v1.4.0

@hellocoop/httpsig v1.4.0

New Features

• Browser support: Accept CryptoKey handle for signing via signingCryptoKey option when JWK has no private key material
• generateKeyPair() utility: Generate Ed25519 or ES256 key pairs with configurable extractable option
• Browser-safe base64: Replaced Node.js Buffer with btoa/atob for full browser compatibility

Backwards Compatible

Existing code passing a private JWK works exactly as before.

@hellocoop/httpsig@1.3.0

What's New

Update httpsig to match draft-hardt-httpbis-signature-key-04:

• Rename well-known to dwk in jwks_uri scheme (breaking: wellKnown property renamed to dwk in types)
• Add Signature-Error header support with generateSignatureErrorHeader() and parseSignatureError() for all 8 spec error codes
• Add Accept-Signature header support with generateAcceptSignatureHeader() and parseAcceptSignature() including the sigkey parameter (jkt, uri, x509)
• Structured errors on verification failure: verify() now returns a signatureError field that can be used to build Signature-Error response headers

@hellocoop/better-auth@1.0.14

What's Changed

• Btn refactor, add types by @rohanharikr in #11
• Callback by @dickhardt in #12
• Error page by @dickhardt in #13
• Args by @dickhardt in #14
• remove async nature of fn, use Buffer by @rohanharikr in #17
• _DEFAULT by @dickhardt in #18
• Client by @rohanharikr in #19
• React by @dickhardt in #21
• aes-256-gcm and sameSite: 'lax" by @dickhardt in #22
• factor out constants and clean up versioning by @dickhardt in #25
• refactor to use router by @dickhardt in #26
• sameSiteStrict by @dickhardt in #27
• Playwright by @dickhardt in #31
• Avoid interference from text body parser by @andreterron in #33
• allow import of react component from nextjs root by @rohanharikr in #36
• Vue svelte by @rohanharikr in #40
• Helper invite req by @rohanharikr in #42
• factor out common helper code by @dickhardt in #44
• Api domain hint tests by @dickhardt in #45
• Op commands by @dickhardt in #46
• Api domain hint tests by @dickhardt in #47
• Express bug by @dickhardt in #48
• fix POST of 3P initiated flow by @dickhardt in #49
• Mockin hint tests by @rohanharikr in #50
• Prettier lint husky by @rohanharikr in #51
• App router by @rohanharikr in #54
• feat: Add mobile OAuth support with loginURL and exchange operations by @dickhardt in #57
• Better auth canary by @rohanharikr in #58
• Fix using configured scopes by @rohanharikr in #59
• Fix scope and claim definitions by @rohanharikr in #60
• Add CI, release, and canary workflows with npm provenance signing by @dickhardt in #62

New Contributors

• @andreterron made their first contribution in #33

Full Changelog: https://github.com/hellocoop/packages-js/commits/@hellocoop/better-auth@1.0.14

@hellocoop/httpsig@1.2.0

What's Changed

• Btn refactor, add types by @rohanharikr in #11
• Callback by @dickhardt in #12
• Error page by @dickhardt in #13
• Args by @dickhardt in #14
• remove async nature of fn, use Buffer by @rohanharikr in #17
• _DEFAULT by @dickhardt in #18
• Client by @rohanharikr in #19
• React by @dickhardt in #21
• aes-256-gcm and sameSite: 'lax" by @dickhardt in #22
• factor out constants and clean up versioning by @dickhardt in #25
• refactor to use router by @dickhardt in #26
• sameSiteStrict by @dickhardt in #27
• Playwright by @dickhardt in #31
• Avoid interference from text body parser by @andreterron in #33
• allow import of react component from nextjs root by @rohanharikr in #36
• Vue svelte by @rohanharikr in #40
• Helper invite req by @rohanharikr in #42
• factor out common helper code by @dickhardt in #44
• Api domain hint tests by @dickhardt in #45
• Op commands by @dickhardt in #46
• Api domain hint tests by @dickhardt in #47
• Express bug by @dickhardt in #48
• fix POST of 3P initiated flow by @dickhardt in #49
• Mockin hint tests by @rohanharikr in #50
• Prettier lint husky by @rohanharikr in #51
• App router by @rohanharikr in #54
• feat: Add mobile OAuth support with loginURL and exchange operations by @dickhardt in #57
• Better auth canary by @rohanharikr in #58
• Fix using configured scopes by @rohanharikr in #59
• Fix scope and claim definitions by @rohanharikr in #60
• Add CI, release, and canary workflows with npm provenance signing by @dickhardt in #62

New Contributors

• @andreterron made their first contribution in #33

Full Changelog: https://github.com/hellocoop/packages-js/commits/@hellocoop/httpsig@1.2.0