fix: use CWT tag per default (#28)

Author: birme

examples/generate.ts

@@ -7,8 +7,7 @@ async function main() {
         '403697de87af64611c1d32a05dab0fe1fcb715a86ab435f1ec99192d79569388',
         'hex'
       )
-    },
-    expectCwtTag: true
+    }
   });
   const base64encoded = await generator.generate(
     {

src/cat.test.ts

@@ -32,7 +32,7 @@ describe('CAT', () => {
       ),
       kid: 'Symmetric256'
     };
-    await cat.mac(key, 'HS256', { addCwtTag: true });
+    await cat.mac(key, 'HS256');
     expect(cat.raw).toBeDefined();
     const macHex = cat.raw?.toString('hex');
     const token = Buffer.from(macHex!, 'hex');

src/cat.ts

@@ -310,7 +310,7 @@ export class CommonAccessToken {
      * Options
      */
     opts?: {
-      addCwtTag: boolean;
+      noCwtTag: boolean;
     }
   ): Promise<void> {
     const headers = {
@@ -320,7 +320,7 @@ export class CommonAccessToken {
     const recipient = {
       key: key.k
     };
-    if (opts?.addCwtTag) {
+    if (!opts?.noCwtTag) {
       const plaintext = cbor.encode(this.payload);
       const coseMessage = await cose.mac.create(
         headers,

src/index.ts

@@ -234,7 +234,7 @@ export class CAT {
         throw new Error('Key not found');
       }
       await cat.mac({ k: key, kid: opts.kid }, opts.alg, {
-        addCwtTag: this.expectCwtTag
+        noCwtTag: !this.expectCwtTag
       });
       if (!cat.raw) {
         throw new Error('Failed to MAC token');
@@ -290,7 +290,7 @@ export class CAT {
         throw new Error('Key not found');
       }
       await cat.mac({ k: key, kid: opts.kid }, opts.alg, {
-        addCwtTag: this.expectCwtTag
+        noCwtTag: !this.expectCwtTag
       });
       if (!cat.raw) {
         throw new Error('Failed to MAC token');
@@ -324,7 +324,7 @@ export class CAT {
       throw new KeyNotFoundError();
     }
     await newCat.mac({ k: key, kid: opts.kid }, opts.alg, {
-      addCwtTag: this.expectCwtTag
+      noCwtTag: !this.expectCwtTag
     });
     if (!newCat.raw) {
       throw new Error('Failed to MAC token');

src/validators/http.ts

@@ -386,8 +386,7 @@ export class HttpValidator {
               }
               await newCat.mac(
                 { kid: keyid, k: this.keys[keyid] },
-                this.opts.alg || 'HS256',
-                { addCwtTag: true }
+                this.opts.alg || 'HS256'
               );
               const newToken = toBase64NoPadding(newCat.raw!);
               const encodedToken = encodeURIComponent(newToken!);