
crypto.DEFAULT_ENCODINGglobal changes
- deps: base64-url@1.2.1
- deps: uid-safe@~1.1.0
- Use
crypto.randomBytes, if available - deps: base64-url@1.2.1
- Use
- deps: base64-url@1.2.0
- deps: uid-safe@~1.0.3
- Fix error branch that would throw
- deps: base64-url@1.2.0
- deps: uid-safe@~1.0.2
- Remove dependency on
mz
- Remove dependency on
- Slight speed improvement for
verify - deps: base64-url@1.1.0
- deps: rndm@~1.1.0
- deps: scmp@1.0.0
- Rename module to
csrf
- Use
uid-safemodule - Use
base64-urlmodule - Remove sync
.secret()-- use.secretSync()instead
- Make sure CSRF tokens are URL safe