@atlasauth/pca-dpop 0.0.0-stage → 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,136 @@
+/**
+ * `@atlasauth/pca-dpop` — sender-constrained proof-of-possession for PCA.
+ *
+ * Two PoP mechanisms, bound to a PCActn's REAL holder key so an action is tied to the holder it was
+ * delegated to and interops with OAuth proof-of-possession:
+ *
+ *  - **RFC 9449 DPoP**: a holder-key-signed `dpop+jwt` proof over the HTTP method + target URI. The
+ *    public key rides in the proof header (`jwk`); its RFC 7638 thumbprint is the `jkt`.
+ *  - **RFC 8705 mTLS**: an `x5t#S256` certificate-thumbprint confirmation for the mutual-TLS channel.
+ *
+ * The PCActn's bound holder key is the LEAF of its capability chain — `cap_chain[last].holder` — a
+ * base64url (no-pad) Ed25519 public key (see `@atlasauth/pca` `Capability.holder`, which the core leaf
+ * signature is verified under). That raw key is exactly an OKP/Ed25519 JWK with `x = holder`, so a DPoP
+ * proof signed by the holder key, embedding that OKP JWK, has a `jkt` equal to the PCActn's binding —
+ * {@link bindPcaToDpop} computes that binding and {@link assertPcaDpop} enforces it against a proof.
+ */
+import type { JWK, JWTPayload, KeyLike } from 'jose';
+import { type PCActn } from '@atlasauth/pca';
+/** JWS algorithms a DPoP proof may use: asymmetric only, never `none` or a MAC (RFC 9449 §4.2). */
+export declare const DPOP_ALLOWED_ALGS: readonly ["EdDSA", "ES256", "ES384", "ES512", "PS256", "RS256"];
+export type DpopAlg = (typeof DPOP_ALLOWED_ALGS)[number];
+/** DPoP proof type header (`typ`), RFC 9449 §4.2. */
+export declare const DPOP_JWT_TYP = "dpop+jwt";
+/** Default accepted proof age (seconds) when a caller does not pass `maxAgeSec`. */
+export declare const DPOP_DEFAULT_MAX_AGE_SEC = 300;
+/** Clock-skew allowance (seconds) for a proof whose `iat` is slightly ahead of the verifier. */
+export declare const DPOP_CLOCK_SKEW_SEC = 5;
+/** A DPoP proof (or PCActn↔DPoP binding) that failed to verify. `code` names the specific check. */
+export declare class DpopVerificationError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** The claim set carried by a DPoP proof JWT (RFC 9449 §4.2), with the always-present claims typed. */
+export interface DpopClaims extends JWTPayload {
+    /** HTTP method of the request the proof is for (uppercase). */
+    htm: string;
+    /** HTTP target URI, query + fragment stripped (RFC 9449 §4.3). */
+    htu: string;
+    /** Issued-at, epoch SECONDS. */
+    iat: number;
+    /** Unique proof id (replay token). */
+    jti: string;
+    /** Optional server-provided DPoP nonce. */
+    nonce?: string;
+    /** Optional access-token hash: base64url(sha256(access token)). */
+    ath?: string;
+}
+/** A replay store for `jti` values. A plain `Set<string>` satisfies this. */
+export interface JtiSeenSet {
+    has(jti: string): boolean;
+    add(jti: string): unknown;
+}
+export interface CreateDpopProofInput {
+    /** HTTP method (case-insensitive in; stored uppercased as `htm`). */
+    method: string;
+    /** Full request URL; `htu` is this with query + fragment removed. */
+    url: string;
+    /** The holder's PRIVATE key that signs the proof. */
+    privateKey: KeyLike | Uint8Array | JWK;
+    /** The holder's PUBLIC JWK, embedded in the proof header (`jwk`); drives the `alg`. */
+    publicJwk: JWK;
+    /** Optional server-issued DPoP nonce. */
+    nonce?: string;
+    /** Optional access-token hash (see {@link athFor}). */
+    ath?: string;
+    /** Override the issued-at (epoch seconds); default `now`. */
+    iat?: number;
+    /** Override the proof id; default a random UUID. */
+    jti?: string;
+}
+export interface VerifyDpopProofOptions {
+    method: string;
+    url: string;
+    /** Maximum accepted proof age in seconds (from `iat` to now). */
+    maxAgeSec: number;
+    /** If given, the embedded key's RFC 7638 thumbprint MUST equal this `jkt`. */
+    expectedJkt?: string;
+    /** If given, a repeated `jti` is rejected and a fresh one is recorded. */
+    seenJti?: JtiSeenSet;
+    /** Override "now" (epoch seconds) — for tests / fixed clocks. */
+    nowSec?: number;
+}
+export interface DpopVerifyResult {
+    /** The verified, type-checked DPoP claims. */
+    claims: DpopClaims;
+    /** The public JWK the proof was signed with (from the header). */
+    jwk: JWK;
+    /** RFC 7638 SHA-256 thumbprint of {@link DpopVerifyResult.jwk}. */
+    jkt: string;
+}
+/** RFC 8705 §3.1 confirmation: the client certificate's SHA-256 thumbprint. */
+export interface MtlsCnf {
+    'x5t#S256': string;
+}
+/** RFC 7638 JWK SHA-256 thumbprint (base64url), via jose. */
+export declare function jwkThumbprint(jwk: JWK, digest?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;
+/** The JWS `alg` for a key, derived from its JWK `kty`/`crv`. Throws for unsupported/MAC keys. */
+export declare function dpopAlgForJwk(jwk: JWK): DpopAlg;
+/** The HTTP target URI with query + fragment stripped (RFC 9449 §4.3), e.g. `https://host:443/path`. */
+export declare function normalizeHtu(url: string): string;
+/** The DPoP access-token hash `ath`: base64url(SHA-256(access token)), RFC 9449 §4.2. */
+export declare function athFor(accessToken: string): string;
+/** Build and sign a DPoP proof JWT (`typ: dpop+jwt`, embedded public `jwk`, claims htm/htu/iat/jti …). */
+export declare function createDpopProof(input: CreateDpopProofInput): Promise<string>;
+/**
+ * Verify a DPoP proof: signature under the embedded `jwk`, `typ`, that `htm`/`htu` match the request,
+ * `iat` freshness, optional `jkt` match and optional `jti` replay rejection. Throws
+ * {@link DpopVerificationError} on any failure; returns the verified claims + key thumbprint on success.
+ */
+export declare function verifyDpopProof(proof: string, opts: VerifyDpopProofOptions): Promise<DpopVerifyResult>;
+/**
+ * RFC 8705 §3.1 `cnf` confirmation for a mutual-TLS client certificate: `{ "x5t#S256": b64u(sha256(DER)) }`.
+ * Accepts the certificate as DER bytes or as a PEM string.
+ */
+export declare function mtlsCnf(certDerOrPem: Uint8Array | string): MtlsCnf;
+/**
+ * The OKP/Ed25519 public JWK of the PCActn's bound holder key — the LEAF of its capability chain
+ * (`cap_chain[last].holder`, a base64url Ed25519 public key). Throws if the chain is empty.
+ */
+export declare function leafHolderJwk(p: PCActn): JWK;
+/** The `cnf: { jkt }` confirmation for a PCActn's bound holder key (RFC 9449 §6 jkt binding). */
+export declare function bindPcaToDpop(p: PCActn): Promise<{
+    jkt: string;
+}>;
+/**
+ * Confirm a presented DPoP proof is held by the PCActn's bound holder key AND is for the given HTTP
+ * target: verifies the proof with `expectedJkt` fixed to the PCActn's leaf-holder thumbprint. Throws
+ * {@link DpopVerificationError} on any mismatch; returns the verified result on success.
+ */
+export declare function assertPcaDpop(p: PCActn, dpopProof: string, opts: {
+    method: string;
+    url: string;
+    maxAgeSec?: number;
+    seenJti?: JtiSeenSet;
+    nowSec?: number;
+}): Promise<DpopVerifyResult>;

package/dist/index.js

@@ -0,0 +1,252 @@
+"use strict";
+/**
+ * `@atlasauth/pca-dpop` — sender-constrained proof-of-possession for PCA.
+ *
+ * Two PoP mechanisms, bound to a PCActn's REAL holder key so an action is tied to the holder it was
+ * delegated to and interops with OAuth proof-of-possession:
+ *
+ *  - **RFC 9449 DPoP**: a holder-key-signed `dpop+jwt` proof over the HTTP method + target URI. The
+ *    public key rides in the proof header (`jwk`); its RFC 7638 thumbprint is the `jkt`.
+ *  - **RFC 8705 mTLS**: an `x5t#S256` certificate-thumbprint confirmation for the mutual-TLS channel.
+ *
+ * The PCActn's bound holder key is the LEAF of its capability chain — `cap_chain[last].holder` — a
+ * base64url (no-pad) Ed25519 public key (see `@atlasauth/pca` `Capability.holder`, which the core leaf
+ * signature is verified under). That raw key is exactly an OKP/Ed25519 JWK with `x = holder`, so a DPoP
+ * proof signed by the holder key, embedding that OKP JWK, has a `jkt` equal to the PCActn's binding —
+ * {@link bindPcaToDpop} computes that binding and {@link assertPcaDpop} enforces it against a proof.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DpopVerificationError = exports.DPOP_CLOCK_SKEW_SEC = exports.DPOP_DEFAULT_MAX_AGE_SEC = exports.DPOP_JWT_TYP = exports.DPOP_ALLOWED_ALGS = void 0;
+exports.jwkThumbprint = jwkThumbprint;
+exports.dpopAlgForJwk = dpopAlgForJwk;
+exports.normalizeHtu = normalizeHtu;
+exports.athFor = athFor;
+exports.createDpopProof = createDpopProof;
+exports.verifyDpopProof = verifyDpopProof;
+exports.mtlsCnf = mtlsCnf;
+exports.leafHolderJwk = leafHolderJwk;
+exports.bindPcaToDpop = bindPcaToDpop;
+exports.assertPcaDpop = assertPcaDpop;
+const jose_1 = require("jose");
+const pca_1 = require("@atlasauth/pca");
+// ---- constants ---------------------------------------------------------------------------------
+/** JWS algorithms a DPoP proof may use: asymmetric only, never `none` or a MAC (RFC 9449 §4.2). */
+exports.DPOP_ALLOWED_ALGS = ['EdDSA', 'ES256', 'ES384', 'ES512', 'PS256', 'RS256'];
+/** DPoP proof type header (`typ`), RFC 9449 §4.2. */
+exports.DPOP_JWT_TYP = 'dpop+jwt';
+/** Default accepted proof age (seconds) when a caller does not pass `maxAgeSec`. */
+exports.DPOP_DEFAULT_MAX_AGE_SEC = 300;
+/** Clock-skew allowance (seconds) for a proof whose `iat` is slightly ahead of the verifier. */
+exports.DPOP_CLOCK_SKEW_SEC = 5;
+// ---- errors ------------------------------------------------------------------------------------
+/** A DPoP proof (or PCActn↔DPoP binding) that failed to verify. `code` names the specific check. */
+class DpopVerificationError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'DpopVerificationError';
+        this.code = code;
+    }
+}
+exports.DpopVerificationError = DpopVerificationError;
+// ---- helpers -----------------------------------------------------------------------------------
+/** RFC 7638 JWK SHA-256 thumbprint (base64url), via jose. */
+function jwkThumbprint(jwk, digest = 'sha256') {
+    return (0, jose_1.calculateJwkThumbprint)(jwk, digest);
+}
+/** The JWS `alg` for a key, derived from its JWK `kty`/`crv`. Throws for unsupported/MAC keys. */
+function dpopAlgForJwk(jwk) {
+    switch (jwk.kty) {
+        case 'OKP':
+            if (jwk.crv === 'Ed25519' || jwk.crv === 'Ed448')
+                return 'EdDSA';
+            throw new DpopVerificationError('unsupported_key', `unsupported OKP curve '${String(jwk.crv)}' for DPoP`);
+        case 'EC':
+            if (jwk.crv === 'P-256')
+                return 'ES256';
+            if (jwk.crv === 'P-384')
+                return 'ES384';
+            if (jwk.crv === 'P-521')
+                return 'ES512';
+            throw new DpopVerificationError('unsupported_key', `unsupported EC curve '${String(jwk.crv)}' for DPoP`);
+        case 'RSA':
+            return 'PS256';
+        default:
+            throw new DpopVerificationError('unsupported_key', `unsupported key type '${String(jwk.kty)}' for DPoP`);
+    }
+}
+/** Project a JWK down to its PUBLIC members, so no private material is ever embedded in a proof. */
+function toPublicJwk(jwk) {
+    const pub = { kty: jwk.kty };
+    if (jwk.crv !== undefined)
+        pub.crv = jwk.crv;
+    if (jwk.x !== undefined)
+        pub.x = jwk.x;
+    if (jwk.y !== undefined)
+        pub.y = jwk.y;
+    if (jwk.n !== undefined)
+        pub.n = jwk.n;
+    if (jwk.e !== undefined)
+        pub.e = jwk.e;
+    return pub;
+}
+/** The HTTP target URI with query + fragment stripped (RFC 9449 §4.3), e.g. `https://host:443/path`. */
+function normalizeHtu(url) {
+    const u = new URL(url);
+    return `${u.protocol}//${u.host}${u.pathname}`;
+}
+/** The DPoP access-token hash `ath`: base64url(SHA-256(access token)), RFC 9449 §4.2. */
+function athFor(accessToken) {
+    return (0, pca_1.b64u)((0, pca_1.sha256)(new TextEncoder().encode(accessToken)));
+}
+function freshJti() {
+    return globalThis.crypto.randomUUID();
+}
+/** Message of a caught `unknown` without asserting its type. */
+function errMsg(e) {
+    return e instanceof Error ? e.message : String(e);
+}
+// ---- DPoP proof: create / verify --------------------------------------------------------------
+/** Build and sign a DPoP proof JWT (`typ: dpop+jwt`, embedded public `jwk`, claims htm/htu/iat/jti …). */
+async function createDpopProof(input) {
+    const publicJwk = toPublicJwk(input.publicJwk);
+    const alg = dpopAlgForJwk(publicJwk);
+    const iat = input.iat ?? Math.floor(Date.now() / 1000);
+    const claims = {
+        htm: input.method.toUpperCase(),
+        htu: normalizeHtu(input.url),
+        iat,
+        jti: input.jti ?? freshJti(),
+        ...(input.nonce !== undefined ? { nonce: input.nonce } : {}),
+        ...(input.ath !== undefined ? { ath: input.ath } : {}),
+    };
+    return new jose_1.SignJWT(claims).setProtectedHeader({ typ: exports.DPOP_JWT_TYP, alg, jwk: publicJwk }).sign(input.privateKey);
+}
+/**
+ * Verify a DPoP proof: signature under the embedded `jwk`, `typ`, that `htm`/`htu` match the request,
+ * `iat` freshness, optional `jkt` match and optional `jti` replay rejection. Throws
+ * {@link DpopVerificationError} on any failure; returns the verified claims + key thumbprint on success.
+ */
+async function verifyDpopProof(proof, opts) {
+    // Reject a missing / non-public / absent-`jwk` header before trusting the signature.
+    let header;
+    try {
+        header = (0, jose_1.decodeProtectedHeader)(proof);
+    }
+    catch (e) {
+        throw new DpopVerificationError('malformed', `not a JWS: ${errMsg(e)}`);
+    }
+    if (header.typ !== exports.DPOP_JWT_TYP) {
+        throw new DpopVerificationError('typ', `header typ must be '${exports.DPOP_JWT_TYP}', got '${String(header.typ)}'`);
+    }
+    if (header.jwk === undefined)
+        throw new DpopVerificationError('no_jwk', 'proof header has no embedded jwk');
+    // Signature: EmbeddedJWK verifies under the header `jwk`; `algorithms` pins the asymmetric suite.
+    let payload;
+    let jwk;
+    try {
+        const res = await (0, jose_1.jwtVerify)(proof, jose_1.EmbeddedJWK, { algorithms: [...exports.DPOP_ALLOWED_ALGS], typ: exports.DPOP_JWT_TYP });
+        payload = res.payload;
+        const resolved = res.protectedHeader.jwk;
+        if (resolved === undefined)
+            throw new DpopVerificationError('no_jwk', 'verified header has no embedded jwk');
+        jwk = resolved;
+    }
+    catch (e) {
+        if (e instanceof DpopVerificationError)
+            throw e;
+        throw new DpopVerificationError('signature', `DPoP signature did not verify: ${errMsg(e)}`);
+    }
+    // Claim shapes.
+    const { htm, htu, iat, jti } = payload;
+    if (typeof htm !== 'string')
+        throw new DpopVerificationError('htm', 'htm is missing or not a string');
+    if (typeof htu !== 'string')
+        throw new DpopVerificationError('htu', 'htu is missing or not a string');
+    if (typeof iat !== 'number' || !Number.isFinite(iat))
+        throw new DpopVerificationError('iat', 'iat is missing or not a number');
+    if (typeof jti !== 'string' || jti.length === 0)
+        throw new DpopVerificationError('jti', 'jti is missing or empty');
+    // htm / htu bind the proof to this exact request.
+    if (htm !== opts.method.toUpperCase())
+        throw new DpopVerificationError('htm', `htm '${htm}' does not match request method`);
+    if (htu !== normalizeHtu(opts.url))
+        throw new DpopVerificationError('htu', `htu '${htu}' does not match request URL`);
+    // Freshness.
+    const now = opts.nowSec ?? Math.floor(Date.now() / 1000);
+    if (iat > now + exports.DPOP_CLOCK_SKEW_SEC)
+        throw new DpopVerificationError('iat_future', 'iat is in the future');
+    if (now - iat > opts.maxAgeSec)
+        throw new DpopVerificationError('iat_stale', `proof is older than ${opts.maxAgeSec}s`);
+    // Key binding.
+    const jkt = await jwkThumbprint(jwk);
+    if (opts.expectedJkt !== undefined && jkt !== opts.expectedJkt) {
+        throw new DpopVerificationError('jkt', 'embedded key thumbprint does not match expected jkt');
+    }
+    // Replay: reject a reused jti, then record this one.
+    if (opts.seenJti !== undefined) {
+        if (opts.seenJti.has(jti))
+            throw new DpopVerificationError('jti_replay', `jti '${jti}' has already been seen`);
+        opts.seenJti.add(jti);
+    }
+    const nonce = typeof payload.nonce === 'string' ? payload.nonce : undefined;
+    const ath = typeof payload.ath === 'string' ? payload.ath : undefined;
+    const claims = {
+        ...payload,
+        htm,
+        htu,
+        iat,
+        jti,
+        ...(nonce !== undefined ? { nonce } : {}),
+        ...(ath !== undefined ? { ath } : {}),
+    };
+    return { claims, jwk, jkt };
+}
+// ---- RFC 8705 mTLS confirmation ---------------------------------------------------------------
+/** PEM certificate body → DER bytes (base64, standard alphabet). */
+function pemToDer(pem) {
+    const match = pem.match(/-----BEGIN CERTIFICATE-----([\s\S]+?)-----END CERTIFICATE-----/);
+    const body = (match?.[1] ?? pem).replace(/[^A-Za-z0-9+/=]/g, '');
+    return new Uint8Array(Buffer.from(body, 'base64'));
+}
+/**
+ * RFC 8705 §3.1 `cnf` confirmation for a mutual-TLS client certificate: `{ "x5t#S256": b64u(sha256(DER)) }`.
+ * Accepts the certificate as DER bytes or as a PEM string.
+ */
+function mtlsCnf(certDerOrPem) {
+    const der = typeof certDerOrPem === 'string' ? pemToDer(certDerOrPem) : certDerOrPem;
+    return { 'x5t#S256': (0, pca_1.b64u)((0, pca_1.sha256)(der)) };
+}
+// ---- PCActn ↔ DPoP binding --------------------------------------------------------------------
+/**
+ * The OKP/Ed25519 public JWK of the PCActn's bound holder key — the LEAF of its capability chain
+ * (`cap_chain[last].holder`, a base64url Ed25519 public key). Throws if the chain is empty.
+ */
+function leafHolderJwk(p) {
+    const chain = p.cap_chain;
+    const leaf = chain[chain.length - 1];
+    if (leaf === undefined)
+        throw new DpopVerificationError('no_leaf', 'PCActn capability chain is empty; no bound holder key');
+    return { kty: 'OKP', crv: 'Ed25519', x: leaf.holder };
+}
+/** The `cnf: { jkt }` confirmation for a PCActn's bound holder key (RFC 9449 §6 jkt binding). */
+async function bindPcaToDpop(p) {
+    return { jkt: await jwkThumbprint(leafHolderJwk(p)) };
+}
+/**
+ * Confirm a presented DPoP proof is held by the PCActn's bound holder key AND is for the given HTTP
+ * target: verifies the proof with `expectedJkt` fixed to the PCActn's leaf-holder thumbprint. Throws
+ * {@link DpopVerificationError} on any mismatch; returns the verified result on success.
+ */
+async function assertPcaDpop(p, dpopProof, opts) {
+    const { jkt } = await bindPcaToDpop(p);
+    return verifyDpopProof(dpopProof, {
+        method: opts.method,
+        url: opts.url,
+        maxAgeSec: opts.maxAgeSec ?? exports.DPOP_DEFAULT_MAX_AGE_SEC,
+        expectedJkt: jkt,
+        ...(opts.seenJti !== undefined ? { seenJti: opts.seenJti } : {}),
+        ...(opts.nowSec !== undefined ? { nowSec: opts.nowSec } : {}),
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA0GH,sCAEC;AAGD,sCAeC;AAcD,oCAGC;AAGD,wBAEC;AAcD,0CAaC;AAOD,0CAmEC;AAeD,0BAGC;AAQD,sCAKC;AAGD,sCAEC;AAOD,sCAcC;AAhTD,+BAAsG;AAEtG,wCAA2D;AAE3D,mGAAmG;AAEnG,mGAAmG;AACtF,QAAA,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAGjG,qDAAqD;AACxC,QAAA,YAAY,GAAG,UAAU,CAAC;AAEvC,oFAAoF;AACvE,QAAA,wBAAwB,GAAG,GAAG,CAAC;AAE5C,gGAAgG;AACnF,QAAA,mBAAmB,GAAG,CAAC,CAAC;AAErC,mGAAmG;AAEnG,oGAAoG;AACpG,MAAa,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAPD,sDAOC;AAwED,mGAAmG;AAEnG,6DAA6D;AAC7D,SAAgB,aAAa,CAAC,GAAQ,EAAE,SAAyC,QAAQ;IACvF,OAAO,IAAA,6BAAsB,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,kGAAkG;AAClG,SAAgB,aAAa,CAAC,GAAQ;IACpC,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,KAAK;YACR,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YACjE,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5G,KAAK,IAAI;YACP,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YACxC,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YACxC,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YACxC,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,yBAAyB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3G,KAAK,KAAK;YACR,OAAO,OAAO,CAAC;QACjB;YACE,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,yBAAyB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,WAAW,CAAC,GAAQ;IAC3B,MAAM,GAAG,GAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IAC7C,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wGAAwG;AACxG,SAAgB,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjD,CAAC;AAED,yFAAyF;AACzF,SAAgB,MAAM,CAAC,WAAmB;IACxC,OAAO,IAAA,UAAI,EAAC,IAAA,YAAM,EAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,gEAAgE;AAChE,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kGAAkG;AAElG,0GAA0G;AACnG,KAAK,UAAU,eAAe,CAAC,KAA2B;IAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,MAAM,MAAM,GAAe;QACzB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC/B,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;QAC5B,GAAG;QACH,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE;QAC5B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC;IACF,OAAO,IAAI,cAAO,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,oBAAY,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AACnH,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,IAA4B;IAC/E,qFAAqF;IACrF,IAAI,MAAgD,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,4BAAqB,EAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,cAAc,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,oBAAY,EAAE,CAAC;QAChC,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,uBAAuB,oBAAY,WAAW,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;IAE5G,kGAAkG;IAClG,IAAI,OAAmB,CAAC;IACxB,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAA,gBAAS,EAAC,KAAK,EAAE,kBAAW,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,yBAAiB,CAAC,EAAE,GAAG,EAAE,oBAAY,EAAE,CAAC,CAAC;QAC3G,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC;QACzC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QAC7G,GAAG,GAAG,QAAQ,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,qBAAqB;YAAE,MAAM,CAAC,CAAC;QAChD,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,kCAAkC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,gBAAgB;IAChB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IACtG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IACtG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IAC/H,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IAEnH,kDAAkD;IAClD,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,QAAQ,GAAG,iCAAiC,CAAC,CAAC;IAC5H,IAAI,GAAG,KAAK,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,QAAQ,GAAG,8BAA8B,CAAC,CAAC;IAEtH,aAAa;IACb,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACzD,IAAI,GAAG,GAAG,GAAG,GAAG,2BAAmB;QAAE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IAC3G,IAAI,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,qBAAqB,CAAC,WAAW,EAAE,uBAAuB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IAEvH,eAAe;IACf,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC/D,MAAM,IAAI,qBAAqB,CAAC,KAAK,EAAE,qDAAqD,CAAC,CAAC;IAChG,CAAC;IAED,qDAAqD;IACrD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,QAAQ,GAAG,yBAAyB,CAAC,CAAC;QAC/G,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,MAAM,GAAe;QACzB,GAAG,OAAO;QACV,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED,kGAAkG;AAElG,oEAAoE;AACpE,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,SAAgB,OAAO,CAAC,YAAiC;IACvD,MAAM,GAAG,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACrF,OAAO,EAAE,UAAU,EAAE,IAAA,UAAI,EAAC,IAAA,YAAM,EAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,kGAAkG;AAElG;;;GAGG;AACH,SAAgB,aAAa,CAAC,CAAS;IACrC,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,EAAE,uDAAuD,CAAC,CAAC;IAC5H,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AACxD,CAAC;AAED,iGAAiG;AAC1F,KAAK,UAAU,aAAa,CAAC,CAAS;IAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,aAAa,CACjC,CAAS,EACT,SAAiB,EACjB,IAAgG;IAEhG,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,eAAe,CAAC,SAAS,EAAE;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,gCAAwB;QACrD,WAAW,EAAE,GAAG;QAChB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,34 @@
 {
   "name": "@atlasauth/pca-dpop",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "Sender-constrained proof-of-possession for PCA: RFC 9449 DPoP proofs and RFC 8705 mTLS cnf binding, tying a PCActn to the holder key/channel for OAuth PoP interop.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "jose": "^5.9.6",
+    "@atlasauth/pca": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.