@atproto/oauth-client 0.1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (111) hide show
  1. package/CHANGELOG.md +20 -0
  2. package/LICENSE.txt +7 -0
  3. package/README.md +124 -0
  4. package/dist/constants.d.ts +5 -0
  5. package/dist/constants.d.ts.map +1 -0
  6. package/dist/constants.js +8 -0
  7. package/dist/constants.js.map +1 -0
  8. package/dist/fetch-dpop.d.ts +21 -0
  9. package/dist/fetch-dpop.d.ts.map +1 -0
  10. package/dist/fetch-dpop.js +149 -0
  11. package/dist/fetch-dpop.js.map +1 -0
  12. package/dist/index.d.ts +15 -0
  13. package/dist/index.d.ts.map +1 -0
  14. package/dist/index.js +35 -0
  15. package/dist/index.js.map +1 -0
  16. package/dist/lock.d.ts +2 -0
  17. package/dist/lock.d.ts.map +1 -0
  18. package/dist/lock.js +33 -0
  19. package/dist/lock.js.map +1 -0
  20. package/dist/oauth-agent.d.ts +29 -0
  21. package/dist/oauth-agent.d.ts.map +1 -0
  22. package/dist/oauth-agent.js +138 -0
  23. package/dist/oauth-agent.js.map +1 -0
  24. package/dist/oauth-authorization-server-metadata-resolver.d.ts +15 -0
  25. package/dist/oauth-authorization-server-metadata-resolver.d.ts.map +1 -0
  26. package/dist/oauth-authorization-server-metadata-resolver.js +56 -0
  27. package/dist/oauth-authorization-server-metadata-resolver.js.map +1 -0
  28. package/dist/oauth-callback-error.d.ts +7 -0
  29. package/dist/oauth-callback-error.d.ts.map +1 -0
  30. package/dist/oauth-callback-error.js +28 -0
  31. package/dist/oauth-callback-error.js.map +1 -0
  32. package/dist/oauth-client.d.ts +78 -0
  33. package/dist/oauth-client.d.ts.map +1 -0
  34. package/dist/oauth-client.js +278 -0
  35. package/dist/oauth-client.js.map +1 -0
  36. package/dist/oauth-protected-resource-metadata-resolver.d.ts +15 -0
  37. package/dist/oauth-protected-resource-metadata-resolver.d.ts.map +1 -0
  38. package/dist/oauth-protected-resource-metadata-resolver.js +58 -0
  39. package/dist/oauth-protected-resource-metadata-resolver.js.map +1 -0
  40. package/dist/oauth-resolver-error.d.ts +7 -0
  41. package/dist/oauth-resolver-error.d.ts.map +1 -0
  42. package/dist/oauth-resolver-error.js +17 -0
  43. package/dist/oauth-resolver-error.js.map +1 -0
  44. package/dist/oauth-resolver.d.ts +62 -0
  45. package/dist/oauth-resolver.d.ts.map +1 -0
  46. package/dist/oauth-resolver.js +73 -0
  47. package/dist/oauth-resolver.js.map +1 -0
  48. package/dist/oauth-response-error.d.ts +11 -0
  49. package/dist/oauth-response-error.d.ts.map +1 -0
  50. package/dist/oauth-response-error.js +48 -0
  51. package/dist/oauth-response-error.js.map +1 -0
  52. package/dist/oauth-server-agent.d.ts +51 -0
  53. package/dist/oauth-server-agent.d.ts.map +1 -0
  54. package/dist/oauth-server-agent.js +228 -0
  55. package/dist/oauth-server-agent.js.map +1 -0
  56. package/dist/oauth-server-factory.d.ts +20 -0
  57. package/dist/oauth-server-factory.d.ts.map +1 -0
  58. package/dist/oauth-server-factory.js +53 -0
  59. package/dist/oauth-server-factory.js.map +1 -0
  60. package/dist/refresh-error.d.ts +7 -0
  61. package/dist/refresh-error.d.ts.map +1 -0
  62. package/dist/refresh-error.js +16 -0
  63. package/dist/refresh-error.js.map +1 -0
  64. package/dist/runtime-implementation.d.ts +12 -0
  65. package/dist/runtime-implementation.d.ts.map +1 -0
  66. package/dist/runtime-implementation.js +3 -0
  67. package/dist/runtime-implementation.js.map +1 -0
  68. package/dist/runtime.d.ts +35 -0
  69. package/dist/runtime.d.ts.map +1 -0
  70. package/dist/runtime.js +185 -0
  71. package/dist/runtime.js.map +1 -0
  72. package/dist/session-getter.d.ts +30 -0
  73. package/dist/session-getter.d.ts.map +1 -0
  74. package/dist/session-getter.js +149 -0
  75. package/dist/session-getter.js.map +1 -0
  76. package/dist/types.d.ts +1580 -0
  77. package/dist/types.d.ts.map +1 -0
  78. package/dist/types.js +8 -0
  79. package/dist/types.js.map +1 -0
  80. package/dist/util.d.ts +9 -0
  81. package/dist/util.d.ts.map +1 -0
  82. package/dist/util.js +35 -0
  83. package/dist/util.js.map +1 -0
  84. package/dist/validate-client-metadata.d.ts +5 -0
  85. package/dist/validate-client-metadata.d.ts.map +1 -0
  86. package/dist/validate-client-metadata.js +46 -0
  87. package/dist/validate-client-metadata.js.map +1 -0
  88. package/package.json +46 -0
  89. package/src/constants.ts +4 -0
  90. package/src/fetch-dpop.ts +235 -0
  91. package/src/index.ts +18 -0
  92. package/src/lock.ts +34 -0
  93. package/src/oauth-agent.ts +150 -0
  94. package/src/oauth-authorization-server-metadata-resolver.ts +98 -0
  95. package/src/oauth-callback-error.ts +16 -0
  96. package/src/oauth-client.ts +440 -0
  97. package/src/oauth-protected-resource-metadata-resolver.ts +102 -0
  98. package/src/oauth-resolver-error.ts +12 -0
  99. package/src/oauth-resolver.ts +111 -0
  100. package/src/oauth-response-error.ts +31 -0
  101. package/src/oauth-server-agent.ts +275 -0
  102. package/src/oauth-server-factory.ts +41 -0
  103. package/src/refresh-error.ts +9 -0
  104. package/src/runtime-implementation.ts +17 -0
  105. package/src/runtime.ts +211 -0
  106. package/src/session-getter.ts +182 -0
  107. package/src/types.ts +26 -0
  108. package/src/util.ts +51 -0
  109. package/src/validate-client-metadata.ts +61 -0
  110. package/tsconfig.build.json +8 -0
  111. package/tsconfig.json +4 -0
package/dist/types.d.ts ADDED
@@ -0,0 +1,1580 @@
1
+ import z from 'zod';
2
+ export type AuthorizeOptions = {
3
+ display?: 'page' | 'popup' | 'touch' | 'wap';
4
+ redirect_uri?: string;
5
+ id_token_hint?: string;
6
+ max_age?: number;
7
+ prompt?: 'login' | 'none' | 'consent' | 'select_account';
8
+ scope?: string;
9
+ state?: string;
10
+ ui_locales?: string;
11
+ };
12
+ export declare const clientMetadataSchema: z.ZodObject<z.objectUtil.extendShape<{
13
+ redirect_uris: z.ZodArray<z.ZodString, "atleastone">;
14
+ response_types: z.ZodDefault<z.ZodArray<z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>, "atleastone">>;
15
+ grant_types: z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "refresh_token", "password", "client_credentials", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer"]>, "atleastone">>;
16
+ scope: z.ZodOptional<z.ZodString>;
17
+ token_endpoint_auth_method: z.ZodOptional<z.ZodDefault<z.ZodEnum<["client_secret_basic", "client_secret_jwt", "client_secret_post", "none", "private_key_jwt", "self_signed_tls_client_auth", "tls_client_auth"]>>>;
18
+ token_endpoint_auth_signing_alg: z.ZodOptional<z.ZodString>;
19
+ introspection_endpoint_auth_method: z.ZodOptional<z.ZodEnum<["client_secret_basic", "client_secret_jwt", "client_secret_post", "none", "private_key_jwt", "self_signed_tls_client_auth", "tls_client_auth"]>>;
20
+ introspection_endpoint_auth_signing_alg: z.ZodOptional<z.ZodString>;
21
+ revocation_endpoint_auth_method: z.ZodOptional<z.ZodEnum<["client_secret_basic", "client_secret_jwt", "client_secret_post", "none", "private_key_jwt", "self_signed_tls_client_auth", "tls_client_auth"]>>;
22
+ revocation_endpoint_auth_signing_alg: z.ZodOptional<z.ZodString>;
23
+ pushed_authorization_request_endpoint_auth_method: z.ZodOptional<z.ZodEnum<["client_secret_basic", "client_secret_jwt", "client_secret_post", "none", "private_key_jwt", "self_signed_tls_client_auth", "tls_client_auth"]>>;
24
+ pushed_authorization_request_endpoint_auth_signing_alg: z.ZodOptional<z.ZodString>;
25
+ userinfo_signed_response_alg: z.ZodOptional<z.ZodString>;
26
+ userinfo_encrypted_response_alg: z.ZodOptional<z.ZodString>;
27
+ jwks_uri: z.ZodOptional<z.ZodString>;
28
+ jwks: z.ZodOptional<z.ZodObject<{
29
+ keys: z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodObject<z.objectUtil.extendShape<{
30
+ kty: z.ZodString;
31
+ alg: z.ZodOptional<z.ZodString>;
32
+ kid: z.ZodOptional<z.ZodString>;
33
+ ext: z.ZodOptional<z.ZodBoolean>;
34
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
35
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
36
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
37
+ x5t: z.ZodOptional<z.ZodString>;
38
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
39
+ x5u: z.ZodOptional<z.ZodString>;
40
+ }, {
41
+ kty: z.ZodEffects<z.ZodString, string, string>;
42
+ }>, "strip", z.ZodTypeAny, {
43
+ kty: string;
44
+ alg?: string | undefined;
45
+ kid?: string | undefined;
46
+ ext?: boolean | undefined;
47
+ use?: "sig" | "enc" | undefined;
48
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
49
+ x5c?: string[] | undefined;
50
+ x5t?: string | undefined;
51
+ 'x5t#S256'?: string | undefined;
52
+ x5u?: string | undefined;
53
+ }, {
54
+ kty: string;
55
+ alg?: string | undefined;
56
+ kid?: string | undefined;
57
+ ext?: boolean | undefined;
58
+ use?: "sig" | "enc" | undefined;
59
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
60
+ x5c?: string[] | undefined;
61
+ x5t?: string | undefined;
62
+ 'x5t#S256'?: string | undefined;
63
+ x5u?: string | undefined;
64
+ }>, z.ZodObject<z.objectUtil.extendShape<{
65
+ kty: z.ZodString;
66
+ alg: z.ZodOptional<z.ZodString>;
67
+ kid: z.ZodOptional<z.ZodString>;
68
+ ext: z.ZodOptional<z.ZodBoolean>;
69
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
70
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
71
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
72
+ x5t: z.ZodOptional<z.ZodString>;
73
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
74
+ x5u: z.ZodOptional<z.ZodString>;
75
+ }, {
76
+ kty: z.ZodLiteral<"RSA">;
77
+ alg: z.ZodOptional<z.ZodEnum<["RS256", "RS384", "RS512", "PS256", "PS384", "PS512"]>>;
78
+ n: z.ZodString;
79
+ e: z.ZodString;
80
+ d: z.ZodOptional<z.ZodString>;
81
+ p: z.ZodOptional<z.ZodString>;
82
+ q: z.ZodOptional<z.ZodString>;
83
+ dp: z.ZodOptional<z.ZodString>;
84
+ dq: z.ZodOptional<z.ZodString>;
85
+ qi: z.ZodOptional<z.ZodString>;
86
+ oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
87
+ r: z.ZodOptional<z.ZodString>;
88
+ d: z.ZodOptional<z.ZodString>;
89
+ t: z.ZodOptional<z.ZodString>;
90
+ }, "strip", z.ZodTypeAny, {
91
+ d?: string | undefined;
92
+ r?: string | undefined;
93
+ t?: string | undefined;
94
+ }, {
95
+ d?: string | undefined;
96
+ r?: string | undefined;
97
+ t?: string | undefined;
98
+ }>, "atleastone">>;
99
+ }>, "strip", z.ZodTypeAny, {
100
+ kty: "RSA";
101
+ n: string;
102
+ e: string;
103
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
104
+ kid?: string | undefined;
105
+ ext?: boolean | undefined;
106
+ use?: "sig" | "enc" | undefined;
107
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
108
+ x5c?: string[] | undefined;
109
+ x5t?: string | undefined;
110
+ 'x5t#S256'?: string | undefined;
111
+ x5u?: string | undefined;
112
+ d?: string | undefined;
113
+ p?: string | undefined;
114
+ q?: string | undefined;
115
+ dp?: string | undefined;
116
+ dq?: string | undefined;
117
+ qi?: string | undefined;
118
+ oth?: [{
119
+ d?: string | undefined;
120
+ r?: string | undefined;
121
+ t?: string | undefined;
122
+ }, ...{
123
+ d?: string | undefined;
124
+ r?: string | undefined;
125
+ t?: string | undefined;
126
+ }[]] | undefined;
127
+ }, {
128
+ kty: "RSA";
129
+ n: string;
130
+ e: string;
131
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
132
+ kid?: string | undefined;
133
+ ext?: boolean | undefined;
134
+ use?: "sig" | "enc" | undefined;
135
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
136
+ x5c?: string[] | undefined;
137
+ x5t?: string | undefined;
138
+ 'x5t#S256'?: string | undefined;
139
+ x5u?: string | undefined;
140
+ d?: string | undefined;
141
+ p?: string | undefined;
142
+ q?: string | undefined;
143
+ dp?: string | undefined;
144
+ dq?: string | undefined;
145
+ qi?: string | undefined;
146
+ oth?: [{
147
+ d?: string | undefined;
148
+ r?: string | undefined;
149
+ t?: string | undefined;
150
+ }, ...{
151
+ d?: string | undefined;
152
+ r?: string | undefined;
153
+ t?: string | undefined;
154
+ }[]] | undefined;
155
+ }>, z.ZodObject<z.objectUtil.extendShape<{
156
+ kty: z.ZodString;
157
+ alg: z.ZodOptional<z.ZodString>;
158
+ kid: z.ZodOptional<z.ZodString>;
159
+ ext: z.ZodOptional<z.ZodBoolean>;
160
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
161
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
162
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
163
+ x5t: z.ZodOptional<z.ZodString>;
164
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
165
+ x5u: z.ZodOptional<z.ZodString>;
166
+ }, {
167
+ kty: z.ZodLiteral<"EC">;
168
+ alg: z.ZodOptional<z.ZodEnum<["ES256", "ES384", "ES512"]>>;
169
+ crv: z.ZodEnum<["P-256", "P-384", "P-521"]>;
170
+ x: z.ZodString;
171
+ y: z.ZodString;
172
+ d: z.ZodOptional<z.ZodString>;
173
+ }>, "strip", z.ZodTypeAny, {
174
+ kty: "EC";
175
+ crv: "P-256" | "P-384" | "P-521";
176
+ x: string;
177
+ y: string;
178
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
179
+ kid?: string | undefined;
180
+ ext?: boolean | undefined;
181
+ use?: "sig" | "enc" | undefined;
182
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
183
+ x5c?: string[] | undefined;
184
+ x5t?: string | undefined;
185
+ 'x5t#S256'?: string | undefined;
186
+ x5u?: string | undefined;
187
+ d?: string | undefined;
188
+ }, {
189
+ kty: "EC";
190
+ crv: "P-256" | "P-384" | "P-521";
191
+ x: string;
192
+ y: string;
193
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
194
+ kid?: string | undefined;
195
+ ext?: boolean | undefined;
196
+ use?: "sig" | "enc" | undefined;
197
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
198
+ x5c?: string[] | undefined;
199
+ x5t?: string | undefined;
200
+ 'x5t#S256'?: string | undefined;
201
+ x5u?: string | undefined;
202
+ d?: string | undefined;
203
+ }>, z.ZodObject<z.objectUtil.extendShape<{
204
+ kty: z.ZodString;
205
+ alg: z.ZodOptional<z.ZodString>;
206
+ kid: z.ZodOptional<z.ZodString>;
207
+ ext: z.ZodOptional<z.ZodBoolean>;
208
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
209
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
210
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
211
+ x5t: z.ZodOptional<z.ZodString>;
212
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
213
+ x5u: z.ZodOptional<z.ZodString>;
214
+ }, {
215
+ kty: z.ZodLiteral<"EC">;
216
+ alg: z.ZodOptional<z.ZodEnum<["ES256K"]>>;
217
+ crv: z.ZodEnum<["secp256k1"]>;
218
+ x: z.ZodString;
219
+ y: z.ZodString;
220
+ d: z.ZodOptional<z.ZodString>;
221
+ }>, "strip", z.ZodTypeAny, {
222
+ kty: "EC";
223
+ crv: "secp256k1";
224
+ x: string;
225
+ y: string;
226
+ alg?: "ES256K" | undefined;
227
+ kid?: string | undefined;
228
+ ext?: boolean | undefined;
229
+ use?: "sig" | "enc" | undefined;
230
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
231
+ x5c?: string[] | undefined;
232
+ x5t?: string | undefined;
233
+ 'x5t#S256'?: string | undefined;
234
+ x5u?: string | undefined;
235
+ d?: string | undefined;
236
+ }, {
237
+ kty: "EC";
238
+ crv: "secp256k1";
239
+ x: string;
240
+ y: string;
241
+ alg?: "ES256K" | undefined;
242
+ kid?: string | undefined;
243
+ ext?: boolean | undefined;
244
+ use?: "sig" | "enc" | undefined;
245
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
246
+ x5c?: string[] | undefined;
247
+ x5t?: string | undefined;
248
+ 'x5t#S256'?: string | undefined;
249
+ x5u?: string | undefined;
250
+ d?: string | undefined;
251
+ }>, z.ZodObject<z.objectUtil.extendShape<{
252
+ kty: z.ZodString;
253
+ alg: z.ZodOptional<z.ZodString>;
254
+ kid: z.ZodOptional<z.ZodString>;
255
+ ext: z.ZodOptional<z.ZodBoolean>;
256
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
257
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
258
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
259
+ x5t: z.ZodOptional<z.ZodString>;
260
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
261
+ x5u: z.ZodOptional<z.ZodString>;
262
+ }, {
263
+ kty: z.ZodLiteral<"OKP">;
264
+ alg: z.ZodOptional<z.ZodEnum<["EdDSA"]>>;
265
+ crv: z.ZodEnum<["Ed25519", "Ed448"]>;
266
+ x: z.ZodString;
267
+ d: z.ZodOptional<z.ZodString>;
268
+ }>, "strip", z.ZodTypeAny, {
269
+ kty: "OKP";
270
+ crv: "Ed25519" | "Ed448";
271
+ x: string;
272
+ alg?: "EdDSA" | undefined;
273
+ kid?: string | undefined;
274
+ ext?: boolean | undefined;
275
+ use?: "sig" | "enc" | undefined;
276
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
277
+ x5c?: string[] | undefined;
278
+ x5t?: string | undefined;
279
+ 'x5t#S256'?: string | undefined;
280
+ x5u?: string | undefined;
281
+ d?: string | undefined;
282
+ }, {
283
+ kty: "OKP";
284
+ crv: "Ed25519" | "Ed448";
285
+ x: string;
286
+ alg?: "EdDSA" | undefined;
287
+ kid?: string | undefined;
288
+ ext?: boolean | undefined;
289
+ use?: "sig" | "enc" | undefined;
290
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
291
+ x5c?: string[] | undefined;
292
+ x5t?: string | undefined;
293
+ 'x5t#S256'?: string | undefined;
294
+ x5u?: string | undefined;
295
+ d?: string | undefined;
296
+ }>, z.ZodObject<z.objectUtil.extendShape<{
297
+ kty: z.ZodString;
298
+ alg: z.ZodOptional<z.ZodString>;
299
+ kid: z.ZodOptional<z.ZodString>;
300
+ ext: z.ZodOptional<z.ZodBoolean>;
301
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
302
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
303
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
304
+ x5t: z.ZodOptional<z.ZodString>;
305
+ 'x5t#S256': z.ZodOptional<z.ZodString>;
306
+ x5u: z.ZodOptional<z.ZodString>;
307
+ }, {
308
+ kty: z.ZodLiteral<"oct">;
309
+ alg: z.ZodOptional<z.ZodEnum<["HS256", "HS384", "HS512"]>>;
310
+ k: z.ZodString;
311
+ }>, "strip", z.ZodTypeAny, {
312
+ kty: "oct";
313
+ k: string;
314
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
315
+ kid?: string | undefined;
316
+ ext?: boolean | undefined;
317
+ use?: "sig" | "enc" | undefined;
318
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
319
+ x5c?: string[] | undefined;
320
+ x5t?: string | undefined;
321
+ 'x5t#S256'?: string | undefined;
322
+ x5u?: string | undefined;
323
+ }, {
324
+ kty: "oct";
325
+ k: string;
326
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
327
+ kid?: string | undefined;
328
+ ext?: boolean | undefined;
329
+ use?: "sig" | "enc" | undefined;
330
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
331
+ x5c?: string[] | undefined;
332
+ x5t?: string | undefined;
333
+ 'x5t#S256'?: string | undefined;
334
+ x5u?: string | undefined;
335
+ }>]>, {
336
+ kty: "RSA";
337
+ n: string;
338
+ e: string;
339
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
340
+ kid?: string | undefined;
341
+ ext?: boolean | undefined;
342
+ use?: "sig" | "enc" | undefined;
343
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
344
+ x5c?: string[] | undefined;
345
+ x5t?: string | undefined;
346
+ 'x5t#S256'?: string | undefined;
347
+ x5u?: string | undefined;
348
+ d?: string | undefined;
349
+ p?: string | undefined;
350
+ q?: string | undefined;
351
+ dp?: string | undefined;
352
+ dq?: string | undefined;
353
+ qi?: string | undefined;
354
+ oth?: [{
355
+ d?: string | undefined;
356
+ r?: string | undefined;
357
+ t?: string | undefined;
358
+ }, ...{
359
+ d?: string | undefined;
360
+ r?: string | undefined;
361
+ t?: string | undefined;
362
+ }[]] | undefined;
363
+ } | {
364
+ kty: "EC";
365
+ crv: "P-256" | "P-384" | "P-521";
366
+ x: string;
367
+ y: string;
368
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
369
+ kid?: string | undefined;
370
+ ext?: boolean | undefined;
371
+ use?: "sig" | "enc" | undefined;
372
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
373
+ x5c?: string[] | undefined;
374
+ x5t?: string | undefined;
375
+ 'x5t#S256'?: string | undefined;
376
+ x5u?: string | undefined;
377
+ d?: string | undefined;
378
+ } | {
379
+ kty: "EC";
380
+ crv: "secp256k1";
381
+ x: string;
382
+ y: string;
383
+ alg?: "ES256K" | undefined;
384
+ kid?: string | undefined;
385
+ ext?: boolean | undefined;
386
+ use?: "sig" | "enc" | undefined;
387
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
388
+ x5c?: string[] | undefined;
389
+ x5t?: string | undefined;
390
+ 'x5t#S256'?: string | undefined;
391
+ x5u?: string | undefined;
392
+ d?: string | undefined;
393
+ } | {
394
+ kty: "OKP";
395
+ crv: "Ed25519" | "Ed448";
396
+ x: string;
397
+ alg?: "EdDSA" | undefined;
398
+ kid?: string | undefined;
399
+ ext?: boolean | undefined;
400
+ use?: "sig" | "enc" | undefined;
401
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
402
+ x5c?: string[] | undefined;
403
+ x5t?: string | undefined;
404
+ 'x5t#S256'?: string | undefined;
405
+ x5u?: string | undefined;
406
+ d?: string | undefined;
407
+ } | {
408
+ kty: "oct";
409
+ k: string;
410
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
411
+ kid?: string | undefined;
412
+ ext?: boolean | undefined;
413
+ use?: "sig" | "enc" | undefined;
414
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
415
+ x5c?: string[] | undefined;
416
+ x5t?: string | undefined;
417
+ 'x5t#S256'?: string | undefined;
418
+ x5u?: string | undefined;
419
+ } | {
420
+ kty: string;
421
+ alg?: string | undefined;
422
+ kid?: string | undefined;
423
+ ext?: boolean | undefined;
424
+ use?: "sig" | "enc" | undefined;
425
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
426
+ x5c?: string[] | undefined;
427
+ x5t?: string | undefined;
428
+ 'x5t#S256'?: string | undefined;
429
+ x5u?: string | undefined;
430
+ }, {
431
+ kty: "RSA";
432
+ n: string;
433
+ e: string;
434
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
435
+ kid?: string | undefined;
436
+ ext?: boolean | undefined;
437
+ use?: "sig" | "enc" | undefined;
438
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
439
+ x5c?: string[] | undefined;
440
+ x5t?: string | undefined;
441
+ 'x5t#S256'?: string | undefined;
442
+ x5u?: string | undefined;
443
+ d?: string | undefined;
444
+ p?: string | undefined;
445
+ q?: string | undefined;
446
+ dp?: string | undefined;
447
+ dq?: string | undefined;
448
+ qi?: string | undefined;
449
+ oth?: [{
450
+ d?: string | undefined;
451
+ r?: string | undefined;
452
+ t?: string | undefined;
453
+ }, ...{
454
+ d?: string | undefined;
455
+ r?: string | undefined;
456
+ t?: string | undefined;
457
+ }[]] | undefined;
458
+ } | {
459
+ kty: "EC";
460
+ crv: "P-256" | "P-384" | "P-521";
461
+ x: string;
462
+ y: string;
463
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
464
+ kid?: string | undefined;
465
+ ext?: boolean | undefined;
466
+ use?: "sig" | "enc" | undefined;
467
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
468
+ x5c?: string[] | undefined;
469
+ x5t?: string | undefined;
470
+ 'x5t#S256'?: string | undefined;
471
+ x5u?: string | undefined;
472
+ d?: string | undefined;
473
+ } | {
474
+ kty: "EC";
475
+ crv: "secp256k1";
476
+ x: string;
477
+ y: string;
478
+ alg?: "ES256K" | undefined;
479
+ kid?: string | undefined;
480
+ ext?: boolean | undefined;
481
+ use?: "sig" | "enc" | undefined;
482
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
483
+ x5c?: string[] | undefined;
484
+ x5t?: string | undefined;
485
+ 'x5t#S256'?: string | undefined;
486
+ x5u?: string | undefined;
487
+ d?: string | undefined;
488
+ } | {
489
+ kty: "OKP";
490
+ crv: "Ed25519" | "Ed448";
491
+ x: string;
492
+ alg?: "EdDSA" | undefined;
493
+ kid?: string | undefined;
494
+ ext?: boolean | undefined;
495
+ use?: "sig" | "enc" | undefined;
496
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
497
+ x5c?: string[] | undefined;
498
+ x5t?: string | undefined;
499
+ 'x5t#S256'?: string | undefined;
500
+ x5u?: string | undefined;
501
+ d?: string | undefined;
502
+ } | {
503
+ kty: "oct";
504
+ k: string;
505
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
506
+ kid?: string | undefined;
507
+ ext?: boolean | undefined;
508
+ use?: "sig" | "enc" | undefined;
509
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
510
+ x5c?: string[] | undefined;
511
+ x5t?: string | undefined;
512
+ 'x5t#S256'?: string | undefined;
513
+ x5u?: string | undefined;
514
+ } | {
515
+ kty: string;
516
+ alg?: string | undefined;
517
+ kid?: string | undefined;
518
+ ext?: boolean | undefined;
519
+ use?: "sig" | "enc" | undefined;
520
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
521
+ x5c?: string[] | undefined;
522
+ x5t?: string | undefined;
523
+ 'x5t#S256'?: string | undefined;
524
+ x5u?: string | undefined;
525
+ }>, {
526
+ kty: "RSA";
527
+ n: string;
528
+ e: string;
529
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
530
+ kid?: string | undefined;
531
+ ext?: boolean | undefined;
532
+ use?: "sig" | "enc" | undefined;
533
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
534
+ x5c?: string[] | undefined;
535
+ x5t?: string | undefined;
536
+ 'x5t#S256'?: string | undefined;
537
+ x5u?: string | undefined;
538
+ d?: string | undefined;
539
+ p?: string | undefined;
540
+ q?: string | undefined;
541
+ dp?: string | undefined;
542
+ dq?: string | undefined;
543
+ qi?: string | undefined;
544
+ oth?: [{
545
+ d?: string | undefined;
546
+ r?: string | undefined;
547
+ t?: string | undefined;
548
+ }, ...{
549
+ d?: string | undefined;
550
+ r?: string | undefined;
551
+ t?: string | undefined;
552
+ }[]] | undefined;
553
+ } | {
554
+ kty: "EC";
555
+ crv: "P-256" | "P-384" | "P-521";
556
+ x: string;
557
+ y: string;
558
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
559
+ kid?: string | undefined;
560
+ ext?: boolean | undefined;
561
+ use?: "sig" | "enc" | undefined;
562
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
563
+ x5c?: string[] | undefined;
564
+ x5t?: string | undefined;
565
+ 'x5t#S256'?: string | undefined;
566
+ x5u?: string | undefined;
567
+ d?: string | undefined;
568
+ } | {
569
+ kty: "EC";
570
+ crv: "secp256k1";
571
+ x: string;
572
+ y: string;
573
+ alg?: "ES256K" | undefined;
574
+ kid?: string | undefined;
575
+ ext?: boolean | undefined;
576
+ use?: "sig" | "enc" | undefined;
577
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
578
+ x5c?: string[] | undefined;
579
+ x5t?: string | undefined;
580
+ 'x5t#S256'?: string | undefined;
581
+ x5u?: string | undefined;
582
+ d?: string | undefined;
583
+ } | {
584
+ kty: "OKP";
585
+ crv: "Ed25519" | "Ed448";
586
+ x: string;
587
+ alg?: "EdDSA" | undefined;
588
+ kid?: string | undefined;
589
+ ext?: boolean | undefined;
590
+ use?: "sig" | "enc" | undefined;
591
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
592
+ x5c?: string[] | undefined;
593
+ x5t?: string | undefined;
594
+ 'x5t#S256'?: string | undefined;
595
+ x5u?: string | undefined;
596
+ d?: string | undefined;
597
+ } | {
598
+ kty: "oct";
599
+ k: string;
600
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
601
+ kid?: string | undefined;
602
+ ext?: boolean | undefined;
603
+ use?: "sig" | "enc" | undefined;
604
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
605
+ x5c?: string[] | undefined;
606
+ x5t?: string | undefined;
607
+ 'x5t#S256'?: string | undefined;
608
+ x5u?: string | undefined;
609
+ } | {
610
+ kty: string;
611
+ alg?: string | undefined;
612
+ kid?: string | undefined;
613
+ ext?: boolean | undefined;
614
+ use?: "sig" | "enc" | undefined;
615
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
616
+ x5c?: string[] | undefined;
617
+ x5t?: string | undefined;
618
+ 'x5t#S256'?: string | undefined;
619
+ x5u?: string | undefined;
620
+ }, {
621
+ kty: "RSA";
622
+ n: string;
623
+ e: string;
624
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
625
+ kid?: string | undefined;
626
+ ext?: boolean | undefined;
627
+ use?: "sig" | "enc" | undefined;
628
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
629
+ x5c?: string[] | undefined;
630
+ x5t?: string | undefined;
631
+ 'x5t#S256'?: string | undefined;
632
+ x5u?: string | undefined;
633
+ d?: string | undefined;
634
+ p?: string | undefined;
635
+ q?: string | undefined;
636
+ dp?: string | undefined;
637
+ dq?: string | undefined;
638
+ qi?: string | undefined;
639
+ oth?: [{
640
+ d?: string | undefined;
641
+ r?: string | undefined;
642
+ t?: string | undefined;
643
+ }, ...{
644
+ d?: string | undefined;
645
+ r?: string | undefined;
646
+ t?: string | undefined;
647
+ }[]] | undefined;
648
+ } | {
649
+ kty: "EC";
650
+ crv: "P-256" | "P-384" | "P-521";
651
+ x: string;
652
+ y: string;
653
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
654
+ kid?: string | undefined;
655
+ ext?: boolean | undefined;
656
+ use?: "sig" | "enc" | undefined;
657
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
658
+ x5c?: string[] | undefined;
659
+ x5t?: string | undefined;
660
+ 'x5t#S256'?: string | undefined;
661
+ x5u?: string | undefined;
662
+ d?: string | undefined;
663
+ } | {
664
+ kty: "EC";
665
+ crv: "secp256k1";
666
+ x: string;
667
+ y: string;
668
+ alg?: "ES256K" | undefined;
669
+ kid?: string | undefined;
670
+ ext?: boolean | undefined;
671
+ use?: "sig" | "enc" | undefined;
672
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
673
+ x5c?: string[] | undefined;
674
+ x5t?: string | undefined;
675
+ 'x5t#S256'?: string | undefined;
676
+ x5u?: string | undefined;
677
+ d?: string | undefined;
678
+ } | {
679
+ kty: "OKP";
680
+ crv: "Ed25519" | "Ed448";
681
+ x: string;
682
+ alg?: "EdDSA" | undefined;
683
+ kid?: string | undefined;
684
+ ext?: boolean | undefined;
685
+ use?: "sig" | "enc" | undefined;
686
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
687
+ x5c?: string[] | undefined;
688
+ x5t?: string | undefined;
689
+ 'x5t#S256'?: string | undefined;
690
+ x5u?: string | undefined;
691
+ d?: string | undefined;
692
+ } | {
693
+ kty: "oct";
694
+ k: string;
695
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
696
+ kid?: string | undefined;
697
+ ext?: boolean | undefined;
698
+ use?: "sig" | "enc" | undefined;
699
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
700
+ x5c?: string[] | undefined;
701
+ x5t?: string | undefined;
702
+ 'x5t#S256'?: string | undefined;
703
+ x5u?: string | undefined;
704
+ } | {
705
+ kty: string;
706
+ alg?: string | undefined;
707
+ kid?: string | undefined;
708
+ ext?: boolean | undefined;
709
+ use?: "sig" | "enc" | undefined;
710
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
711
+ x5c?: string[] | undefined;
712
+ x5t?: string | undefined;
713
+ 'x5t#S256'?: string | undefined;
714
+ x5u?: string | undefined;
715
+ }>, {
716
+ kty: "RSA";
717
+ n: string;
718
+ e: string;
719
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
720
+ kid?: string | undefined;
721
+ ext?: boolean | undefined;
722
+ use?: "sig" | "enc" | undefined;
723
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
724
+ x5c?: string[] | undefined;
725
+ x5t?: string | undefined;
726
+ 'x5t#S256'?: string | undefined;
727
+ x5u?: string | undefined;
728
+ d?: string | undefined;
729
+ p?: string | undefined;
730
+ q?: string | undefined;
731
+ dp?: string | undefined;
732
+ dq?: string | undefined;
733
+ qi?: string | undefined;
734
+ oth?: [{
735
+ d?: string | undefined;
736
+ r?: string | undefined;
737
+ t?: string | undefined;
738
+ }, ...{
739
+ d?: string | undefined;
740
+ r?: string | undefined;
741
+ t?: string | undefined;
742
+ }[]] | undefined;
743
+ } | {
744
+ kty: "EC";
745
+ crv: "P-256" | "P-384" | "P-521";
746
+ x: string;
747
+ y: string;
748
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
749
+ kid?: string | undefined;
750
+ ext?: boolean | undefined;
751
+ use?: "sig" | "enc" | undefined;
752
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
753
+ x5c?: string[] | undefined;
754
+ x5t?: string | undefined;
755
+ 'x5t#S256'?: string | undefined;
756
+ x5u?: string | undefined;
757
+ d?: string | undefined;
758
+ } | {
759
+ kty: "EC";
760
+ crv: "secp256k1";
761
+ x: string;
762
+ y: string;
763
+ alg?: "ES256K" | undefined;
764
+ kid?: string | undefined;
765
+ ext?: boolean | undefined;
766
+ use?: "sig" | "enc" | undefined;
767
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
768
+ x5c?: string[] | undefined;
769
+ x5t?: string | undefined;
770
+ 'x5t#S256'?: string | undefined;
771
+ x5u?: string | undefined;
772
+ d?: string | undefined;
773
+ } | {
774
+ kty: "OKP";
775
+ crv: "Ed25519" | "Ed448";
776
+ x: string;
777
+ alg?: "EdDSA" | undefined;
778
+ kid?: string | undefined;
779
+ ext?: boolean | undefined;
780
+ use?: "sig" | "enc" | undefined;
781
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
782
+ x5c?: string[] | undefined;
783
+ x5t?: string | undefined;
784
+ 'x5t#S256'?: string | undefined;
785
+ x5u?: string | undefined;
786
+ d?: string | undefined;
787
+ } | {
788
+ kty: "oct";
789
+ k: string;
790
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
791
+ kid?: string | undefined;
792
+ ext?: boolean | undefined;
793
+ use?: "sig" | "enc" | undefined;
794
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
795
+ x5c?: string[] | undefined;
796
+ x5t?: string | undefined;
797
+ 'x5t#S256'?: string | undefined;
798
+ x5u?: string | undefined;
799
+ } | {
800
+ kty: string;
801
+ alg?: string | undefined;
802
+ kid?: string | undefined;
803
+ ext?: boolean | undefined;
804
+ use?: "sig" | "enc" | undefined;
805
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
806
+ x5c?: string[] | undefined;
807
+ x5t?: string | undefined;
808
+ 'x5t#S256'?: string | undefined;
809
+ x5u?: string | undefined;
810
+ }, {
811
+ kty: "RSA";
812
+ n: string;
813
+ e: string;
814
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
815
+ kid?: string | undefined;
816
+ ext?: boolean | undefined;
817
+ use?: "sig" | "enc" | undefined;
818
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
819
+ x5c?: string[] | undefined;
820
+ x5t?: string | undefined;
821
+ 'x5t#S256'?: string | undefined;
822
+ x5u?: string | undefined;
823
+ d?: string | undefined;
824
+ p?: string | undefined;
825
+ q?: string | undefined;
826
+ dp?: string | undefined;
827
+ dq?: string | undefined;
828
+ qi?: string | undefined;
829
+ oth?: [{
830
+ d?: string | undefined;
831
+ r?: string | undefined;
832
+ t?: string | undefined;
833
+ }, ...{
834
+ d?: string | undefined;
835
+ r?: string | undefined;
836
+ t?: string | undefined;
837
+ }[]] | undefined;
838
+ } | {
839
+ kty: "EC";
840
+ crv: "P-256" | "P-384" | "P-521";
841
+ x: string;
842
+ y: string;
843
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
844
+ kid?: string | undefined;
845
+ ext?: boolean | undefined;
846
+ use?: "sig" | "enc" | undefined;
847
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
848
+ x5c?: string[] | undefined;
849
+ x5t?: string | undefined;
850
+ 'x5t#S256'?: string | undefined;
851
+ x5u?: string | undefined;
852
+ d?: string | undefined;
853
+ } | {
854
+ kty: "EC";
855
+ crv: "secp256k1";
856
+ x: string;
857
+ y: string;
858
+ alg?: "ES256K" | undefined;
859
+ kid?: string | undefined;
860
+ ext?: boolean | undefined;
861
+ use?: "sig" | "enc" | undefined;
862
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
863
+ x5c?: string[] | undefined;
864
+ x5t?: string | undefined;
865
+ 'x5t#S256'?: string | undefined;
866
+ x5u?: string | undefined;
867
+ d?: string | undefined;
868
+ } | {
869
+ kty: "OKP";
870
+ crv: "Ed25519" | "Ed448";
871
+ x: string;
872
+ alg?: "EdDSA" | undefined;
873
+ kid?: string | undefined;
874
+ ext?: boolean | undefined;
875
+ use?: "sig" | "enc" | undefined;
876
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
877
+ x5c?: string[] | undefined;
878
+ x5t?: string | undefined;
879
+ 'x5t#S256'?: string | undefined;
880
+ x5u?: string | undefined;
881
+ d?: string | undefined;
882
+ } | {
883
+ kty: "oct";
884
+ k: string;
885
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
886
+ kid?: string | undefined;
887
+ ext?: boolean | undefined;
888
+ use?: "sig" | "enc" | undefined;
889
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
890
+ x5c?: string[] | undefined;
891
+ x5t?: string | undefined;
892
+ 'x5t#S256'?: string | undefined;
893
+ x5u?: string | undefined;
894
+ } | {
895
+ kty: string;
896
+ alg?: string | undefined;
897
+ kid?: string | undefined;
898
+ ext?: boolean | undefined;
899
+ use?: "sig" | "enc" | undefined;
900
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
901
+ x5c?: string[] | undefined;
902
+ x5t?: string | undefined;
903
+ 'x5t#S256'?: string | undefined;
904
+ x5u?: string | undefined;
905
+ }>, {
906
+ kty: "RSA";
907
+ n: string;
908
+ e: string;
909
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
910
+ kid?: string | undefined;
911
+ ext?: boolean | undefined;
912
+ use?: "sig" | "enc" | undefined;
913
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
914
+ x5c?: string[] | undefined;
915
+ x5t?: string | undefined;
916
+ 'x5t#S256'?: string | undefined;
917
+ x5u?: string | undefined;
918
+ d?: string | undefined;
919
+ p?: string | undefined;
920
+ q?: string | undefined;
921
+ dp?: string | undefined;
922
+ dq?: string | undefined;
923
+ qi?: string | undefined;
924
+ oth?: [{
925
+ d?: string | undefined;
926
+ r?: string | undefined;
927
+ t?: string | undefined;
928
+ }, ...{
929
+ d?: string | undefined;
930
+ r?: string | undefined;
931
+ t?: string | undefined;
932
+ }[]] | undefined;
933
+ } | {
934
+ kty: "EC";
935
+ crv: "P-256" | "P-384" | "P-521";
936
+ x: string;
937
+ y: string;
938
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
939
+ kid?: string | undefined;
940
+ ext?: boolean | undefined;
941
+ use?: "sig" | "enc" | undefined;
942
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
943
+ x5c?: string[] | undefined;
944
+ x5t?: string | undefined;
945
+ 'x5t#S256'?: string | undefined;
946
+ x5u?: string | undefined;
947
+ d?: string | undefined;
948
+ } | {
949
+ kty: "EC";
950
+ crv: "secp256k1";
951
+ x: string;
952
+ y: string;
953
+ alg?: "ES256K" | undefined;
954
+ kid?: string | undefined;
955
+ ext?: boolean | undefined;
956
+ use?: "sig" | "enc" | undefined;
957
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
958
+ x5c?: string[] | undefined;
959
+ x5t?: string | undefined;
960
+ 'x5t#S256'?: string | undefined;
961
+ x5u?: string | undefined;
962
+ d?: string | undefined;
963
+ } | {
964
+ kty: "OKP";
965
+ crv: "Ed25519" | "Ed448";
966
+ x: string;
967
+ alg?: "EdDSA" | undefined;
968
+ kid?: string | undefined;
969
+ ext?: boolean | undefined;
970
+ use?: "sig" | "enc" | undefined;
971
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
972
+ x5c?: string[] | undefined;
973
+ x5t?: string | undefined;
974
+ 'x5t#S256'?: string | undefined;
975
+ x5u?: string | undefined;
976
+ d?: string | undefined;
977
+ } | {
978
+ kty: "oct";
979
+ k: string;
980
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
981
+ kid?: string | undefined;
982
+ ext?: boolean | undefined;
983
+ use?: "sig" | "enc" | undefined;
984
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
985
+ x5c?: string[] | undefined;
986
+ x5t?: string | undefined;
987
+ 'x5t#S256'?: string | undefined;
988
+ x5u?: string | undefined;
989
+ } | {
990
+ kty: string;
991
+ alg?: string | undefined;
992
+ kid?: string | undefined;
993
+ ext?: boolean | undefined;
994
+ use?: "sig" | "enc" | undefined;
995
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
996
+ x5c?: string[] | undefined;
997
+ x5t?: string | undefined;
998
+ 'x5t#S256'?: string | undefined;
999
+ x5u?: string | undefined;
1000
+ }, {
1001
+ kty: "RSA";
1002
+ n: string;
1003
+ e: string;
1004
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
1005
+ kid?: string | undefined;
1006
+ ext?: boolean | undefined;
1007
+ use?: "sig" | "enc" | undefined;
1008
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1009
+ x5c?: string[] | undefined;
1010
+ x5t?: string | undefined;
1011
+ 'x5t#S256'?: string | undefined;
1012
+ x5u?: string | undefined;
1013
+ d?: string | undefined;
1014
+ p?: string | undefined;
1015
+ q?: string | undefined;
1016
+ dp?: string | undefined;
1017
+ dq?: string | undefined;
1018
+ qi?: string | undefined;
1019
+ oth?: [{
1020
+ d?: string | undefined;
1021
+ r?: string | undefined;
1022
+ t?: string | undefined;
1023
+ }, ...{
1024
+ d?: string | undefined;
1025
+ r?: string | undefined;
1026
+ t?: string | undefined;
1027
+ }[]] | undefined;
1028
+ } | {
1029
+ kty: "EC";
1030
+ crv: "P-256" | "P-384" | "P-521";
1031
+ x: string;
1032
+ y: string;
1033
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1034
+ kid?: string | undefined;
1035
+ ext?: boolean | undefined;
1036
+ use?: "sig" | "enc" | undefined;
1037
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1038
+ x5c?: string[] | undefined;
1039
+ x5t?: string | undefined;
1040
+ 'x5t#S256'?: string | undefined;
1041
+ x5u?: string | undefined;
1042
+ d?: string | undefined;
1043
+ } | {
1044
+ kty: "EC";
1045
+ crv: "secp256k1";
1046
+ x: string;
1047
+ y: string;
1048
+ alg?: "ES256K" | undefined;
1049
+ kid?: string | undefined;
1050
+ ext?: boolean | undefined;
1051
+ use?: "sig" | "enc" | undefined;
1052
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1053
+ x5c?: string[] | undefined;
1054
+ x5t?: string | undefined;
1055
+ 'x5t#S256'?: string | undefined;
1056
+ x5u?: string | undefined;
1057
+ d?: string | undefined;
1058
+ } | {
1059
+ kty: "OKP";
1060
+ crv: "Ed25519" | "Ed448";
1061
+ x: string;
1062
+ alg?: "EdDSA" | undefined;
1063
+ kid?: string | undefined;
1064
+ ext?: boolean | undefined;
1065
+ use?: "sig" | "enc" | undefined;
1066
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1067
+ x5c?: string[] | undefined;
1068
+ x5t?: string | undefined;
1069
+ 'x5t#S256'?: string | undefined;
1070
+ x5u?: string | undefined;
1071
+ d?: string | undefined;
1072
+ } | {
1073
+ kty: "oct";
1074
+ k: string;
1075
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1076
+ kid?: string | undefined;
1077
+ ext?: boolean | undefined;
1078
+ use?: "sig" | "enc" | undefined;
1079
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1080
+ x5c?: string[] | undefined;
1081
+ x5t?: string | undefined;
1082
+ 'x5t#S256'?: string | undefined;
1083
+ x5u?: string | undefined;
1084
+ } | {
1085
+ kty: string;
1086
+ alg?: string | undefined;
1087
+ kid?: string | undefined;
1088
+ ext?: boolean | undefined;
1089
+ use?: "sig" | "enc" | undefined;
1090
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1091
+ x5c?: string[] | undefined;
1092
+ x5t?: string | undefined;
1093
+ 'x5t#S256'?: string | undefined;
1094
+ x5u?: string | undefined;
1095
+ }>, "many">;
1096
+ }, "strip", z.ZodTypeAny, {
1097
+ keys: ({
1098
+ kty: "RSA";
1099
+ n: string;
1100
+ e: string;
1101
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
1102
+ kid?: string | undefined;
1103
+ ext?: boolean | undefined;
1104
+ use?: "sig" | "enc" | undefined;
1105
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1106
+ x5c?: string[] | undefined;
1107
+ x5t?: string | undefined;
1108
+ 'x5t#S256'?: string | undefined;
1109
+ x5u?: string | undefined;
1110
+ d?: string | undefined;
1111
+ p?: string | undefined;
1112
+ q?: string | undefined;
1113
+ dp?: string | undefined;
1114
+ dq?: string | undefined;
1115
+ qi?: string | undefined;
1116
+ oth?: [{
1117
+ d?: string | undefined;
1118
+ r?: string | undefined;
1119
+ t?: string | undefined;
1120
+ }, ...{
1121
+ d?: string | undefined;
1122
+ r?: string | undefined;
1123
+ t?: string | undefined;
1124
+ }[]] | undefined;
1125
+ } | {
1126
+ kty: "EC";
1127
+ crv: "P-256" | "P-384" | "P-521";
1128
+ x: string;
1129
+ y: string;
1130
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1131
+ kid?: string | undefined;
1132
+ ext?: boolean | undefined;
1133
+ use?: "sig" | "enc" | undefined;
1134
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1135
+ x5c?: string[] | undefined;
1136
+ x5t?: string | undefined;
1137
+ 'x5t#S256'?: string | undefined;
1138
+ x5u?: string | undefined;
1139
+ d?: string | undefined;
1140
+ } | {
1141
+ kty: "EC";
1142
+ crv: "secp256k1";
1143
+ x: string;
1144
+ y: string;
1145
+ alg?: "ES256K" | undefined;
1146
+ kid?: string | undefined;
1147
+ ext?: boolean | undefined;
1148
+ use?: "sig" | "enc" | undefined;
1149
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1150
+ x5c?: string[] | undefined;
1151
+ x5t?: string | undefined;
1152
+ 'x5t#S256'?: string | undefined;
1153
+ x5u?: string | undefined;
1154
+ d?: string | undefined;
1155
+ } | {
1156
+ kty: "OKP";
1157
+ crv: "Ed25519" | "Ed448";
1158
+ x: string;
1159
+ alg?: "EdDSA" | undefined;
1160
+ kid?: string | undefined;
1161
+ ext?: boolean | undefined;
1162
+ use?: "sig" | "enc" | undefined;
1163
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1164
+ x5c?: string[] | undefined;
1165
+ x5t?: string | undefined;
1166
+ 'x5t#S256'?: string | undefined;
1167
+ x5u?: string | undefined;
1168
+ d?: string | undefined;
1169
+ } | {
1170
+ kty: "oct";
1171
+ k: string;
1172
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1173
+ kid?: string | undefined;
1174
+ ext?: boolean | undefined;
1175
+ use?: "sig" | "enc" | undefined;
1176
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1177
+ x5c?: string[] | undefined;
1178
+ x5t?: string | undefined;
1179
+ 'x5t#S256'?: string | undefined;
1180
+ x5u?: string | undefined;
1181
+ } | {
1182
+ kty: string;
1183
+ alg?: string | undefined;
1184
+ kid?: string | undefined;
1185
+ ext?: boolean | undefined;
1186
+ use?: "sig" | "enc" | undefined;
1187
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1188
+ x5c?: string[] | undefined;
1189
+ x5t?: string | undefined;
1190
+ 'x5t#S256'?: string | undefined;
1191
+ x5u?: string | undefined;
1192
+ })[];
1193
+ }, {
1194
+ keys: ({
1195
+ kty: "RSA";
1196
+ n: string;
1197
+ e: string;
1198
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
1199
+ kid?: string | undefined;
1200
+ ext?: boolean | undefined;
1201
+ use?: "sig" | "enc" | undefined;
1202
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1203
+ x5c?: string[] | undefined;
1204
+ x5t?: string | undefined;
1205
+ 'x5t#S256'?: string | undefined;
1206
+ x5u?: string | undefined;
1207
+ d?: string | undefined;
1208
+ p?: string | undefined;
1209
+ q?: string | undefined;
1210
+ dp?: string | undefined;
1211
+ dq?: string | undefined;
1212
+ qi?: string | undefined;
1213
+ oth?: [{
1214
+ d?: string | undefined;
1215
+ r?: string | undefined;
1216
+ t?: string | undefined;
1217
+ }, ...{
1218
+ d?: string | undefined;
1219
+ r?: string | undefined;
1220
+ t?: string | undefined;
1221
+ }[]] | undefined;
1222
+ } | {
1223
+ kty: "EC";
1224
+ crv: "P-256" | "P-384" | "P-521";
1225
+ x: string;
1226
+ y: string;
1227
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1228
+ kid?: string | undefined;
1229
+ ext?: boolean | undefined;
1230
+ use?: "sig" | "enc" | undefined;
1231
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1232
+ x5c?: string[] | undefined;
1233
+ x5t?: string | undefined;
1234
+ 'x5t#S256'?: string | undefined;
1235
+ x5u?: string | undefined;
1236
+ d?: string | undefined;
1237
+ } | {
1238
+ kty: "EC";
1239
+ crv: "secp256k1";
1240
+ x: string;
1241
+ y: string;
1242
+ alg?: "ES256K" | undefined;
1243
+ kid?: string | undefined;
1244
+ ext?: boolean | undefined;
1245
+ use?: "sig" | "enc" | undefined;
1246
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1247
+ x5c?: string[] | undefined;
1248
+ x5t?: string | undefined;
1249
+ 'x5t#S256'?: string | undefined;
1250
+ x5u?: string | undefined;
1251
+ d?: string | undefined;
1252
+ } | {
1253
+ kty: "OKP";
1254
+ crv: "Ed25519" | "Ed448";
1255
+ x: string;
1256
+ alg?: "EdDSA" | undefined;
1257
+ kid?: string | undefined;
1258
+ ext?: boolean | undefined;
1259
+ use?: "sig" | "enc" | undefined;
1260
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1261
+ x5c?: string[] | undefined;
1262
+ x5t?: string | undefined;
1263
+ 'x5t#S256'?: string | undefined;
1264
+ x5u?: string | undefined;
1265
+ d?: string | undefined;
1266
+ } | {
1267
+ kty: "oct";
1268
+ k: string;
1269
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1270
+ kid?: string | undefined;
1271
+ ext?: boolean | undefined;
1272
+ use?: "sig" | "enc" | undefined;
1273
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1274
+ x5c?: string[] | undefined;
1275
+ x5t?: string | undefined;
1276
+ 'x5t#S256'?: string | undefined;
1277
+ x5u?: string | undefined;
1278
+ } | {
1279
+ kty: string;
1280
+ alg?: string | undefined;
1281
+ kid?: string | undefined;
1282
+ ext?: boolean | undefined;
1283
+ use?: "sig" | "enc" | undefined;
1284
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1285
+ x5c?: string[] | undefined;
1286
+ x5t?: string | undefined;
1287
+ 'x5t#S256'?: string | undefined;
1288
+ x5u?: string | undefined;
1289
+ })[];
1290
+ }>>;
1291
+ application_type: z.ZodOptional<z.ZodDefault<z.ZodEnum<["web", "native"]>>>;
1292
+ subject_type: z.ZodOptional<z.ZodDefault<z.ZodEnum<["public", "pairwise"]>>>;
1293
+ request_object_signing_alg: z.ZodOptional<z.ZodString>;
1294
+ id_token_signed_response_alg: z.ZodOptional<z.ZodString>;
1295
+ authorization_signed_response_alg: z.ZodOptional<z.ZodDefault<z.ZodString>>;
1296
+ authorization_encrypted_response_enc: z.ZodOptional<z.ZodEnum<["A128CBC-HS256"]>>;
1297
+ authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
1298
+ client_id: z.ZodOptional<z.ZodString>;
1299
+ client_name: z.ZodOptional<z.ZodString>;
1300
+ client_uri: z.ZodOptional<z.ZodString>;
1301
+ policy_uri: z.ZodOptional<z.ZodString>;
1302
+ tos_uri: z.ZodOptional<z.ZodString>;
1303
+ logo_uri: z.ZodOptional<z.ZodString>;
1304
+ default_max_age: z.ZodOptional<z.ZodNumber>;
1305
+ require_auth_time: z.ZodOptional<z.ZodBoolean>;
1306
+ contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1307
+ tls_client_certificate_bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
1308
+ dpop_bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
1309
+ authorization_details_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1310
+ }, {
1311
+ client_id: z.ZodString;
1312
+ }>, "strip", z.ZodTypeAny, {
1313
+ client_id: string;
1314
+ redirect_uris: [string, ...string[]];
1315
+ response_types: ["none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token", ...("none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token")[]];
1316
+ grant_types: ["authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]];
1317
+ scope?: string | undefined;
1318
+ token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1319
+ token_endpoint_auth_signing_alg?: string | undefined;
1320
+ introspection_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1321
+ introspection_endpoint_auth_signing_alg?: string | undefined;
1322
+ revocation_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1323
+ revocation_endpoint_auth_signing_alg?: string | undefined;
1324
+ pushed_authorization_request_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1325
+ pushed_authorization_request_endpoint_auth_signing_alg?: string | undefined;
1326
+ userinfo_signed_response_alg?: string | undefined;
1327
+ userinfo_encrypted_response_alg?: string | undefined;
1328
+ jwks_uri?: string | undefined;
1329
+ jwks?: {
1330
+ keys: ({
1331
+ kty: "RSA";
1332
+ n: string;
1333
+ e: string;
1334
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
1335
+ kid?: string | undefined;
1336
+ ext?: boolean | undefined;
1337
+ use?: "sig" | "enc" | undefined;
1338
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1339
+ x5c?: string[] | undefined;
1340
+ x5t?: string | undefined;
1341
+ 'x5t#S256'?: string | undefined;
1342
+ x5u?: string | undefined;
1343
+ d?: string | undefined;
1344
+ p?: string | undefined;
1345
+ q?: string | undefined;
1346
+ dp?: string | undefined;
1347
+ dq?: string | undefined;
1348
+ qi?: string | undefined;
1349
+ oth?: [{
1350
+ d?: string | undefined;
1351
+ r?: string | undefined;
1352
+ t?: string | undefined;
1353
+ }, ...{
1354
+ d?: string | undefined;
1355
+ r?: string | undefined;
1356
+ t?: string | undefined;
1357
+ }[]] | undefined;
1358
+ } | {
1359
+ kty: "EC";
1360
+ crv: "P-256" | "P-384" | "P-521";
1361
+ x: string;
1362
+ y: string;
1363
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1364
+ kid?: string | undefined;
1365
+ ext?: boolean | undefined;
1366
+ use?: "sig" | "enc" | undefined;
1367
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1368
+ x5c?: string[] | undefined;
1369
+ x5t?: string | undefined;
1370
+ 'x5t#S256'?: string | undefined;
1371
+ x5u?: string | undefined;
1372
+ d?: string | undefined;
1373
+ } | {
1374
+ kty: "EC";
1375
+ crv: "secp256k1";
1376
+ x: string;
1377
+ y: string;
1378
+ alg?: "ES256K" | undefined;
1379
+ kid?: string | undefined;
1380
+ ext?: boolean | undefined;
1381
+ use?: "sig" | "enc" | undefined;
1382
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1383
+ x5c?: string[] | undefined;
1384
+ x5t?: string | undefined;
1385
+ 'x5t#S256'?: string | undefined;
1386
+ x5u?: string | undefined;
1387
+ d?: string | undefined;
1388
+ } | {
1389
+ kty: "OKP";
1390
+ crv: "Ed25519" | "Ed448";
1391
+ x: string;
1392
+ alg?: "EdDSA" | undefined;
1393
+ kid?: string | undefined;
1394
+ ext?: boolean | undefined;
1395
+ use?: "sig" | "enc" | undefined;
1396
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1397
+ x5c?: string[] | undefined;
1398
+ x5t?: string | undefined;
1399
+ 'x5t#S256'?: string | undefined;
1400
+ x5u?: string | undefined;
1401
+ d?: string | undefined;
1402
+ } | {
1403
+ kty: "oct";
1404
+ k: string;
1405
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1406
+ kid?: string | undefined;
1407
+ ext?: boolean | undefined;
1408
+ use?: "sig" | "enc" | undefined;
1409
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1410
+ x5c?: string[] | undefined;
1411
+ x5t?: string | undefined;
1412
+ 'x5t#S256'?: string | undefined;
1413
+ x5u?: string | undefined;
1414
+ } | {
1415
+ kty: string;
1416
+ alg?: string | undefined;
1417
+ kid?: string | undefined;
1418
+ ext?: boolean | undefined;
1419
+ use?: "sig" | "enc" | undefined;
1420
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1421
+ x5c?: string[] | undefined;
1422
+ x5t?: string | undefined;
1423
+ 'x5t#S256'?: string | undefined;
1424
+ x5u?: string | undefined;
1425
+ })[];
1426
+ } | undefined;
1427
+ application_type?: "web" | "native" | undefined;
1428
+ subject_type?: "public" | "pairwise" | undefined;
1429
+ request_object_signing_alg?: string | undefined;
1430
+ id_token_signed_response_alg?: string | undefined;
1431
+ authorization_signed_response_alg?: string | undefined;
1432
+ authorization_encrypted_response_enc?: "A128CBC-HS256" | undefined;
1433
+ authorization_encrypted_response_alg?: string | undefined;
1434
+ client_name?: string | undefined;
1435
+ client_uri?: string | undefined;
1436
+ policy_uri?: string | undefined;
1437
+ tos_uri?: string | undefined;
1438
+ logo_uri?: string | undefined;
1439
+ default_max_age?: number | undefined;
1440
+ require_auth_time?: boolean | undefined;
1441
+ contacts?: string[] | undefined;
1442
+ tls_client_certificate_bound_access_tokens?: boolean | undefined;
1443
+ dpop_bound_access_tokens?: boolean | undefined;
1444
+ authorization_details_types?: string[] | undefined;
1445
+ }, {
1446
+ client_id: string;
1447
+ redirect_uris: [string, ...string[]];
1448
+ response_types?: ["none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token", ...("none" | "code" | "token" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token")[]] | undefined;
1449
+ grant_types?: ["authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]] | undefined;
1450
+ scope?: string | undefined;
1451
+ token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1452
+ token_endpoint_auth_signing_alg?: string | undefined;
1453
+ introspection_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1454
+ introspection_endpoint_auth_signing_alg?: string | undefined;
1455
+ revocation_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1456
+ revocation_endpoint_auth_signing_alg?: string | undefined;
1457
+ pushed_authorization_request_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1458
+ pushed_authorization_request_endpoint_auth_signing_alg?: string | undefined;
1459
+ userinfo_signed_response_alg?: string | undefined;
1460
+ userinfo_encrypted_response_alg?: string | undefined;
1461
+ jwks_uri?: string | undefined;
1462
+ jwks?: {
1463
+ keys: ({
1464
+ kty: "RSA";
1465
+ n: string;
1466
+ e: string;
1467
+ alg?: "RS256" | "PS256" | "RS384" | "PS384" | "RS512" | "PS512" | undefined;
1468
+ kid?: string | undefined;
1469
+ ext?: boolean | undefined;
1470
+ use?: "sig" | "enc" | undefined;
1471
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1472
+ x5c?: string[] | undefined;
1473
+ x5t?: string | undefined;
1474
+ 'x5t#S256'?: string | undefined;
1475
+ x5u?: string | undefined;
1476
+ d?: string | undefined;
1477
+ p?: string | undefined;
1478
+ q?: string | undefined;
1479
+ dp?: string | undefined;
1480
+ dq?: string | undefined;
1481
+ qi?: string | undefined;
1482
+ oth?: [{
1483
+ d?: string | undefined;
1484
+ r?: string | undefined;
1485
+ t?: string | undefined;
1486
+ }, ...{
1487
+ d?: string | undefined;
1488
+ r?: string | undefined;
1489
+ t?: string | undefined;
1490
+ }[]] | undefined;
1491
+ } | {
1492
+ kty: "EC";
1493
+ crv: "P-256" | "P-384" | "P-521";
1494
+ x: string;
1495
+ y: string;
1496
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1497
+ kid?: string | undefined;
1498
+ ext?: boolean | undefined;
1499
+ use?: "sig" | "enc" | undefined;
1500
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1501
+ x5c?: string[] | undefined;
1502
+ x5t?: string | undefined;
1503
+ 'x5t#S256'?: string | undefined;
1504
+ x5u?: string | undefined;
1505
+ d?: string | undefined;
1506
+ } | {
1507
+ kty: "EC";
1508
+ crv: "secp256k1";
1509
+ x: string;
1510
+ y: string;
1511
+ alg?: "ES256K" | undefined;
1512
+ kid?: string | undefined;
1513
+ ext?: boolean | undefined;
1514
+ use?: "sig" | "enc" | undefined;
1515
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1516
+ x5c?: string[] | undefined;
1517
+ x5t?: string | undefined;
1518
+ 'x5t#S256'?: string | undefined;
1519
+ x5u?: string | undefined;
1520
+ d?: string | undefined;
1521
+ } | {
1522
+ kty: "OKP";
1523
+ crv: "Ed25519" | "Ed448";
1524
+ x: string;
1525
+ alg?: "EdDSA" | undefined;
1526
+ kid?: string | undefined;
1527
+ ext?: boolean | undefined;
1528
+ use?: "sig" | "enc" | undefined;
1529
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1530
+ x5c?: string[] | undefined;
1531
+ x5t?: string | undefined;
1532
+ 'x5t#S256'?: string | undefined;
1533
+ x5u?: string | undefined;
1534
+ d?: string | undefined;
1535
+ } | {
1536
+ kty: "oct";
1537
+ k: string;
1538
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1539
+ kid?: string | undefined;
1540
+ ext?: boolean | undefined;
1541
+ use?: "sig" | "enc" | undefined;
1542
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1543
+ x5c?: string[] | undefined;
1544
+ x5t?: string | undefined;
1545
+ 'x5t#S256'?: string | undefined;
1546
+ x5u?: string | undefined;
1547
+ } | {
1548
+ kty: string;
1549
+ alg?: string | undefined;
1550
+ kid?: string | undefined;
1551
+ ext?: boolean | undefined;
1552
+ use?: "sig" | "enc" | undefined;
1553
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1554
+ x5c?: string[] | undefined;
1555
+ x5t?: string | undefined;
1556
+ 'x5t#S256'?: string | undefined;
1557
+ x5u?: string | undefined;
1558
+ })[];
1559
+ } | undefined;
1560
+ application_type?: "web" | "native" | undefined;
1561
+ subject_type?: "public" | "pairwise" | undefined;
1562
+ request_object_signing_alg?: string | undefined;
1563
+ id_token_signed_response_alg?: string | undefined;
1564
+ authorization_signed_response_alg?: string | undefined;
1565
+ authorization_encrypted_response_enc?: "A128CBC-HS256" | undefined;
1566
+ authorization_encrypted_response_alg?: string | undefined;
1567
+ client_name?: string | undefined;
1568
+ client_uri?: string | undefined;
1569
+ policy_uri?: string | undefined;
1570
+ tos_uri?: string | undefined;
1571
+ logo_uri?: string | undefined;
1572
+ default_max_age?: number | undefined;
1573
+ require_auth_time?: boolean | undefined;
1574
+ contacts?: string[] | undefined;
1575
+ tls_client_certificate_bound_access_tokens?: boolean | undefined;
1576
+ dpop_bound_access_tokens?: boolean | undefined;
1577
+ authorization_details_types?: string[] | undefined;
1578
+ }>;
1579
+ export type ClientMetadata = z.infer<typeof clientMetadataSchema>;
1580
+ //# sourceMappingURL=types.d.ts.map