Merge pull request #168 from bratanon/main

Throw error when SubtleCrypto is used in an insecure context
badgateway · Oct 28, 2024 · bf35cc6 · bf35cc6
2 parents ae9adb9 + 13fde66
commit bf35cc6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/client/authorization-code.ts b/src/client/authorization-code.ts
@@ -230,6 +230,11 @@ async function getWebCrypto(): Promise<typeof window.crypto> {
 
   // Browsers
   if ((typeof window !== 'undefined' && window.crypto)) {
+    if (!window.crypto.subtle?.digest) {
+      throw new Error(
+        "The context/environment is not secure, and does not support the 'crypto.subtle' module. See: https://developer.mozilla.org/en-US/docs/Web/API/Crypto/subtle for details"
+      );
+    }
     return window.crypto;
   }
   // Web workers possibly