Simpler option! crypto: false

packages/api-key-stamper/package.json

@@ -41,5 +41,7 @@
   "engines": {
     "node": ">=16.0.0"
   },
-  "browser": "dist/index-browser.js"
+  "browser": {
+    "crypto": false
+  }
 }

packages/api-key-stamper/src/__tests__/signature-test.ts

@@ -1,5 +1,6 @@
 import * as crypto from "crypto";
 import { test, expect, beforeAll } from "@jest/globals";
+import { signWithApiKey as signUniversal } from "../index";
 import { assertValidSignature } from "./shared";
 import { signWithApiKey as signNode } from "../nodecrypto";
 import { signWithApiKey as signWeb } from "../webcrypto";
@@ -8,13 +9,14 @@ import { readFixture } from "../__fixtures__/shared";
 import { generateKeyPairWithOpenSsl } from "./shared";
 
 beforeAll(() => {
-  // @ts-expect-error -- polyfilling the runtime for "webcrypto"
+  // @ts-expect-error -- polyfilling the runtime for "webcrypto" and "universal"
   globalThis.crypto = crypto.webcrypto;
 });
 
 test.each([
   { impl: signNode, name: "sign (node crypto)" },
   { impl: signWeb, name: "sign (WebCrypto)" },
+  { impl: signUniversal, name: "sign (universal)" },
 ])("sign with Turnkey fixture: $name", async ({ impl: sign }) => {
   const { privateKey, publicKey, pemPublicKey } = await readFixture();
 
@@ -48,6 +50,7 @@ test.each([
 test.each([
   { impl: signNode, name: "stamp (node)" },
   { impl: signWeb, name: "stamp (WebCrypto)" },
+  { impl: signUniversal, name: "stamp (universal)" },
 ])("sign with openssl generated key pairs: $name", async ({ impl: stamp }) => {
   // Run 20 times, where each run spawns 10 keys in parallel -> 200 tests in total
   for (let i = 0; i < 20; i++) {

packages/api-key-stamper/src/index.ts

@@ -1,7 +1,29 @@
-import { TApiKeyStamperConfig, stampHeaderName } from "./common";
+/// <reference lib="dom" />
+
 import { stringToBase64urlString } from "./encoding";
 
-const signWithApiKey = require("./nodecrypto").signWithApiKey;
+// Header name for an API key stamp
+const stampHeaderName = "X-Stamp";
+
+export type TApiKeyStamperConfig = {
+  apiPublicKey: string;
+  apiPrivateKey: string;
+};
+
+/**
+ * Signature function abstracting the differences between NodeJS and web environments for signing with API keys.
+ */
+let signWithApiKey: (input: {
+  content: string;
+  publicKey: string;
+  privateKey: string;
+}) => string;
+
+if (typeof globalThis?.crypto?.subtle !== "undefined") {
+  signWithApiKey = require("./webcrypto").signWithApiKey;
+} else {
+  signWithApiKey = require("./nodecrypto").signWithApiKey;
+}
 export { signWithApiKey };
 
 /**