supertokens · rishabhpoddar · Sep 22, 2023 · Sep 22, 2023 · Sep 22, 2023 · Sep 22, 2023
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -240,6 +240,12 @@ app.post("/change-email", verifySession(), async (req: SessionRequest, res: expr
 });
 ```
 
+## [15.2.1] - 2023-09-22
+
+### Fixes
+
+-   Fixes an issue where the response for the JWKs API would contain additional properties
+
 ## [15.2.0] - 2023-09-11
 
 ### Added

diff --git a/docs/classes/framework.BaseRequest.html b/docs/classes/framework.BaseRequest.html
diff --git a/docs/classes/framework.BaseResponse.html b/docs/classes/framework.BaseResponse.html
diff --git a/docs/classes/index.default.html b/docs/classes/index.default.html
diff --git a/docs/classes/ingredients_emaildelivery.default.html b/docs/classes/ingredients_emaildelivery.default.html
diff --git a/docs/classes/ingredients_smsdelivery.default.html b/docs/classes/ingredients_smsdelivery.default.html
diff --git a/docs/classes/recipe_dashboard.default.html b/docs/classes/recipe_dashboard.default.html
diff --git a/docs/classes/recipe_emailpassword.default.html b/docs/classes/recipe_emailpassword.default.html
diff --git a/docs/classes/recipe_emailverification.default.html b/docs/classes/recipe_emailverification.default.html
diff --git a/docs/classes/recipe_jwt.default.html b/docs/classes/recipe_jwt.default.html
diff --git a/docs/classes/recipe_multitenancy.default.html b/docs/classes/recipe_multitenancy.default.html
diff --git a/docs/classes/recipe_openid.default.html b/docs/classes/recipe_openid.default.html
diff --git a/docs/classes/recipe_passwordless.default.html b/docs/classes/recipe_passwordless.default.html
diff --git a/docs/classes/recipe_session.default.html b/docs/classes/recipe_session.default.html
diff --git a/docs/classes/recipe_thirdparty.default.html b/docs/classes/recipe_thirdparty.default.html
diff --git a/docs/classes/recipe_thirdpartyemailpassword.default.html b/docs/classes/recipe_thirdpartyemailpassword.default.html
diff --git a/docs/classes/recipe_thirdpartypasswordless.default.html b/docs/classes/recipe_thirdpartypasswordless.default.html
diff --git a/docs/classes/recipe_usermetadata.default.html b/docs/classes/recipe_usermetadata.default.html
diff --git a/docs/classes/recipe_userroles.default.html b/docs/classes/recipe_userroles.default.html
diff --git a/docs/interfaces/framework_awsLambda.SessionEvent.html b/docs/interfaces/framework_awsLambda.SessionEvent.html
diff --git a/docs/interfaces/framework_awsLambda.SessionEventV2.html b/docs/interfaces/framework_awsLambda.SessionEventV2.html
diff --git a/docs/interfaces/recipe_session.SessionContainer.html b/docs/interfaces/recipe_session.SessionContainer.html
diff --git a/docs/interfaces/recipe_session.VerifySessionOptions.html b/docs/interfaces/recipe_session.VerifySessionOptions.html
diff --git a/docs/modules/framework.html b/docs/modules/framework.html
diff --git a/docs/modules/framework_awsLambda.html b/docs/modules/framework_awsLambda.html
diff --git a/docs/modules/framework_express.html b/docs/modules/framework_express.html
diff --git a/docs/modules/framework_fastify.html b/docs/modules/framework_fastify.html
diff --git a/docs/modules/framework_hapi.html b/docs/modules/framework_hapi.html
diff --git a/docs/modules/framework_koa.html b/docs/modules/framework_koa.html
diff --git a/docs/modules/framework_loopback.html b/docs/modules/framework_loopback.html
diff --git a/docs/modules/index.html b/docs/modules/index.html
diff --git a/docs/modules/recipe_dashboard.html b/docs/modules/recipe_dashboard.html
diff --git a/docs/modules/recipe_emailpassword.html b/docs/modules/recipe_emailpassword.html
diff --git a/docs/modules/recipe_emailverification.html b/docs/modules/recipe_emailverification.html
diff --git a/docs/modules/recipe_jwt.html b/docs/modules/recipe_jwt.html
diff --git a/docs/modules/recipe_multitenancy.html b/docs/modules/recipe_multitenancy.html
diff --git a/docs/modules/recipe_openid.html b/docs/modules/recipe_openid.html
diff --git a/docs/modules/recipe_passwordless.html b/docs/modules/recipe_passwordless.html
diff --git a/docs/modules/recipe_session.html b/docs/modules/recipe_session.html
diff --git a/docs/modules/recipe_thirdparty.html b/docs/modules/recipe_thirdparty.html
diff --git a/docs/modules/recipe_thirdpartyemailpassword.html b/docs/modules/recipe_thirdpartyemailpassword.html
diff --git a/docs/modules/recipe_thirdpartypasswordless.html b/docs/modules/recipe_thirdpartypasswordless.html
diff --git a/docs/modules/recipe_usermetadata.html b/docs/modules/recipe_usermetadata.html
diff --git a/docs/modules/recipe_userroles.html b/docs/modules/recipe_userroles.html
diff --git a/lib/build/recipe/jwt/api/implementation.js b/lib/build/recipe/jwt/api/implementation.js
@@ -21,7 +21,9 @@ function getAPIImplementation() {
             if (resp.validityInSeconds !== undefined) {
                 options.res.setHeader("Cache-Control", `max-age=${resp.validityInSeconds}, must-revalidate`, false);
             }
-            return resp;
+            return {
+                keys: resp.keys,
+            };
         },
     };
 }

diff --git a/lib/ts/recipe/jwt/api/implementation.ts b/lib/ts/recipe/jwt/api/implementation.ts
@@ -31,7 +31,9 @@ export default function getAPIImplementation(): APIInterface {
                 options.res.setHeader("Cache-Control", `max-age=${resp.validityInSeconds}, must-revalidate`, false);
             }
 
-            return resp;
+            return {
+                keys: resp.keys,
+            };
         },
     };
 }
diff --git a/lib/ts/recipe/jwt/recipeImplementation.ts b/lib/ts/recipe/jwt/recipeImplementation.ts
@@ -68,7 +68,7 @@ export default function getRecipeInterface(
             }
         },
 
-        getJWKS: async function (): Promise<{ keys: JsonWebKey[]; validityInSeconds: number }> {
+        getJWKS: async function (): Promise<{ keys: JsonWebKey[]; validityInSeconds?: number }> {
             const { body, headers } = await querier.sendGetRequestWithResponseHeaders(
                 new NormalisedURLPath("/.well-known/jwks.json"),
                 {}

diff --git a/test/jwt/getJWKS.test.js b/test/jwt/getJWKS.test.js
@@ -115,6 +115,7 @@ describe(`getJWKS: ${printPath("[test/jwt/getJWKS.test.js]")}`, function () {
         });
 
         assert(response !== undefined);
+        assert(Object.keys(response).length === 1);
         assert(response.keys !== undefined);
         assert(response.keys.length > 0);
         assert.strictEqual(headers["cache-control"], "max-age=60, must-revalidate");