@authup/server-kit 1.0.0-beta.5 → 1.0.0-beta.7

package/dist/crypto/hash/hash.d.ts

@@ -1,2 +1,2 @@
-export declare function hash(str: string, saltOrRounds?: number | string): Promise<string>;
+export declare function hash(str: string, rounds?: number): Promise<string>;
 //# sourceMappingURL=hash.d.ts.map

package/dist/crypto/hash/hash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/crypto/hash/hash.ts"],"names":[],"mappings":"AASA,wBAAsB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,GAAE,MAAM,GAAG,MAAW,GAAI,OAAO,CAAC,MAAM,CAAC,CAE5F"}
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/crypto/hash/hash.ts"],"names":[],"mappings":"AASA,wBAAsB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAAW,GAAI,OAAO,CAAC,MAAM,CAAC,CAE7E"}

package/dist/crypto/json-web-token/extract.d.ts

@@ -0,0 +1,11 @@
+import type { JWTClaims, JWTHeader } from '@authup/core';
+/**
+ * Decode a JWT token with no verification.
+ *
+ * @param token
+ *
+ * @throws TokenError
+ */
+export declare function extractTokenHeader(token: string): JWTHeader;
+export declare function extractTokenPayload(token: string): JWTClaims;
+//# sourceMappingURL=extract.d.ts.map

package/dist/crypto/json-web-token/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/extract.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAC9B,KAAK,EAAE,MAAM,GACb,SAAS,CA6BZ;AAED,wBAAgB,mBAAmB,CAC/B,KAAK,EAAE,MAAM,GACb,SAAS,CAeZ"}

package/dist/crypto/json-web-token/index.d.ts

@@ -1,4 +1,4 @@
-export * from './decode';
+export * from './extract';
 export * from './sign';
 export * from './type';
 export * from './verify';

package/dist/crypto/json-web-token/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/index.ts"],"names":[],"mappings":"AAOA,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC;AACvB,cAAc,UAAU,CAAC"}

package/dist/crypto/json-web-token/sign/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/crypto/json-web-token/sign/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/crypto/json-web-token/sign/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/crypto/json-web-token/sign/module.d.ts

@@ -0,0 +1,4 @@
+import type { JWTClaims } from '@authup/core';
+import type { TokenSignOptions } from './types';
+export declare function signToken(claims: JWTClaims, context: TokenSignOptions): Promise<string>;
+//# sourceMappingURL=module.d.ts.map

package/dist/crypto/json-web-token/sign/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/crypto/json-web-token/sign/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAK9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAIhD,wBAAsB,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6C7F"}

package/dist/crypto/json-web-token/sign/types.d.ts

@@ -0,0 +1,24 @@
+/// <reference types="node" />
+import type { KeyType } from '@authup/core';
+import type { KeyPair, KeyPairOptions } from '../../key-pair';
+import type { TokenECAlgorithm, TokenOCTAlgorithm, TokenRSAAlgorithm } from '../type';
+export type TokenSignBaseOptions = {
+    keyId?: string;
+};
+export type TokenSignRSAOptions = TokenSignBaseOptions & {
+    type: `${KeyType.RSA}` | KeyType.RSA;
+    algorithm?: TokenRSAAlgorithm;
+    keyPair: KeyPair | Partial<KeyPairOptions> | string;
+};
+export type TokenSignECOptions = TokenSignBaseOptions & {
+    type: `${KeyType.EC}` | KeyType.EC;
+    algorithm?: TokenECAlgorithm;
+    keyPair: KeyPair | Partial<KeyPairOptions> | string;
+};
+export type TokenSignOCTOptions = TokenSignBaseOptions & {
+    type: `${KeyType.OCT}` | KeyType.OCT;
+    algorithm?: TokenOCTAlgorithm;
+    key: string | Buffer;
+};
+export type TokenSignOptions = TokenSignRSAOptions | TokenSignECOptions | TokenSignOCTOptions;
+//# sourceMappingURL=types.d.ts.map

package/dist/crypto/json-web-token/sign/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/crypto/json-web-token/sign/types.ts"],"names":[],"mappings":";AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEtF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG;IACrD,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAA;CACtD,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG;IACpD,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAA;CACtD,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG;IACrD,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,mBAAmB,CAAC"}

package/dist/crypto/json-web-token/type.d.ts

@@ -1,34 +1,5 @@
-/// <reference types="node" />
-import type { DecodeOptions, Jwt, SignOptions, VerifyOptions } from 'jsonwebtoken';
-import type { KeyType } from '@authup/core';
-import type { KeyPair, KeyPairOptions } from '../key-pair';
-export { Jwt, };
-export type TokenSignOptions = ({
-    type: `${KeyType.RSA}` | KeyType.RSA;
-    algorithm?: 'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512';
-    keyPair: KeyPair | Partial<KeyPairOptions> | string;
-} | {
-    type: `${KeyType.EC}` | KeyType.EC;
-    algorithm?: 'ES256' | 'ES384' | 'ES512';
-    keyPair: KeyPair | Partial<KeyPairOptions> | string;
-} | {
-    type: `${KeyType.OCT}` | KeyType.OCT;
-    algorithm?: 'HS256' | 'HS384' | 'HS512';
-    secret: string | Buffer;
-}) & Omit<SignOptions, 'algorithm'>;
-export type TokenVerifyRSAlgorithm = 'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512';
-export type TokenVerifyOptions = ({
-    type: `${KeyType.RSA}` | KeyType.RSA;
-    algorithms?: TokenVerifyRSAlgorithm[];
-    keyPair: Omit<KeyPair, 'privateKey'> | KeyPair | Partial<KeyPairOptions> | string;
-} | {
-    type: `${KeyType.EC}` | KeyType.EC;
-    algorithms?: ('ES256' | 'ES384' | 'ES512')[];
-    keyPair: Omit<KeyPair, 'privateKey'> | KeyPair | Partial<KeyPairOptions> | string;
-} | {
-    type: `${KeyType.OCT}` | KeyType.OCT;
-    algorithms?: ('HS256' | 'HS384' | 'HS512')[];
-    secret: string | Buffer;
-}) & Omit<VerifyOptions, 'algorithms'>;
-export type TokenDecodeOptions = DecodeOptions;
+import type { JWTAlgorithm } from '@authup/core';
+export type TokenRSAAlgorithm = `${JWTAlgorithm.RS256}` | `${JWTAlgorithm.RS384}` | `${JWTAlgorithm.RS512}` | `${JWTAlgorithm.PS256}` | `${JWTAlgorithm.PS384}` | `${JWTAlgorithm.PS512}`;
+export type TokenECAlgorithm = `${JWTAlgorithm.ES256}` | `${JWTAlgorithm.ES384}`;
+export type TokenOCTAlgorithm = `${JWTAlgorithm.HS256}` | `${JWTAlgorithm.HS384}` | `${JWTAlgorithm.HS512}`;
 //# sourceMappingURL=type.d.ts.map

package/dist/crypto/json-web-token/type.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/type.ts"],"names":[],"mappings":";AAQA,OAAO,KAAK,EACR,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EACjD,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EACH,GAAG,GACN,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC;IAC5B,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GACvC,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAC5B,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAA;CACtD,GAAG;IACA,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAA;CACtD,GAAG;IACA,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;CAC1B,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAEpC,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAChE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE5B,MAAM,MAAM,kBAAkB,GAAG,CAAC;IAC9B,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,UAAU,CAAC,EAAE,sBAAsB,EAAE,CAAC;IACtC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAA;CACpF,GAAG;IACA,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,CAAC,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;IAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAA;CACpF,GAAG;IACA,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,UAAU,CAAC,EAAE,CAAC,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC;IAC7C,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;CAC1B,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAEvC,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAAC"}
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,MAAM,iBAAiB,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GACnD,GAAG,YAAY,CAAC,KAAK,EAAE,GACvB,GAAG,YAAY,CAAC,KAAK,EAAE,GACvB,GAAG,YAAY,CAAC,KAAK,EAAE,GACvB,GAAG,YAAY,CAAC,KAAK,EAAE,GACvB,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;AAE5B,MAAM,MAAM,gBAAgB,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAClD,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC;AAE5B,MAAM,MAAM,iBAAiB,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GACnD,GAAG,YAAY,CAAC,KAAK,EAAE,GACvB,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC"}

package/dist/crypto/json-web-token/utils.d.ts

@@ -1,3 +1,6 @@
-import { TokenError } from '@authup/core';
+import { JWTAlgorithm, TokenError } from '@authup/core';
+import { Algorithm } from '@node-rs/jsonwebtoken';
 export declare function createErrorForJWTError(e: unknown): TokenError;
+export declare function transformJWTAlgorithmToInternal(algorithm: `${JWTAlgorithm}`): Algorithm;
+export declare function transformInternalToJWTAlgorithm(input: Algorithm): JWTAlgorithm;
 //# sourceMappingURL=utils.d.ts.map

package/dist/crypto/json-web-token/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/utils.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAI,UAAU,CA8B9D"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/crypto/json-web-token/utils.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAI,UAAU,CA2C9D;AAED,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,GAAG,YAAY,EAAE,GAAI,SAAS,CAsCxF;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,SAAS,GAAI,YAAY,CA2B/E"}

package/dist/crypto/json-web-token/verify/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/crypto/json-web-token/verify/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/crypto/json-web-token/verify/index.ts"],"names":[],"mappings":"AAOA,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/dist/crypto/json-web-token/verify/module.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenPayload } from '@authup/core';
+import type { TokenVerifyOptions } from './types';
+/**
+ * Verify JWT.
+ *
+ * @param token
+ * @param context
+ *
+ * @throws TokenError
+ */
+export declare function verifyToken(token: string, context: TokenVerifyOptions): Promise<OAuth2TokenPayload>;
+//# sourceMappingURL=module.d.ts.map

package/dist/crypto/json-web-token/verify/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/crypto/json-web-token/verify/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAa,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAIlE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,kBAAkB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAmE9B"}

package/dist/crypto/json-web-token/verify/types.d.ts

@@ -0,0 +1,21 @@
+/// <reference types="node" />
+import type { KeyType } from '@authup/core';
+import type { KeyPair, KeyPairOptions } from '../../key-pair';
+import type { TokenECAlgorithm, TokenOCTAlgorithm, TokenRSAAlgorithm } from '../type';
+export type TokenVerifyRSAOptions = {
+    type: `${KeyType.RSA}` | KeyType.RSA;
+    algorithms?: TokenRSAAlgorithm[];
+    keyPair: Omit<KeyPair, 'privateKey'> | KeyPair | Partial<KeyPairOptions> | string;
+};
+export type TokenVerifyECOptions = {
+    type: `${KeyType.EC}` | KeyType.EC;
+    algorithms?: TokenECAlgorithm[];
+    keyPair: Omit<KeyPair, 'privateKey'> | KeyPair | Partial<KeyPairOptions> | string;
+};
+export type TokenVerifyOCTOptions = {
+    type: `${KeyType.OCT}` | KeyType.OCT;
+    algorithms?: TokenOCTAlgorithm[];
+    key: string | Buffer;
+};
+export type TokenVerifyOptions = TokenVerifyRSAOptions | TokenVerifyECOptions | TokenVerifyOCTOptions;
+//# sourceMappingURL=types.d.ts.map

package/dist/crypto/json-web-token/verify/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/crypto/json-web-token/verify/types.ts"],"names":[],"mappings":";AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAEtF,MAAM,MAAM,qBAAqB,GAAG;IAChC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC;CACrF,CAAC;AACF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAChC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,CAAC;CACrF,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG;IAChC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IACrC,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACjC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CACvB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,qBAAqB,CAAC"}

package/dist/index.cjs

@@ -1,11 +1,11 @@
 'use strict';
 
-var bcrypt = require('bcrypt');
+var bcrypt = require('@node-rs/bcrypt');
 var node_crypto = require('node:crypto');
 var core = require('@authup/core');
 var path = require('node:path');
 var fs = require('node:fs');
-var jsonwebtoken = require('jsonwebtoken');
+var jsonwebtoken = require('@node-rs/jsonwebtoken');
 var smob = require('smob');
 var redisExtension = require('redis-extension');
 var redisEmitter = require('@socket.io/redis-emitter');
@@ -15,8 +15,8 @@ async function compare(value, hashedValue) {
     return bcrypt.compare(value, hashedValue);
 }
 
-async function hash(str, saltOrRounds = 10) {
-    return bcrypt.hash(str, saltOrRounds);
+async function hash(str, rounds = 10) {
+    return bcrypt.hash(str, rounds);
 }
 
 /*
@@ -261,26 +261,89 @@ async function useKeyPair(value) {
     return keyPair;
 }
 
+/**
+ * Decode a JWT token with no verification.
+ *
+ * @param token
+ *
+ * @throws TokenError
+ */ function extractTokenHeader(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw core.TokenError.payloadInvalid('The token format is not valid.');
+    }
+    const [headerBase64] = parts;
+    try {
+        const payload = atob(headerBase64);
+        return JSON.parse(payload);
+    /*
+        return {
+            typ: 'JWT',
+            alg: transformInternalToJWTAlgorithm(header.algorithm),
+            cty: header.contentType,
+            jku: header.jsonKeyUrl,
+            kid: header.keyId,
+            x5u: header.x5Url,
+            x5c: header.x5CertChain,
+            x5t: header.x5CertThumbprint,
+            'x5t#S256': header.x5TS256CertThumbprint,
+        };
+         */ } catch (e) {
+        throw core.TokenError.headerInvalid('The token header could not be extracted.');
+    }
+}
+function extractTokenPayload(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw core.TokenError.payloadInvalid('The token format is not valid.');
+    }
+    const [, payloadBase64] = parts;
+    try {
+        const payload = atob(payloadBase64);
+        return JSON.parse(payload);
+    } catch (e) {
+        throw core.TokenError.payloadInvalid('The token payload could not be extracted.');
+    }
+}
+
 function createErrorForJWTError(e) {
-    if (smob.isObject(e) && typeof e.name === 'string') {
-        switch(e.name){
-            case 'TokenExpiredError':
+    if (smob.isObject(e)) {
+        if (typeof e.name === 'string') {
+            switch(e.name){
+                case 'TokenExpiredError':
+                    {
+                        return core.TokenError.expired();
+                    }
+                case 'NotBeforeError':
+                    {
+                        if (typeof e.date === 'string' || e.date instanceof Date) {
+                            return core.TokenError.notActiveBefore(e.date);
+                        }
+                        break;
+                    }
+                case 'JsonWebTokenError':
+                    {
+                        if (typeof e.message === 'string') {
+                            return core.TokenError.payloadInvalid(e.message);
+                        }
+                        break;
+                    }
+            }
+        }
+        // @see https://github.com/Keats/jsonwebtoken/blob/master/src/errors.rs
+        switch(e.message){
+            case 'ExpiredSignature':
                 {
                     return core.TokenError.expired();
                 }
-            case 'NotBeforeError':
+            case 'ImmatureSignature':
                 {
-                    if (typeof e.date === 'string' || e.date instanceof Date) {
-                        return core.TokenError.notActiveBefore(e.date);
-                    }
-                    break;
+                    return core.TokenError.notActiveBefore();
                 }
-            case 'JsonWebTokenError':
+            case 'InvalidToken':
+            case 'InvalidSignature':
                 {
-                    if (typeof e.message === 'string') {
-                        return core.TokenError.payloadInvalid(e.message);
-                    }
-                    break;
+                    return core.TokenError.payloadInvalid();
                 }
         }
     }
@@ -290,49 +353,100 @@ function createErrorForJWTError(e) {
         message: 'The JWT error could not be determined.'
     });
 }
-
-function decodeToken(token, options) {
-    options ?? (options = {});
-    let output;
-    try {
-        output = jsonwebtoken.decode(token, {
-            ...options
-        });
-    } catch (e) {
-        throw createErrorForJWTError(e);
-    }
-    if (output === null) {
-        throw core.TokenError.payloadInvalid('The token could not be decoded.');
+function transformJWTAlgorithmToInternal(algorithm) {
+    switch(algorithm){
+        case core.JWTAlgorithm.HS256:
+            {
+                return jsonwebtoken.Algorithm.HS256;
+            }
+        case core.JWTAlgorithm.HS384:
+            {
+                return jsonwebtoken.Algorithm.HS384;
+            }
+        case core.JWTAlgorithm.HS512:
+            {
+                return jsonwebtoken.Algorithm.HS512;
+            }
+        case core.JWTAlgorithm.RS256:
+            {
+                return jsonwebtoken.Algorithm.RS256;
+            }
+        case core.JWTAlgorithm.RS384:
+            {
+                return jsonwebtoken.Algorithm.RS384;
+            }
+        case core.JWTAlgorithm.RS512:
+            {
+                return jsonwebtoken.Algorithm.RS512;
+            }
+        case core.JWTAlgorithm.ES256:
+            {
+                return jsonwebtoken.Algorithm.ES256;
+            }
+        case core.JWTAlgorithm.ES384:
+            {
+                return jsonwebtoken.Algorithm.ES384;
+            }
+        case core.JWTAlgorithm.PS256:
+            {
+                return jsonwebtoken.Algorithm.PS256;
+            }
+        case core.JWTAlgorithm.PS384:
+            {
+                return jsonwebtoken.Algorithm.PS384;
+            }
+        case core.JWTAlgorithm.PS512:
+            {
+                return jsonwebtoken.Algorithm.PS512;
+            }
     }
-    return output;
+    throw new Error(`The algorithm ${algorithm} is not supported.`);
 }
 
-async function signToken(payload, context) {
-    context.expiresIn = context.expiresIn || 3600;
+const getUtcTimestamp = ()=>Math.floor(new Date().getTime() / 1000);
+async function signToken(claims, context) {
+    if (typeof claims.exp !== 'number') {
+        claims.exp = getUtcTimestamp() + 3600;
+    }
+    if (typeof claims.iat !== 'number') {
+        claims.iat = getUtcTimestamp();
+    }
     switch(context.type){
         case core.KeyType.RSA:
         case core.KeyType.EC:
             {
-                const { type, keyPair, ...options } = context;
-                const { privateKey } = isKeyPair(keyPair) ? keyPair : await useKeyPair(keyPair);
-                if (type === core.KeyType.RSA) {
-                    options.algorithm = options.algorithm || 'RS256';
+                const { privateKey } = isKeyPair(context.keyPair) ? context.keyPair : await useKeyPair(context.keyPair);
+                let algorithm;
+                if (context.type === core.KeyType.RSA) {
+                    algorithm = context.algorithm ? transformJWTAlgorithmToInternal(context.algorithm) : jsonwebtoken.Algorithm.RS256;
                 } else {
-                    options.algorithm = options.algorithm || 'ES256';
+                    algorithm = context.algorithm ? transformJWTAlgorithmToInternal(context.algorithm) : jsonwebtoken.Algorithm.ES256;
                 }
-                return jsonwebtoken.sign(payload, privateKey, options);
+                return jsonwebtoken.sign(claims, privateKey, {
+                    algorithm,
+                    keyId: context.keyId
+                });
             }
         case core.KeyType.OCT:
             {
-                const { type, secret, ...options } = context;
-                options.algorithm = options.algorithm || 'HS256';
-                return jsonwebtoken.sign(payload, secret, options);
+                const algorithm = context.algorithm ? transformJWTAlgorithmToInternal(context.algorithm) : jsonwebtoken.Algorithm.HS256;
+                return jsonwebtoken.sign(claims, context.key, {
+                    algorithm,
+                    keyId: context.keyId
+                });
             }
     }
     throw new core.TokenError();
 }
 
-async function verifyToken(token, context) {
+/**
+ * Verify JWT.
+ *
+ * @param token
+ * @param context
+ *
+ * @throws TokenError
+ */ async function verifyToken(token, context) {
     let promise;
     let output;
     try {
@@ -340,51 +454,39 @@ async function verifyToken(token, context) {
             case core.KeyType.RSA:
             case core.KeyType.EC:
                 {
-                    const { type, keyPair, ...options } = context;
-                    const { publicKey } = isKeyPairWithPublicKey(keyPair) ? keyPair : await useKeyPair(keyPair);
-                    if (type === core.KeyType.RSA) {
-                        options.algorithms = options.algorithms || [
-                            'RS256',
-                            'RS384',
-                            'RS512',
-                            'PS256',
-                            'PS384',
-                            'PS512'
+                    const { publicKey } = isKeyPairWithPublicKey(context.keyPair) ? context.keyPair : await useKeyPair(context.keyPair);
+                    let algorithms;
+                    if (context.type === core.KeyType.RSA) {
+                        algorithms = context.algorithms ? context.algorithms.map((algorithm)=>transformJWTAlgorithmToInternal(algorithm)) : [
+                            jsonwebtoken.Algorithm.RS256,
+                            jsonwebtoken.Algorithm.RS384,
+                            jsonwebtoken.Algorithm.RS512,
+                            jsonwebtoken.Algorithm.PS256,
+                            jsonwebtoken.Algorithm.PS384,
+                            jsonwebtoken.Algorithm.PS512
                         ];
                     } else {
-                        options.algorithms = options.algorithms || [
-                            'ES256',
-                            'ES384',
-                            'ES512'
+                        algorithms = context.algorithms ? context.algorithms.map((algorithm)=>transformJWTAlgorithmToInternal(algorithm)) : [
+                            jsonwebtoken.Algorithm.ES256,
+                            jsonwebtoken.Algorithm.ES384
                         ];
                     }
-                    promise = new Promise((resolve, reject)=>{
-                        jsonwebtoken.verify(token, publicKey, options, (err, decoded)=>{
-                            if (err) {
-                                reject(err);
-                                return;
-                            }
-                            resolve(decoded);
-                        });
+                    promise = jsonwebtoken.verify(token, publicKey, {
+                        algorithms,
+                        validateNbf: true
                     });
                     break;
                 }
             case core.KeyType.OCT:
                 {
-                    const { type, secret, ...options } = context;
-                    options.algorithms = options.algorithms || [
-                        'HS256',
-                        'HS384',
-                        'HS512'
+                    const algorithms = context.algorithms ? context.algorithms.map((algorithm)=>transformJWTAlgorithmToInternal(algorithm)) : [
+                        jsonwebtoken.Algorithm.HS256,
+                        jsonwebtoken.Algorithm.HS384,
+                        jsonwebtoken.Algorithm.HS512
                     ];
-                    promise = new Promise((resolve, reject)=>{
-                        jsonwebtoken.verify(token, secret, options, (err, decoded)=>{
-                            if (err) {
-                                reject(err);
-                                return;
-                            }
-                            resolve(decoded);
-                        });
+                    promise = jsonwebtoken.verify(token, context.key, {
+                        algorithms,
+                        validateNbf: true
                     });
                 }
         }
@@ -616,10 +718,11 @@ exports.buildKeyFileName = buildKeyFileName;
 exports.compare = compare;
 exports.createKeyPair = createKeyPair;
 exports.createSmtpClient = createSmtpClient;
-exports.decodeToken = decodeToken;
 exports.decryptRSAPrivateKey = decryptRSAPrivateKey;
 exports.deleteKeyPair = deleteKeyPair;
 exports.extendKeyPairOptions = extendKeyPairOptions;
+exports.extractTokenHeader = extractTokenHeader;
+exports.extractTokenPayload = extractTokenPayload;
 exports.hasOwnProperty = hasOwnProperty;
 exports.hasSmtpConfig = hasSmtpConfig;
 exports.hash = hash;