@bskyprism/atproto-oauth-client-cloudflare-workers 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (131) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +69 -0
  3. package/lib/did-cache-kv.d.ts +18 -0
  4. package/lib/did-cache-kv.js +26 -0
  5. package/lib/did-resolver/did-cache-memory.d.ts +7 -0
  6. package/lib/did-resolver/did-cache-memory.js +10 -0
  7. package/lib/did-resolver/did-cache.d.ts +14 -0
  8. package/lib/did-resolver/did-cache.js +10 -0
  9. package/lib/did-resolver/did-method.d.ts +11 -0
  10. package/lib/did-resolver/did-method.js +1 -0
  11. package/lib/did-resolver/did-resolver-base.d.ts +9 -0
  12. package/lib/did-resolver/did-resolver-base.js +36 -0
  13. package/lib/did-resolver/did-resolver-common.d.ts +8 -0
  14. package/lib/did-resolver/did-resolver-common.js +11 -0
  15. package/lib/did-resolver/did-resolver.d.ts +6 -0
  16. package/lib/did-resolver/did-resolver.js +1 -0
  17. package/lib/did-resolver/index.d.ts +6 -0
  18. package/lib/did-resolver/index.js +7 -0
  19. package/lib/did-resolver/methods/plc.d.ts +43 -0
  20. package/lib/did-resolver/methods/plc.js +22 -0
  21. package/lib/did-resolver/methods/web.d.ts +43 -0
  22. package/lib/did-resolver/methods/web.js +42 -0
  23. package/lib/did-resolver/methods.d.ts +2 -0
  24. package/lib/did-resolver/methods.js +2 -0
  25. package/lib/did-resolver/util.d.ts +3 -0
  26. package/lib/did-resolver/util.js +1 -0
  27. package/lib/dpop-store.d.ts +21 -0
  28. package/lib/dpop-store.js +25 -0
  29. package/lib/handle-cache-kv.d.ts +17 -0
  30. package/lib/handle-cache-kv.js +31 -0
  31. package/lib/handle-resolver/atproto-doh-handle-resolver.d.ts +8 -0
  32. package/lib/handle-resolver/atproto-doh-handle-resolver.js +94 -0
  33. package/lib/handle-resolver/atproto-handle-resolver.d.ts +21 -0
  34. package/lib/handle-resolver/atproto-handle-resolver.js +46 -0
  35. package/lib/handle-resolver/cached-handle-resolver.d.ts +12 -0
  36. package/lib/handle-resolver/cached-handle-resolver.js +17 -0
  37. package/lib/handle-resolver/handle-resolver-error.d.ts +3 -0
  38. package/lib/handle-resolver/handle-resolver-error.js +6 -0
  39. package/lib/handle-resolver/index.d.ts +6 -0
  40. package/lib/handle-resolver/index.js +8 -0
  41. package/lib/handle-resolver/internal-resolvers/dns-handle-resolver.d.ts +11 -0
  42. package/lib/handle-resolver/internal-resolvers/dns-handle-resolver.js +28 -0
  43. package/lib/handle-resolver/internal-resolvers/well-known-handler-resolver.d.ts +17 -0
  44. package/lib/handle-resolver/internal-resolvers/well-known-handler-resolver.js +28 -0
  45. package/lib/handle-resolver/types.d.ts +25 -0
  46. package/lib/handle-resolver/types.js +10 -0
  47. package/lib/handle-resolver/xrpc-handle-resolver.d.ts +31 -0
  48. package/lib/handle-resolver/xrpc-handle-resolver.js +45 -0
  49. package/lib/handle-resolver.d.ts +20 -0
  50. package/lib/handle-resolver.js +19 -0
  51. package/lib/identity-resolver/atproto-identity-resolver.d.ts +20 -0
  52. package/lib/identity-resolver/atproto-identity-resolver.js +72 -0
  53. package/lib/identity-resolver/constants.d.ts +1 -0
  54. package/lib/identity-resolver/constants.js +1 -0
  55. package/lib/identity-resolver/identity-resolver-error.d.ts +3 -0
  56. package/lib/identity-resolver/identity-resolver-error.js +6 -0
  57. package/lib/identity-resolver/identity-resolver.d.ts +19 -0
  58. package/lib/identity-resolver/identity-resolver.js +1 -0
  59. package/lib/identity-resolver/index.d.ts +5 -0
  60. package/lib/identity-resolver/index.js +5 -0
  61. package/lib/identity-resolver/util.d.ts +12 -0
  62. package/lib/identity-resolver/util.js +35 -0
  63. package/lib/index.d.ts +7 -0
  64. package/lib/index.js +6 -0
  65. package/lib/oauth-client/atproto-token-response.d.ts +100 -0
  66. package/lib/oauth-client/atproto-token-response.js +15 -0
  67. package/lib/oauth-client/constants.d.ts +4 -0
  68. package/lib/oauth-client/constants.js +4 -0
  69. package/lib/oauth-client/errors/auth-method-unsatisfiable-error.d.ts +2 -0
  70. package/lib/oauth-client/errors/auth-method-unsatisfiable-error.js +2 -0
  71. package/lib/oauth-client/errors/token-invalid-error.d.ts +6 -0
  72. package/lib/oauth-client/errors/token-invalid-error.js +6 -0
  73. package/lib/oauth-client/errors/token-refresh-error.d.ts +6 -0
  74. package/lib/oauth-client/errors/token-refresh-error.js +6 -0
  75. package/lib/oauth-client/errors/token-revoked-error.d.ts +6 -0
  76. package/lib/oauth-client/errors/token-revoked-error.js +6 -0
  77. package/lib/oauth-client/fetch-dpop.d.ts +19 -0
  78. package/lib/oauth-client/fetch-dpop.js +176 -0
  79. package/lib/oauth-client/identity-resolver.d.ts +15 -0
  80. package/lib/oauth-client/identity-resolver.js +33 -0
  81. package/lib/oauth-client/index.d.ts +17 -0
  82. package/lib/oauth-client/index.js +17 -0
  83. package/lib/oauth-client/lock.d.ts +2 -0
  84. package/lib/oauth-client/lock.js +28 -0
  85. package/lib/oauth-client/oauth-authorization-server-metadata-resolver.d.ts +18 -0
  86. package/lib/oauth-client/oauth-authorization-server-metadata-resolver.js +53 -0
  87. package/lib/oauth-client/oauth-callback-error.d.ts +6 -0
  88. package/lib/oauth-client/oauth-callback-error.js +13 -0
  89. package/lib/oauth-client/oauth-client-auth.d.ts +22 -0
  90. package/lib/oauth-client/oauth-client-auth.js +127 -0
  91. package/lib/oauth-client/oauth-client.d.ts +311 -0
  92. package/lib/oauth-client/oauth-client.js +276 -0
  93. package/lib/oauth-client/oauth-protected-resource-metadata-resolver.d.ts +18 -0
  94. package/lib/oauth-client/oauth-protected-resource-metadata-resolver.js +49 -0
  95. package/lib/oauth-client/oauth-resolver-error.d.ts +6 -0
  96. package/lib/oauth-client/oauth-resolver-error.js +18 -0
  97. package/lib/oauth-client/oauth-resolver.d.ts +71 -0
  98. package/lib/oauth-client/oauth-resolver.js +117 -0
  99. package/lib/oauth-client/oauth-response-error.d.ts +10 -0
  100. package/lib/oauth-client/oauth-response-error.js +22 -0
  101. package/lib/oauth-client/oauth-server-agent.d.ts +54 -0
  102. package/lib/oauth-client/oauth-server-agent.js +250 -0
  103. package/lib/oauth-client/oauth-server-factory.d.ts +32 -0
  104. package/lib/oauth-client/oauth-server-factory.js +37 -0
  105. package/lib/oauth-client/oauth-session.d.ts +33 -0
  106. package/lib/oauth-client/oauth-session.js +122 -0
  107. package/lib/oauth-client/runtime-implementation.d.ts +16 -0
  108. package/lib/oauth-client/runtime-implementation.js +1 -0
  109. package/lib/oauth-client/runtime.d.ts +25 -0
  110. package/lib/oauth-client/runtime.js +99 -0
  111. package/lib/oauth-client/session-getter.d.ts +54 -0
  112. package/lib/oauth-client/session-getter.js +260 -0
  113. package/lib/oauth-client/state-store.d.ts +12 -0
  114. package/lib/oauth-client/state-store.js +1 -0
  115. package/lib/oauth-client/types.d.ts +1365 -0
  116. package/lib/oauth-client/types.js +8 -0
  117. package/lib/oauth-client/util.d.ts +25 -0
  118. package/lib/oauth-client/util.js +139 -0
  119. package/lib/oauth-client/validate-client-metadata.d.ts +4 -0
  120. package/lib/oauth-client/validate-client-metadata.js +68 -0
  121. package/lib/oauth-client.d.ts +27 -0
  122. package/lib/oauth-client.js +30 -0
  123. package/lib/resolve-txt-factory.d.ts +3 -0
  124. package/lib/resolve-txt-factory.js +80 -0
  125. package/lib/session-store-kv.d.ts +9 -0
  126. package/lib/session-store-kv.js +20 -0
  127. package/lib/state-store-kv.d.ts +9 -0
  128. package/lib/state-store-kv.js +20 -0
  129. package/lib/util.d.ts +18 -0
  130. package/lib/util.js +5 -0
  131. package/package.json +58 -0
@@ -0,0 +1,1365 @@
1
+ import { TypeOf, z } from "zod";
2
+ import { OAuthAuthorizationRequestParameters } from "@atproto/oauth-types";
3
+ import { Simplify } from "./util.js";
4
+ export type AuthorizeOptions = Simplify<Omit<OAuthAuthorizationRequestParameters, "client_id" | "response_mode" | "response_type" | "login_hint" | "code_challenge" | "code_challenge_method"> & {
5
+ signal?: AbortSignal;
6
+ }>;
7
+ export declare const clientMetadataSchema: z.ZodObject<{
8
+ redirect_uris: z.ZodArray<z.ZodUnion<[z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}`, string>, `http://[::1]${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `https://${string}`, string>, z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `${string}.${string}:/${string}`, string>]>, "atleastone">;
9
+ response_types: z.ZodDefault<z.ZodArray<z.ZodEnum<["code", "token", "none", "code id_token token", "code id_token", "code token", "id_token token", "id_token"]>, "atleastone">>;
10
+ grant_types: z.ZodDefault<z.ZodArray<z.ZodEnum<["authorization_code", "implicit", "refresh_token", "password", "client_credentials", "urn:ietf:params:oauth:grant-type:jwt-bearer", "urn:ietf:params:oauth:grant-type:saml2-bearer"]>, "atleastone">>;
11
+ scope: z.ZodOptional<z.ZodString>;
12
+ token_endpoint_auth_method: z.ZodDefault<z.ZodEnum<["client_secret_basic", "client_secret_jwt", "client_secret_post", "none", "private_key_jwt", "self_signed_tls_client_auth", "tls_client_auth"]>>;
13
+ token_endpoint_auth_signing_alg: z.ZodOptional<z.ZodString>;
14
+ userinfo_signed_response_alg: z.ZodOptional<z.ZodString>;
15
+ userinfo_encrypted_response_alg: z.ZodOptional<z.ZodString>;
16
+ jwks_uri: z.ZodOptional<z.ZodEffects<z.ZodString, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}`, string>>;
17
+ jwks: z.ZodOptional<z.ZodObject<{
18
+ keys: z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodUnion<[z.ZodObject<z.objectUtil.extendShape<{
19
+ kty: z.ZodString;
20
+ alg: z.ZodOptional<z.ZodString>;
21
+ kid: z.ZodOptional<z.ZodString>;
22
+ ext: z.ZodOptional<z.ZodBoolean>;
23
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
24
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
25
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
26
+ x5t: z.ZodOptional<z.ZodString>;
27
+ "x5t#S256": z.ZodOptional<z.ZodString>;
28
+ x5u: z.ZodOptional<z.ZodString>;
29
+ }, {
30
+ kty: z.ZodEffects<z.ZodString, string, string>;
31
+ }>, "strip", z.ZodTypeAny, {
32
+ kty: string;
33
+ alg?: string | undefined;
34
+ kid?: string | undefined;
35
+ ext?: boolean | undefined;
36
+ use?: "sig" | "enc" | undefined;
37
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
38
+ x5c?: string[] | undefined;
39
+ x5t?: string | undefined;
40
+ "x5t#S256"?: string | undefined;
41
+ x5u?: string | undefined;
42
+ }, {
43
+ kty: string;
44
+ alg?: string | undefined;
45
+ kid?: string | undefined;
46
+ ext?: boolean | undefined;
47
+ use?: "sig" | "enc" | undefined;
48
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
49
+ x5c?: string[] | undefined;
50
+ x5t?: string | undefined;
51
+ "x5t#S256"?: string | undefined;
52
+ x5u?: string | undefined;
53
+ }>, z.ZodObject<z.objectUtil.extendShape<{
54
+ kty: z.ZodString;
55
+ alg: z.ZodOptional<z.ZodString>;
56
+ kid: z.ZodOptional<z.ZodString>;
57
+ ext: z.ZodOptional<z.ZodBoolean>;
58
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
59
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
60
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
61
+ x5t: z.ZodOptional<z.ZodString>;
62
+ "x5t#S256": z.ZodOptional<z.ZodString>;
63
+ x5u: z.ZodOptional<z.ZodString>;
64
+ }, {
65
+ kty: z.ZodLiteral<"RSA">;
66
+ alg: z.ZodOptional<z.ZodEnum<["RS256", "RS384", "RS512", "PS256", "PS384", "PS512"]>>;
67
+ n: z.ZodString;
68
+ e: z.ZodString;
69
+ d: z.ZodOptional<z.ZodString>;
70
+ p: z.ZodOptional<z.ZodString>;
71
+ q: z.ZodOptional<z.ZodString>;
72
+ dp: z.ZodOptional<z.ZodString>;
73
+ dq: z.ZodOptional<z.ZodString>;
74
+ qi: z.ZodOptional<z.ZodString>;
75
+ oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
76
+ r: z.ZodOptional<z.ZodString>;
77
+ d: z.ZodOptional<z.ZodString>;
78
+ t: z.ZodOptional<z.ZodString>;
79
+ }, "strip", z.ZodTypeAny, {
80
+ d?: string | undefined;
81
+ r?: string | undefined;
82
+ t?: string | undefined;
83
+ }, {
84
+ d?: string | undefined;
85
+ r?: string | undefined;
86
+ t?: string | undefined;
87
+ }>, "atleastone">>;
88
+ }>, "strip", z.ZodTypeAny, {
89
+ kty: "RSA";
90
+ n: string;
91
+ e: string;
92
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
93
+ kid?: string | undefined;
94
+ ext?: boolean | undefined;
95
+ use?: "sig" | "enc" | undefined;
96
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
97
+ x5c?: string[] | undefined;
98
+ x5t?: string | undefined;
99
+ "x5t#S256"?: string | undefined;
100
+ x5u?: string | undefined;
101
+ d?: string | undefined;
102
+ p?: string | undefined;
103
+ q?: string | undefined;
104
+ dp?: string | undefined;
105
+ dq?: string | undefined;
106
+ qi?: string | undefined;
107
+ oth?: [{
108
+ d?: string | undefined;
109
+ r?: string | undefined;
110
+ t?: string | undefined;
111
+ }, ...{
112
+ d?: string | undefined;
113
+ r?: string | undefined;
114
+ t?: string | undefined;
115
+ }[]] | undefined;
116
+ }, {
117
+ kty: "RSA";
118
+ n: string;
119
+ e: string;
120
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
121
+ kid?: string | undefined;
122
+ ext?: boolean | undefined;
123
+ use?: "sig" | "enc" | undefined;
124
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
125
+ x5c?: string[] | undefined;
126
+ x5t?: string | undefined;
127
+ "x5t#S256"?: string | undefined;
128
+ x5u?: string | undefined;
129
+ d?: string | undefined;
130
+ p?: string | undefined;
131
+ q?: string | undefined;
132
+ dp?: string | undefined;
133
+ dq?: string | undefined;
134
+ qi?: string | undefined;
135
+ oth?: [{
136
+ d?: string | undefined;
137
+ r?: string | undefined;
138
+ t?: string | undefined;
139
+ }, ...{
140
+ d?: string | undefined;
141
+ r?: string | undefined;
142
+ t?: string | undefined;
143
+ }[]] | undefined;
144
+ }>, z.ZodObject<z.objectUtil.extendShape<{
145
+ kty: z.ZodString;
146
+ alg: z.ZodOptional<z.ZodString>;
147
+ kid: z.ZodOptional<z.ZodString>;
148
+ ext: z.ZodOptional<z.ZodBoolean>;
149
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
150
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
151
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
152
+ x5t: z.ZodOptional<z.ZodString>;
153
+ "x5t#S256": z.ZodOptional<z.ZodString>;
154
+ x5u: z.ZodOptional<z.ZodString>;
155
+ }, {
156
+ kty: z.ZodLiteral<"EC">;
157
+ alg: z.ZodOptional<z.ZodEnum<["ES256", "ES384", "ES512"]>>;
158
+ crv: z.ZodEnum<["P-256", "P-384", "P-521"]>;
159
+ x: z.ZodString;
160
+ y: z.ZodString;
161
+ d: z.ZodOptional<z.ZodString>;
162
+ }>, "strip", z.ZodTypeAny, {
163
+ kty: "EC";
164
+ crv: "P-256" | "P-384" | "P-521";
165
+ x: string;
166
+ y: string;
167
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
168
+ kid?: string | undefined;
169
+ ext?: boolean | undefined;
170
+ use?: "sig" | "enc" | undefined;
171
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
172
+ x5c?: string[] | undefined;
173
+ x5t?: string | undefined;
174
+ "x5t#S256"?: string | undefined;
175
+ x5u?: string | undefined;
176
+ d?: string | undefined;
177
+ }, {
178
+ kty: "EC";
179
+ crv: "P-256" | "P-384" | "P-521";
180
+ x: string;
181
+ y: string;
182
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
183
+ kid?: string | undefined;
184
+ ext?: boolean | undefined;
185
+ use?: "sig" | "enc" | undefined;
186
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
187
+ x5c?: string[] | undefined;
188
+ x5t?: string | undefined;
189
+ "x5t#S256"?: string | undefined;
190
+ x5u?: string | undefined;
191
+ d?: string | undefined;
192
+ }>, z.ZodObject<z.objectUtil.extendShape<{
193
+ kty: z.ZodString;
194
+ alg: z.ZodOptional<z.ZodString>;
195
+ kid: z.ZodOptional<z.ZodString>;
196
+ ext: z.ZodOptional<z.ZodBoolean>;
197
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
198
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
199
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
200
+ x5t: z.ZodOptional<z.ZodString>;
201
+ "x5t#S256": z.ZodOptional<z.ZodString>;
202
+ x5u: z.ZodOptional<z.ZodString>;
203
+ }, {
204
+ kty: z.ZodLiteral<"EC">;
205
+ alg: z.ZodOptional<z.ZodEnum<["ES256K"]>>;
206
+ crv: z.ZodEnum<["secp256k1"]>;
207
+ x: z.ZodString;
208
+ y: z.ZodString;
209
+ d: z.ZodOptional<z.ZodString>;
210
+ }>, "strip", z.ZodTypeAny, {
211
+ kty: "EC";
212
+ crv: "secp256k1";
213
+ x: string;
214
+ y: string;
215
+ alg?: "ES256K" | undefined;
216
+ kid?: string | undefined;
217
+ ext?: boolean | undefined;
218
+ use?: "sig" | "enc" | undefined;
219
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
220
+ x5c?: string[] | undefined;
221
+ x5t?: string | undefined;
222
+ "x5t#S256"?: string | undefined;
223
+ x5u?: string | undefined;
224
+ d?: string | undefined;
225
+ }, {
226
+ kty: "EC";
227
+ crv: "secp256k1";
228
+ x: string;
229
+ y: string;
230
+ alg?: "ES256K" | undefined;
231
+ kid?: string | undefined;
232
+ ext?: boolean | undefined;
233
+ use?: "sig" | "enc" | undefined;
234
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
235
+ x5c?: string[] | undefined;
236
+ x5t?: string | undefined;
237
+ "x5t#S256"?: string | undefined;
238
+ x5u?: string | undefined;
239
+ d?: string | undefined;
240
+ }>, z.ZodObject<z.objectUtil.extendShape<{
241
+ kty: z.ZodString;
242
+ alg: z.ZodOptional<z.ZodString>;
243
+ kid: z.ZodOptional<z.ZodString>;
244
+ ext: z.ZodOptional<z.ZodBoolean>;
245
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
246
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
247
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
248
+ x5t: z.ZodOptional<z.ZodString>;
249
+ "x5t#S256": z.ZodOptional<z.ZodString>;
250
+ x5u: z.ZodOptional<z.ZodString>;
251
+ }, {
252
+ kty: z.ZodLiteral<"OKP">;
253
+ alg: z.ZodOptional<z.ZodEnum<["EdDSA"]>>;
254
+ crv: z.ZodEnum<["Ed25519", "Ed448"]>;
255
+ x: z.ZodString;
256
+ d: z.ZodOptional<z.ZodString>;
257
+ }>, "strip", z.ZodTypeAny, {
258
+ kty: "OKP";
259
+ crv: "Ed25519" | "Ed448";
260
+ x: string;
261
+ alg?: "EdDSA" | undefined;
262
+ kid?: string | undefined;
263
+ ext?: boolean | undefined;
264
+ use?: "sig" | "enc" | undefined;
265
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
266
+ x5c?: string[] | undefined;
267
+ x5t?: string | undefined;
268
+ "x5t#S256"?: string | undefined;
269
+ x5u?: string | undefined;
270
+ d?: string | undefined;
271
+ }, {
272
+ kty: "OKP";
273
+ crv: "Ed25519" | "Ed448";
274
+ x: string;
275
+ alg?: "EdDSA" | undefined;
276
+ kid?: string | undefined;
277
+ ext?: boolean | undefined;
278
+ use?: "sig" | "enc" | undefined;
279
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
280
+ x5c?: string[] | undefined;
281
+ x5t?: string | undefined;
282
+ "x5t#S256"?: string | undefined;
283
+ x5u?: string | undefined;
284
+ d?: string | undefined;
285
+ }>, z.ZodObject<z.objectUtil.extendShape<{
286
+ kty: z.ZodString;
287
+ alg: z.ZodOptional<z.ZodString>;
288
+ kid: z.ZodOptional<z.ZodString>;
289
+ ext: z.ZodOptional<z.ZodBoolean>;
290
+ use: z.ZodOptional<z.ZodEnum<["sig", "enc"]>>;
291
+ key_ops: z.ZodOptional<z.ZodArray<z.ZodEnum<["sign", "verify", "encrypt", "decrypt", "wrapKey", "unwrapKey", "deriveKey", "deriveBits"]>, "many">>;
292
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
293
+ x5t: z.ZodOptional<z.ZodString>;
294
+ "x5t#S256": z.ZodOptional<z.ZodString>;
295
+ x5u: z.ZodOptional<z.ZodString>;
296
+ }, {
297
+ kty: z.ZodLiteral<"oct">;
298
+ alg: z.ZodOptional<z.ZodEnum<["HS256", "HS384", "HS512"]>>;
299
+ k: z.ZodString;
300
+ }>, "strip", z.ZodTypeAny, {
301
+ kty: "oct";
302
+ k: string;
303
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
304
+ kid?: string | undefined;
305
+ ext?: boolean | undefined;
306
+ use?: "sig" | "enc" | undefined;
307
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
308
+ x5c?: string[] | undefined;
309
+ x5t?: string | undefined;
310
+ "x5t#S256"?: string | undefined;
311
+ x5u?: string | undefined;
312
+ }, {
313
+ kty: "oct";
314
+ k: string;
315
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
316
+ kid?: string | undefined;
317
+ ext?: boolean | undefined;
318
+ use?: "sig" | "enc" | undefined;
319
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
320
+ x5c?: string[] | undefined;
321
+ x5t?: string | undefined;
322
+ "x5t#S256"?: string | undefined;
323
+ x5u?: string | undefined;
324
+ }>]>, {
325
+ kty: "RSA";
326
+ n: string;
327
+ e: string;
328
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
329
+ kid?: string | undefined;
330
+ ext?: boolean | undefined;
331
+ use?: "sig" | "enc" | undefined;
332
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
333
+ x5c?: string[] | undefined;
334
+ x5t?: string | undefined;
335
+ "x5t#S256"?: string | undefined;
336
+ x5u?: string | undefined;
337
+ d?: string | undefined;
338
+ p?: string | undefined;
339
+ q?: string | undefined;
340
+ dp?: string | undefined;
341
+ dq?: string | undefined;
342
+ qi?: string | undefined;
343
+ oth?: [{
344
+ d?: string | undefined;
345
+ r?: string | undefined;
346
+ t?: string | undefined;
347
+ }, ...{
348
+ d?: string | undefined;
349
+ r?: string | undefined;
350
+ t?: string | undefined;
351
+ }[]] | undefined;
352
+ } | {
353
+ kty: "EC";
354
+ crv: "P-256" | "P-384" | "P-521";
355
+ x: string;
356
+ y: string;
357
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
358
+ kid?: string | undefined;
359
+ ext?: boolean | undefined;
360
+ use?: "sig" | "enc" | undefined;
361
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
362
+ x5c?: string[] | undefined;
363
+ x5t?: string | undefined;
364
+ "x5t#S256"?: string | undefined;
365
+ x5u?: string | undefined;
366
+ d?: string | undefined;
367
+ } | {
368
+ kty: "EC";
369
+ crv: "secp256k1";
370
+ x: string;
371
+ y: string;
372
+ alg?: "ES256K" | undefined;
373
+ kid?: string | undefined;
374
+ ext?: boolean | undefined;
375
+ use?: "sig" | "enc" | undefined;
376
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
377
+ x5c?: string[] | undefined;
378
+ x5t?: string | undefined;
379
+ "x5t#S256"?: string | undefined;
380
+ x5u?: string | undefined;
381
+ d?: string | undefined;
382
+ } | {
383
+ kty: "OKP";
384
+ crv: "Ed25519" | "Ed448";
385
+ x: string;
386
+ alg?: "EdDSA" | undefined;
387
+ kid?: string | undefined;
388
+ ext?: boolean | undefined;
389
+ use?: "sig" | "enc" | undefined;
390
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
391
+ x5c?: string[] | undefined;
392
+ x5t?: string | undefined;
393
+ "x5t#S256"?: string | undefined;
394
+ x5u?: string | undefined;
395
+ d?: string | undefined;
396
+ } | {
397
+ kty: "oct";
398
+ k: string;
399
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
400
+ kid?: string | undefined;
401
+ ext?: boolean | undefined;
402
+ use?: "sig" | "enc" | undefined;
403
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
404
+ x5c?: string[] | undefined;
405
+ x5t?: string | undefined;
406
+ "x5t#S256"?: string | undefined;
407
+ x5u?: string | undefined;
408
+ } | {
409
+ kty: string;
410
+ alg?: string | undefined;
411
+ kid?: string | undefined;
412
+ ext?: boolean | undefined;
413
+ use?: "sig" | "enc" | undefined;
414
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
415
+ x5c?: string[] | undefined;
416
+ x5t?: string | undefined;
417
+ "x5t#S256"?: string | undefined;
418
+ x5u?: string | undefined;
419
+ }, {
420
+ kty: "RSA";
421
+ n: string;
422
+ e: string;
423
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
424
+ kid?: string | undefined;
425
+ ext?: boolean | undefined;
426
+ use?: "sig" | "enc" | undefined;
427
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
428
+ x5c?: string[] | undefined;
429
+ x5t?: string | undefined;
430
+ "x5t#S256"?: string | undefined;
431
+ x5u?: string | undefined;
432
+ d?: string | undefined;
433
+ p?: string | undefined;
434
+ q?: string | undefined;
435
+ dp?: string | undefined;
436
+ dq?: string | undefined;
437
+ qi?: string | undefined;
438
+ oth?: [{
439
+ d?: string | undefined;
440
+ r?: string | undefined;
441
+ t?: string | undefined;
442
+ }, ...{
443
+ d?: string | undefined;
444
+ r?: string | undefined;
445
+ t?: string | undefined;
446
+ }[]] | undefined;
447
+ } | {
448
+ kty: "EC";
449
+ crv: "P-256" | "P-384" | "P-521";
450
+ x: string;
451
+ y: string;
452
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
453
+ kid?: string | undefined;
454
+ ext?: boolean | undefined;
455
+ use?: "sig" | "enc" | undefined;
456
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
457
+ x5c?: string[] | undefined;
458
+ x5t?: string | undefined;
459
+ "x5t#S256"?: string | undefined;
460
+ x5u?: string | undefined;
461
+ d?: string | undefined;
462
+ } | {
463
+ kty: "EC";
464
+ crv: "secp256k1";
465
+ x: string;
466
+ y: string;
467
+ alg?: "ES256K" | undefined;
468
+ kid?: string | undefined;
469
+ ext?: boolean | undefined;
470
+ use?: "sig" | "enc" | undefined;
471
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
472
+ x5c?: string[] | undefined;
473
+ x5t?: string | undefined;
474
+ "x5t#S256"?: string | undefined;
475
+ x5u?: string | undefined;
476
+ d?: string | undefined;
477
+ } | {
478
+ kty: "OKP";
479
+ crv: "Ed25519" | "Ed448";
480
+ x: string;
481
+ alg?: "EdDSA" | undefined;
482
+ kid?: string | undefined;
483
+ ext?: boolean | undefined;
484
+ use?: "sig" | "enc" | undefined;
485
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
486
+ x5c?: string[] | undefined;
487
+ x5t?: string | undefined;
488
+ "x5t#S256"?: string | undefined;
489
+ x5u?: string | undefined;
490
+ d?: string | undefined;
491
+ } | {
492
+ kty: "oct";
493
+ k: string;
494
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
495
+ kid?: string | undefined;
496
+ ext?: boolean | undefined;
497
+ use?: "sig" | "enc" | undefined;
498
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
499
+ x5c?: string[] | undefined;
500
+ x5t?: string | undefined;
501
+ "x5t#S256"?: string | undefined;
502
+ x5u?: string | undefined;
503
+ } | {
504
+ kty: string;
505
+ alg?: string | undefined;
506
+ kid?: string | undefined;
507
+ ext?: boolean | undefined;
508
+ use?: "sig" | "enc" | undefined;
509
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
510
+ x5c?: string[] | undefined;
511
+ x5t?: string | undefined;
512
+ "x5t#S256"?: string | undefined;
513
+ x5u?: string | undefined;
514
+ }>, {
515
+ kty: "RSA";
516
+ n: string;
517
+ e: string;
518
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
519
+ kid?: string | undefined;
520
+ ext?: boolean | undefined;
521
+ use?: "sig" | "enc" | undefined;
522
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
523
+ x5c?: string[] | undefined;
524
+ x5t?: string | undefined;
525
+ "x5t#S256"?: string | undefined;
526
+ x5u?: string | undefined;
527
+ d?: string | undefined;
528
+ p?: string | undefined;
529
+ q?: string | undefined;
530
+ dp?: string | undefined;
531
+ dq?: string | undefined;
532
+ qi?: string | undefined;
533
+ oth?: [{
534
+ d?: string | undefined;
535
+ r?: string | undefined;
536
+ t?: string | undefined;
537
+ }, ...{
538
+ d?: string | undefined;
539
+ r?: string | undefined;
540
+ t?: string | undefined;
541
+ }[]] | undefined;
542
+ } | {
543
+ kty: "EC";
544
+ crv: "P-256" | "P-384" | "P-521";
545
+ x: string;
546
+ y: string;
547
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
548
+ kid?: string | undefined;
549
+ ext?: boolean | undefined;
550
+ use?: "sig" | "enc" | undefined;
551
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
552
+ x5c?: string[] | undefined;
553
+ x5t?: string | undefined;
554
+ "x5t#S256"?: string | undefined;
555
+ x5u?: string | undefined;
556
+ d?: string | undefined;
557
+ } | {
558
+ kty: "EC";
559
+ crv: "secp256k1";
560
+ x: string;
561
+ y: string;
562
+ alg?: "ES256K" | undefined;
563
+ kid?: string | undefined;
564
+ ext?: boolean | undefined;
565
+ use?: "sig" | "enc" | undefined;
566
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
567
+ x5c?: string[] | undefined;
568
+ x5t?: string | undefined;
569
+ "x5t#S256"?: string | undefined;
570
+ x5u?: string | undefined;
571
+ d?: string | undefined;
572
+ } | {
573
+ kty: "OKP";
574
+ crv: "Ed25519" | "Ed448";
575
+ x: string;
576
+ alg?: "EdDSA" | undefined;
577
+ kid?: string | undefined;
578
+ ext?: boolean | undefined;
579
+ use?: "sig" | "enc" | undefined;
580
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
581
+ x5c?: string[] | undefined;
582
+ x5t?: string | undefined;
583
+ "x5t#S256"?: string | undefined;
584
+ x5u?: string | undefined;
585
+ d?: string | undefined;
586
+ } | {
587
+ kty: "oct";
588
+ k: string;
589
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
590
+ kid?: string | undefined;
591
+ ext?: boolean | undefined;
592
+ use?: "sig" | "enc" | undefined;
593
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
594
+ x5c?: string[] | undefined;
595
+ x5t?: string | undefined;
596
+ "x5t#S256"?: string | undefined;
597
+ x5u?: string | undefined;
598
+ } | {
599
+ kty: string;
600
+ alg?: string | undefined;
601
+ kid?: string | undefined;
602
+ ext?: boolean | undefined;
603
+ use?: "sig" | "enc" | undefined;
604
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
605
+ x5c?: string[] | undefined;
606
+ x5t?: string | undefined;
607
+ "x5t#S256"?: string | undefined;
608
+ x5u?: string | undefined;
609
+ }, {
610
+ kty: "RSA";
611
+ n: string;
612
+ e: string;
613
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
614
+ kid?: string | undefined;
615
+ ext?: boolean | undefined;
616
+ use?: "sig" | "enc" | undefined;
617
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
618
+ x5c?: string[] | undefined;
619
+ x5t?: string | undefined;
620
+ "x5t#S256"?: string | undefined;
621
+ x5u?: string | undefined;
622
+ d?: string | undefined;
623
+ p?: string | undefined;
624
+ q?: string | undefined;
625
+ dp?: string | undefined;
626
+ dq?: string | undefined;
627
+ qi?: string | undefined;
628
+ oth?: [{
629
+ d?: string | undefined;
630
+ r?: string | undefined;
631
+ t?: string | undefined;
632
+ }, ...{
633
+ d?: string | undefined;
634
+ r?: string | undefined;
635
+ t?: string | undefined;
636
+ }[]] | undefined;
637
+ } | {
638
+ kty: "EC";
639
+ crv: "P-256" | "P-384" | "P-521";
640
+ x: string;
641
+ y: string;
642
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
643
+ kid?: string | undefined;
644
+ ext?: boolean | undefined;
645
+ use?: "sig" | "enc" | undefined;
646
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
647
+ x5c?: string[] | undefined;
648
+ x5t?: string | undefined;
649
+ "x5t#S256"?: string | undefined;
650
+ x5u?: string | undefined;
651
+ d?: string | undefined;
652
+ } | {
653
+ kty: "EC";
654
+ crv: "secp256k1";
655
+ x: string;
656
+ y: string;
657
+ alg?: "ES256K" | undefined;
658
+ kid?: string | undefined;
659
+ ext?: boolean | undefined;
660
+ use?: "sig" | "enc" | undefined;
661
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
662
+ x5c?: string[] | undefined;
663
+ x5t?: string | undefined;
664
+ "x5t#S256"?: string | undefined;
665
+ x5u?: string | undefined;
666
+ d?: string | undefined;
667
+ } | {
668
+ kty: "OKP";
669
+ crv: "Ed25519" | "Ed448";
670
+ x: string;
671
+ alg?: "EdDSA" | undefined;
672
+ kid?: string | undefined;
673
+ ext?: boolean | undefined;
674
+ use?: "sig" | "enc" | undefined;
675
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
676
+ x5c?: string[] | undefined;
677
+ x5t?: string | undefined;
678
+ "x5t#S256"?: string | undefined;
679
+ x5u?: string | undefined;
680
+ d?: string | undefined;
681
+ } | {
682
+ kty: "oct";
683
+ k: string;
684
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
685
+ kid?: string | undefined;
686
+ ext?: boolean | undefined;
687
+ use?: "sig" | "enc" | undefined;
688
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
689
+ x5c?: string[] | undefined;
690
+ x5t?: string | undefined;
691
+ "x5t#S256"?: string | undefined;
692
+ x5u?: string | undefined;
693
+ } | {
694
+ kty: string;
695
+ alg?: string | undefined;
696
+ kid?: string | undefined;
697
+ ext?: boolean | undefined;
698
+ use?: "sig" | "enc" | undefined;
699
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
700
+ x5c?: string[] | undefined;
701
+ x5t?: string | undefined;
702
+ "x5t#S256"?: string | undefined;
703
+ x5u?: string | undefined;
704
+ }>, {
705
+ kty: "RSA";
706
+ n: string;
707
+ e: string;
708
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
709
+ kid?: string | undefined;
710
+ ext?: boolean | undefined;
711
+ use?: "sig" | "enc" | undefined;
712
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
713
+ x5c?: string[] | undefined;
714
+ x5t?: string | undefined;
715
+ "x5t#S256"?: string | undefined;
716
+ x5u?: string | undefined;
717
+ d?: string | undefined;
718
+ p?: string | undefined;
719
+ q?: string | undefined;
720
+ dp?: string | undefined;
721
+ dq?: string | undefined;
722
+ qi?: string | undefined;
723
+ oth?: [{
724
+ d?: string | undefined;
725
+ r?: string | undefined;
726
+ t?: string | undefined;
727
+ }, ...{
728
+ d?: string | undefined;
729
+ r?: string | undefined;
730
+ t?: string | undefined;
731
+ }[]] | undefined;
732
+ } | {
733
+ kty: "EC";
734
+ crv: "P-256" | "P-384" | "P-521";
735
+ x: string;
736
+ y: string;
737
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
738
+ kid?: string | undefined;
739
+ ext?: boolean | undefined;
740
+ use?: "sig" | "enc" | undefined;
741
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
742
+ x5c?: string[] | undefined;
743
+ x5t?: string | undefined;
744
+ "x5t#S256"?: string | undefined;
745
+ x5u?: string | undefined;
746
+ d?: string | undefined;
747
+ } | {
748
+ kty: "EC";
749
+ crv: "secp256k1";
750
+ x: string;
751
+ y: string;
752
+ alg?: "ES256K" | undefined;
753
+ kid?: string | undefined;
754
+ ext?: boolean | undefined;
755
+ use?: "sig" | "enc" | undefined;
756
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
757
+ x5c?: string[] | undefined;
758
+ x5t?: string | undefined;
759
+ "x5t#S256"?: string | undefined;
760
+ x5u?: string | undefined;
761
+ d?: string | undefined;
762
+ } | {
763
+ kty: "OKP";
764
+ crv: "Ed25519" | "Ed448";
765
+ x: string;
766
+ alg?: "EdDSA" | undefined;
767
+ kid?: string | undefined;
768
+ ext?: boolean | undefined;
769
+ use?: "sig" | "enc" | undefined;
770
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
771
+ x5c?: string[] | undefined;
772
+ x5t?: string | undefined;
773
+ "x5t#S256"?: string | undefined;
774
+ x5u?: string | undefined;
775
+ d?: string | undefined;
776
+ } | {
777
+ kty: "oct";
778
+ k: string;
779
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
780
+ kid?: string | undefined;
781
+ ext?: boolean | undefined;
782
+ use?: "sig" | "enc" | undefined;
783
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
784
+ x5c?: string[] | undefined;
785
+ x5t?: string | undefined;
786
+ "x5t#S256"?: string | undefined;
787
+ x5u?: string | undefined;
788
+ } | {
789
+ kty: string;
790
+ alg?: string | undefined;
791
+ kid?: string | undefined;
792
+ ext?: boolean | undefined;
793
+ use?: "sig" | "enc" | undefined;
794
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
795
+ x5c?: string[] | undefined;
796
+ x5t?: string | undefined;
797
+ "x5t#S256"?: string | undefined;
798
+ x5u?: string | undefined;
799
+ }, {
800
+ kty: "RSA";
801
+ n: string;
802
+ e: string;
803
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
804
+ kid?: string | undefined;
805
+ ext?: boolean | undefined;
806
+ use?: "sig" | "enc" | undefined;
807
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
808
+ x5c?: string[] | undefined;
809
+ x5t?: string | undefined;
810
+ "x5t#S256"?: string | undefined;
811
+ x5u?: string | undefined;
812
+ d?: string | undefined;
813
+ p?: string | undefined;
814
+ q?: string | undefined;
815
+ dp?: string | undefined;
816
+ dq?: string | undefined;
817
+ qi?: string | undefined;
818
+ oth?: [{
819
+ d?: string | undefined;
820
+ r?: string | undefined;
821
+ t?: string | undefined;
822
+ }, ...{
823
+ d?: string | undefined;
824
+ r?: string | undefined;
825
+ t?: string | undefined;
826
+ }[]] | undefined;
827
+ } | {
828
+ kty: "EC";
829
+ crv: "P-256" | "P-384" | "P-521";
830
+ x: string;
831
+ y: string;
832
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
833
+ kid?: string | undefined;
834
+ ext?: boolean | undefined;
835
+ use?: "sig" | "enc" | undefined;
836
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
837
+ x5c?: string[] | undefined;
838
+ x5t?: string | undefined;
839
+ "x5t#S256"?: string | undefined;
840
+ x5u?: string | undefined;
841
+ d?: string | undefined;
842
+ } | {
843
+ kty: "EC";
844
+ crv: "secp256k1";
845
+ x: string;
846
+ y: string;
847
+ alg?: "ES256K" | undefined;
848
+ kid?: string | undefined;
849
+ ext?: boolean | undefined;
850
+ use?: "sig" | "enc" | undefined;
851
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
852
+ x5c?: string[] | undefined;
853
+ x5t?: string | undefined;
854
+ "x5t#S256"?: string | undefined;
855
+ x5u?: string | undefined;
856
+ d?: string | undefined;
857
+ } | {
858
+ kty: "OKP";
859
+ crv: "Ed25519" | "Ed448";
860
+ x: string;
861
+ alg?: "EdDSA" | undefined;
862
+ kid?: string | undefined;
863
+ ext?: boolean | undefined;
864
+ use?: "sig" | "enc" | undefined;
865
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
866
+ x5c?: string[] | undefined;
867
+ x5t?: string | undefined;
868
+ "x5t#S256"?: string | undefined;
869
+ x5u?: string | undefined;
870
+ d?: string | undefined;
871
+ } | {
872
+ kty: "oct";
873
+ k: string;
874
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
875
+ kid?: string | undefined;
876
+ ext?: boolean | undefined;
877
+ use?: "sig" | "enc" | undefined;
878
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
879
+ x5c?: string[] | undefined;
880
+ x5t?: string | undefined;
881
+ "x5t#S256"?: string | undefined;
882
+ x5u?: string | undefined;
883
+ } | {
884
+ kty: string;
885
+ alg?: string | undefined;
886
+ kid?: string | undefined;
887
+ ext?: boolean | undefined;
888
+ use?: "sig" | "enc" | undefined;
889
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
890
+ x5c?: string[] | undefined;
891
+ x5t?: string | undefined;
892
+ "x5t#S256"?: string | undefined;
893
+ x5u?: string | undefined;
894
+ }>, "many">;
895
+ }, "strip", z.ZodTypeAny, {
896
+ keys: ({
897
+ kty: "RSA";
898
+ n: string;
899
+ e: string;
900
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
901
+ kid?: string | undefined;
902
+ ext?: boolean | undefined;
903
+ use?: "sig" | "enc" | undefined;
904
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
905
+ x5c?: string[] | undefined;
906
+ x5t?: string | undefined;
907
+ "x5t#S256"?: string | undefined;
908
+ x5u?: string | undefined;
909
+ d?: string | undefined;
910
+ p?: string | undefined;
911
+ q?: string | undefined;
912
+ dp?: string | undefined;
913
+ dq?: string | undefined;
914
+ qi?: string | undefined;
915
+ oth?: [{
916
+ d?: string | undefined;
917
+ r?: string | undefined;
918
+ t?: string | undefined;
919
+ }, ...{
920
+ d?: string | undefined;
921
+ r?: string | undefined;
922
+ t?: string | undefined;
923
+ }[]] | undefined;
924
+ } | {
925
+ kty: "EC";
926
+ crv: "P-256" | "P-384" | "P-521";
927
+ x: string;
928
+ y: string;
929
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
930
+ kid?: string | undefined;
931
+ ext?: boolean | undefined;
932
+ use?: "sig" | "enc" | undefined;
933
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
934
+ x5c?: string[] | undefined;
935
+ x5t?: string | undefined;
936
+ "x5t#S256"?: string | undefined;
937
+ x5u?: string | undefined;
938
+ d?: string | undefined;
939
+ } | {
940
+ kty: "EC";
941
+ crv: "secp256k1";
942
+ x: string;
943
+ y: string;
944
+ alg?: "ES256K" | undefined;
945
+ kid?: string | undefined;
946
+ ext?: boolean | undefined;
947
+ use?: "sig" | "enc" | undefined;
948
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
949
+ x5c?: string[] | undefined;
950
+ x5t?: string | undefined;
951
+ "x5t#S256"?: string | undefined;
952
+ x5u?: string | undefined;
953
+ d?: string | undefined;
954
+ } | {
955
+ kty: "OKP";
956
+ crv: "Ed25519" | "Ed448";
957
+ x: string;
958
+ alg?: "EdDSA" | undefined;
959
+ kid?: string | undefined;
960
+ ext?: boolean | undefined;
961
+ use?: "sig" | "enc" | undefined;
962
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
963
+ x5c?: string[] | undefined;
964
+ x5t?: string | undefined;
965
+ "x5t#S256"?: string | undefined;
966
+ x5u?: string | undefined;
967
+ d?: string | undefined;
968
+ } | {
969
+ kty: "oct";
970
+ k: string;
971
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
972
+ kid?: string | undefined;
973
+ ext?: boolean | undefined;
974
+ use?: "sig" | "enc" | undefined;
975
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
976
+ x5c?: string[] | undefined;
977
+ x5t?: string | undefined;
978
+ "x5t#S256"?: string | undefined;
979
+ x5u?: string | undefined;
980
+ } | {
981
+ kty: string;
982
+ alg?: string | undefined;
983
+ kid?: string | undefined;
984
+ ext?: boolean | undefined;
985
+ use?: "sig" | "enc" | undefined;
986
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
987
+ x5c?: string[] | undefined;
988
+ x5t?: string | undefined;
989
+ "x5t#S256"?: string | undefined;
990
+ x5u?: string | undefined;
991
+ })[];
992
+ }, {
993
+ keys: ({
994
+ kty: "RSA";
995
+ n: string;
996
+ e: string;
997
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
998
+ kid?: string | undefined;
999
+ ext?: boolean | undefined;
1000
+ use?: "sig" | "enc" | undefined;
1001
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1002
+ x5c?: string[] | undefined;
1003
+ x5t?: string | undefined;
1004
+ "x5t#S256"?: string | undefined;
1005
+ x5u?: string | undefined;
1006
+ d?: string | undefined;
1007
+ p?: string | undefined;
1008
+ q?: string | undefined;
1009
+ dp?: string | undefined;
1010
+ dq?: string | undefined;
1011
+ qi?: string | undefined;
1012
+ oth?: [{
1013
+ d?: string | undefined;
1014
+ r?: string | undefined;
1015
+ t?: string | undefined;
1016
+ }, ...{
1017
+ d?: string | undefined;
1018
+ r?: string | undefined;
1019
+ t?: string | undefined;
1020
+ }[]] | undefined;
1021
+ } | {
1022
+ kty: "EC";
1023
+ crv: "P-256" | "P-384" | "P-521";
1024
+ x: string;
1025
+ y: string;
1026
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1027
+ kid?: string | undefined;
1028
+ ext?: boolean | undefined;
1029
+ use?: "sig" | "enc" | undefined;
1030
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1031
+ x5c?: string[] | undefined;
1032
+ x5t?: string | undefined;
1033
+ "x5t#S256"?: string | undefined;
1034
+ x5u?: string | undefined;
1035
+ d?: string | undefined;
1036
+ } | {
1037
+ kty: "EC";
1038
+ crv: "secp256k1";
1039
+ x: string;
1040
+ y: string;
1041
+ alg?: "ES256K" | undefined;
1042
+ kid?: string | undefined;
1043
+ ext?: boolean | undefined;
1044
+ use?: "sig" | "enc" | undefined;
1045
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1046
+ x5c?: string[] | undefined;
1047
+ x5t?: string | undefined;
1048
+ "x5t#S256"?: string | undefined;
1049
+ x5u?: string | undefined;
1050
+ d?: string | undefined;
1051
+ } | {
1052
+ kty: "OKP";
1053
+ crv: "Ed25519" | "Ed448";
1054
+ x: string;
1055
+ alg?: "EdDSA" | undefined;
1056
+ kid?: string | undefined;
1057
+ ext?: boolean | undefined;
1058
+ use?: "sig" | "enc" | undefined;
1059
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1060
+ x5c?: string[] | undefined;
1061
+ x5t?: string | undefined;
1062
+ "x5t#S256"?: string | undefined;
1063
+ x5u?: string | undefined;
1064
+ d?: string | undefined;
1065
+ } | {
1066
+ kty: "oct";
1067
+ k: string;
1068
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1069
+ kid?: string | undefined;
1070
+ ext?: boolean | undefined;
1071
+ use?: "sig" | "enc" | undefined;
1072
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1073
+ x5c?: string[] | undefined;
1074
+ x5t?: string | undefined;
1075
+ "x5t#S256"?: string | undefined;
1076
+ x5u?: string | undefined;
1077
+ } | {
1078
+ kty: string;
1079
+ alg?: string | undefined;
1080
+ kid?: string | undefined;
1081
+ ext?: boolean | undefined;
1082
+ use?: "sig" | "enc" | undefined;
1083
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1084
+ x5c?: string[] | undefined;
1085
+ x5t?: string | undefined;
1086
+ "x5t#S256"?: string | undefined;
1087
+ x5u?: string | undefined;
1088
+ })[];
1089
+ }>>;
1090
+ application_type: z.ZodDefault<z.ZodEnum<["web", "native"]>>;
1091
+ subject_type: z.ZodDefault<z.ZodEnum<["public", "pairwise"]>>;
1092
+ request_object_signing_alg: z.ZodOptional<z.ZodString>;
1093
+ id_token_signed_response_alg: z.ZodOptional<z.ZodString>;
1094
+ authorization_signed_response_alg: z.ZodDefault<z.ZodString>;
1095
+ authorization_encrypted_response_enc: z.ZodOptional<z.ZodEnum<["A128CBC-HS256"]>>;
1096
+ authorization_encrypted_response_alg: z.ZodOptional<z.ZodString>;
1097
+ client_name: z.ZodOptional<z.ZodString>;
1098
+ client_uri: z.ZodOptional<z.ZodEffects<z.ZodString, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}`, string>>;
1099
+ policy_uri: z.ZodOptional<z.ZodEffects<z.ZodString, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}`, string>>;
1100
+ tos_uri: z.ZodOptional<z.ZodEffects<z.ZodString, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}`, string>>;
1101
+ logo_uri: z.ZodOptional<z.ZodEffects<z.ZodString, `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}`, string>>;
1102
+ default_max_age: z.ZodOptional<z.ZodNumber>;
1103
+ require_auth_time: z.ZodOptional<z.ZodBoolean>;
1104
+ contacts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1105
+ tls_client_certificate_bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
1106
+ dpop_bound_access_tokens: z.ZodOptional<z.ZodBoolean>;
1107
+ authorization_details_types: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1108
+ } & {
1109
+ client_id: z.ZodUnion<[z.ZodEffects<z.ZodIntersection<z.ZodString, z.ZodEffects<z.ZodEffects<z.ZodString, `${string}:${string}`, string>, `https://${string}`, string>>, `https://${string}/${string}`, string>, z.ZodEffects<z.ZodString, "http://localhost" | `http://localhost?${string}` | "http://localhost/" | `http://localhost/?${string}`, string>]>;
1110
+ }, "strip", z.ZodTypeAny, {
1111
+ client_id: "http://localhost" | `http://localhost?${string}` | `https://${string}/${string}` | "http://localhost/" | `http://localhost/?${string}`;
1112
+ redirect_uris: [`http://[::1]${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | `${string}.${string}:/${string}`, ...(`http://[::1]${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | `${string}.${string}:/${string}`)[]];
1113
+ response_types: ["code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token", ...("code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token")[]];
1114
+ grant_types: ["authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]];
1115
+ token_endpoint_auth_method: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth";
1116
+ application_type: "web" | "native";
1117
+ subject_type: "public" | "pairwise";
1118
+ authorization_signed_response_alg: string;
1119
+ scope?: string | undefined;
1120
+ token_endpoint_auth_signing_alg?: string | undefined;
1121
+ userinfo_signed_response_alg?: string | undefined;
1122
+ userinfo_encrypted_response_alg?: string | undefined;
1123
+ jwks_uri?: `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | undefined;
1124
+ jwks?: {
1125
+ keys: ({
1126
+ kty: "RSA";
1127
+ n: string;
1128
+ e: string;
1129
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
1130
+ kid?: string | undefined;
1131
+ ext?: boolean | undefined;
1132
+ use?: "sig" | "enc" | undefined;
1133
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1134
+ x5c?: string[] | undefined;
1135
+ x5t?: string | undefined;
1136
+ "x5t#S256"?: string | undefined;
1137
+ x5u?: string | undefined;
1138
+ d?: string | undefined;
1139
+ p?: string | undefined;
1140
+ q?: string | undefined;
1141
+ dp?: string | undefined;
1142
+ dq?: string | undefined;
1143
+ qi?: string | undefined;
1144
+ oth?: [{
1145
+ d?: string | undefined;
1146
+ r?: string | undefined;
1147
+ t?: string | undefined;
1148
+ }, ...{
1149
+ d?: string | undefined;
1150
+ r?: string | undefined;
1151
+ t?: string | undefined;
1152
+ }[]] | undefined;
1153
+ } | {
1154
+ kty: "EC";
1155
+ crv: "P-256" | "P-384" | "P-521";
1156
+ x: string;
1157
+ y: string;
1158
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1159
+ kid?: string | undefined;
1160
+ ext?: boolean | undefined;
1161
+ use?: "sig" | "enc" | undefined;
1162
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1163
+ x5c?: string[] | undefined;
1164
+ x5t?: string | undefined;
1165
+ "x5t#S256"?: string | undefined;
1166
+ x5u?: string | undefined;
1167
+ d?: string | undefined;
1168
+ } | {
1169
+ kty: "EC";
1170
+ crv: "secp256k1";
1171
+ x: string;
1172
+ y: string;
1173
+ alg?: "ES256K" | undefined;
1174
+ kid?: string | undefined;
1175
+ ext?: boolean | undefined;
1176
+ use?: "sig" | "enc" | undefined;
1177
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1178
+ x5c?: string[] | undefined;
1179
+ x5t?: string | undefined;
1180
+ "x5t#S256"?: string | undefined;
1181
+ x5u?: string | undefined;
1182
+ d?: string | undefined;
1183
+ } | {
1184
+ kty: "OKP";
1185
+ crv: "Ed25519" | "Ed448";
1186
+ x: string;
1187
+ alg?: "EdDSA" | undefined;
1188
+ kid?: string | undefined;
1189
+ ext?: boolean | undefined;
1190
+ use?: "sig" | "enc" | undefined;
1191
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1192
+ x5c?: string[] | undefined;
1193
+ x5t?: string | undefined;
1194
+ "x5t#S256"?: string | undefined;
1195
+ x5u?: string | undefined;
1196
+ d?: string | undefined;
1197
+ } | {
1198
+ kty: "oct";
1199
+ k: string;
1200
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1201
+ kid?: string | undefined;
1202
+ ext?: boolean | undefined;
1203
+ use?: "sig" | "enc" | undefined;
1204
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1205
+ x5c?: string[] | undefined;
1206
+ x5t?: string | undefined;
1207
+ "x5t#S256"?: string | undefined;
1208
+ x5u?: string | undefined;
1209
+ } | {
1210
+ kty: string;
1211
+ alg?: string | undefined;
1212
+ kid?: string | undefined;
1213
+ ext?: boolean | undefined;
1214
+ use?: "sig" | "enc" | undefined;
1215
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1216
+ x5c?: string[] | undefined;
1217
+ x5t?: string | undefined;
1218
+ "x5t#S256"?: string | undefined;
1219
+ x5u?: string | undefined;
1220
+ })[];
1221
+ } | undefined;
1222
+ request_object_signing_alg?: string | undefined;
1223
+ id_token_signed_response_alg?: string | undefined;
1224
+ authorization_encrypted_response_enc?: "A128CBC-HS256" | undefined;
1225
+ authorization_encrypted_response_alg?: string | undefined;
1226
+ client_name?: string | undefined;
1227
+ client_uri?: `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | undefined;
1228
+ policy_uri?: `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | undefined;
1229
+ tos_uri?: `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | undefined;
1230
+ logo_uri?: `http://[::1]${string}` | "http://localhost" | `http://localhost#${string}` | `http://localhost?${string}` | `http://localhost/${string}` | `http://localhost:${string}` | "http://127.0.0.1" | `http://127.0.0.1#${string}` | `http://127.0.0.1?${string}` | `http://127.0.0.1/${string}` | `http://127.0.0.1:${string}` | `https://${string}` | undefined;
1231
+ default_max_age?: number | undefined;
1232
+ require_auth_time?: boolean | undefined;
1233
+ contacts?: string[] | undefined;
1234
+ tls_client_certificate_bound_access_tokens?: boolean | undefined;
1235
+ dpop_bound_access_tokens?: boolean | undefined;
1236
+ authorization_details_types?: string[] | undefined;
1237
+ }, {
1238
+ client_id: string;
1239
+ redirect_uris: [string, ...string[]];
1240
+ scope?: string | undefined;
1241
+ response_types?: ["code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token", ...("code" | "token" | "none" | "code id_token token" | "code id_token" | "code token" | "id_token token" | "id_token")[]] | undefined;
1242
+ grant_types?: ["authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer", ...("authorization_code" | "implicit" | "refresh_token" | "password" | "client_credentials" | "urn:ietf:params:oauth:grant-type:jwt-bearer" | "urn:ietf:params:oauth:grant-type:saml2-bearer")[]] | undefined;
1243
+ token_endpoint_auth_method?: "none" | "client_secret_basic" | "client_secret_jwt" | "client_secret_post" | "private_key_jwt" | "self_signed_tls_client_auth" | "tls_client_auth" | undefined;
1244
+ token_endpoint_auth_signing_alg?: string | undefined;
1245
+ userinfo_signed_response_alg?: string | undefined;
1246
+ userinfo_encrypted_response_alg?: string | undefined;
1247
+ jwks_uri?: string | undefined;
1248
+ jwks?: {
1249
+ keys: ({
1250
+ kty: "RSA";
1251
+ n: string;
1252
+ e: string;
1253
+ alg?: "RS256" | "RS384" | "RS512" | "PS256" | "PS384" | "PS512" | undefined;
1254
+ kid?: string | undefined;
1255
+ ext?: boolean | undefined;
1256
+ use?: "sig" | "enc" | undefined;
1257
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1258
+ x5c?: string[] | undefined;
1259
+ x5t?: string | undefined;
1260
+ "x5t#S256"?: string | undefined;
1261
+ x5u?: string | undefined;
1262
+ d?: string | undefined;
1263
+ p?: string | undefined;
1264
+ q?: string | undefined;
1265
+ dp?: string | undefined;
1266
+ dq?: string | undefined;
1267
+ qi?: string | undefined;
1268
+ oth?: [{
1269
+ d?: string | undefined;
1270
+ r?: string | undefined;
1271
+ t?: string | undefined;
1272
+ }, ...{
1273
+ d?: string | undefined;
1274
+ r?: string | undefined;
1275
+ t?: string | undefined;
1276
+ }[]] | undefined;
1277
+ } | {
1278
+ kty: "EC";
1279
+ crv: "P-256" | "P-384" | "P-521";
1280
+ x: string;
1281
+ y: string;
1282
+ alg?: "ES256" | "ES384" | "ES512" | undefined;
1283
+ kid?: string | undefined;
1284
+ ext?: boolean | undefined;
1285
+ use?: "sig" | "enc" | undefined;
1286
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1287
+ x5c?: string[] | undefined;
1288
+ x5t?: string | undefined;
1289
+ "x5t#S256"?: string | undefined;
1290
+ x5u?: string | undefined;
1291
+ d?: string | undefined;
1292
+ } | {
1293
+ kty: "EC";
1294
+ crv: "secp256k1";
1295
+ x: string;
1296
+ y: string;
1297
+ alg?: "ES256K" | undefined;
1298
+ kid?: string | undefined;
1299
+ ext?: boolean | undefined;
1300
+ use?: "sig" | "enc" | undefined;
1301
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1302
+ x5c?: string[] | undefined;
1303
+ x5t?: string | undefined;
1304
+ "x5t#S256"?: string | undefined;
1305
+ x5u?: string | undefined;
1306
+ d?: string | undefined;
1307
+ } | {
1308
+ kty: "OKP";
1309
+ crv: "Ed25519" | "Ed448";
1310
+ x: string;
1311
+ alg?: "EdDSA" | undefined;
1312
+ kid?: string | undefined;
1313
+ ext?: boolean | undefined;
1314
+ use?: "sig" | "enc" | undefined;
1315
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1316
+ x5c?: string[] | undefined;
1317
+ x5t?: string | undefined;
1318
+ "x5t#S256"?: string | undefined;
1319
+ x5u?: string | undefined;
1320
+ d?: string | undefined;
1321
+ } | {
1322
+ kty: "oct";
1323
+ k: string;
1324
+ alg?: "HS256" | "HS384" | "HS512" | undefined;
1325
+ kid?: string | undefined;
1326
+ ext?: boolean | undefined;
1327
+ use?: "sig" | "enc" | undefined;
1328
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1329
+ x5c?: string[] | undefined;
1330
+ x5t?: string | undefined;
1331
+ "x5t#S256"?: string | undefined;
1332
+ x5u?: string | undefined;
1333
+ } | {
1334
+ kty: string;
1335
+ alg?: string | undefined;
1336
+ kid?: string | undefined;
1337
+ ext?: boolean | undefined;
1338
+ use?: "sig" | "enc" | undefined;
1339
+ key_ops?: ("sign" | "verify" | "encrypt" | "decrypt" | "wrapKey" | "unwrapKey" | "deriveKey" | "deriveBits")[] | undefined;
1340
+ x5c?: string[] | undefined;
1341
+ x5t?: string | undefined;
1342
+ "x5t#S256"?: string | undefined;
1343
+ x5u?: string | undefined;
1344
+ })[];
1345
+ } | undefined;
1346
+ application_type?: "web" | "native" | undefined;
1347
+ subject_type?: "public" | "pairwise" | undefined;
1348
+ request_object_signing_alg?: string | undefined;
1349
+ id_token_signed_response_alg?: string | undefined;
1350
+ authorization_signed_response_alg?: string | undefined;
1351
+ authorization_encrypted_response_enc?: "A128CBC-HS256" | undefined;
1352
+ authorization_encrypted_response_alg?: string | undefined;
1353
+ client_name?: string | undefined;
1354
+ client_uri?: string | undefined;
1355
+ policy_uri?: string | undefined;
1356
+ tos_uri?: string | undefined;
1357
+ logo_uri?: string | undefined;
1358
+ default_max_age?: number | undefined;
1359
+ require_auth_time?: boolean | undefined;
1360
+ contacts?: string[] | undefined;
1361
+ tls_client_certificate_bound_access_tokens?: boolean | undefined;
1362
+ dpop_bound_access_tokens?: boolean | undefined;
1363
+ authorization_details_types?: string[] | undefined;
1364
+ }>;
1365
+ export type ClientMetadata = TypeOf<typeof clientMetadataSchema>;