@absolutejs/auth 0.36.0-beta.0 → 0.36.0

package/dist/oidc/config.d.ts

@@ -51,6 +51,7 @@ export type OidcProviderConfig<UserType> = {
     dpopNonce?: {
         secret: string;
     };
+    extractTlsClientCert?: (headers: Headers) => Promise<Uint8Array | undefined> | Uint8Array | undefined;
     getAcr?: (context: {
         scopes: string[];
         user: UserType;
@@ -84,9 +85,10 @@ export declare const exchangeToken: <UserType>({ actorClientId, audience, config
     requestedScopes?: string[];
     subjectToken: string;
 }) => Promise<TokenExchangeResult>;
-export declare const issueTokenSet: <UserType>({ acr, claims, clientId, config, dpopJkt, nonce, now, scopes, sub }: {
+export declare const issueTokenSet: <UserType>({ acr, claims, clientCertThumbprint, clientId, config, dpopJkt, nonce, now, scopes, sub }: {
     acr?: string;
     claims?: Record<string, unknown>;
+    clientCertThumbprint?: string;
     clientId: string;
     config: OidcProviderConfig<UserType>;
     dpopJkt?: string;
@@ -246,8 +248,9 @@ export type BackchannelExchangeResult = {
     error: BackchannelExchangeError;
     ok: false;
 };
-export declare const exchangeBackchannelAuth: <UserType>({ authReqId, clientId, config, dpopJkt, now }: {
+export declare const exchangeBackchannelAuth: <UserType>({ authReqId, clientCertThumbprint, clientId, config, dpopJkt, now }: {
     authReqId: string;
+    clientCertThumbprint?: string;
     clientId: string;
     config: OidcProviderConfig<UserType>;
     dpopJkt?: string;

package/dist/oidc/mtls.d.ts

@@ -0,0 +1,11 @@
+export declare const computeCertThumbprint: (derBytes: Uint8Array) => Promise<string>;
+export declare const extractRfc9440ClientCert: (headers: Headers) => Uint8Array<ArrayBuffer> | undefined;
+export declare const resolveClientCert: ({ extract, headers }: {
+    extract: ((headers: Headers) => Promise<Uint8Array | undefined> | Uint8Array | undefined) | undefined;
+    headers: Headers;
+}) => Promise<Uint8Array<ArrayBufferLike> | undefined>;
+export declare const verifyCertificateBoundToken: ({ cnfThumbprint, extract, headers }: {
+    cnfThumbprint: string | undefined;
+    extract: ((headers: Headers) => Promise<Uint8Array | undefined> | Uint8Array | undefined) | undefined;
+    headers: Headers;
+}) => Promise<boolean>;

package/dist/oidc/types.d.ts

@@ -10,6 +10,7 @@ export type OAuthClient = {
     requirePushedAuthorizationRequests?: boolean;
     requireSignedRequestObject?: boolean;
     scopes: string[];
+    tlsCertificateBoundThumbprints?: string[];
 };
 export type ClientAssertionJtiStore = {
     recordIfFresh: (clientId: string, jti: string, expiresAt: number) => Promise<boolean>;

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.36.0-beta.0",
+	"version": "0.36.0",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {