@atproto/jwk-webcrypto 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,13 @@
+# @atproto/jwk-webcrypto
+
+## 0.1.0
+
+### Minor Changes
+
+- [#2482](https://github.com/bluesky-social/atproto/pull/2482) [`a8d6c1123`](https://github.com/bluesky-social/atproto/commit/a8d6c112359f5c4c0cfbe2df63443ed275f2a646) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Add OAuth provider capability & support for DPoP signed tokens
+
+### Patch Changes
+
+- Updated dependencies [[`a8d6c1123`](https://github.com/bluesky-social/atproto/commit/a8d6c112359f5c4c0cfbe2df63443ed275f2a646)]:
+  - @atproto/jwk-jose@0.1.0
+  - @atproto/jwk@0.1.0

package/LICENSE.txt

@@ -0,0 +1,7 @@
+Dual MIT/Apache-2.0 License
+
+Copyright (c) 2022-2024 Bluesky PBC, and Contributors
+
+Except as otherwise noted in individual files, this software is licensed under the MIT license (<http://opensource.org/licenses/MIT>), or the Apache License, Version 2.0 (<http://www.apache.org/licenses/LICENSE-2.0>).
+
+Downstream projects and end users may chose either license individually, or both together, at their discretion. The motivation for this dual-licensing is the additional software patent assurance provided by Apache 2.0.

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './webcrypto-key.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAA"}

package/dist/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./webcrypto-key.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAkC"}

package/dist/util.d.ts

@@ -0,0 +1,8 @@
+export type JWSAlgorithm = 'HS256' | 'HS384' | 'HS512' | 'PS256' | 'PS384' | 'PS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES256K' | 'ES384' | 'ES512' | 'EdDSA';
+export type SubtleAlgorithm = RsaHashedKeyGenParams | EcKeyGenParams;
+export declare function toSubtleAlgorithm(alg: string, crv?: string, options?: {
+    modulusLength?: number;
+}): SubtleAlgorithm;
+export declare function fromSubtleAlgorithm(algorithm: KeyAlgorithm): JWSAlgorithm;
+export declare function isCryptoKeyPair(v: unknown, extractable?: boolean): v is CryptoKeyPair;
+//# sourceMappingURL=util.d.ts.map

package/dist/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAEpB,OAAO,GACP,OAAO,GACP,OAAO,GAEP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GAEP,OAAO,GACP,QAAQ,GACR,OAAO,GACP,OAAO,GAEP,OAAO,CAAA;AAEX,MAAM,MAAM,eAAe,GAAG,qBAAqB,GAAG,cAAc,CAAA;AAEpE,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC,eAAe,CAoCjB;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,YAAY,GAAG,YAAY,CAqCzE;AAED,wBAAgB,eAAe,CAC7B,CAAC,EAAE,OAAO,EACV,WAAW,CAAC,EAAE,OAAO,GACpB,CAAC,IAAI,aAAa,CAepB"}

package/dist/util.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCryptoKeyPair = exports.fromSubtleAlgorithm = exports.toSubtleAlgorithm = void 0;
+function toSubtleAlgorithm(alg, crv, options) {
+    switch (alg) {
+        case 'PS256':
+        case 'PS384':
+        case 'PS512':
+            return {
+                name: 'RSA-PSS',
+                hash: `SHA-${alg.slice(-3)}`,
+                modulusLength: options?.modulusLength ?? 2048,
+                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
+            };
+        case 'RS256':
+        case 'RS384':
+        case 'RS512':
+            return {
+                name: 'RSASSA-PKCS1-v1_5',
+                hash: `SHA-${alg.slice(-3)}`,
+                modulusLength: options?.modulusLength ?? 2048,
+                publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
+            };
+        case 'ES256':
+        case 'ES384':
+            return {
+                name: 'ECDSA',
+                namedCurve: `P-${alg.slice(-3)}`,
+            };
+        case 'ES512':
+            return {
+                name: 'ECDSA',
+                namedCurve: 'P-521',
+            };
+        default:
+            // https://github.com/w3c/webcrypto/issues/82#issuecomment-849856773
+            throw new TypeError(`Unsupported alg "${alg}"`);
+    }
+}
+exports.toSubtleAlgorithm = toSubtleAlgorithm;
+function fromSubtleAlgorithm(algorithm) {
+    switch (algorithm.name) {
+        case 'RSA-PSS':
+        case 'RSASSA-PKCS1-v1_5': {
+            const hash = algorithm.hash.name;
+            switch (hash) {
+                case 'SHA-256':
+                case 'SHA-384':
+                case 'SHA-512': {
+                    const prefix = algorithm.name === 'RSA-PSS' ? 'PS' : 'RS';
+                    return `${prefix}${hash.slice(-3)}`;
+                }
+                default:
+                    throw new TypeError('unsupported RsaHashedKeyAlgorithm hash');
+            }
+        }
+        case 'ECDSA': {
+            const namedCurve = algorithm.namedCurve;
+            switch (namedCurve) {
+                case 'P-256':
+                case 'P-384':
+                case 'P-512':
+                    return `ES${namedCurve.slice(-3)}`;
+                case 'P-521':
+                    return 'ES512';
+                default:
+                    throw new TypeError('unsupported EcKeyAlgorithm namedCurve');
+            }
+        }
+        case 'Ed448':
+        case 'Ed25519':
+            return 'EdDSA';
+        default:
+            // https://github.com/w3c/webcrypto/issues/82#issuecomment-849856773
+            throw new TypeError(`Unexpected algorithm "${algorithm.name}"`);
+    }
+}
+exports.fromSubtleAlgorithm = fromSubtleAlgorithm;
+function isCryptoKeyPair(v, extractable) {
+    return (typeof v === 'object' &&
+        v !== null &&
+        'privateKey' in v &&
+        v.privateKey instanceof CryptoKey &&
+        v.privateKey.type === 'private' &&
+        (extractable == null || v.privateKey.extractable === extractable) &&
+        v.privateKey.usages.includes('sign') &&
+        'publicKey' in v &&
+        v.publicKey instanceof CryptoKey &&
+        v.publicKey.type === 'public' &&
+        v.publicKey.extractable === true &&
+        v.publicKey.usages.includes('verify'));
+}
+exports.isCryptoKeyPair = isCryptoKeyPair;
+//# sourceMappingURL=util.js.map

package/dist/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":";;;AAsBA,SAAgB,iBAAiB,CAC/B,GAAW,EACX,GAAY,EACZ,OAAoC;IAEpC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC;QACb,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAA0B,EAAE;gBACrD,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,IAAI;gBAC7C,cAAc,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;aACnD,CAAA;QACH,KAAK,OAAO,CAAC;QACb,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAA0B,EAAE;gBACrD,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,IAAI;gBAC7C,cAAc,EAAE,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;aACnD,CAAA;QACH,KAAK,OAAO,CAAC;QACb,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAkB,EAAE;aAClD,CAAA;QACH,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,OAAO;aACpB,CAAA;QACH;YACE,oEAAoE;YAEpE,MAAM,IAAI,SAAS,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;IACnD,CAAC;AACH,CAAC;AAxCD,8CAwCC;AAED,SAAgB,mBAAmB,CAAC,SAAuB;IACzD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,SAAS,CAAC;QACf,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,IAAI,GAA2B,SAAU,CAAC,IAAI,CAAC,IAAI,CAAA;YACzD,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,SAAS,CAAC;gBACf,KAAK,SAAS,CAAC;gBACf,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;oBACzD,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAA0B,EAAE,CAAA;gBAC9D,CAAC;gBACD;oBACE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,UAAU,GAAoB,SAAU,CAAC,UAAU,CAAA;YACzD,QAAQ,UAAU,EAAE,CAAC;gBACnB,KAAK,OAAO,CAAC;gBACb,KAAK,OAAO,CAAC;gBACb,KAAK,OAAO;oBACV,OAAO,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAA0B,EAAE,CAAA;gBAC7D,KAAK,OAAO;oBACV,OAAO,OAAO,CAAA;gBAChB;oBACE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;YAChE,CAAC;QACH,CAAC;QACD,KAAK,OAAO,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,OAAO,CAAA;QAChB;YACE,oEAAoE;YAEpE,MAAM,IAAI,SAAS,CAAC,yBAAyB,SAAS,CAAC,IAAI,GAAG,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AArCD,kDAqCC;AAED,SAAgB,eAAe,CAC7B,CAAU,EACV,WAAqB;IAErB,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,YAAY,IAAI,CAAC;QACjB,CAAC,CAAC,UAAU,YAAY,SAAS;QACjC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;QAC/B,CAAC,WAAW,IAAI,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC;QACjE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,WAAW,IAAI,CAAC;QAChB,CAAC,CAAC,SAAS,YAAY,SAAS;QAChC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;QAC7B,CAAC,CAAC,SAAS,CAAC,WAAW,KAAK,IAAI;QAChC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACtC,CAAA;AACH,CAAC;AAlBD,0CAkBC"}

package/dist/webcrypto-key.d.ts

@@ -0,0 +1,12 @@
+import { Jwk } from '@atproto/jwk';
+import { GenerateKeyPairOptions, JoseKey } from '@atproto/jwk-jose';
+export declare class WebcryptoKey extends JoseKey {
+    readonly cryptoKeyPair: CryptoKeyPair;
+    static generate(allowedAlgos?: string[], kid?: string, options?: GenerateKeyPairOptions): Promise<WebcryptoKey>;
+    static fromKeypair(cryptoKeyPair: CryptoKeyPair, kid?: string): Promise<WebcryptoKey>;
+    constructor(jwk: Jwk, cryptoKeyPair: CryptoKeyPair);
+    get isPrivate(): boolean;
+    get privateJwk(): Jwk | undefined;
+    protected getKey(): Promise<CryptoKey>;
+}
+//# sourceMappingURL=webcrypto-key.d.ts.map

package/dist/webcrypto-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webcrypto-key.d.ts","sourceRoot":"","sources":["../src/webcrypto-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAa,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAInE,qBAAa,YAAa,SAAQ,OAAO;IA8CrC,QAAQ,CAAC,aAAa,EAAE,aAAa;WA3CjB,QAAQ,CAC5B,YAAY,GAAE,MAAM,EAAc,EAClC,GAAG,GAAE,MAA4B,EACjC,OAAO,CAAC,EAAE,sBAAsB;WAYrB,WAAW,CAAC,aAAa,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM;gBA2BjE,GAAG,EAAE,GAAG,EACC,aAAa,EAAE,aAAa;IAKvC,IAAI,SAAS,YAEZ;IAED,IAAI,UAAU,IAAI,GAAG,GAAG,SAAS,CAGhC;cAEwB,MAAM;CAGhC"}

package/dist/webcrypto-key.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebcryptoKey = void 0;
+const jwk_1 = require("@atproto/jwk");
+const jwk_jose_1 = require("@atproto/jwk-jose");
+const util_js_1 = require("./util.js");
+class WebcryptoKey extends jwk_jose_1.JoseKey {
+    // We need to override the static method generate from JoseKey because
+    // the browser needs both the private and public keys
+    static async generate(allowedAlgos = ['ES256'], kid = crypto.randomUUID(), options) {
+        const keyPair = await this.generateKeyPair(allowedAlgos, options);
+        // Type safety only: in the browser, 'jose' always generates a CryptoKeyPair
+        if (!(0, util_js_1.isCryptoKeyPair)(keyPair)) {
+            throw new TypeError('Invalid CryptoKeyPair');
+        }
+        return this.fromKeypair(keyPair, kid);
+    }
+    static async fromKeypair(cryptoKeyPair, kid) {
+        // https://datatracker.ietf.org/doc/html/rfc7517
+        // > The "use" and "key_ops" JWK members SHOULD NOT be used together; [...]
+        // > Applications should specify which of these members they use.
+        const { key_ops: _, ...jwk } = await crypto.subtle.exportKey('jwk', cryptoKeyPair.privateKey.extractable
+            ? cryptoKeyPair.privateKey
+            : cryptoKeyPair.publicKey);
+        const use = jwk.use ?? 'sig';
+        const alg = jwk.alg ?? (0, util_js_1.fromSubtleAlgorithm)(cryptoKeyPair.privateKey.algorithm);
+        if (use !== 'sig') {
+            throw new TypeError('Unsupported JWK use');
+        }
+        return new WebcryptoKey(jwk_1.jwkSchema.parse({ ...jwk, use, kid, alg }), cryptoKeyPair);
+    }
+    constructor(jwk, cryptoKeyPair) {
+        super(jwk);
+        Object.defineProperty(this, "cryptoKeyPair", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: cryptoKeyPair
+        });
+    }
+    get isPrivate() {
+        return true;
+    }
+    get privateJwk() {
+        if (super.isPrivate)
+            return this.jwk;
+        throw new Error('Private Webcrypto Key not exportable');
+    }
+    async getKey() {
+        return this.cryptoKeyPair.privateKey;
+    }
+}
+exports.WebcryptoKey = WebcryptoKey;
+//# sourceMappingURL=webcrypto-key.js.map

package/dist/webcrypto-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webcrypto-key.js","sourceRoot":"","sources":["../src/webcrypto-key.ts"],"names":[],"mappings":";;;AAAA,sCAA6C;AAC7C,gDAAmE;AAEnE,uCAAgE;AAEhE,MAAa,YAAa,SAAQ,kBAAO;IACvC,sEAAsE;IACtE,qDAAqD;IACrD,MAAM,CAAU,KAAK,CAAC,QAAQ,CAC5B,eAAyB,CAAC,OAAO,CAAC,EAClC,MAAc,MAAM,CAAC,UAAU,EAAE,EACjC,OAAgC;QAEhC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAA;QAEjE,4EAA4E;QAC5E,IAAI,CAAC,IAAA,yBAAe,EAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAA;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACvC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,aAA4B,EAAE,GAAY;QACjE,gDAAgD;QAChD,2EAA2E;QAC3E,iEAAiE;QAEjE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1D,KAAK,EACL,aAAa,CAAC,UAAU,CAAC,WAAW;YAClC,CAAC,CAAC,aAAa,CAAC,UAAU;YAC1B,CAAC,CAAC,aAAa,CAAC,SAAS,CAC5B,CAAA;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,KAAK,CAAA;QAC5B,MAAM,GAAG,GACP,GAAG,CAAC,GAAG,IAAI,IAAA,6BAAmB,EAAC,aAAa,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAEpE,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAA;QAC5C,CAAC;QAED,OAAO,IAAI,YAAY,CACrB,eAAS,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAC1C,aAAa,CACd,CAAA;IACH,CAAC;IAED,YACE,GAAQ,EACC,aAA4B;QAErC,KAAK,CAAC,GAAG,CAAC,CAAA;QAFV;;;;mBAAS,aAAa;WAAe;IAGvC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,UAAU;QACZ,IAAI,KAAK,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAA;QACpC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IAEkB,KAAK,CAAC,MAAM;QAC7B,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAA;IACtC,CAAC;CACF;AA/DD,oCA+DC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@atproto/jwk-webcrypto",
+  "version": "0.1.0",
+  "license": "MIT",
+  "description": "Webcrypto based implementation of @atproto/jwk Key's",
+  "keywords": [
+    "atproto",
+    "jwk",
+    "webcrypto"
+  ],
+  "homepage": "https://atproto.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/bluesky-social/atproto",
+    "directory": "packages/oauth/jwk-webcrypto"
+  },
+  "type": "commonjs",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@atproto/jwk": "0.1.0",
+    "@atproto/jwk-jose": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.3.3"
+  },
+  "scripts": {
+    "build": "tsc --build tsconfig.build.json"
+  }
+}

package/src/index.ts

@@ -0,0 +1 @@
+export * from './webcrypto-key.js'

package/src/util.ts

@@ -0,0 +1,122 @@
+export type JWSAlgorithm =
+  // HMAC
+  | 'HS256'
+  | 'HS384'
+  | 'HS512'
+  // RSA
+  | 'PS256'
+  | 'PS384'
+  | 'PS512'
+  | 'RS256'
+  | 'RS384'
+  | 'RS512'
+  // EC
+  | 'ES256'
+  | 'ES256K'
+  | 'ES384'
+  | 'ES512'
+  // OKP
+  | 'EdDSA'
+
+export type SubtleAlgorithm = RsaHashedKeyGenParams | EcKeyGenParams
+
+export function toSubtleAlgorithm(
+  alg: string,
+  crv?: string,
+  options?: { modulusLength?: number },
+): SubtleAlgorithm {
+  switch (alg) {
+    case 'PS256':
+    case 'PS384':
+    case 'PS512':
+      return {
+        name: 'RSA-PSS',
+        hash: `SHA-${alg.slice(-3) as '256' | '384' | '512'}`,
+        modulusLength: options?.modulusLength ?? 2048,
+        publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
+      }
+    case 'RS256':
+    case 'RS384':
+    case 'RS512':
+      return {
+        name: 'RSASSA-PKCS1-v1_5',
+        hash: `SHA-${alg.slice(-3) as '256' | '384' | '512'}`,
+        modulusLength: options?.modulusLength ?? 2048,
+        publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
+      }
+    case 'ES256':
+    case 'ES384':
+      return {
+        name: 'ECDSA',
+        namedCurve: `P-${alg.slice(-3) as '256' | '384'}`,
+      }
+    case 'ES512':
+      return {
+        name: 'ECDSA',
+        namedCurve: 'P-521',
+      }
+    default:
+      // https://github.com/w3c/webcrypto/issues/82#issuecomment-849856773
+
+      throw new TypeError(`Unsupported alg "${alg}"`)
+  }
+}
+
+export function fromSubtleAlgorithm(algorithm: KeyAlgorithm): JWSAlgorithm {
+  switch (algorithm.name) {
+    case 'RSA-PSS':
+    case 'RSASSA-PKCS1-v1_5': {
+      const hash = (<RsaHashedKeyAlgorithm>algorithm).hash.name
+      switch (hash) {
+        case 'SHA-256':
+        case 'SHA-384':
+        case 'SHA-512': {
+          const prefix = algorithm.name === 'RSA-PSS' ? 'PS' : 'RS'
+          return `${prefix}${hash.slice(-3) as '256' | '384' | '512'}`
+        }
+        default:
+          throw new TypeError('unsupported RsaHashedKeyAlgorithm hash')
+      }
+    }
+    case 'ECDSA': {
+      const namedCurve = (<EcKeyAlgorithm>algorithm).namedCurve
+      switch (namedCurve) {
+        case 'P-256':
+        case 'P-384':
+        case 'P-512':
+          return `ES${namedCurve.slice(-3) as '256' | '384' | '512'}`
+        case 'P-521':
+          return 'ES512'
+        default:
+          throw new TypeError('unsupported EcKeyAlgorithm namedCurve')
+      }
+    }
+    case 'Ed448':
+    case 'Ed25519':
+      return 'EdDSA'
+    default:
+      // https://github.com/w3c/webcrypto/issues/82#issuecomment-849856773
+
+      throw new TypeError(`Unexpected algorithm "${algorithm.name}"`)
+  }
+}
+
+export function isCryptoKeyPair(
+  v: unknown,
+  extractable?: boolean,
+): v is CryptoKeyPair {
+  return (
+    typeof v === 'object' &&
+    v !== null &&
+    'privateKey' in v &&
+    v.privateKey instanceof CryptoKey &&
+    v.privateKey.type === 'private' &&
+    (extractable == null || v.privateKey.extractable === extractable) &&
+    v.privateKey.usages.includes('sign') &&
+    'publicKey' in v &&
+    v.publicKey instanceof CryptoKey &&
+    v.publicKey.type === 'public' &&
+    v.publicKey.extractable === true &&
+    v.publicKey.usages.includes('verify')
+  )
+}

package/src/webcrypto-key.ts

@@ -0,0 +1,69 @@
+import { Jwk, jwkSchema } from '@atproto/jwk'
+import { GenerateKeyPairOptions, JoseKey } from '@atproto/jwk-jose'
+
+import { fromSubtleAlgorithm, isCryptoKeyPair } from './util.js'
+
+export class WebcryptoKey extends JoseKey {
+  // We need to override the static method generate from JoseKey because
+  // the browser needs both the private and public keys
+  static override async generate(
+    allowedAlgos: string[] = ['ES256'],
+    kid: string = crypto.randomUUID(),
+    options?: GenerateKeyPairOptions,
+  ) {
+    const keyPair = await this.generateKeyPair(allowedAlgos, options)
+
+    // Type safety only: in the browser, 'jose' always generates a CryptoKeyPair
+    if (!isCryptoKeyPair(keyPair)) {
+      throw new TypeError('Invalid CryptoKeyPair')
+    }
+
+    return this.fromKeypair(keyPair, kid)
+  }
+
+  static async fromKeypair(cryptoKeyPair: CryptoKeyPair, kid?: string) {
+    // https://datatracker.ietf.org/doc/html/rfc7517
+    // > The "use" and "key_ops" JWK members SHOULD NOT be used together; [...]
+    // > Applications should specify which of these members they use.
+
+    const { key_ops: _, ...jwk } = await crypto.subtle.exportKey(
+      'jwk',
+      cryptoKeyPair.privateKey.extractable
+        ? cryptoKeyPair.privateKey
+        : cryptoKeyPair.publicKey,
+    )
+
+    const use = jwk.use ?? 'sig'
+    const alg =
+      jwk.alg ?? fromSubtleAlgorithm(cryptoKeyPair.privateKey.algorithm)
+
+    if (use !== 'sig') {
+      throw new TypeError('Unsupported JWK use')
+    }
+
+    return new WebcryptoKey(
+      jwkSchema.parse({ ...jwk, use, kid, alg }),
+      cryptoKeyPair,
+    )
+  }
+
+  constructor(
+    jwk: Jwk,
+    readonly cryptoKeyPair: CryptoKeyPair,
+  ) {
+    super(jwk)
+  }
+
+  get isPrivate() {
+    return true
+  }
+
+  get privateJwk(): Jwk | undefined {
+    if (super.isPrivate) return this.jwk
+    throw new Error('Private Webcrypto Key not exportable')
+  }
+
+  protected override async getKey() {
+    return this.cryptoKeyPair.privateKey
+  }
+}

package/tsconfig.build.json

@@ -0,0 +1,8 @@
+{
+  "extends": ["../../../tsconfig/isomorphic.json"],
+  "compilerOptions": {
+    "rootDir": "./src",
+    "outDir": "./dist"
+  },
+  "include": ["./src"]
+}

package/tsconfig.json

@@ -0,0 +1,4 @@
+{
+  "include": [],
+  "references": [{ "path": "./tsconfig.build.json" }]
+}