npm / @sd-jwt/core
@sd-jwt/core
What changed in @sd-jwt/core 0.21 to 0.23, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-21.
5 breaking1 security2 new APIs and options8 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli init@sd-jwt/core 0.231 changes
Breaking changes 1
The CommonJS build is dropped; only ESM is published, avoiding dual-package hazards that caused instanceof checks to fail in some runtimes.
@sd-jwt/core 0.229 changes
Breaking changes 4
This check now applies to the issuer-signed SD-JWT payload rather than the Key Binding JWT or Status List Token.
Use this option to constrain the Key Binding JWT audience; credential expectedAudience no longer applies to it.
Time-claim failures now throw this SDJWTException subclass with structured details and error codes.
The constructor now takes an options object with details, code, and cause instead of positional arguments.
Security 1
Adds a verifier option to restrict Key Binding JWT algorithms; allowedIssuerAlgorithms applies only to issuer-signed JWTs.
New APIs and options 1
Provides structured time-check details, including the claim, its value, current time, allowed clock skew, and maximum age when applicable.
Fixes and other changes 3
Issuer algorithm restrictions apply to issuer-signed JWTs, not Key Binding JWTs or Status List Tokens; status-list signatures remain verified by the configured status verifier.
Time-check failures identify the Key Binding JWT and use dedicated expired, not-yet-valid, and too-old error codes.
Uses the code on SDJWTException rather than matching message substrings; errors without a code are reported as UNKNOWN_ERROR.
@sd-jwt/core 0.216 changes
New APIs and options 1
Adds the standard RFC 7519 aud and jti claims to the payload type.
Fixes and other changes 5
Propagates the ExtendedPayload generic through getClaims, improving payload typing.
Propagates the ExtendedPayload generic through keys, improving payload typing.
Propagates the ExtendedPayload generic through presentableKeys, improving payload typing.
Propagates the ExtendedPayload generic through decode, improving payload typing.
Nested disclosure values are cloned before recursive unpacking, preventing mutation during unpack.