1.0.7

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushrocks/smartjwt",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pushrocks/smartjwt",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "private": false,
   "description": "a package for handling jwt",
   "main": "dist/index.js",

test/test.ts

@@ -2,6 +2,7 @@ import { expect, tap } from '@pushrocks/tapbundle';
 import * as smartjwt from '../ts/index';
 
 let smartjwtInstance: smartjwt.SmartJwt;
+let testJwt: string;
 
 tap.test('should create a valid instance', async () => {
   smartjwtInstance = new smartjwt.SmartJwt();
@@ -10,7 +11,31 @@ tap.test('should create a valid instance', async () => {
 });
 
 tap.test('should create a valid jwt', async () => {
+  await smartjwtInstance.createNewKeyPair();
+});
 
+tap.test('should create a new jwt', async () => {
+  testJwt = await smartjwtInstance.createJWT({ hi: 'there' });
+  console.log(testJwt);
+});
+
+tap.test('should verify a jwt', async () => {
+  const data = await smartjwtInstance.verifyJWTAndGetData(testJwt);
+  console.log(data);
+});
+
+tap.test('should not verify a wrong jwt', async () => {
+  const jwt2 = await smartjwtInstance.createJWT({ wow: 'soclear' });
+  const jwt2Array = jwt2.split('.');
+  const testJwtArray = testJwt.split('.');
+  const newJwt = `${testJwtArray[0]}.${jwt2Array[1]}.${testJwtArray[2]}`;
+  let error: Error;
+  try {
+    await smartjwtInstance.verifyJWTAndGetData(newJwt);
+  } catch (e) {
+    error = e;
+  }
+  expect(error).to.be.instanceOf(Error);
 });
 
 tap.start();

ts/smartjwt.classes.smartjwt.ts

@@ -14,15 +14,19 @@ export class SmartJwt {
    * creates a JWT
    */
   public async createJWT(payloadArg: any) {
-    return plugins.jsonwebtoken.sign(payloadArg, this.privateKey.toPemString());
+    return plugins.jsonwebtoken.sign(payloadArg, this.privateKey.toPemString(), {
+      algorithm: 'RS256'
+    });
   }
 
   /**
    * checks a JWT
    */
   public async verifyJWTAndGetData(jwtArg: string) {
-    return plugins.jsonwebtoken.verify(jwtArg, this.publicKey.toPemString());
-  };
+    return plugins.jsonwebtoken.verify(jwtArg, this.publicKey.toPemString(), {
+      algorithms: ['RS256']
+    });
+  }
 
   /**
    * sets a private key to create jwts with