@certnode/sdk-web (Browser)

ESM browser SDK for verifying CertNode receipts using WebCrypto (ES256 / P‑256).

Install

• Via npm (recommended): npm install @certnode/sdk-web
• Via CDN (after publish):
  • ESM: <script type="module"> import { verifyReceipt } from 'https://cdn.jsdelivr.net/npm/@certnode/sdk-web/+esm'; </script>
  • UMD/global (compat): use web/js/verify.js from this repo and reference window.CertNode.verifyReceipt.
  • Minified ESM (package dist): import sdk/web/dist/index.esm.min.js in your bundler if preferred

Usage (ESM)

<script type="module">
  import { verifyReceipt, JWKSManager } from '@certnode/sdk-web';
  // Or: import CertNode from '@certnode/sdk-web';

  const jwksMgr = new JWKSManager({ ttlMs: 300000 });
  const jwks = jwksMgr.setFromObject({ keys: [ /* { kty:'EC', crv:'P-256', x:'...', y:'...', kid:'...' } */ ] });
  const receipt = { /* protected, payload, signature, kid, ... */ };

  const result = await verifyReceipt({ receipt, jwks });
  console.log(result.ok ? 'valid' : `invalid: ${result.reason}`);
</script>

Notes

• Only ES256 (ECDSA P‑256) is supported.
• Uses RFC8785 JCS for canonicalization when payload_jcs_sha256 is present.
• No dependencies; requires a browser with WebCrypto support.
• Optional JWKS cache helper included as JWKSManager (TTL + ETag/Last‑Modified)
• A minified ESM bundle is generated at dist/index.esm.min.js for convenience

Types

• Type definitions included via index.d.ts.

License

MIT

CDN & SRI

If you prefer loading from a CDN, you can use jsDelivr and optionally add Subresource Integrity (SRI).

Compute SRI:

npm run build:web-sdk
node tools/generate-sri.js

Then include the script:

<script
  type="module"
  integrity="sha384-..."
  crossorigin="anonymous"
  src="https://cdn.jsdelivr.net/npm/@certnode/[email protected]/dist/index.esm.min.js"></script>