@atproto/oauth-client 0.5.6 → 0.5.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (66) hide show
  1. package/CHANGELOG.md +16 -0
  2. package/dist/constants.js.map +1 -1
  3. package/dist/errors/auth-method-unsatisfiable-error.js.map +1 -1
  4. package/dist/errors/token-invalid-error.js.map +1 -1
  5. package/dist/errors/token-refresh-error.js.map +1 -1
  6. package/dist/errors/token-revoked-error.js.map +1 -1
  7. package/dist/fetch-dpop.js.map +1 -1
  8. package/dist/identity-resolver.js.map +1 -1
  9. package/dist/index.d.ts +1 -0
  10. package/dist/index.d.ts.map +1 -1
  11. package/dist/index.js +1 -0
  12. package/dist/index.js.map +1 -1
  13. package/dist/lock.js.map +1 -1
  14. package/dist/oauth-authorization-server-metadata-resolver.js.map +1 -1
  15. package/dist/oauth-callback-error.js.map +1 -1
  16. package/dist/oauth-client-auth.d.ts.map +1 -1
  17. package/dist/oauth-client-auth.js +3 -4
  18. package/dist/oauth-client-auth.js.map +1 -1
  19. package/dist/oauth-client.d.ts +167 -139
  20. package/dist/oauth-client.d.ts.map +1 -1
  21. package/dist/oauth-client.js +1 -4
  22. package/dist/oauth-client.js.map +1 -1
  23. package/dist/oauth-protected-resource-metadata-resolver.js.map +1 -1
  24. package/dist/oauth-resolver-error.js.map +1 -1
  25. package/dist/oauth-resolver.js.map +1 -1
  26. package/dist/oauth-response-error.js.map +1 -1
  27. package/dist/oauth-server-agent.d.ts +4 -4
  28. package/dist/oauth-server-agent.d.ts.map +1 -1
  29. package/dist/oauth-server-agent.js +12 -77
  30. package/dist/oauth-server-agent.js.map +1 -1
  31. package/dist/oauth-server-factory.js.map +1 -1
  32. package/dist/oauth-session.d.ts +3 -3
  33. package/dist/oauth-session.d.ts.map +1 -1
  34. package/dist/oauth-session.js.map +1 -1
  35. package/dist/runtime-implementation.js.map +1 -1
  36. package/dist/runtime.js.map +1 -1
  37. package/dist/session-getter.d.ts +1 -1
  38. package/dist/session-getter.d.ts.map +1 -1
  39. package/dist/session-getter.js +2 -2
  40. package/dist/session-getter.js.map +1 -1
  41. package/dist/state-store.js.map +1 -1
  42. package/dist/types.d.ts +164 -1102
  43. package/dist/types.d.ts.map +1 -1
  44. package/dist/types.js.map +1 -1
  45. package/dist/util.d.ts +0 -8
  46. package/dist/util.d.ts.map +1 -1
  47. package/dist/util.js +22 -71
  48. package/dist/util.js.map +1 -1
  49. package/dist/validate-client-metadata.d.ts.map +1 -1
  50. package/dist/validate-client-metadata.js +14 -7
  51. package/dist/validate-client-metadata.js.map +1 -1
  52. package/package.json +8 -7
  53. package/src/index.ts +2 -0
  54. package/src/oauth-client-auth.ts +3 -5
  55. package/src/oauth-client.ts +1 -4
  56. package/src/oauth-server-agent.ts +9 -12
  57. package/src/oauth-session.ts +6 -3
  58. package/src/session-getter.ts +3 -3
  59. package/src/util.ts +22 -107
  60. package/src/validate-client-metadata.ts +26 -9
  61. package/tsconfig.build.tsbuildinfo +1 -1
  62. package/dist/atproto-token-response.d.ts +0 -110
  63. package/dist/atproto-token-response.d.ts.map +0 -1
  64. package/dist/atproto-token-response.js +0 -20
  65. package/dist/atproto-token-response.js.map +0 -1
  66. package/src/atproto-token-response.ts +0 -21
package/dist/types.d.ts CHANGED
@@ -9,1084 +9,230 @@ export declare const clientMetadataSchema: z.ZodObject<z.objectUtil.extendShape<
9
9
  redirect_uris: z.ZodArray<z.ZodUnion<[z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}`, string>, `http://[::1]${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `https://${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `${string}.${string}:/${string}`, string>]>, "atleastone">;
10
10
  response_types: z.ZodDefault<z.ZodArray<z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>, "atleastone">>;
11
11
  grant_types: z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "refresh_token", "password", "client_credentials", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer"]>, "atleastone">>;
12
- scope: z.ZodOptional<z.ZodString>;
12
+ scope: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
13
13
  token_endpoint_auth_method: z.ZodDefault<z.ZodEnum<["client_secret_basic", "client_secret_jwt", "client_secret_post", "none", "private_key_jwt", "self_signed_tls_client_auth", "tls_client_auth"]>>;
14
14
  token_endpoint_auth_signing_alg: z.ZodOptional<z.ZodString>;
15
15
  userinfo_signed_response_alg: z.ZodOptional<z.ZodString>;
16
16
  userinfo_encrypted_response_alg: z.ZodOptional<z.ZodString>;
17
17
  jwks_uri: z.ZodOptional<z.ZodEffects<z.ZodString, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}`, string>>;
18
18
  jwks: z.ZodOptional<z.ZodObject<{
19
- keys: z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodObject<z.objectUtil.extendShape<{
20
- kty: z.ZodString;
21
- alg: z.ZodOptional<z.ZodString>;
22
- kid: z.ZodOptional<z.ZodString>;
23
- ext: z.ZodOptional<z.ZodBoolean>;
24
- use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
25
- key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
26
- x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
27
- x5t: z.ZodOptional<z.ZodString>;
28
- "x5t#S256": z.ZodOptional<z.ZodString>;
29
- x5u: z.ZodOptional<z.ZodString>;
30
- }, {
31
- kty: z.ZodEffects<z.ZodString, string, string>;
32
- }>, "strip", z.ZodTypeAny, {
33
- kty: string;
34
- alg?: string | undefined;
35
- kid?: string | undefined;
36
- ext?: boolean | undefined;
37
- use?: "sig" | "enc" | undefined;
38
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
39
- x5c?: string[] | undefined;
40
- x5t?: string | undefined;
41
- "x5t#S256"?: string | undefined;
42
- x5u?: string | undefined;
43
- }, {
44
- kty: string;
45
- alg?: string | undefined;
46
- kid?: string | undefined;
47
- ext?: boolean | undefined;
48
- use?: "sig" | "enc" | undefined;
49
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
50
- x5c?: string[] | undefined;
51
- x5t?: string | undefined;
52
- "x5t#S256"?: string | undefined;
53
- x5u?: string | undefined;
54
- }>, z.ZodObject<z.objectUtil.extendShape<{
55
- kty: z.ZodString;
56
- alg: z.ZodOptional<z.ZodString>;
57
- kid: z.ZodOptional<z.ZodString>;
58
- ext: z.ZodOptional<z.ZodBoolean>;
59
- use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
60
- key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
61
- x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
62
- x5t: z.ZodOptional<z.ZodString>;
63
- "x5t#S256": z.ZodOptional<z.ZodString>;
64
- x5u: z.ZodOptional<z.ZodString>;
65
- }, {
66
- kty: z.ZodLiteral<"RSA">;
67
- alg: z.ZodOptional<z.ZodEnum<["RS256", "RS384", "RS512", "PS256", "PS384", "PS512"]>>;
68
- n: z.ZodString;
69
- e: z.ZodString;
70
- d: z.ZodOptional<z.ZodString>;
71
- p: z.ZodOptional<z.ZodString>;
72
- q: z.ZodOptional<z.ZodString>;
73
- dp: z.ZodOptional<z.ZodString>;
74
- dq: z.ZodOptional<z.ZodString>;
75
- qi: z.ZodOptional<z.ZodString>;
76
- oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
77
- r: z.ZodOptional<z.ZodString>;
78
- d: z.ZodOptional<z.ZodString>;
79
- t: z.ZodOptional<z.ZodString>;
80
- }, "strip", z.ZodTypeAny, {
81
- d?: string | undefined;
82
- r?: string | undefined;
83
- t?: string | undefined;
84
- }, {
85
- d?: string | undefined;
86
- r?: string | undefined;
87
- t?: string | undefined;
88
- }>, "atleastone">>;
89
- }>, "strip", z.ZodTypeAny, {
90
- kty: "RSA";
91
- n: string;
92
- e: string;
93
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
94
- kid?: string | undefined;
95
- ext?: boolean | undefined;
96
- use?: "sig" | "enc" | undefined;
97
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
98
- x5c?: string[] | undefined;
99
- x5t?: string | undefined;
100
- "x5t#S256"?: string | undefined;
101
- x5u?: string | undefined;
102
- d?: string | undefined;
103
- p?: string | undefined;
104
- q?: string | undefined;
105
- dp?: string | undefined;
106
- dq?: string | undefined;
107
- qi?: string | undefined;
108
- oth?: [{
109
- d?: string | undefined;
110
- r?: string | undefined;
111
- t?: string | undefined;
112
- }, ...{
113
- d?: string | undefined;
114
- r?: string | undefined;
115
- t?: string | undefined;
116
- }[]] | undefined;
117
- }, {
118
- kty: "RSA";
119
- n: string;
120
- e: string;
121
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
122
- kid?: string | undefined;
123
- ext?: boolean | undefined;
124
- use?: "sig" | "enc" | undefined;
125
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
126
- x5c?: string[] | undefined;
127
- x5t?: string | undefined;
128
- "x5t#S256"?: string | undefined;
129
- x5u?: string | undefined;
130
- d?: string | undefined;
131
- p?: string | undefined;
132
- q?: string | undefined;
133
- dp?: string | undefined;
134
- dq?: string | undefined;
135
- qi?: string | undefined;
136
- oth?: [{
137
- d?: string | undefined;
138
- r?: string | undefined;
139
- t?: string | undefined;
140
- }, ...{
141
- d?: string | undefined;
142
- r?: string | undefined;
143
- t?: string | undefined;
144
- }[]] | undefined;
145
- }>, z.ZodObject<z.objectUtil.extendShape<{
146
- kty: z.ZodString;
147
- alg: z.ZodOptional<z.ZodString>;
148
- kid: z.ZodOptional<z.ZodString>;
149
- ext: z.ZodOptional<z.ZodBoolean>;
150
- use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
151
- key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
152
- x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
153
- x5t: z.ZodOptional<z.ZodString>;
154
- "x5t#S256": z.ZodOptional<z.ZodString>;
155
- x5u: z.ZodOptional<z.ZodString>;
156
- }, {
157
- kty: z.ZodLiteral<"EC">;
158
- alg: z.ZodOptional<z.ZodEnum<["ES256", "ES384", "ES512"]>>;
159
- crv: z.ZodEnum<["P-256", "P-384", "P-521"]>;
160
- x: z.ZodString;
161
- y: z.ZodString;
162
- d: z.ZodOptional<z.ZodString>;
163
- }>, "strip", z.ZodTypeAny, {
164
- kty: "EC";
165
- crv: "P-256" | "P-384" | "P-521";
166
- x: string;
167
- y: string;
168
- alg?: "ES256" | "ES384" | "ES512" | undefined;
169
- kid?: string | undefined;
170
- ext?: boolean | undefined;
171
- use?: "sig" | "enc" | undefined;
172
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
173
- x5c?: string[] | undefined;
174
- x5t?: string | undefined;
175
- "x5t#S256"?: string | undefined;
176
- x5u?: string | undefined;
177
- d?: string | undefined;
178
- }, {
179
- kty: "EC";
180
- crv: "P-256" | "P-384" | "P-521";
181
- x: string;
182
- y: string;
183
- alg?: "ES256" | "ES384" | "ES512" | undefined;
184
- kid?: string | undefined;
185
- ext?: boolean | undefined;
186
- use?: "sig" | "enc" | undefined;
187
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
188
- x5c?: string[] | undefined;
189
- x5t?: string | undefined;
190
- "x5t#S256"?: string | undefined;
191
- x5u?: string | undefined;
192
- d?: string | undefined;
193
- }>, z.ZodObject<z.objectUtil.extendShape<{
194
- kty: z.ZodString;
195
- alg: z.ZodOptional<z.ZodString>;
196
- kid: z.ZodOptional<z.ZodString>;
197
- ext: z.ZodOptional<z.ZodBoolean>;
198
- use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
199
- key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
200
- x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
201
- x5t: z.ZodOptional<z.ZodString>;
202
- "x5t#S256": z.ZodOptional<z.ZodString>;
203
- x5u: z.ZodOptional<z.ZodString>;
204
- }, {
205
- kty: z.ZodLiteral<"EC">;
206
- alg: z.ZodOptional<z.ZodEnum<["ES256K"]>>;
207
- crv: z.ZodEnum<["secp256k1"]>;
208
- x: z.ZodString;
209
- y: z.ZodString;
210
- d: z.ZodOptional<z.ZodString>;
211
- }>, "strip", z.ZodTypeAny, {
212
- kty: "EC";
213
- crv: "secp256k1";
214
- x: string;
215
- y: string;
216
- alg?: "ES256K" | undefined;
217
- kid?: string | undefined;
218
- ext?: boolean | undefined;
219
- use?: "sig" | "enc" | undefined;
220
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
221
- x5c?: string[] | undefined;
222
- x5t?: string | undefined;
223
- "x5t#S256"?: string | undefined;
224
- x5u?: string | undefined;
225
- d?: string | undefined;
226
- }, {
227
- kty: "EC";
228
- crv: "secp256k1";
229
- x: string;
230
- y: string;
231
- alg?: "ES256K" | undefined;
232
- kid?: string | undefined;
233
- ext?: boolean | undefined;
234
- use?: "sig" | "enc" | undefined;
235
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
236
- x5c?: string[] | undefined;
237
- x5t?: string | undefined;
238
- "x5t#S256"?: string | undefined;
239
- x5u?: string | undefined;
240
- d?: string | undefined;
241
- }>, z.ZodObject<z.objectUtil.extendShape<{
242
- kty: z.ZodString;
243
- alg: z.ZodOptional<z.ZodString>;
244
- kid: z.ZodOptional<z.ZodString>;
245
- ext: z.ZodOptional<z.ZodBoolean>;
246
- use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
247
- key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
248
- x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
249
- x5t: z.ZodOptional<z.ZodString>;
250
- "x5t#S256": z.ZodOptional<z.ZodString>;
251
- x5u: z.ZodOptional<z.ZodString>;
252
- }, {
253
- kty: z.ZodLiteral<"OKP">;
254
- alg: z.ZodOptional<z.ZodEnum<["EdDSA"]>>;
255
- crv: z.ZodEnum<["Ed25519", "Ed448"]>;
256
- x: z.ZodString;
257
- d: z.ZodOptional<z.ZodString>;
258
- }>, "strip", z.ZodTypeAny, {
259
- kty: "OKP";
260
- crv: "Ed25519" | "Ed448";
261
- x: string;
262
- alg?: "EdDSA" | undefined;
263
- kid?: string | undefined;
264
- ext?: boolean | undefined;
265
- use?: "sig" | "enc" | undefined;
266
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
267
- x5c?: string[] | undefined;
268
- x5t?: string | undefined;
269
- "x5t#S256"?: string | undefined;
270
- x5u?: string | undefined;
271
- d?: string | undefined;
272
- }, {
273
- kty: "OKP";
274
- crv: "Ed25519" | "Ed448";
275
- x: string;
276
- alg?: "EdDSA" | undefined;
277
- kid?: string | undefined;
278
- ext?: boolean | undefined;
279
- use?: "sig" | "enc" | undefined;
280
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
281
- x5c?: string[] | undefined;
282
- x5t?: string | undefined;
283
- "x5t#S256"?: string | undefined;
284
- x5u?: string | undefined;
285
- d?: string | undefined;
286
- }>, z.ZodObject<z.objectUtil.extendShape<{
287
- kty: z.ZodString;
288
- alg: z.ZodOptional<z.ZodString>;
289
- kid: z.ZodOptional<z.ZodString>;
290
- ext: z.ZodOptional<z.ZodBoolean>;
291
- use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
292
- key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
293
- x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
294
- x5t: z.ZodOptional<z.ZodString>;
295
- "x5t#S256": z.ZodOptional<z.ZodString>;
296
- x5u: z.ZodOptional<z.ZodString>;
297
- }, {
298
- kty: z.ZodLiteral<"oct">;
299
- alg: z.ZodOptional<z.ZodEnum<["HS256", "HS384", "HS512"]>>;
300
- k: z.ZodString;
301
- }>, "strip", z.ZodTypeAny, {
302
- kty: "oct";
303
- k: string;
304
- alg?: "HS256" | "HS384" | "HS512" | undefined;
305
- kid?: string | undefined;
306
- ext?: boolean | undefined;
307
- use?: "sig" | "enc" | undefined;
308
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
309
- x5c?: string[] | undefined;
310
- x5t?: string | undefined;
311
- "x5t#S256"?: string | undefined;
312
- x5u?: string | undefined;
313
- }, {
314
- kty: "oct";
315
- k: string;
316
- alg?: "HS256" | "HS384" | "HS512" | undefined;
317
- kid?: string | undefined;
318
- ext?: boolean | undefined;
319
- use?: "sig" | "enc" | undefined;
320
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
321
- x5c?: string[] | undefined;
322
- x5t?: string | undefined;
323
- "x5t#S256"?: string | undefined;
324
- x5u?: string | undefined;
325
- }>]>, {
326
- kty: "RSA";
327
- n: string;
328
- e: string;
329
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
330
- kid?: string | undefined;
331
- ext?: boolean | undefined;
332
- use?: "sig" | "enc" | undefined;
333
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
334
- x5c?: string[] | undefined;
335
- x5t?: string | undefined;
336
- "x5t#S256"?: string | undefined;
337
- x5u?: string | undefined;
338
- d?: string | undefined;
339
- p?: string | undefined;
340
- q?: string | undefined;
341
- dp?: string | undefined;
342
- dq?: string | undefined;
343
- qi?: string | undefined;
344
- oth?: [{
345
- d?: string | undefined;
346
- r?: string | undefined;
347
- t?: string | undefined;
348
- }, ...{
349
- d?: string | undefined;
350
- r?: string | undefined;
351
- t?: string | undefined;
352
- }[]] | undefined;
353
- } | {
354
- kty: "EC";
355
- crv: "P-256" | "P-384" | "P-521";
356
- x: string;
357
- y: string;
358
- alg?: "ES256" | "ES384" | "ES512" | undefined;
359
- kid?: string | undefined;
360
- ext?: boolean | undefined;
361
- use?: "sig" | "enc" | undefined;
362
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
363
- x5c?: string[] | undefined;
364
- x5t?: string | undefined;
365
- "x5t#S256"?: string | undefined;
366
- x5u?: string | undefined;
367
- d?: string | undefined;
368
- } | {
369
- kty: "EC";
370
- crv: "secp256k1";
371
- x: string;
372
- y: string;
373
- alg?: "ES256K" | undefined;
374
- kid?: string | undefined;
375
- ext?: boolean | undefined;
376
- use?: "sig" | "enc" | undefined;
377
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
378
- x5c?: string[] | undefined;
379
- x5t?: string | undefined;
380
- "x5t#S256"?: string | undefined;
381
- x5u?: string | undefined;
382
- d?: string | undefined;
383
- } | {
384
- kty: "OKP";
385
- crv: "Ed25519" | "Ed448";
386
- x: string;
387
- alg?: "EdDSA" | undefined;
388
- kid?: string | undefined;
389
- ext?: boolean | undefined;
390
- use?: "sig" | "enc" | undefined;
391
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
392
- x5c?: string[] | undefined;
393
- x5t?: string | undefined;
394
- "x5t#S256"?: string | undefined;
395
- x5u?: string | undefined;
396
- d?: string | undefined;
397
- } | {
398
- kty: "oct";
399
- k: string;
400
- alg?: "HS256" | "HS384" | "HS512" | undefined;
401
- kid?: string | undefined;
402
- ext?: boolean | undefined;
403
- use?: "sig" | "enc" | undefined;
404
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
405
- x5c?: string[] | undefined;
406
- x5t?: string | undefined;
407
- "x5t#S256"?: string | undefined;
408
- x5u?: string | undefined;
409
- } | {
410
- kty: string;
411
- alg?: string | undefined;
412
- kid?: string | undefined;
413
- ext?: boolean | undefined;
414
- use?: "sig" | "enc" | undefined;
415
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
416
- x5c?: string[] | undefined;
417
- x5t?: string | undefined;
418
- "x5t#S256"?: string | undefined;
419
- x5u?: string | undefined;
420
- }, {
421
- kty: "RSA";
422
- n: string;
423
- e: string;
424
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
425
- kid?: string | undefined;
426
- ext?: boolean | undefined;
427
- use?: "sig" | "enc" | undefined;
428
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
429
- x5c?: string[] | undefined;
430
- x5t?: string | undefined;
431
- "x5t#S256"?: string | undefined;
432
- x5u?: string | undefined;
433
- d?: string | undefined;
434
- p?: string | undefined;
435
- q?: string | undefined;
436
- dp?: string | undefined;
437
- dq?: string | undefined;
438
- qi?: string | undefined;
439
- oth?: [{
440
- d?: string | undefined;
441
- r?: string | undefined;
442
- t?: string | undefined;
443
- }, ...{
444
- d?: string | undefined;
445
- r?: string | undefined;
446
- t?: string | undefined;
447
- }[]] | undefined;
448
- } | {
449
- kty: "EC";
450
- crv: "P-256" | "P-384" | "P-521";
451
- x: string;
452
- y: string;
453
- alg?: "ES256" | "ES384" | "ES512" | undefined;
454
- kid?: string | undefined;
455
- ext?: boolean | undefined;
456
- use?: "sig" | "enc" | undefined;
457
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
458
- x5c?: string[] | undefined;
459
- x5t?: string | undefined;
460
- "x5t#S256"?: string | undefined;
461
- x5u?: string | undefined;
462
- d?: string | undefined;
463
- } | {
464
- kty: "EC";
465
- crv: "secp256k1";
466
- x: string;
467
- y: string;
468
- alg?: "ES256K" | undefined;
469
- kid?: string | undefined;
470
- ext?: boolean | undefined;
471
- use?: "sig" | "enc" | undefined;
472
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
473
- x5c?: string[] | undefined;
474
- x5t?: string | undefined;
475
- "x5t#S256"?: string | undefined;
476
- x5u?: string | undefined;
477
- d?: string | undefined;
478
- } | {
479
- kty: "OKP";
480
- crv: "Ed25519" | "Ed448";
481
- x: string;
482
- alg?: "EdDSA" | undefined;
483
- kid?: string | undefined;
484
- ext?: boolean | undefined;
485
- use?: "sig" | "enc" | undefined;
486
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
487
- x5c?: string[] | undefined;
488
- x5t?: string | undefined;
489
- "x5t#S256"?: string | undefined;
490
- x5u?: string | undefined;
491
- d?: string | undefined;
492
- } | {
493
- kty: "oct";
494
- k: string;
495
- alg?: "HS256" | "HS384" | "HS512" | undefined;
496
- kid?: string | undefined;
497
- ext?: boolean | undefined;
498
- use?: "sig" | "enc" | undefined;
499
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
500
- x5c?: string[] | undefined;
501
- x5t?: string | undefined;
502
- "x5t#S256"?: string | undefined;
503
- x5u?: string | undefined;
504
- } | {
505
- kty: string;
506
- alg?: string | undefined;
507
- kid?: string | undefined;
508
- ext?: boolean | undefined;
509
- use?: "sig" | "enc" | undefined;
510
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
511
- x5c?: string[] | undefined;
512
- x5t?: string | undefined;
513
- "x5t#S256"?: string | undefined;
514
- x5u?: string | undefined;
515
- }>, {
516
- kty: "RSA";
517
- n: string;
518
- e: string;
519
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
520
- kid?: string | undefined;
521
- ext?: boolean | undefined;
522
- use?: "sig" | "enc" | undefined;
523
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
524
- x5c?: string[] | undefined;
525
- x5t?: string | undefined;
526
- "x5t#S256"?: string | undefined;
527
- x5u?: string | undefined;
528
- d?: string | undefined;
529
- p?: string | undefined;
530
- q?: string | undefined;
531
- dp?: string | undefined;
532
- dq?: string | undefined;
533
- qi?: string | undefined;
534
- oth?: [{
535
- d?: string | undefined;
536
- r?: string | undefined;
537
- t?: string | undefined;
538
- }, ...{
539
- d?: string | undefined;
540
- r?: string | undefined;
541
- t?: string | undefined;
542
- }[]] | undefined;
543
- } | {
544
- kty: "EC";
545
- crv: "P-256" | "P-384" | "P-521";
546
- x: string;
547
- y: string;
548
- alg?: "ES256" | "ES384" | "ES512" | undefined;
549
- kid?: string | undefined;
550
- ext?: boolean | undefined;
551
- use?: "sig" | "enc" | undefined;
552
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
553
- x5c?: string[] | undefined;
554
- x5t?: string | undefined;
555
- "x5t#S256"?: string | undefined;
556
- x5u?: string | undefined;
557
- d?: string | undefined;
558
- } | {
559
- kty: "EC";
560
- crv: "secp256k1";
561
- x: string;
562
- y: string;
563
- alg?: "ES256K" | undefined;
564
- kid?: string | undefined;
565
- ext?: boolean | undefined;
566
- use?: "sig" | "enc" | undefined;
567
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
568
- x5c?: string[] | undefined;
569
- x5t?: string | undefined;
570
- "x5t#S256"?: string | undefined;
571
- x5u?: string | undefined;
572
- d?: string | undefined;
573
- } | {
574
- kty: "OKP";
575
- crv: "Ed25519" | "Ed448";
576
- x: string;
577
- alg?: "EdDSA" | undefined;
578
- kid?: string | undefined;
579
- ext?: boolean | undefined;
580
- use?: "sig" | "enc" | undefined;
581
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
582
- x5c?: string[] | undefined;
583
- x5t?: string | undefined;
584
- "x5t#S256"?: string | undefined;
585
- x5u?: string | undefined;
586
- d?: string | undefined;
587
- } | {
588
- kty: "oct";
589
- k: string;
590
- alg?: "HS256" | "HS384" | "HS512" | undefined;
591
- kid?: string | undefined;
592
- ext?: boolean | undefined;
593
- use?: "sig" | "enc" | undefined;
594
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
595
- x5c?: string[] | undefined;
596
- x5t?: string | undefined;
597
- "x5t#S256"?: string | undefined;
598
- x5u?: string | undefined;
599
- } | {
600
- kty: string;
601
- alg?: string | undefined;
602
- kid?: string | undefined;
603
- ext?: boolean | undefined;
604
- use?: "sig" | "enc" | undefined;
605
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
606
- x5c?: string[] | undefined;
607
- x5t?: string | undefined;
608
- "x5t#S256"?: string | undefined;
609
- x5u?: string | undefined;
610
- }, {
611
- kty: "RSA";
612
- n: string;
613
- e: string;
614
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
615
- kid?: string | undefined;
616
- ext?: boolean | undefined;
617
- use?: "sig" | "enc" | undefined;
618
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
619
- x5c?: string[] | undefined;
620
- x5t?: string | undefined;
621
- "x5t#S256"?: string | undefined;
622
- x5u?: string | undefined;
623
- d?: string | undefined;
624
- p?: string | undefined;
625
- q?: string | undefined;
626
- dp?: string | undefined;
627
- dq?: string | undefined;
628
- qi?: string | undefined;
629
- oth?: [{
630
- d?: string | undefined;
631
- r?: string | undefined;
632
- t?: string | undefined;
633
- }, ...{
634
- d?: string | undefined;
635
- r?: string | undefined;
636
- t?: string | undefined;
637
- }[]] | undefined;
638
- } | {
639
- kty: "EC";
640
- crv: "P-256" | "P-384" | "P-521";
641
- x: string;
642
- y: string;
643
- alg?: "ES256" | "ES384" | "ES512" | undefined;
644
- kid?: string | undefined;
645
- ext?: boolean | undefined;
646
- use?: "sig" | "enc" | undefined;
647
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
648
- x5c?: string[] | undefined;
649
- x5t?: string | undefined;
650
- "x5t#S256"?: string | undefined;
651
- x5u?: string | undefined;
652
- d?: string | undefined;
653
- } | {
654
- kty: "EC";
655
- crv: "secp256k1";
656
- x: string;
657
- y: string;
658
- alg?: "ES256K" | undefined;
659
- kid?: string | undefined;
660
- ext?: boolean | undefined;
661
- use?: "sig" | "enc" | undefined;
662
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
663
- x5c?: string[] | undefined;
664
- x5t?: string | undefined;
665
- "x5t#S256"?: string | undefined;
666
- x5u?: string | undefined;
667
- d?: string | undefined;
668
- } | {
669
- kty: "OKP";
670
- crv: "Ed25519" | "Ed448";
671
- x: string;
672
- alg?: "EdDSA" | undefined;
673
- kid?: string | undefined;
674
- ext?: boolean | undefined;
675
- use?: "sig" | "enc" | undefined;
676
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
677
- x5c?: string[] | undefined;
678
- x5t?: string | undefined;
679
- "x5t#S256"?: string | undefined;
680
- x5u?: string | undefined;
681
- d?: string | undefined;
682
- } | {
683
- kty: "oct";
684
- k: string;
685
- alg?: "HS256" | "HS384" | "HS512" | undefined;
686
- kid?: string | undefined;
687
- ext?: boolean | undefined;
688
- use?: "sig" | "enc" | undefined;
689
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
690
- x5c?: string[] | undefined;
691
- x5t?: string | undefined;
692
- "x5t#S256"?: string | undefined;
693
- x5u?: string | undefined;
694
- } | {
695
- kty: string;
696
- alg?: string | undefined;
697
- kid?: string | undefined;
698
- ext?: boolean | undefined;
699
- use?: "sig" | "enc" | undefined;
700
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
701
- x5c?: string[] | undefined;
702
- x5t?: string | undefined;
703
- "x5t#S256"?: string | undefined;
704
- x5u?: string | undefined;
705
- }>, {
706
- kty: "RSA";
707
- n: string;
708
- e: string;
709
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
710
- kid?: string | undefined;
711
- ext?: boolean | undefined;
712
- use?: "sig" | "enc" | undefined;
713
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
714
- x5c?: string[] | undefined;
715
- x5t?: string | undefined;
716
- "x5t#S256"?: string | undefined;
717
- x5u?: string | undefined;
718
- d?: string | undefined;
719
- p?: string | undefined;
720
- q?: string | undefined;
721
- dp?: string | undefined;
722
- dq?: string | undefined;
723
- qi?: string | undefined;
724
- oth?: [{
725
- d?: string | undefined;
726
- r?: string | undefined;
727
- t?: string | undefined;
728
- }, ...{
729
- d?: string | undefined;
730
- r?: string | undefined;
731
- t?: string | undefined;
732
- }[]] | undefined;
733
- } | {
734
- kty: "EC";
735
- crv: "P-256" | "P-384" | "P-521";
736
- x: string;
737
- y: string;
738
- alg?: "ES256" | "ES384" | "ES512" | undefined;
739
- kid?: string | undefined;
740
- ext?: boolean | undefined;
741
- use?: "sig" | "enc" | undefined;
742
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
743
- x5c?: string[] | undefined;
744
- x5t?: string | undefined;
745
- "x5t#S256"?: string | undefined;
746
- x5u?: string | undefined;
747
- d?: string | undefined;
748
- } | {
749
- kty: "EC";
750
- crv: "secp256k1";
751
- x: string;
752
- y: string;
753
- alg?: "ES256K" | undefined;
754
- kid?: string | undefined;
755
- ext?: boolean | undefined;
756
- use?: "sig" | "enc" | undefined;
757
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
758
- x5c?: string[] | undefined;
759
- x5t?: string | undefined;
760
- "x5t#S256"?: string | undefined;
761
- x5u?: string | undefined;
762
- d?: string | undefined;
763
- } | {
764
- kty: "OKP";
765
- crv: "Ed25519" | "Ed448";
766
- x: string;
767
- alg?: "EdDSA" | undefined;
768
- kid?: string | undefined;
769
- ext?: boolean | undefined;
770
- use?: "sig" | "enc" | undefined;
771
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
772
- x5c?: string[] | undefined;
773
- x5t?: string | undefined;
774
- "x5t#S256"?: string | undefined;
775
- x5u?: string | undefined;
776
- d?: string | undefined;
777
- } | {
778
- kty: "oct";
779
- k: string;
780
- alg?: "HS256" | "HS384" | "HS512" | undefined;
781
- kid?: string | undefined;
782
- ext?: boolean | undefined;
783
- use?: "sig" | "enc" | undefined;
784
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
785
- x5c?: string[] | undefined;
786
- x5t?: string | undefined;
787
- "x5t#S256"?: string | undefined;
788
- x5u?: string | undefined;
789
- } | {
790
- kty: string;
791
- alg?: string | undefined;
792
- kid?: string | undefined;
793
- ext?: boolean | undefined;
794
- use?: "sig" | "enc" | undefined;
795
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
796
- x5c?: string[] | undefined;
797
- x5t?: string | undefined;
798
- "x5t#S256"?: string | undefined;
799
- x5u?: string | undefined;
800
- }, {
19
+ keys: z.ZodEffects<z.ZodArray<z.ZodUnknown, "many">, ((({
801
20
  kty: "RSA";
802
21
  n: string;
803
22
  e: string;
804
23
  alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
805
24
  kid?: string | undefined;
806
- ext?: boolean | undefined;
807
25
  use?: "sig" | "enc" | undefined;
808
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
26
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
809
27
  x5c?: string[] | undefined;
810
28
  x5t?: string | undefined;
811
29
  "x5t#S256"?: string | undefined;
812
30
  x5u?: string | undefined;
31
+ ext?: boolean | undefined;
32
+ iat?: number | undefined;
33
+ exp?: number | undefined;
34
+ nbf?: number | undefined;
35
+ revoked?: {
36
+ revoked_at: number;
37
+ reason?: string | undefined;
38
+ } | undefined;
813
39
  d?: string | undefined;
814
40
  p?: string | undefined;
815
41
  q?: string | undefined;
816
42
  dp?: string | undefined;
817
43
  dq?: string | undefined;
818
44
  qi?: string | undefined;
819
- oth?: [{
820
- d?: string | undefined;
821
- r?: string | undefined;
822
- t?: string | undefined;
823
- }, ...{
45
+ oth?: {
824
46
  d?: string | undefined;
825
47
  r?: string | undefined;
826
48
  t?: string | undefined;
827
- }[]] | undefined;
828
- } | {
49
+ }[] | undefined;
50
+ } & {
51
+ kid: NonNullable<unknown>;
52
+ }) | ({
829
53
  kty: "EC";
830
54
  crv: "P-256" | "P-384" | "P-521";
831
55
  x: string;
832
56
  y: string;
833
57
  alg?: "ES256" | "ES384" | "ES512" | undefined;
834
58
  kid?: string | undefined;
835
- ext?: boolean | undefined;
836
59
  use?: "sig" | "enc" | undefined;
837
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
60
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
838
61
  x5c?: string[] | undefined;
839
62
  x5t?: string | undefined;
840
63
  "x5t#S256"?: string | undefined;
841
64
  x5u?: string | undefined;
65
+ ext?: boolean | undefined;
66
+ iat?: number | undefined;
67
+ exp?: number | undefined;
68
+ nbf?: number | undefined;
69
+ revoked?: {
70
+ revoked_at: number;
71
+ reason?: string | undefined;
72
+ } | undefined;
842
73
  d?: string | undefined;
843
- } | {
74
+ } & {
75
+ kid: NonNullable<unknown>;
76
+ }) | ({
844
77
  kty: "EC";
845
78
  crv: "secp256k1";
846
79
  x: string;
847
80
  y: string;
848
81
  alg?: "ES256K" | undefined;
849
82
  kid?: string | undefined;
850
- ext?: boolean | undefined;
851
83
  use?: "sig" | "enc" | undefined;
852
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
84
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
853
85
  x5c?: string[] | undefined;
854
86
  x5t?: string | undefined;
855
87
  "x5t#S256"?: string | undefined;
856
88
  x5u?: string | undefined;
89
+ ext?: boolean | undefined;
90
+ iat?: number | undefined;
91
+ exp?: number | undefined;
92
+ nbf?: number | undefined;
93
+ revoked?: {
94
+ revoked_at: number;
95
+ reason?: string | undefined;
96
+ } | undefined;
857
97
  d?: string | undefined;
858
- } | {
98
+ } & {
99
+ kid: NonNullable<unknown>;
100
+ }) | ({
859
101
  kty: "OKP";
860
102
  crv: "Ed25519" | "Ed448";
861
103
  x: string;
862
104
  alg?: "EdDSA" | undefined;
863
105
  kid?: string | undefined;
864
- ext?: boolean | undefined;
865
- use?: "sig" | "enc" | undefined;
866
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
867
- x5c?: string[] | undefined;
868
- x5t?: string | undefined;
869
- "x5t#S256"?: string | undefined;
870
- x5u?: string | undefined;
871
- d?: string | undefined;
872
- } | {
873
- kty: "oct";
874
- k: string;
875
- alg?: "HS256" | "HS384" | "HS512" | undefined;
876
- kid?: string | undefined;
877
- ext?: boolean | undefined;
878
106
  use?: "sig" | "enc" | undefined;
879
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
107
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
880
108
  x5c?: string[] | undefined;
881
109
  x5t?: string | undefined;
882
110
  "x5t#S256"?: string | undefined;
883
111
  x5u?: string | undefined;
884
- } | {
885
- kty: string;
886
- alg?: string | undefined;
887
- kid?: string | undefined;
888
112
  ext?: boolean | undefined;
889
- use?: "sig" | "enc" | undefined;
890
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
891
- x5c?: string[] | undefined;
892
- x5t?: string | undefined;
893
- "x5t#S256"?: string | undefined;
894
- x5u?: string | undefined;
895
- }>, "many">;
113
+ iat?: number | undefined;
114
+ exp?: number | undefined;
115
+ nbf?: number | undefined;
116
+ revoked?: {
117
+ revoked_at: number;
118
+ reason?: string | undefined;
119
+ } | undefined;
120
+ d?: string | undefined;
121
+ } & {
122
+ kid: NonNullable<unknown>;
123
+ })) & {
124
+ d?: never;
125
+ })[], unknown[]>;
896
126
  }, "strip", z.ZodTypeAny, {
897
- keys: ({
127
+ keys: ((({
898
128
  kty: "RSA";
899
129
  n: string;
900
130
  e: string;
901
131
  alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
902
132
  kid?: string | undefined;
903
- ext?: boolean | undefined;
904
- use?: "sig" | "enc" | undefined;
905
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
906
- x5c?: string[] | undefined;
907
- x5t?: string | undefined;
908
- "x5t#S256"?: string | undefined;
909
- x5u?: string | undefined;
910
- d?: string | undefined;
911
- p?: string | undefined;
912
- q?: string | undefined;
913
- dp?: string | undefined;
914
- dq?: string | undefined;
915
- qi?: string | undefined;
916
- oth?: [{
917
- d?: string | undefined;
918
- r?: string | undefined;
919
- t?: string | undefined;
920
- }, ...{
921
- d?: string | undefined;
922
- r?: string | undefined;
923
- t?: string | undefined;
924
- }[]] | undefined;
925
- } | {
926
- kty: "EC";
927
- crv: "P-256" | "P-384" | "P-521";
928
- x: string;
929
- y: string;
930
- alg?: "ES256" | "ES384" | "ES512" | undefined;
931
- kid?: string | undefined;
932
- ext?: boolean | undefined;
933
- use?: "sig" | "enc" | undefined;
934
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
935
- x5c?: string[] | undefined;
936
- x5t?: string | undefined;
937
- "x5t#S256"?: string | undefined;
938
- x5u?: string | undefined;
939
- d?: string | undefined;
940
- } | {
941
- kty: "EC";
942
- crv: "secp256k1";
943
- x: string;
944
- y: string;
945
- alg?: "ES256K" | undefined;
946
- kid?: string | undefined;
947
- ext?: boolean | undefined;
948
- use?: "sig" | "enc" | undefined;
949
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
950
- x5c?: string[] | undefined;
951
- x5t?: string | undefined;
952
- "x5t#S256"?: string | undefined;
953
- x5u?: string | undefined;
954
- d?: string | undefined;
955
- } | {
956
- kty: "OKP";
957
- crv: "Ed25519" | "Ed448";
958
- x: string;
959
- alg?: "EdDSA" | undefined;
960
- kid?: string | undefined;
961
- ext?: boolean | undefined;
962
- use?: "sig" | "enc" | undefined;
963
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
964
- x5c?: string[] | undefined;
965
- x5t?: string | undefined;
966
- "x5t#S256"?: string | undefined;
967
- x5u?: string | undefined;
968
- d?: string | undefined;
969
- } | {
970
- kty: "oct";
971
- k: string;
972
- alg?: "HS256" | "HS384" | "HS512" | undefined;
973
- kid?: string | undefined;
974
- ext?: boolean | undefined;
975
- use?: "sig" | "enc" | undefined;
976
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
977
- x5c?: string[] | undefined;
978
- x5t?: string | undefined;
979
- "x5t#S256"?: string | undefined;
980
- x5u?: string | undefined;
981
- } | {
982
- kty: string;
983
- alg?: string | undefined;
984
- kid?: string | undefined;
985
- ext?: boolean | undefined;
986
133
  use?: "sig" | "enc" | undefined;
987
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
134
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
988
135
  x5c?: string[] | undefined;
989
136
  x5t?: string | undefined;
990
137
  "x5t#S256"?: string | undefined;
991
138
  x5u?: string | undefined;
992
- })[];
993
- }, {
994
- keys: ({
995
- kty: "RSA";
996
- n: string;
997
- e: string;
998
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
999
- kid?: string | undefined;
1000
139
  ext?: boolean | undefined;
1001
- use?: "sig" | "enc" | undefined;
1002
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1003
- x5c?: string[] | undefined;
1004
- x5t?: string | undefined;
1005
- "x5t#S256"?: string | undefined;
1006
- x5u?: string | undefined;
140
+ iat?: number | undefined;
141
+ exp?: number | undefined;
142
+ nbf?: number | undefined;
143
+ revoked?: {
144
+ revoked_at: number;
145
+ reason?: string | undefined;
146
+ } | undefined;
1007
147
  d?: string | undefined;
1008
148
  p?: string | undefined;
1009
149
  q?: string | undefined;
1010
150
  dp?: string | undefined;
1011
151
  dq?: string | undefined;
1012
152
  qi?: string | undefined;
1013
- oth?: [{
1014
- d?: string | undefined;
1015
- r?: string | undefined;
1016
- t?: string | undefined;
1017
- }, ...{
153
+ oth?: {
1018
154
  d?: string | undefined;
1019
155
  r?: string | undefined;
1020
156
  t?: string | undefined;
1021
- }[]] | undefined;
1022
- } | {
157
+ }[] | undefined;
158
+ } & {
159
+ kid: NonNullable<unknown>;
160
+ }) | ({
1023
161
  kty: "EC";
1024
162
  crv: "P-256" | "P-384" | "P-521";
1025
163
  x: string;
1026
164
  y: string;
1027
165
  alg?: "ES256" | "ES384" | "ES512" | undefined;
1028
166
  kid?: string | undefined;
1029
- ext?: boolean | undefined;
1030
167
  use?: "sig" | "enc" | undefined;
1031
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
168
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1032
169
  x5c?: string[] | undefined;
1033
170
  x5t?: string | undefined;
1034
171
  "x5t#S256"?: string | undefined;
1035
172
  x5u?: string | undefined;
173
+ ext?: boolean | undefined;
174
+ iat?: number | undefined;
175
+ exp?: number | undefined;
176
+ nbf?: number | undefined;
177
+ revoked?: {
178
+ revoked_at: number;
179
+ reason?: string | undefined;
180
+ } | undefined;
1036
181
  d?: string | undefined;
1037
- } | {
182
+ } & {
183
+ kid: NonNullable<unknown>;
184
+ }) | ({
1038
185
  kty: "EC";
1039
186
  crv: "secp256k1";
1040
187
  x: string;
1041
188
  y: string;
1042
189
  alg?: "ES256K" | undefined;
1043
190
  kid?: string | undefined;
1044
- ext?: boolean | undefined;
1045
191
  use?: "sig" | "enc" | undefined;
1046
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
192
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1047
193
  x5c?: string[] | undefined;
1048
194
  x5t?: string | undefined;
1049
195
  "x5t#S256"?: string | undefined;
1050
196
  x5u?: string | undefined;
197
+ ext?: boolean | undefined;
198
+ iat?: number | undefined;
199
+ exp?: number | undefined;
200
+ nbf?: number | undefined;
201
+ revoked?: {
202
+ revoked_at: number;
203
+ reason?: string | undefined;
204
+ } | undefined;
1051
205
  d?: string | undefined;
1052
- } | {
206
+ } & {
207
+ kid: NonNullable<unknown>;
208
+ }) | ({
1053
209
  kty: "OKP";
1054
210
  crv: "Ed25519" | "Ed448";
1055
211
  x: string;
1056
212
  alg?: "EdDSA" | undefined;
1057
213
  kid?: string | undefined;
1058
- ext?: boolean | undefined;
1059
- use?: "sig" | "enc" | undefined;
1060
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1061
- x5c?: string[] | undefined;
1062
- x5t?: string | undefined;
1063
- "x5t#S256"?: string | undefined;
1064
- x5u?: string | undefined;
1065
- d?: string | undefined;
1066
- } | {
1067
- kty: "oct";
1068
- k: string;
1069
- alg?: "HS256" | "HS384" | "HS512" | undefined;
1070
- kid?: string | undefined;
1071
- ext?: boolean | undefined;
1072
214
  use?: "sig" | "enc" | undefined;
1073
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
215
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1074
216
  x5c?: string[] | undefined;
1075
217
  x5t?: string | undefined;
1076
218
  "x5t#S256"?: string | undefined;
1077
219
  x5u?: string | undefined;
1078
- } | {
1079
- kty: string;
1080
- alg?: string | undefined;
1081
- kid?: string | undefined;
1082
220
  ext?: boolean | undefined;
1083
- use?: "sig" | "enc" | undefined;
1084
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1085
- x5c?: string[] | undefined;
1086
- x5t?: string | undefined;
1087
- "x5t#S256"?: string | undefined;
1088
- x5u?: string | undefined;
221
+ iat?: number | undefined;
222
+ exp?: number | undefined;
223
+ nbf?: number | undefined;
224
+ revoked?: {
225
+ revoked_at: number;
226
+ reason?: string | undefined;
227
+ } | undefined;
228
+ d?: string | undefined;
229
+ } & {
230
+ kid: NonNullable<unknown>;
231
+ })) & {
232
+ d?: never;
1089
233
  })[];
234
+ }, {
235
+ keys: unknown[];
1090
236
  }>>;
1091
237
  application_type: z.ZodDefault<z.ZodEnum<["web", "native"]>>;
1092
238
  subject_type: z.ZodDefault<z.ZodEnum<["public", "pairwise"]>>;
@@ -1112,8 +258,8 @@ export declare const clientMetadataSchema: z.ZodObject<z.objectUtil.extendShape<
1112
258
  }>, "strip", z.ZodTypeAny, {
1113
259
  client_id: "http://localhost" | `http://localhost?${string}` | `https://${string}/${string}` | "http://localhost/" | `http://localhost/?${string}`;
1114
260
  redirect_uris: [`http://[::1]${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | `${string}.${string}:/${string}`, ...(`http://[::1]${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | `${string}.${string}:/${string}`)[]];
1115
- response_types: ["code" | "id_token" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token", ...("code" | "id_token" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token")[]];
1116
- grant_types: ["refresh_token" | "authorization_code" | "implicit" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("refresh_token" | "authorization_code" | "implicit" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]];
261
+ response_types: ["code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token", ...("code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token")[]];
262
+ grant_types: ["authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]];
1117
263
  token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth";
1118
264
  application_type: "web" | "native";
1119
265
  subject_type: "public" | "pairwise";
@@ -1124,101 +270,112 @@ export declare const clientMetadataSchema: z.ZodObject<z.objectUtil.extendShape<
1124
270
  userinfo_encrypted_response_alg?: string | undefined;
1125
271
  jwks_uri?: `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | undefined;
1126
272
  jwks?: {
1127
- keys: ({
273
+ keys: ((({
1128
274
  kty: "RSA";
1129
275
  n: string;
1130
276
  e: string;
1131
277
  alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
1132
278
  kid?: string | undefined;
1133
- ext?: boolean | undefined;
1134
279
  use?: "sig" | "enc" | undefined;
1135
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
280
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1136
281
  x5c?: string[] | undefined;
1137
282
  x5t?: string | undefined;
1138
283
  "x5t#S256"?: string | undefined;
1139
284
  x5u?: string | undefined;
285
+ ext?: boolean | undefined;
286
+ iat?: number | undefined;
287
+ exp?: number | undefined;
288
+ nbf?: number | undefined;
289
+ revoked?: {
290
+ revoked_at: number;
291
+ reason?: string | undefined;
292
+ } | undefined;
1140
293
  d?: string | undefined;
1141
294
  p?: string | undefined;
1142
295
  q?: string | undefined;
1143
296
  dp?: string | undefined;
1144
297
  dq?: string | undefined;
1145
298
  qi?: string | undefined;
1146
- oth?: [{
1147
- d?: string | undefined;
1148
- r?: string | undefined;
1149
- t?: string | undefined;
1150
- }, ...{
299
+ oth?: {
1151
300
  d?: string | undefined;
1152
301
  r?: string | undefined;
1153
302
  t?: string | undefined;
1154
- }[]] | undefined;
1155
- } | {
303
+ }[] | undefined;
304
+ } & {
305
+ kid: NonNullable<unknown>;
306
+ }) | ({
1156
307
  kty: "EC";
1157
308
  crv: "P-256" | "P-384" | "P-521";
1158
309
  x: string;
1159
310
  y: string;
1160
311
  alg?: "ES256" | "ES384" | "ES512" | undefined;
1161
312
  kid?: string | undefined;
1162
- ext?: boolean | undefined;
1163
313
  use?: "sig" | "enc" | undefined;
1164
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
314
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1165
315
  x5c?: string[] | undefined;
1166
316
  x5t?: string | undefined;
1167
317
  "x5t#S256"?: string | undefined;
1168
318
  x5u?: string | undefined;
319
+ ext?: boolean | undefined;
320
+ iat?: number | undefined;
321
+ exp?: number | undefined;
322
+ nbf?: number | undefined;
323
+ revoked?: {
324
+ revoked_at: number;
325
+ reason?: string | undefined;
326
+ } | undefined;
1169
327
  d?: string | undefined;
1170
- } | {
328
+ } & {
329
+ kid: NonNullable<unknown>;
330
+ }) | ({
1171
331
  kty: "EC";
1172
332
  crv: "secp256k1";
1173
333
  x: string;
1174
334
  y: string;
1175
335
  alg?: "ES256K" | undefined;
1176
336
  kid?: string | undefined;
1177
- ext?: boolean | undefined;
1178
337
  use?: "sig" | "enc" | undefined;
1179
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
338
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1180
339
  x5c?: string[] | undefined;
1181
340
  x5t?: string | undefined;
1182
341
  "x5t#S256"?: string | undefined;
1183
342
  x5u?: string | undefined;
343
+ ext?: boolean | undefined;
344
+ iat?: number | undefined;
345
+ exp?: number | undefined;
346
+ nbf?: number | undefined;
347
+ revoked?: {
348
+ revoked_at: number;
349
+ reason?: string | undefined;
350
+ } | undefined;
1184
351
  d?: string | undefined;
1185
- } | {
352
+ } & {
353
+ kid: NonNullable<unknown>;
354
+ }) | ({
1186
355
  kty: "OKP";
1187
356
  crv: "Ed25519" | "Ed448";
1188
357
  x: string;
1189
358
  alg?: "EdDSA" | undefined;
1190
359
  kid?: string | undefined;
1191
- ext?: boolean | undefined;
1192
- use?: "sig" | "enc" | undefined;
1193
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1194
- x5c?: string[] | undefined;
1195
- x5t?: string | undefined;
1196
- "x5t#S256"?: string | undefined;
1197
- x5u?: string | undefined;
1198
- d?: string | undefined;
1199
- } | {
1200
- kty: "oct";
1201
- k: string;
1202
- alg?: "HS256" | "HS384" | "HS512" | undefined;
1203
- kid?: string | undefined;
1204
- ext?: boolean | undefined;
1205
360
  use?: "sig" | "enc" | undefined;
1206
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
361
+ key_ops?: ("verify" | "encrypt" | "wrapKey" | "sign" | "decrypt" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1207
362
  x5c?: string[] | undefined;
1208
363
  x5t?: string | undefined;
1209
364
  "x5t#S256"?: string | undefined;
1210
365
  x5u?: string | undefined;
1211
- } | {
1212
- kty: string;
1213
- alg?: string | undefined;
1214
- kid?: string | undefined;
1215
366
  ext?: boolean | undefined;
1216
- use?: "sig" | "enc" | undefined;
1217
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1218
- x5c?: string[] | undefined;
1219
- x5t?: string | undefined;
1220
- "x5t#S256"?: string | undefined;
1221
- x5u?: string | undefined;
367
+ iat?: number | undefined;
368
+ exp?: number | undefined;
369
+ nbf?: number | undefined;
370
+ revoked?: {
371
+ revoked_at: number;
372
+ reason?: string | undefined;
373
+ } | undefined;
374
+ d?: string | undefined;
375
+ } & {
376
+ kid: NonNullable<unknown>;
377
+ })) & {
378
+ d?: never;
1222
379
  })[];
1223
380
  } | undefined;
1224
381
  request_object_signing_alg?: string | undefined;
@@ -1240,110 +397,15 @@ export declare const clientMetadataSchema: z.ZodObject<z.objectUtil.extendShape<
1240
397
  client_id: string;
1241
398
  redirect_uris: [string, ...string[]];
1242
399
  scope?: string | undefined;
1243
- response_types?: ["code" | "id_token" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token", ...("code" | "id_token" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token")[]] | undefined;
1244
- grant_types?: ["refresh_token" | "authorization_code" | "implicit" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("refresh_token" | "authorization_code" | "implicit" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]] | undefined;
400
+ response_types?: ["code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token", ...("code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token")[]] | undefined;
401
+ grant_types?: ["authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]] | undefined;
1245
402
  token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1246
403
  token_endpoint_auth_signing_alg?: string | undefined;
1247
404
  userinfo_signed_response_alg?: string | undefined;
1248
405
  userinfo_encrypted_response_alg?: string | undefined;
1249
406
  jwks_uri?: string | undefined;
1250
407
  jwks?: {
1251
- keys: ({
1252
- kty: "RSA";
1253
- n: string;
1254
- e: string;
1255
- alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
1256
- kid?: string | undefined;
1257
- ext?: boolean | undefined;
1258
- use?: "sig" | "enc" | undefined;
1259
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1260
- x5c?: string[] | undefined;
1261
- x5t?: string | undefined;
1262
- "x5t#S256"?: string | undefined;
1263
- x5u?: string | undefined;
1264
- d?: string | undefined;
1265
- p?: string | undefined;
1266
- q?: string | undefined;
1267
- dp?: string | undefined;
1268
- dq?: string | undefined;
1269
- qi?: string | undefined;
1270
- oth?: [{
1271
- d?: string | undefined;
1272
- r?: string | undefined;
1273
- t?: string | undefined;
1274
- }, ...{
1275
- d?: string | undefined;
1276
- r?: string | undefined;
1277
- t?: string | undefined;
1278
- }[]] | undefined;
1279
- } | {
1280
- kty: "EC";
1281
- crv: "P-256" | "P-384" | "P-521";
1282
- x: string;
1283
- y: string;
1284
- alg?: "ES256" | "ES384" | "ES512" | undefined;
1285
- kid?: string | undefined;
1286
- ext?: boolean | undefined;
1287
- use?: "sig" | "enc" | undefined;
1288
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1289
- x5c?: string[] | undefined;
1290
- x5t?: string | undefined;
1291
- "x5t#S256"?: string | undefined;
1292
- x5u?: string | undefined;
1293
- d?: string | undefined;
1294
- } | {
1295
- kty: "EC";
1296
- crv: "secp256k1";
1297
- x: string;
1298
- y: string;
1299
- alg?: "ES256K" | undefined;
1300
- kid?: string | undefined;
1301
- ext?: boolean | undefined;
1302
- use?: "sig" | "enc" | undefined;
1303
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1304
- x5c?: string[] | undefined;
1305
- x5t?: string | undefined;
1306
- "x5t#S256"?: string | undefined;
1307
- x5u?: string | undefined;
1308
- d?: string | undefined;
1309
- } | {
1310
- kty: "OKP";
1311
- crv: "Ed25519" | "Ed448";
1312
- x: string;
1313
- alg?: "EdDSA" | undefined;
1314
- kid?: string | undefined;
1315
- ext?: boolean | undefined;
1316
- use?: "sig" | "enc" | undefined;
1317
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1318
- x5c?: string[] | undefined;
1319
- x5t?: string | undefined;
1320
- "x5t#S256"?: string | undefined;
1321
- x5u?: string | undefined;
1322
- d?: string | undefined;
1323
- } | {
1324
- kty: "oct";
1325
- k: string;
1326
- alg?: "HS256" | "HS384" | "HS512" | undefined;
1327
- kid?: string | undefined;
1328
- ext?: boolean | undefined;
1329
- use?: "sig" | "enc" | undefined;
1330
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1331
- x5c?: string[] | undefined;
1332
- x5t?: string | undefined;
1333
- "x5t#S256"?: string | undefined;
1334
- x5u?: string | undefined;
1335
- } | {
1336
- kty: string;
1337
- alg?: string | undefined;
1338
- kid?: string | undefined;
1339
- ext?: boolean | undefined;
1340
- use?: "sig" | "enc" | undefined;
1341
- key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1342
- x5c?: string[] | undefined;
1343
- x5t?: string | undefined;
1344
- "x5t#S256"?: string | undefined;
1345
- x5u?: string | undefined;
1346
- })[];
408
+ keys: unknown[];
1347
409
  } | undefined;
1348
410
  application_type?: "web" | "native" | undefined;
1349
411
  subject_type?: "public" | "pairwise" | undefined;