@atproto/jwk 0.4.0 → 0.6.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,5 +1,31 @@
1
1
  # @atproto/jwk
2
2
 
3
+ ## 0.6.0
4
+
5
+ ### Minor Changes
6
+
7
+ - [#4103](https://github.com/bluesky-social/atproto/pull/4103) [`f560cf226`](https://github.com/bluesky-social/atproto/commit/f560cf2266715666ce5852ab095fcfb3876ae815) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Update key matching algorithm to support `key_ops`
8
+
9
+ - [#4103](https://github.com/bluesky-social/atproto/pull/4103) [`f560cf226`](https://github.com/bluesky-social/atproto/commit/f560cf2266715666ce5852ab095fcfb3876ae815) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Only allow `"use"` claims in public jwk
10
+
11
+ ### Patch Changes
12
+
13
+ - [#4103](https://github.com/bluesky-social/atproto/pull/4103) [`f560cf226`](https://github.com/bluesky-social/atproto/commit/f560cf2266715666ce5852ab095fcfb3876ae815) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Silently ignore invalid JWKs from JSON Web Key Set (as per spec)
14
+
15
+ - [#4220](https://github.com/bluesky-social/atproto/pull/4220) [`fefe70126`](https://github.com/bluesky-social/atproto/commit/fefe70126d0ea82507ac750f669b3478290f186b) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Make the `jwk` property of `Key` instances public
16
+
17
+ - [#4103](https://github.com/bluesky-social/atproto/pull/4103) [`f560cf226`](https://github.com/bluesky-social/atproto/commit/f560cf2266715666ce5852ab095fcfb3876ae815) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Avoid using `revoked` and inactive keys from JWK sets
18
+
19
+ ## 0.5.0
20
+
21
+ ### Minor Changes
22
+
23
+ - [#4101](https://github.com/bluesky-social/atproto/pull/4101) [`8a88e2c15`](https://github.com/bluesky-social/atproto/commit/8a88e2c15451f5e8239400eeb277ad31d178b8e6) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Prevent inconsistent use of `use` and `key_ops` in JWK
24
+
25
+ ### Patch Changes
26
+
27
+ - [#4101](https://github.com/bluesky-social/atproto/pull/4101) [`8a88e2c15`](https://github.com/bluesky-social/atproto/commit/8a88e2c15451f5e8239400eeb277ad31d178b8e6) Thanks [@matthieusieben](https://github.com/matthieusieben)! - Remove requirement for JWK to define either `use` or `key_ops`.
28
+
3
29
  ## 0.4.0
4
30
 
5
31
  ### Minor Changes
package/dist/alg.d.ts CHANGED
@@ -1,3 +1,3 @@
1
- import { Jwk } from './jwk.js';
2
- export declare function jwkAlgorithms(jwk: Jwk): Generator<string>;
1
+ import { JwkBase } from './jwk.js';
2
+ export declare function jwkAlgorithms(jwk: JwkBase): Generator<string, void, unknown>;
3
3
  //# sourceMappingURL=alg.d.ts.map
package/dist/alg.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"alg.d.ts","sourceRoot":"","sources":["../src/alg.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAO9B,wBAAiB,aAAa,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CA0F1D"}
1
+ {"version":3,"file":"alg.d.ts","sourceRoot":"","sources":["../src/alg.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAgC,MAAM,UAAU,CAAA;AAOhE,wBAAiB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CA0F7E"}
package/dist/alg.js CHANGED
@@ -2,25 +2,25 @@
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.jwkAlgorithms = jwkAlgorithms;
4
4
  const errors_js_1 = require("./errors.js");
5
+ const jwk_js_1 = require("./jwk.js");
5
6
  // Copy variable to prevent bundlers from automatically polyfilling "process" (e.g. parcel)
6
7
  const { process } = globalThis;
7
8
  const IS_NODE_RUNTIME = typeof process !== 'undefined' && typeof process?.versions?.node === 'string';
8
9
  function* jwkAlgorithms(jwk) {
9
10
  // Ed25519, Ed448, and secp256k1 always have "alg"
10
- // OKP always has "use"
11
- if (jwk.alg) {
11
+ if (typeof jwk.alg === 'string') {
12
12
  yield jwk.alg;
13
13
  return;
14
14
  }
15
15
  switch (jwk.kty) {
16
16
  case 'EC': {
17
- if (jwk.use === 'enc' || jwk.use === undefined) {
17
+ if (jwkSupportsEnc(jwk)) {
18
18
  yield 'ECDH-ES';
19
19
  yield 'ECDH-ES+A128KW';
20
20
  yield 'ECDH-ES+A192KW';
21
21
  yield 'ECDH-ES+A256KW';
22
22
  }
23
- if (jwk.use === 'sig' || jwk.use === undefined) {
23
+ if (jwkSupportsSig(jwk)) {
24
24
  const crv = 'crv' in jwk ? jwk.crv : undefined;
25
25
  switch (crv) {
26
26
  case 'P-256':
@@ -50,7 +50,7 @@ function* jwkAlgorithms(jwk) {
50
50
  return;
51
51
  }
52
52
  case 'RSA': {
53
- if (jwk.use === 'enc' || jwk.use === undefined) {
53
+ if (jwkSupportsEnc(jwk)) {
54
54
  yield 'RSA-OAEP';
55
55
  yield 'RSA-OAEP-256';
56
56
  yield 'RSA-OAEP-384';
@@ -58,7 +58,7 @@ function* jwkAlgorithms(jwk) {
58
58
  if (IS_NODE_RUNTIME)
59
59
  yield 'RSA1_5';
60
60
  }
61
- if (jwk.use === 'sig' || jwk.use === undefined) {
61
+ if (jwkSupportsSig(jwk)) {
62
62
  yield 'PS256';
63
63
  yield 'PS384';
64
64
  yield 'PS512';
@@ -69,7 +69,7 @@ function* jwkAlgorithms(jwk) {
69
69
  return;
70
70
  }
71
71
  case 'oct': {
72
- if (jwk.use === 'enc' || jwk.use === undefined) {
72
+ if (jwkSupportsEnc(jwk)) {
73
73
  yield 'A128GCMKW';
74
74
  yield 'A192GCMKW';
75
75
  yield 'A256GCMKW';
@@ -77,7 +77,7 @@ function* jwkAlgorithms(jwk) {
77
77
  yield 'A192KW';
78
78
  yield 'A256KW';
79
79
  }
80
- if (jwk.use === 'sig' || jwk.use === undefined) {
80
+ if (jwkSupportsSig(jwk)) {
81
81
  yield 'HS256';
82
82
  yield 'HS384';
83
83
  yield 'HS512';
@@ -88,4 +88,10 @@ function* jwkAlgorithms(jwk) {
88
88
  throw new errors_js_1.JwkError(`Unsupported kty "${jwk.kty}"`);
89
89
  }
90
90
  }
91
+ function jwkSupportsEnc(jwk) {
92
+ return (jwk.key_ops?.some(jwk_js_1.isEncKeyUsage) ?? (jwk.use == null || jwk.use === 'enc'));
93
+ }
94
+ function jwkSupportsSig(jwk) {
95
+ return (jwk.key_ops?.some(jwk_js_1.isSigKeyUsage) ?? (jwk.use == null || jwk.use === 'sig'));
96
+ }
91
97
  //# sourceMappingURL=alg.js.map
package/dist/alg.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"alg.js","sourceRoot":"","sources":["../src/alg.ts"],"names":[],"mappings":";;AAQA,sCA0FC;AAlGD,2CAAsC;AAGtC,2FAA2F;AAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAA;AAC9B,MAAM,eAAe,GACnB,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,OAAO,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAA;AAE/E,QAAe,CAAC,CAAC,aAAa,CAAC,GAAQ;IACrC,kDAAkD;IAClD,uBAAuB;IACvB,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,MAAM,GAAG,CAAC,GAAG,CAAA;QACb,OAAM;IACR,CAAC;IAED,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,SAAS,CAAA;gBACf,MAAM,gBAAgB,CAAA;gBACtB,MAAM,gBAAgB,CAAA;gBACtB,MAAM,gBAAgB,CAAA;YACxB,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC9C,QAAQ,GAAG,EAAE,CAAC;oBACZ,KAAK,OAAO,CAAC;oBACb,KAAK,OAAO;wBACV,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;wBAC1B,MAAK;oBACP,KAAK,OAAO;wBACV,MAAM,OAAO,CAAA;wBACb,MAAK;oBACP,KAAK,WAAW;wBACd,IAAI,eAAe;4BAAE,MAAM,QAAQ,CAAA;wBACnC,MAAK;oBACP;wBACE,MAAM,IAAI,oBAAQ,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAED,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,GAAG;gBAAE,MAAM,IAAI,oBAAQ,CAAC,+BAA+B,CAAC,CAAA;YACjE,MAAM,SAAS,CAAA;YACf,MAAM,gBAAgB,CAAA;YACtB,MAAM,gBAAgB,CAAA;YACtB,MAAM,gBAAgB,CAAA;YACtB,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,UAAU,CAAA;gBAChB,MAAM,cAAc,CAAA;gBACpB,MAAM,cAAc,CAAA;gBACpB,MAAM,cAAc,CAAA;gBACpB,IAAI,eAAe;oBAAE,MAAM,QAAQ,CAAA;YACrC,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;YACf,CAAC;YAED,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,WAAW,CAAA;gBACjB,MAAM,WAAW,CAAA;gBACjB,MAAM,WAAW,CAAA;gBACjB,MAAM,QAAQ,CAAA;gBACd,MAAM,QAAQ,CAAA;gBACd,MAAM,QAAQ,CAAA;YAChB,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;YACf,CAAC;YAED,OAAM;QACR,CAAC;QAED;YACE,MAAM,IAAI,oBAAQ,CAAC,oBAAoB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;IACtD,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"alg.js","sourceRoot":"","sources":["../src/alg.ts"],"names":[],"mappings":";;AAQA,sCA0FC;AAlGD,2CAAsC;AACtC,qCAAgE;AAEhE,2FAA2F;AAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,CAAA;AAC9B,MAAM,eAAe,GACnB,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,OAAO,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAA;AAE/E,QAAe,CAAC,CAAC,aAAa,CAAC,GAAY;IACzC,kDAAkD;IAElD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,CAAC,GAAG,CAAA;QACb,OAAM;IACR,CAAC;IAED,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,SAAS,CAAA;gBACf,MAAM,gBAAgB,CAAA;gBACtB,MAAM,gBAAgB,CAAA;gBACtB,MAAM,gBAAgB,CAAA;YACxB,CAAC;YAED,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC9C,QAAQ,GAAG,EAAE,CAAC;oBACZ,KAAK,OAAO,CAAC;oBACb,KAAK,OAAO;wBACV,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;wBAC1B,MAAK;oBACP,KAAK,OAAO;wBACV,MAAM,OAAO,CAAA;wBACb,MAAK;oBACP,KAAK,WAAW;wBACd,IAAI,eAAe;4BAAE,MAAM,QAAQ,CAAA;wBACnC,MAAK;oBACP;wBACE,MAAM,IAAI,oBAAQ,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;gBAClD,CAAC;YACH,CAAC;YAED,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,GAAG;gBAAE,MAAM,IAAI,oBAAQ,CAAC,+BAA+B,CAAC,CAAA;YACjE,MAAM,SAAS,CAAA;YACf,MAAM,gBAAgB,CAAA;YACtB,MAAM,gBAAgB,CAAA;YACtB,MAAM,gBAAgB,CAAA;YACtB,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,UAAU,CAAA;gBAChB,MAAM,cAAc,CAAA;gBACpB,MAAM,cAAc,CAAA;gBACpB,MAAM,cAAc,CAAA;gBACpB,IAAI,eAAe;oBAAE,MAAM,QAAQ,CAAA;YACrC,CAAC;YAED,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;YACf,CAAC;YAED,OAAM;QACR,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,WAAW,CAAA;gBACjB,MAAM,WAAW,CAAA;gBACjB,MAAM,WAAW,CAAA;gBACjB,MAAM,QAAQ,CAAA;gBACd,MAAM,QAAQ,CAAA;gBACd,MAAM,QAAQ,CAAA;YAChB,CAAC;YAED,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;gBACb,MAAM,OAAO,CAAA;YACf,CAAC;YAED,OAAM;QACR,CAAC;QAED;YACE,MAAM,IAAI,oBAAQ,CAAC,oBAAoB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,OAAO,CACL,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,CAC3E,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,OAAO,CACL,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,sBAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,CAC3E,CAAA;AACH,CAAC","sourcesContent":["import { JwkError } from './errors.js'\nimport { JwkBase, isEncKeyUsage, isSigKeyUsage } from './jwk.js'\n\n// Copy variable to prevent bundlers from automatically polyfilling \"process\" (e.g. parcel)\nconst { process } = globalThis\nconst IS_NODE_RUNTIME =\n typeof process !== 'undefined' && typeof process?.versions?.node === 'string'\n\nexport function* jwkAlgorithms(jwk: JwkBase): Generator<string, void, unknown> {\n // Ed25519, Ed448, and secp256k1 always have \"alg\"\n\n if (typeof jwk.alg === 'string') {\n yield jwk.alg\n return\n }\n\n switch (jwk.kty) {\n case 'EC': {\n if (jwkSupportsEnc(jwk)) {\n yield 'ECDH-ES'\n yield 'ECDH-ES+A128KW'\n yield 'ECDH-ES+A192KW'\n yield 'ECDH-ES+A256KW'\n }\n\n if (jwkSupportsSig(jwk)) {\n const crv = 'crv' in jwk ? jwk.crv : undefined\n switch (crv) {\n case 'P-256':\n case 'P-384':\n yield `ES${crv.slice(-3)}`\n break\n case 'P-521':\n yield 'ES512'\n break\n case 'secp256k1':\n if (IS_NODE_RUNTIME) yield 'ES256K'\n break\n default:\n throw new JwkError(`Unsupported crv \"${crv}\"`)\n }\n }\n\n return\n }\n\n case 'OKP': {\n if (!jwk.use) throw new JwkError('Missing \"use\" Parameter value')\n yield 'ECDH-ES'\n yield 'ECDH-ES+A128KW'\n yield 'ECDH-ES+A192KW'\n yield 'ECDH-ES+A256KW'\n return\n }\n\n case 'RSA': {\n if (jwkSupportsEnc(jwk)) {\n yield 'RSA-OAEP'\n yield 'RSA-OAEP-256'\n yield 'RSA-OAEP-384'\n yield 'RSA-OAEP-512'\n if (IS_NODE_RUNTIME) yield 'RSA1_5'\n }\n\n if (jwkSupportsSig(jwk)) {\n yield 'PS256'\n yield 'PS384'\n yield 'PS512'\n yield 'RS256'\n yield 'RS384'\n yield 'RS512'\n }\n\n return\n }\n\n case 'oct': {\n if (jwkSupportsEnc(jwk)) {\n yield 'A128GCMKW'\n yield 'A192GCMKW'\n yield 'A256GCMKW'\n yield 'A128KW'\n yield 'A192KW'\n yield 'A256KW'\n }\n\n if (jwkSupportsSig(jwk)) {\n yield 'HS256'\n yield 'HS384'\n yield 'HS512'\n }\n\n return\n }\n\n default:\n throw new JwkError(`Unsupported kty \"${jwk.kty}\"`)\n }\n}\n\nfunction jwkSupportsEnc(jwk: JwkBase): boolean {\n return (\n jwk.key_ops?.some(isEncKeyUsage) ?? (jwk.use == null || jwk.use === 'enc')\n )\n}\n\nfunction jwkSupportsSig(jwk: JwkBase): boolean {\n return (\n jwk.key_ops?.some(isSigKeyUsage) ?? (jwk.use == null || jwk.use === 'sig')\n )\n}\n"]}
@@ -1 +1 @@
1
- {"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAEa,QAAA,wBAAwB,GAAG,0BAA0B,CAAA;AACrD,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,iBAAiB,GAAG,mBAAmB,CAAA;AACvC,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,cAAc,GAAG,gBAAgB,CAAA;AACjC,QAAA,cAAc,GAAG,gBAAgB,CAAA;AAE9C,MAAa,QAAS,SAAQ,SAAS;IACrC,YACE,OAAO,GAAG,WAAW,EACL,OAAO,uBAAe,EACtC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAkB;IAIxC,CAAC;CACF;AARD,4BAQC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACE,OAAO,GAAG,sBAAsB,EAChB,OAAO,sBAAc,EACrC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAiB;IAIvC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc,EAAE,IAAa,EAAE,OAAgB;QACzD,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;CACF;AAjBD,wCAiBC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACE,OAAO,GAAG,aAAa,EACP,OAAO,sBAAc,EACrC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAiB;IAIvC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc,EAAE,IAAa,EAAE,OAAgB;QACzD,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;CACF;AAjBD,wCAiBC"}
1
+ {"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAEa,QAAA,wBAAwB,GAAG,0BAA0B,CAAA;AACrD,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,iBAAiB,GAAG,mBAAmB,CAAA;AACvC,QAAA,eAAe,GAAG,iBAAiB,CAAA;AACnC,QAAA,cAAc,GAAG,gBAAgB,CAAA;AACjC,QAAA,cAAc,GAAG,gBAAgB,CAAA;AAE9C,MAAa,QAAS,SAAQ,SAAS;IACrC,YACE,OAAO,GAAG,WAAW,EACL,OAAO,uBAAe,EACtC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAkB;IAIxC,CAAC;CACF;AARD,4BAQC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACE,OAAO,GAAG,sBAAsB,EAChB,OAAO,sBAAc,EACrC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAiB;IAIvC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc,EAAE,IAAa,EAAE,OAAgB;QACzD,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;CACF;AAjBD,wCAiBC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YACE,OAAO,GAAG,aAAa,EACP,OAAO,sBAAc,EACrC,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAHvB;;;;mBAAgB,IAAI;WAAiB;IAIvC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc,EAAE,IAAa,EAAE,OAAgB;QACzD,IAAI,KAAK,YAAY,cAAc;YAAE,OAAO,KAAK,CAAA;QACjD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;CACF;AAjBD,wCAiBC","sourcesContent":["export type ErrorOptions = { cause?: unknown }\n\nexport const ERR_JWKS_NO_MATCHING_KEY = 'ERR_JWKS_NO_MATCHING_KEY'\nexport const ERR_JWK_INVALID = 'ERR_JWK_INVALID'\nexport const ERR_JWK_NOT_FOUND = 'ERR_JWK_NOT_FOUND'\nexport const ERR_JWT_INVALID = 'ERR_JWT_INVALID'\nexport const ERR_JWT_CREATE = 'ERR_JWT_CREATE'\nexport const ERR_JWT_VERIFY = 'ERR_JWT_VERIFY'\n\nexport class JwkError extends TypeError {\n constructor(\n message = 'JWK error',\n public readonly code = ERR_JWK_INVALID,\n options?: ErrorOptions,\n ) {\n super(message, options)\n }\n}\n\nexport class JwtCreateError extends Error {\n constructor(\n message = 'Unable to create JWT',\n public readonly code = ERR_JWT_CREATE,\n options?: ErrorOptions,\n ) {\n super(message, options)\n }\n\n static from(cause: unknown, code?: string, message?: string): JwtCreateError {\n if (cause instanceof JwtCreateError) return cause\n if (cause instanceof JwkError) {\n return new JwtCreateError(message, cause.code, { cause })\n }\n\n return new JwtCreateError(message, code, { cause })\n }\n}\n\nexport class JwtVerifyError extends Error {\n constructor(\n message = 'Invalid JWT',\n public readonly code = ERR_JWT_VERIFY,\n options?: ErrorOptions,\n ) {\n super(message, options)\n }\n\n static from(cause: unknown, code?: string, message?: string): JwtVerifyError {\n if (cause instanceof JwtVerifyError) return cause\n if (cause instanceof JwkError) {\n return new JwtVerifyError(message, cause.code, { cause })\n }\n\n return new JwtVerifyError(message, code, { cause })\n }\n}\n"]}
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,2BAAiD;AAAxC,sGAAA,QAAQ,OAAmB;AAEpC,2CAAwB;AACxB,8CAA2B;AAC3B,2CAAwB;AACxB,4CAAyB;AACzB,kDAA+B;AAC/B,kDAA+B;AAC/B,2CAAwB;AACxB,2CAAwB;AACxB,8CAA2B"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,2BAAiD;AAAxC,sGAAA,QAAQ,OAAmB;AAEpC,2CAAwB;AACxB,8CAA2B;AAC3B,2CAAwB;AACxB,4CAAyB;AACzB,kDAA+B;AAC/B,kDAA+B;AAC/B,2CAAwB;AACxB,2CAAwB;AACxB,8CAA2B","sourcesContent":["// Since we expose zod schemas, let's expose ZodError (under a generic name) so\n// that dependents can catch schema parsing errors without requiring an explicit\n// dependency on zod, or risking a conflict in case of mismatching zob versions.\nexport { ZodError as ValidationError } from 'zod'\n\nexport * from './alg.js'\nexport * from './errors.js'\nexport * from './jwk.js'\nexport * from './jwks.js'\nexport * from './jwt-decode.js'\nexport * from './jwt-verify.js'\nexport * from './jwt.js'\nexport * from './key.js'\nexport * from './keyset.js'\n"]}