chore: release 1.1.1

CHANGELOG.md

@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.1.1] - 2023-09-22
+### Fixed
+- Normalize case before hashed proof verification
+
 ## [1.1.0] - 2023-09-21
 ### Changed
 - Unify fromJSON() for Profile, Persona and Claim classes

dist/doip.core.js

@@ -2586,6 +2586,27 @@ var doip = (function (exports, openpgp$1, fetcher) {
           case '2a':
           case '2b':
           case '2y':
+            try {
+              // Patch until promise.race properly works on WASM
+              if (parseInt(match[0].split('$')[2]) > 12) continue
+
+              const hashPromise = bcryptVerify({
+                password: fingerprintURI.toLowerCase(),
+                hash: match[0]
+              })
+                .then(result => result)
+                .catch(_ => false);
+
+              result = await Promise.race([hashPromise, timeoutPromise]).then((result) => {
+                clearTimeout(timeoutHandle);
+                return result
+              });
+            } catch (err) {
+              result = false;
+            }
+
+            // Accept mixed-case fingerprints until deadline
+            if (!result) {
               try {
                 // Patch until promise.race properly works on WASM
                 if (parseInt(match[0].split('$')[2]) > 12) continue
@@ -2604,12 +2625,31 @@ var doip = (function (exports, openpgp$1, fetcher) {
               } catch (err) {
                 result = false;
               }
+            }
             break
 
           case 'argon2':
           case 'argon2i':
           case 'argon2d':
           case 'argon2id':
+            try {
+              const hashPromise = argon2Verify({
+                password: fingerprintURI.toLowerCase(),
+                hash: match[0]
+              })
+                .then(result => result)
+                .catch(_ => false);
+
+              result = await Promise.race([hashPromise, timeoutPromise]).then((result) => {
+                clearTimeout(timeoutHandle);
+                return result
+              });
+            } catch (err) {
+              result = false;
+            }
+
+            // Accept mixed-case fingerprints until deadline
+            if (!result) {
               try {
                 const hashPromise = argon2Verify({
                   password: fingerprintURI,
@@ -2625,6 +2665,7 @@ var doip = (function (exports, openpgp$1, fetcher) {
               } catch (err) {
                 result = false;
               }
+            }
             break
         }
       }

dist/doip.fetchers.js

@@ -2728,7 +2728,7 @@ var doipFetchers = (function (exports) {
 	 * doip.js library version
 	 * @constant {string}
 	 */
-	const version = '1.1.0';
+	const version = '1.1.1';
 
 	/*
 	Copyright 2022 Yarmo Mackenbach

dist/doip.fetchers.minimal.js

@@ -2698,7 +2698,7 @@ var doipFetchers = (function (exports) {
 	 * doip.js library version
 	 * @constant {string}
 	 */
-	const version = '1.1.0';
+	const version = '1.1.1';
 
 	/*
 	Copyright 2022 Yarmo Mackenbach

package.json

@@ -1,6 +1,6 @@
 {
   "name": "doipjs",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Decentralized Online Identity Proofs library in Node.js",
   "type": "module",
   "main": "./src/index.js",

src/constants.js

@@ -22,4 +22,4 @@ limitations under the License.
  * doip.js library version
  * @constant {string}
  */
-export const version = '1.1.0'
+export const version = '1.1.1'