@atproto/jwk 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @atproto/jwk
+
+## 0.1.0
+
+### Minor Changes
+
+- [#2482](https://github.com/bluesky-social/atproto/pull/2482) [`a8d6c1123`](https://github.com/bluesky-social/atproto/commit/a8d6c112359f5c4c0cfbe2df63443ed275f2a646) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Add OAuth provider capability & support for DPoP signed tokens

package/LICENSE.txt

@@ -0,0 +1,7 @@
+Dual MIT/Apache-2.0 License
+
+Copyright (c) 2022-2024 Bluesky PBC, and Contributors
+
+Except as otherwise noted in individual files, this software is licensed under the MIT license (<http://opensource.org/licenses/MIT>), or the Apache License, Version 2.0 (<http://www.apache.org/licenses/LICENSE-2.0>).
+
+Downstream projects and end users may chose either license individually, or both together, at their discretion. The motivation for this dual-licensing is the additional software patent assurance provided by Apache 2.0.

package/dist/alg.d.ts

@@ -0,0 +1,3 @@
+import { Jwk } from './jwk.js';
+export declare function jwkAlgorithms(jwk: Jwk): Generator<string>;
+//# sourceMappingURL=alg.d.ts.map

package/dist/alg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alg.d.ts","sourceRoot":"","sources":["../src/alg.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAM9B,wBAAiB,aAAa,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CA0F1D"}

package/dist/alg.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jwkAlgorithms = void 0;
+const errors_js_1 = require("./errors.js");
+const IS_NODE_RUNTIME = typeof process !== 'undefined' && typeof process?.versions?.node === 'string';
+function* jwkAlgorithms(jwk) {
+    // Ed25519, Ed448, and secp256k1 always have "alg"
+    // OKP always has "use"
+    if (jwk.alg) {
+        yield jwk.alg;
+        return;
+    }
+    switch (jwk.kty) {
+        case 'EC': {
+            if (jwk.use === 'enc' || jwk.use === undefined) {
+                yield 'ECDH-ES';
+                yield 'ECDH-ES+A128KW';
+                yield 'ECDH-ES+A192KW';
+                yield 'ECDH-ES+A256KW';
+            }
+            if (jwk.use === 'sig' || jwk.use === undefined) {
+                const crv = 'crv' in jwk ? jwk.crv : undefined;
+                switch (crv) {
+                    case 'P-256':
+                    case 'P-384':
+                        yield `ES${crv.slice(-3)}`;
+                        break;
+                    case 'P-521':
+                        yield 'ES512';
+                        break;
+                    case 'secp256k1':
+                        if (IS_NODE_RUNTIME)
+                            yield 'ES256K';
+                        break;
+                    default:
+                        throw new errors_js_1.JwkError(`Unsupported crv "${crv}"`);
+                }
+            }
+            return;
+        }
+        case 'OKP': {
+            if (!jwk.use)
+                throw new errors_js_1.JwkError('Missing "use" Parameter value');
+            yield 'ECDH-ES';
+            yield 'ECDH-ES+A128KW';
+            yield 'ECDH-ES+A192KW';
+            yield 'ECDH-ES+A256KW';
+            return;
+        }
+        case 'RSA': {
+            if (jwk.use === 'enc' || jwk.use === undefined) {
+                yield 'RSA-OAEP';
+                yield 'RSA-OAEP-256';
+                yield 'RSA-OAEP-384';
+                yield 'RSA-OAEP-512';
+                if (IS_NODE_RUNTIME)
+                    yield 'RSA1_5';
+            }
+            if (jwk.use === 'sig' || jwk.use === undefined) {
+                yield 'PS256';
+                yield 'PS384';
+                yield 'PS512';
+                yield 'RS256';
+                yield 'RS384';
+                yield 'RS512';
+            }
+            return;
+        }
+        case 'oct': {
+            if (jwk.use === 'enc' || jwk.use === undefined) {
+                yield 'A128GCMKW';
+                yield 'A192GCMKW';
+                yield 'A256GCMKW';
+                yield 'A128KW';
+                yield 'A192KW';
+                yield 'A256KW';
+            }
+            if (jwk.use === 'sig' || jwk.use === undefined) {
+                yield 'HS256';
+                yield 'HS384';
+                yield 'HS512';
+            }
+            return;
+        }
+        default:
+            throw new errors_js_1.JwkError(`Unsupported kty "${jwk.kty}"`);
+    }
+}
+exports.jwkAlgorithms = jwkAlgorithms;
+//# sourceMappingURL=alg.js.map

package/dist/alg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alg.js","sourceRoot":"","sources":["../src/alg.ts"],"names":[],"mappings":";;;AAAA,2CAAsC;AAItC,MAAM,eAAe,GACnB,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,OAAO,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAA;AAE/E,QAAe,CAAC,CAAC,aAAa,CAAC,GAAQ;IACrC,kDAAkD;IAClD,uBAAuB;IACvB,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,MAAM,GAAG,CAAC,GAAG,CAAA;QACb,OAAM;IACR,CAAC;IAED,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,SAAS,CAAA;gBACf,MAAM,gBAAgB,CAAA;gBACtB,MAAM,gBAAgB,CAAA;gBACtB,MAAM,gBAAgB,CAAA;YACxB,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC9C,QAAQ,GAAG,EAAE,CAAC;oBACZ,KAAK,OAAO,CAAC;oBACb,KAAK,OAAO;wBACV,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;wBAC1B,MAAK;oBACP,KAAK,OAAO;wBACV,MAAM,OAAO,CAAA;wBACb,MAAK;oBACP,KAAK,WAAW;wBACd,IAAI,eAAe;4BAAE,MAAM,QAAQ,CAAA;wBACnC,MAAK;oBACP;wBACE,MAAM,IAAI,oBAAQ,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAED,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,GAAG;gBAAE,MAAM,IAAI,oBAAQ,CAAC,+BAA+B,CAAC,CAAA;YACjE,MAAM,SAAS,CAAA;YACf,MAAM,gBAAgB,CAAA;YACtB,MAAM,gBAAgB,CAAA;YACtB,MAAM,gBAAgB,CAAA;YACtB,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,UAAU,CAAA;gBAChB,MAAM,cAAc,CAAA;gBACpB,MAAM,cAAc,CAAA;gBACpB,MAAM,cAAc,CAAA;gBACpB,IAAI,eAAe;oBAAE,MAAM,QAAQ,CAAA;YACrC,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;YACf,CAAC;YAED,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,WAAW,CAAA;gBACjB,MAAM,WAAW,CAAA;gBACjB,MAAM,WAAW,CAAA;gBACjB,MAAM,QAAQ,CAAA;gBACd,MAAM,QAAQ,CAAA;gBACd,MAAM,QAAQ,CAAA;YAChB,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;YACf,CAAC;YAED,OAAM;QACR,CAAC;QAED;YACE,MAAM,IAAI,oBAAQ,CAAC,oBAAoB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AA1FD,sCA0FC"}

package/dist/errors.d.ts

@@ -0,0 +1,24 @@
+export type ErrorOptions = {
+    cause?: unknown;
+};
+export declare const ERR_JWKS_NO_MATCHING_KEY = "ERR_JWKS_NO_MATCHING_KEY";
+export declare const ERR_JWK_INVALID = "ERR_JWK_INVALID";
+export declare const ERR_JWK_NOT_FOUND = "ERR_JWK_NOT_FOUND";
+export declare const ERR_JWT_INVALID = "ERR_JWT_INVALID";
+export declare const ERR_JWT_CREATE = "ERR_JWT_CREATE";
+export declare const ERR_JWT_VERIFY = "ERR_JWT_VERIFY";
+export declare class JwkError extends TypeError {
+    readonly code: string;
+    constructor(message?: string, code?: string, options?: ErrorOptions);
+}
+export declare class JwtCreateError extends Error {
+    readonly code: string;
+    constructor(message?: string, code?: string, options?: ErrorOptions);
+    static from(cause: unknown, code?: string, message?: string): JwtCreateError;
+}
+export declare class JwtVerifyError extends Error {
+    readonly code: string;
+    constructor(message?: string, code?: string, options?: ErrorOptions);
+    static from(cause: unknown, code?: string, message?: string): JwtVerifyError;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AAE9C,eAAO,MAAM,wBAAwB,6BAA6B,CAAA;AAClE,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,iBAAiB,sBAAsB,CAAA;AACpD,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,cAAc,mBAAmB,CAAA;AAC9C,eAAO,MAAM,cAAc,mBAAmB,CAAA;AAE9C,qBAAa,QAAS,SAAQ,SAAS;aAGnB,IAAI;gBADpB,OAAO,SAAc,EACL,IAAI,SAAkB,EACtC,OAAO,CAAC,EAAE,YAAY;CAIzB;AAED,qBAAa,cAAe,SAAQ,KAAK;aAGrB,IAAI;gBADpB,OAAO,SAAyB,EAChB,IAAI,SAAiB,EACrC,OAAO,CAAC,EAAE,YAAY;IAKxB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc;CAQ7E;AAED,qBAAa,cAAe,SAAQ,KAAK;aAGrB,IAAI;gBADpB,OAAO,SAAgB,EACP,IAAI,SAAiB,EACrC,OAAO,CAAC,EAAE,YAAY;IAKxB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc;CAQ7E"}

package/dist/errors.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtVerifyError = exports.JwtCreateError = exports.JwkError = exports.ERR_JWT_VERIFY = exports.ERR_JWT_CREATE = exports.ERR_JWT_INVALID = exports.ERR_JWK_NOT_FOUND = exports.ERR_JWK_INVALID = exports.ERR_JWKS_NO_MATCHING_KEY = void 0;
+exports.ERR_JWKS_NO_MATCHING_KEY = 'ERR_JWKS_NO_MATCHING_KEY';
+exports.ERR_JWK_INVALID = 'ERR_JWK_INVALID';
+exports.ERR_JWK_NOT_FOUND = 'ERR_JWK_NOT_FOUND';
+exports.ERR_JWT_INVALID = 'ERR_JWT_INVALID';
+exports.ERR_JWT_CREATE = 'ERR_JWT_CREATE';
+exports.ERR_JWT_VERIFY = 'ERR_JWT_VERIFY';
+class JwkError extends TypeError {
+    constructor(message = 'JWK error', code = exports.ERR_JWK_INVALID, options) {
+        super(message, options);
+        Object.defineProperty(this, "code", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: code
+        });
+    }
+}
+exports.JwkError = JwkError;
+class JwtCreateError extends Error {
+    constructor(message = 'Unable to create JWT', code = exports.ERR_JWT_CREATE, options) {
+        super(message, options);
+        Object.defineProperty(this, "code", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: code
+        });
+    }
+    static from(cause, code, message) {
+        if (cause instanceof JwtCreateError)
+            return cause;
+        if (cause instanceof JwkError) {
+            return new JwtCreateError(message, cause.code, { cause });
+        }
+        return new JwtCreateError(message, code, { cause });
+    }
+}
+exports.JwtCreateError = JwtCreateError;
+class JwtVerifyError extends Error {
+    constructor(message = 'Invalid JWT', code = exports.ERR_JWT_VERIFY, options) {
+        super(message, options);
+        Object.defineProperty(this, "code", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: code
+        });
+    }
+    static from(cause, code, message) {
+        if (cause instanceof JwtVerifyError)
+            return cause;
+        if (cause instanceof JwkError) {
+            return new JwtVerifyError(message, cause.code, { cause });
+        }
+        return new JwtVerifyError(message, code, { cause });
+    }
+}
+exports.JwtVerifyError = JwtVerifyError;
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAEa,QAAA,wBAAwB,GAAG,0BAA0B,CAAA;AACrD,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,iBAAiB,GAAG,mBAAmB,CAAA;AACvC,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,cAAc,GAAG,gBAAgB,CAAA;AACjC,QAAA,cAAc,GAAG,gBAAgB,CAAA;AAE9C,MAAa,QAAS,SAAQ,SAAS;IACrC,YACE,OAAO,GAAG,WAAW,EACL,OAAO,uBAAe,EACtC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAkB;IAIxC,CAAC;CACF;AARD,4BAQC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACE,OAAO,GAAG,sBAAsB,EAChB,OAAO,sBAAc,EACrC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAiB;IAIvC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc,EAAE,IAAa,EAAE,OAAgB;QACzD,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;CACF;AAjBD,wCAiBC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACE,OAAO,GAAG,aAAa,EACP,OAAO,sBAAc,EACrC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAiB;IAIvC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc,EAAE,IAAa,EAAE,OAAgB;QACzD,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;CACF;AAjBD,wCAiBC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export * from './alg.js';
+export * from './errors.js';
+export * from './jwk.js';
+export * from './jwks.js';
+export * from './jwt-decode.js';
+export * from './jwt-verify.js';
+export * from './jwt.js';
+export * from './key.js';
+export * from './keyset.js';
+export * from './util.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,cAAc,aAAa,CAAA;AAC3B,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA;AACzB,cAAc,iBAAiB,CAAA;AAC/B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,UAAU,CAAA;AACxB,cAAc,UAAU,CAAA;AACxB,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA"}

package/dist/index.js

@@ -0,0 +1,27 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./alg.js"), exports);
+__exportStar(require("./errors.js"), exports);
+__exportStar(require("./jwk.js"), exports);
+__exportStar(require("./jwks.js"), exports);
+__exportStar(require("./jwt-decode.js"), exports);
+__exportStar(require("./jwt-verify.js"), exports);
+__exportStar(require("./jwt.js"), exports);
+__exportStar(require("./key.js"), exports);
+__exportStar(require("./keyset.js"), exports);
+__exportStar(require("./util.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAwB;AACxB,8CAA2B;AAC3B,2CAAwB;AACxB,4CAAyB;AACzB,kDAA+B;AAC/B,kDAA+B;AAC/B,2CAAwB;AACxB,2CAAwB;AACxB,8CAA2B;AAC3B,4CAAyB"}