@cfworker/jwt 5.2.0 → 6.0.0

package/dist/cjs/algs.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.algs = exports.algToHash = void 0;
+exports.algToHash = {
+    RS256: 'SHA-256',
+    RS384: 'SHA-384',
+    RS512: 'SHA-512'
+};
+exports.algs = Object.keys(exports.algToHash);

package/dist/cjs/decode.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeJwt = decodeJwt;
+const rfc4648_1 = require("rfc4648");
+function decodeJwt(token) {
+    const [header, payload, signature] = token.split('.');
+    const decoder = new TextDecoder();
+    return {
+        header: JSON.parse(decoder.decode(rfc4648_1.base64url.parse(header, { loose: true }))),
+        payload: JSON.parse(decoder.decode(rfc4648_1.base64url.parse(payload, { loose: true }))),
+        signature: rfc4648_1.base64url.parse(signature, { loose: true }),
+        raw: { header, payload, signature }
+    };
+}

package/dist/cjs/discovery.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIssuerMetadata = getIssuerMetadata;
+async function getIssuerMetadata(issuer) {
+    const url = new URL(issuer);
+    if (!url.pathname.endsWith('/')) {
+        url.pathname += '/';
+    }
+    url.pathname += '.well-known/openid-configuration';
+    const response = await fetch(url.href);
+    if (!response.ok) {
+        throw new Error(`Error loading OpenID discovery document at ${url.href}. ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+}

package/dist/cjs/index.js

@@ -0,0 +1,28 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyJwtSignature = exports.parseJwt = exports.importKey = exports.getKey = exports.getJwks = exports.decodeJwt = void 0;
+var decode_js_1 = require("./decode.js");
+Object.defineProperty(exports, "decodeJwt", { enumerable: true, get: function () { return decode_js_1.decodeJwt; } });
+var jwks_js_1 = require("./jwks.js");
+Object.defineProperty(exports, "getJwks", { enumerable: true, get: function () { return jwks_js_1.getJwks; } });
+Object.defineProperty(exports, "getKey", { enumerable: true, get: function () { return jwks_js_1.getKey; } });
+Object.defineProperty(exports, "importKey", { enumerable: true, get: function () { return jwks_js_1.importKey; } });
+var parse_js_1 = require("./parse.js");
+Object.defineProperty(exports, "parseJwt", { enumerable: true, get: function () { return parse_js_1.parseJwt; } });
+__exportStar(require("./types.js"), exports);
+var verify_js_1 = require("./verify.js");
+Object.defineProperty(exports, "verifyJwtSignature", { enumerable: true, get: function () { return verify_js_1.verifyJwtSignature; } });

package/dist/cjs/jwks.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getJwks = getJwks;
+exports.importKey = importKey;
+exports.getKey = getKey;
+const algs_js_1 = require("./algs.js");
+const discovery_js_1 = require("./discovery.js");
+async function getJwks(issuer) {
+    const issuerMetadata = await (0, discovery_js_1.getIssuerMetadata)(issuer);
+    let url;
+    if (issuerMetadata.jwks_uri) {
+        url = new URL(issuerMetadata.jwks_uri);
+    }
+    else {
+        url = new URL(issuer);
+        if (!url.pathname.endsWith('/')) {
+            url.pathname += '/';
+        }
+        url.pathname += '.well-known/jwks.json';
+    }
+    const response = await fetch(url.href);
+    if (!response.ok) {
+        throw new Error(`Error loading jwks at ${url.href}. ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+}
+const importedKeys = {};
+async function importKey(iss, jwk) {
+    if (jwk.kty !== 'RSA') {
+        throw new Error(`Unsupported jwk key type (kty) "${jwk.kty}": Full JWK was ${JSON.stringify(jwk)}`);
+    }
+    const hash = jwk.alg ? algs_js_1.algToHash[jwk.alg] : 'SHA-256';
+    if (!hash) {
+        throw new Error(`Unsupported jwk Algorithm (alg) "${jwk.alg}": Full JWK was ${JSON.stringify(jwk)}`);
+    }
+    const key = await crypto.subtle.importKey('jwk', jwk, { name: 'RSASSA-PKCS1-v1_5', hash }, false, ['verify']);
+    importedKeys[iss] = importedKeys[iss] || {};
+    importedKeys[iss][jwk.kid ?? 'default'] = key;
+}
+async function getKey(decoded) {
+    const { header: { kid = 'default' }, payload: { iss } } = decoded;
+    if (!importedKeys[iss]) {
+        const jwks = await getJwks(iss);
+        await Promise.all(jwks.keys.map(jwk => importKey(iss, jwk)));
+    }
+    const key = importedKeys[iss][kid];
+    if (!key) {
+        throw new Error(`Error jwk not found. iss: ${iss}; kid: ${kid};`);
+    }
+    return key;
+}

package/dist/cjs/parse.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseJwt = parseJwt;
+const algs_js_1 = require("./algs.js");
+const decode_js_1 = require("./decode.js");
+const jwks_js_1 = require("./jwks.js");
+const types_js_1 = require("./types.js");
+const verify_js_1 = require("./verify.js");
+const defaultSkewMs = 60 * 1000;
+async function parseJwt({ jwt, issuer, audience, resolveKey = jwks_js_1.getKey, skewMs = defaultSkewMs }) {
+    let decoded;
+    try {
+        decoded = (0, decode_js_1.decodeJwt)(jwt);
+    }
+    catch {
+        return {
+            valid: false,
+            reason: `Unable to decode JWT.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other
+        };
+    }
+    const { typ, alg } = decoded.header;
+    if (typeof typ !== 'undefined' && typ !== 'JWT') {
+        return {
+            valid: false,
+            reason: `Invalid JWT type ${JSON.stringify(typ)}. Expected "JWT".`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    if (!algs_js_1.algToHash[alg]) {
+        return {
+            valid: false,
+            reason: `Invalid JWT algorithm ${JSON.stringify(alg)}. Supported: ${algs_js_1.algs}.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    const { sub, aud, iss, iat, exp, nbf } = decoded.payload;
+    if (typeof sub !== 'string') {
+        return {
+            valid: false,
+            reason: `Subject claim (sub) is required and must be a string. Received ${JSON.stringify(sub)}.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    if (typeof aud === 'string') {
+        if (aud !== audience) {
+            return {
+                valid: false,
+                reason: `Invalid JWT audience claim (aud) ${JSON.stringify(aud)}. Expected "${audience}".`,
+                reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+                decoded
+            };
+        }
+    }
+    else if (Array.isArray(aud) &&
+        aud.length > 0 &&
+        aud.every(a => typeof a === 'string')) {
+        if (!aud.includes(audience)) {
+            return {
+                valid: false,
+                reason: `Invalid JWT audience claim array (aud) ${JSON.stringify(aud)}. Does not include "${audience}".`,
+                reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+                decoded
+            };
+        }
+    }
+    else {
+        return {
+            valid: false,
+            reason: `Invalid JWT audience claim (aud) ${JSON.stringify(aud)}. Expected a string or a non-empty array of strings.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    if (!(iss === issuer || (Array.isArray(issuer) && issuer.includes(iss)))) {
+        return {
+            valid: false,
+            reason: `Invalid JWT issuer claim (iss) ${JSON.stringify(decoded.payload.iss)}. Expected ${JSON.stringify(issuer)}.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    if (typeof exp !== 'number') {
+        return {
+            valid: false,
+            reason: `Invalid JWT expiry date claim (exp) ${JSON.stringify(exp)}. Expected number.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    const currentDate = new Date(Date.now());
+    const expiryDate = new Date(0);
+    expiryDate.setUTCSeconds(exp);
+    const expired = expiryDate.getTime() <= currentDate.getTime() - skewMs;
+    if (expired) {
+        return {
+            valid: false,
+            reason: `JWT is expired. Expiry date: ${expiryDate}; Current date: ${currentDate};`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Expired,
+            decoded
+        };
+    }
+    if (nbf !== undefined) {
+        if (typeof nbf !== 'number') {
+            return {
+                valid: false,
+                reason: `Invalid JWT not before date claim (nbf) ${JSON.stringify(nbf)}. Expected number.`,
+                reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+                decoded
+            };
+        }
+        const notBeforeDate = new Date(0);
+        notBeforeDate.setUTCSeconds(nbf);
+        const early = notBeforeDate.getTime() > currentDate.getTime() + skewMs;
+        if (early) {
+            return {
+                valid: false,
+                reason: `JWT cannot be used prior to not before date claim (nbf). Not before date: ${notBeforeDate}; Current date: ${currentDate};`,
+                reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+                decoded
+            };
+        }
+    }
+    if (iat !== undefined) {
+        if (typeof iat !== 'number') {
+            return {
+                valid: false,
+                reason: `Invalid JWT issued at date claim (iat) ${JSON.stringify(iat)}. Expected number.`,
+                reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+                decoded
+            };
+        }
+        const issuedAtDate = new Date(0);
+        issuedAtDate.setUTCSeconds(iat);
+        const postIssued = issuedAtDate.getTime() > currentDate.getTime() + skewMs;
+        if (postIssued) {
+            return {
+                valid: false,
+                reason: `JWT issued at date claim (iat) is in the future. Issued at date: ${issuedAtDate}; Current date: ${currentDate};`,
+                reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+                decoded
+            };
+        }
+    }
+    let key;
+    try {
+        key = await resolveKey(decoded);
+    }
+    catch (e) {
+        return {
+            valid: false,
+            reason: `Error retrieving public key to verify JWT signature: ${e instanceof Error ? e.message : e}`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    if (!key) {
+        return {
+            valid: false,
+            reason: `Unable to resolve public key to verify JWT signature.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    let signatureValid;
+    try {
+        signatureValid = await (0, verify_js_1.verifyJwtSignature)(decoded, key);
+    }
+    catch {
+        return {
+            valid: false,
+            reason: `Error verifying JWT signature.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    if (!signatureValid) {
+        return {
+            valid: false,
+            reason: `JWT signature is invalid.`,
+            reasonCode: types_js_1.InvalidJwtReasonCode.Other,
+            decoded
+        };
+    }
+    const { header, payload } = decoded;
+    return { valid: true, header, payload };
+}

package/dist/{types.d.ts → cjs/types.d.ts}

@@ -38,7 +38,7 @@ export interface InvalidJwtParseResult {
     reasonCode: InvalidJwtReasonCode;
     decoded?: DecodedJwt;
 }
-export declare const enum InvalidJwtReasonCode {
+export declare enum InvalidJwtReasonCode {
     Other = 0,
     Expired = 1
 }

package/dist/cjs/types.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidJwtReasonCode = void 0;
+var InvalidJwtReasonCode;
+(function (InvalidJwtReasonCode) {
+    InvalidJwtReasonCode[InvalidJwtReasonCode["Other"] = 0] = "Other";
+    InvalidJwtReasonCode[InvalidJwtReasonCode["Expired"] = 1] = "Expired";
+})(InvalidJwtReasonCode || (exports.InvalidJwtReasonCode = InvalidJwtReasonCode = {}));

package/dist/cjs/verify.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyJwtSignature = verifyJwtSignature;
+async function verifyJwtSignature(decoded, key) {
+    const encoder = new TextEncoder();
+    const data = encoder.encode(`${decoded.raw.header}.${decoded.raw.payload}`);
+    return crypto.subtle.verify('RSASSA-PKCS1-v1_5', key, decoded.signature, data);
+}

package/dist/esm/algs.d.ts

@@ -0,0 +1,2 @@
+export declare const algToHash: Record<string, string>;
+export declare const algs: string[];

package/dist/esm/decode.d.ts

@@ -0,0 +1,2 @@
+import { DecodedJwt } from './types.js';
+export declare function decodeJwt(token: string): DecodedJwt;

package/dist/esm/discovery.d.ts

@@ -0,0 +1,2 @@
+import { IssuerMetadata } from './types';
+export declare function getIssuerMetadata(issuer: string): Promise<IssuerMetadata>;

package/dist/{index.d.ts → esm/index.d.ts}

@@ -2,5 +2,4 @@ export { decodeJwt } from './decode.js';
 export { getJwks, getKey, importKey } from './jwks.js';
 export { parseJwt } from './parse.js';
 export * from './types.js';
-export { InvalidJwtReasonCode } from './types.js';
 export { verifyJwtSignature } from './verify.js';

package/dist/esm/index.js

@@ -0,0 +1,5 @@
+export { decodeJwt } from './decode.js';
+export { getJwks, getKey, importKey } from './jwks.js';
+export { parseJwt } from './parse.js';
+export * from './types.js';
+export { verifyJwtSignature } from './verify.js';

package/dist/esm/jwks.d.ts

@@ -0,0 +1,4 @@
+import { DecodedJwt, JsonWebKeyset } from './types.js';
+export declare function getJwks(issuer: string): Promise<JsonWebKeyset>;
+export declare function importKey(iss: string, jwk: JsonWebKey): Promise<void>;
+export declare function getKey(decoded: DecodedJwt): Promise<CryptoKey>;

package/dist/esm/parse.d.ts

@@ -0,0 +1,9 @@
+import { DecodedJwt, JwtParseResult } from './types.js';
+export interface JwtParseOptions {
+    jwt: string;
+    issuer: string | string[];
+    audience: string;
+    resolveKey?: (decoded: DecodedJwt) => Promise<CryptoKey | null>;
+    skewMs?: number;
+}
+export declare function parseJwt({ jwt, issuer, audience, resolveKey, skewMs }: JwtParseOptions): Promise<JwtParseResult>;

package/dist/{parse.js → esm/parse.js}

@@ -1,6 +1,7 @@
 import { algs, algToHash } from './algs.js';
 import { decodeJwt } from './decode.js';
 import { getKey } from './jwks.js';
+import { InvalidJwtReasonCode } from './types.js';
 import { verifyJwtSignature } from './verify.js';
 const defaultSkewMs = 60 * 1000;
 export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, skewMs = defaultSkewMs }) {
@@ -12,7 +13,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Unable to decode JWT.`,
-            reasonCode: 0
+            reasonCode: InvalidJwtReasonCode.Other
         };
     }
     const { typ, alg } = decoded.header;
@@ -20,7 +21,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Invalid JWT type ${JSON.stringify(typ)}. Expected "JWT".`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -28,7 +29,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Invalid JWT algorithm ${JSON.stringify(alg)}. Supported: ${algs}.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -37,7 +38,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Subject claim (sub) is required and must be a string. Received ${JSON.stringify(sub)}.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -46,7 +47,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
             return {
                 valid: false,
                 reason: `Invalid JWT audience claim (aud) ${JSON.stringify(aud)}. Expected "${audience}".`,
-                reasonCode: 0,
+                reasonCode: InvalidJwtReasonCode.Other,
                 decoded
             };
         }
@@ -58,7 +59,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
             return {
                 valid: false,
                 reason: `Invalid JWT audience claim array (aud) ${JSON.stringify(aud)}. Does not include "${audience}".`,
-                reasonCode: 0,
+                reasonCode: InvalidJwtReasonCode.Other,
                 decoded
             };
         }
@@ -67,7 +68,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Invalid JWT audience claim (aud) ${JSON.stringify(aud)}. Expected a string or a non-empty array of strings.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -75,7 +76,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Invalid JWT issuer claim (iss) ${JSON.stringify(decoded.payload.iss)}. Expected ${JSON.stringify(issuer)}.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -83,7 +84,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Invalid JWT expiry date claim (exp) ${JSON.stringify(exp)}. Expected number.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -95,7 +96,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `JWT is expired. Expiry date: ${expiryDate}; Current date: ${currentDate};`,
-            reasonCode: 1,
+            reasonCode: InvalidJwtReasonCode.Expired,
             decoded
         };
     }
@@ -104,7 +105,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
             return {
                 valid: false,
                 reason: `Invalid JWT not before date claim (nbf) ${JSON.stringify(nbf)}. Expected number.`,
-                reasonCode: 0,
+                reasonCode: InvalidJwtReasonCode.Other,
                 decoded
             };
         }
@@ -115,7 +116,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
             return {
                 valid: false,
                 reason: `JWT cannot be used prior to not before date claim (nbf). Not before date: ${notBeforeDate}; Current date: ${currentDate};`,
-                reasonCode: 0,
+                reasonCode: InvalidJwtReasonCode.Other,
                 decoded
             };
         }
@@ -125,7 +126,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
             return {
                 valid: false,
                 reason: `Invalid JWT issued at date claim (iat) ${JSON.stringify(iat)}. Expected number.`,
-                reasonCode: 0,
+                reasonCode: InvalidJwtReasonCode.Other,
                 decoded
             };
         }
@@ -136,7 +137,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
             return {
                 valid: false,
                 reason: `JWT issued at date claim (iat) is in the future. Issued at date: ${issuedAtDate}; Current date: ${currentDate};`,
-                reasonCode: 0,
+                reasonCode: InvalidJwtReasonCode.Other,
                 decoded
             };
         }
@@ -149,7 +150,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Error retrieving public key to verify JWT signature: ${e instanceof Error ? e.message : e}`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -157,7 +158,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Unable to resolve public key to verify JWT signature.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -169,7 +170,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `Error verifying JWT signature.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }
@@ -177,7 +178,7 @@ export async function parseJwt({ jwt, issuer, audience, resolveKey = getKey, ske
         return {
             valid: false,
             reason: `JWT signature is invalid.`,
-            reasonCode: 0,
+            reasonCode: InvalidJwtReasonCode.Other,
             decoded
         };
     }

package/dist/esm/types.d.ts

@@ -0,0 +1,71 @@
+export interface JwtPayload {
+    iss: string;
+    sub: string;
+    aud: string | Array<string>;
+    iat: number;
+    exp: number;
+    nbf?: number;
+    jti?: string;
+}
+export interface JwtHeader {
+    typ?: string;
+    alg: string;
+    kid: string;
+    jku?: string;
+}
+export interface RawJwt {
+    header: string;
+    payload: string;
+    signature: string;
+}
+export interface DecodedJwt {
+    header: JwtHeader;
+    payload: JwtPayload;
+    signature: Uint8Array;
+    raw: RawJwt;
+}
+export interface JsonWebKeyset {
+    keys: JsonWebKey[];
+}
+export interface ValidJwtParseResult {
+    valid: true;
+    header: JwtHeader;
+    payload: JwtPayload;
+}
+export interface InvalidJwtParseResult {
+    valid: false;
+    reason: string;
+    reasonCode: InvalidJwtReasonCode;
+    decoded?: DecodedJwt;
+}
+export declare enum InvalidJwtReasonCode {
+    Other = 0,
+    Expired = 1
+}
+export interface IssuerMetadata {
+    issuer: string;
+    authorization_endpoint?: string;
+    token_endpoint?: string;
+    jwks_uri?: string;
+    userinfo_endpoint?: string;
+    revocation_endpoint?: string;
+    end_session_endpoint?: string;
+    registration_endpoint?: string;
+    token_endpoint_auth_methods_supported?: string[];
+    token_endpoint_auth_signing_alg_values_supported?: string[];
+    introspection_endpoint_auth_methods_supported?: string[];
+    introspection_endpoint_auth_signing_alg_values_supported?: string[];
+    revocation_endpoint_auth_methods_supported?: string[];
+    revocation_endpoint_auth_signing_alg_values_supported?: string[];
+    request_object_signing_alg_values_supported?: string[];
+    mtls_endpoint_aliases?: MtlsEndpointAliases;
+    [key: string]: unknown;
+}
+export interface MtlsEndpointAliases {
+    token_endpoint?: string;
+    userinfo_endpoint?: string;
+    revocation_endpoint?: string;
+    introspection_endpoint?: string;
+    device_authorization_endpoint?: string;
+}
+export type JwtParseResult = ValidJwtParseResult | InvalidJwtParseResult;

package/dist/esm/types.js

@@ -0,0 +1,5 @@
+export var InvalidJwtReasonCode;
+(function (InvalidJwtReasonCode) {
+    InvalidJwtReasonCode[InvalidJwtReasonCode["Other"] = 0] = "Other";
+    InvalidJwtReasonCode[InvalidJwtReasonCode["Expired"] = 1] = "Expired";
+})(InvalidJwtReasonCode || (InvalidJwtReasonCode = {}));

package/dist/esm/verify.d.ts

@@ -0,0 +1,2 @@
+import { DecodedJwt } from './types.js';
+export declare function verifyJwtSignature(decoded: DecodedJwt, key: CryptoKey): Promise<boolean>;

package/dist/tsconfig-cjs.tsbuildinfo

@@ -0,0 +1 @@
+{"program":{"fileNames":["../../../node_modules/typescript/lib/lib.es5.d.ts","../../../node_modules/typescript/lib/lib.es2015.d.ts","../../../node_modules/typescript/lib/lib.es2016.d.ts","../../../node_modules/typescript/lib/lib.es2017.d.ts","../../../node_modules/typescript/lib/lib.es2018.d.ts","../../../node_modules/typescript/lib/lib.es2019.d.ts","../../../node_modules/typescript/lib/lib.es2020.d.ts","../../../node_modules/typescript/lib/lib.es2021.d.ts","../../../node_modules/typescript/lib/lib.es2022.d.ts","../../../node_modules/typescript/lib/lib.es2023.d.ts","../../../node_modules/typescript/lib/lib.esnext.d.ts","../../../node_modules/typescript/lib/lib.webworker.d.ts","../../../node_modules/typescript/lib/lib.webworker.iterable.d.ts","../../../node_modules/typescript/lib/lib.es2015.core.d.ts","../../../node_modules/typescript/lib/lib.es2015.collection.d.ts","../../../node_modules/typescript/lib/lib.es2015.generator.d.ts","../../../node_modules/typescript/lib/lib.es2015.iterable.d.ts","../../../node_modules/typescript/lib/lib.es2015.promise.d.ts","../../../node_modules/typescript/lib/lib.es2015.proxy.d.ts","../../../node_modules/typescript/lib/lib.es2015.reflect.d.ts","../../../node_modules/typescript/lib/lib.es2015.symbol.d.ts","../../../node_modules/typescript/lib/lib.es2015.symbol.wellknown.d.ts","../../../node_modules/typescript/lib/lib.es2016.array.include.d.ts","../../../node_modules/typescript/lib/lib.es2016.intl.d.ts","../../../node_modules/typescript/lib/lib.es2017.date.d.ts","../../../node_modules/typescript/lib/lib.es2017.object.d.ts","../../../node_modules/typescript/lib/lib.es2017.sharedmemory.d.ts","../../../node_modules/typescript/lib/lib.es2017.string.d.ts","../../../node_modules/typescript/lib/lib.es2017.intl.d.ts","../../../node_modules/typescript/lib/lib.es2017.typedarrays.d.ts","../../../node_modules/typescript/lib/lib.es2018.asyncgenerator.d.ts","../../../node_modules/typescript/lib/lib.es2018.asynciterable.d.ts","../../../node_modules/typescript/lib/lib.es2018.intl.d.ts","../../../node_modules/typescript/lib/lib.es2018.promise.d.ts","../../../node_modules/typescript/lib/lib.es2018.regexp.d.ts","../../../node_modules/typescript/lib/lib.es2019.array.d.ts","../../../node_modules/typescript/lib/lib.es2019.object.d.ts","../../../node_modules/typescript/lib/lib.es2019.string.d.ts","../../../node_modules/typescript/lib/lib.es2019.symbol.d.ts","../../../node_modules/typescript/lib/lib.es2019.intl.d.ts","../../../node_modules/typescript/lib/lib.es2020.bigint.d.ts","../../../node_modules/typescript/lib/lib.es2020.date.d.ts","../../../node_modules/typescript/lib/lib.es2020.promise.d.ts","../../../node_modules/typescript/lib/lib.es2020.sharedmemory.d.ts","../../../node_modules/typescript/lib/lib.es2020.string.d.ts","../../../node_modules/typescript/lib/lib.es2020.symbol.wellknown.d.ts","../../../node_modules/typescript/lib/lib.es2020.intl.d.ts","../../../node_modules/typescript/lib/lib.es2020.number.d.ts","../../../node_modules/typescript/lib/lib.es2021.promise.d.ts","../../../node_modules/typescript/lib/lib.es2021.string.d.ts","../../../node_modules/typescript/lib/lib.es2021.weakref.d.ts","../../../node_modules/typescript/lib/lib.es2021.intl.d.ts","../../../node_modules/typescript/lib/lib.es2022.array.d.ts","../../../node_modules/typescript/lib/lib.es2022.error.d.ts","../../../node_modules/typescript/lib/lib.es2022.intl.d.ts","../../../node_modules/typescript/lib/lib.es2022.object.d.ts","../../../node_modules/typescript/lib/lib.es2022.sharedmemory.d.ts","../../../node_modules/typescript/lib/lib.es2022.string.d.ts","../../../node_modules/typescript/lib/lib.es2022.regexp.d.ts","../../../node_modules/typescript/lib/lib.es2023.array.d.ts","../../../node_modules/typescript/lib/lib.es2023.collection.d.ts","../../../node_modules/typescript/lib/lib.es2023.intl.d.ts","../../../node_modules/typescript/lib/lib.esnext.array.d.ts","../../../node_modules/typescript/lib/lib.esnext.collection.d.ts","../../../node_modules/typescript/lib/lib.esnext.intl.d.ts","../../../node_modules/typescript/lib/lib.esnext.disposable.d.ts","../../../node_modules/typescript/lib/lib.esnext.string.d.ts","../../../node_modules/typescript/lib/lib.esnext.promise.d.ts","../../../node_modules/typescript/lib/lib.esnext.decorators.d.ts","../../../node_modules/typescript/lib/lib.esnext.object.d.ts","../../../node_modules/typescript/lib/lib.esnext.regexp.d.ts","../../../node_modules/typescript/lib/lib.decorators.d.ts","../../../node_modules/typescript/lib/lib.decorators.legacy.d.ts","../src/algs.ts","../src/declarations.d.ts","../../../node_modules/rfc4648/lib/src/codec.d.ts","../../../node_modules/rfc4648/lib/src/index.d.ts","../src/types.ts","../src/decode.ts","../src/discovery.ts","../src/jwks.ts","../src/verify.ts","../src/parse.ts","../src/index.ts"],"fileInfos":[{"version":"44e584d4f6444f58791784f1d530875970993129442a847597db702a073ca68c","affectsGlobalScope":true},"45b7ab580deca34ae9729e97c13cfd999df04416a79116c3bfb483804f85ded4","3facaf05f0c5fc569c5649dd359892c98a85557e3e0c847964caeb67076f4d75","9a68c0c07ae2fa71b44384a839b7b8d81662a236d4b9ac30916718f7510b1b2d","5e1c4c362065a6b95ff952c0eab010f04dcd2c3494e813b493ecfd4fcb9fc0d8","68d73b4a11549f9c0b7d352d10e91e5dca8faa3322bfb77b661839c42b1ddec7","5efce4fc3c29ea84e8928f97adec086e3dc876365e0982cc8479a07954a3efd4","feecb1be483ed332fad555aff858affd90a48ab19ba7272ee084704eb7167569","5514e54f17d6d74ecefedc73c504eadffdeda79c7ea205cf9febead32d45c4bc","27bdc30a0e32783366a5abeda841bc22757c1797de8681bbe81fbc735eeb1c10","17edc026abf73c5c2dd508652d63f68ec4efd9d4856e3469890d27598209feb5",{"version":"7ad342d4d126c62920de283dffe88f5c06f81b496bb47613df59f4506a1ef074","affectsGlobalScope":true},{"version":"3c01508aed780c01c623a8015b1668744f573b7ba3153f4431cf67b9a4e026ac","affectsGlobalScope":true},{"version":"6920e1448680767498a0b77c6a00a8e77d14d62c3da8967b171f1ddffa3c18e4","affectsGlobalScope":true},{"version":"dc2df20b1bcdc8c2d34af4926e2c3ab15ffe1160a63e58b7e09833f616efff44","affectsGlobalScope":true},{"version":"4443e68b35f3332f753eacc66a04ac1d2053b8b035a0e0ac1d455392b5e243b3","affectsGlobalScope":true},{"version":"bc47685641087c015972a3f072480889f0d6c65515f12bd85222f49a98952ed7","affectsGlobalScope":true},{"version":"0dc1e7ceda9b8b9b455c3a2d67b0412feab00bd2f66656cd8850e8831b08b537","affectsGlobalScope":true},{"version":"ce691fb9e5c64efb9547083e4a34091bcbe5bdb41027e310ebba8f7d96a98671","affectsGlobalScope":true},{"version":"8d697a2a929a5fcb38b7a65594020fcef05ec1630804a33748829c5ff53640d0","affectsGlobalScope":true},{"version":"4ff2a353abf8a80ee399af572debb8faab2d33ad38c4b4474cff7f26e7653b8d","affectsGlobalScope":true},{"version":"93495ff27b8746f55d19fcbcdbaccc99fd95f19d057aed1bd2c0cafe1335fbf0","affectsGlobalScope":true},{"version":"6fc23bb8c3965964be8c597310a2878b53a0306edb71d4b5a4dfe760186bcc01","affectsGlobalScope":true},{"version":"ea011c76963fb15ef1cdd7ce6a6808b46322c527de2077b6cfdf23ae6f5f9ec7","affectsGlobalScope":true},{"version":"38f0219c9e23c915ef9790ab1d680440d95419ad264816fa15009a8851e79119","affectsGlobalScope":true},{"version":"bb42a7797d996412ecdc5b2787720de477103a0b2e53058569069a0e2bae6c7e","affectsGlobalScope":true},{"version":"4738f2420687fd85629c9efb470793bb753709c2379e5f85bc1815d875ceadcd","affectsGlobalScope":true},{"version":"2f11ff796926e0832f9ae148008138ad583bd181899ab7dd768a2666700b1893","affectsGlobalScope":true},{"version":"4de680d5bb41c17f7f68e0419412ca23c98d5749dcaaea1896172f06435891fc","affectsGlobalScope":true},{"version":"9fc46429fbe091ac5ad2608c657201eb68b6f1b8341bd6d670047d32ed0a88fa","affectsGlobalScope":true},{"version":"61c37c1de663cf4171e1192466e52c7a382afa58da01b1dc75058f032ddf0839","affectsGlobalScope":true},{"version":"b541a838a13f9234aba650a825393ffc2292dc0fc87681a5d81ef0c96d281e7a","affectsGlobalScope":true},{"version":"9e9fbd7030c440b33d021da145d3232984c8bb7916f277e8ffd3dc2e3eae2bdb","affectsGlobalScope":true},{"version":"811ec78f7fefcabbda4bfa93b3eb67d9ae166ef95f9bff989d964061cbf81a0c","affectsGlobalScope":true},{"version":"717937616a17072082152a2ef351cb51f98802fb4b2fdabd32399843875974ca","affectsGlobalScope":true},{"version":"d7e7d9b7b50e5f22c915b525acc5a49a7a6584cf8f62d0569e557c5cfc4b2ac2","affectsGlobalScope":true},{"version":"71c37f4c9543f31dfced6c7840e068c5a5aacb7b89111a4364b1d5276b852557","affectsGlobalScope":true},{"version":"576711e016cf4f1804676043e6a0a5414252560eb57de9faceee34d79798c850","affectsGlobalScope":true},{"version":"89c1b1281ba7b8a96efc676b11b264de7a8374c5ea1e6617f11880a13fc56dc6","affectsGlobalScope":true},{"version":"74f7fa2d027d5b33eb0471c8e82a6c87216223181ec31247c357a3e8e2fddc5b","affectsGlobalScope":true},{"version":"ae37d6ccd1560b0203ab88d46987393adaaa78c919e51acf32fb82c86502e98c","affectsGlobalScope":true},{"version":"063600664504610fe3e99b717a1223f8b1900087fab0b4cad1496a114744f8df","affectsGlobalScope":true},{"version":"934019d7e3c81950f9a8426d093458b65d5aff2c7c1511233c0fd5b941e608ab","affectsGlobalScope":true},{"version":"bf14a426dbbf1022d11bd08d6b8e709a2e9d246f0c6c1032f3b2edb9a902adbe","affectsGlobalScope":true},{"version":"5e07ed3809d48205d5b985642a59f2eba47c402374a7cf8006b686f79efadcbd","affectsGlobalScope":true},{"version":"2b72d528b2e2fe3c57889ca7baef5e13a56c957b946906d03767c642f386bbc3","affectsGlobalScope":true},{"version":"479553e3779be7d4f68e9f40cdb82d038e5ef7592010100410723ceced22a0f7","affectsGlobalScope":true},{"version":"368af93f74c9c932edd84c58883e736c9e3d53cec1fe24c0b0ff451f529ceab1","affectsGlobalScope":true},{"version":"af3dd424cf267428f30ccfc376f47a2c0114546b55c44d8c0f1d57d841e28d74","affectsGlobalScope":true},{"version":"995c005ab91a498455ea8dfb63aa9f83fa2ea793c3d8aa344be4a1678d06d399","affectsGlobalScope":true},{"version":"d3d7b04b45033f57351c8434f60b6be1ea71a2dfec2d0a0c3c83badbb0e3e693","affectsGlobalScope":true},{"version":"956d27abdea9652e8368ce029bb1e0b9174e9678a273529f426df4b3d90abd60","affectsGlobalScope":true},{"version":"4fa6ed14e98aa80b91f61b9805c653ee82af3502dc21c9da5268d3857772ca05","affectsGlobalScope":true},{"version":"e6633e05da3ff36e6da2ec170d0d03ccf33de50ca4dc6f5aeecb572cedd162fb","affectsGlobalScope":true},{"version":"d8670852241d4c6e03f2b89d67497a4bbefe29ecaa5a444e2c11a9b05e6fccc6","affectsGlobalScope":true},{"version":"8444af78980e3b20b49324f4a16ba35024fef3ee069a0eb67616ea6ca821c47a","affectsGlobalScope":true},{"version":"caccc56c72713969e1cfe5c3d44e5bab151544d9d2b373d7dbe5a1e4166652be","affectsGlobalScope":true},{"version":"3287d9d085fbd618c3971944b65b4be57859f5415f495b33a6adc994edd2f004","affectsGlobalScope":true},{"version":"b4b67b1a91182421f5df999988c690f14d813b9850b40acd06ed44691f6727ad","affectsGlobalScope":true},{"version":"9d540251809289a05349b70ab5f4b7b99f922af66ab3c39ba56a475dcf95d5ff","affectsGlobalScope":true},{"version":"436aaf437562f276ec2ddbee2f2cdedac7664c1e4c1d2c36839ddd582eeb3d0a","affectsGlobalScope":true},{"version":"8e3c06ea092138bf9fa5e874a1fdbc9d54805d074bee1de31b99a11e2fec239d","affectsGlobalScope":true},{"version":"0b11f3ca66aa33124202c80b70cd203219c3d4460cfc165e0707aa9ec710fc53","affectsGlobalScope":true},{"version":"6a3f5a0129cc80cf439ab71164334d649b47059a4f5afca90282362407d0c87f","affectsGlobalScope":true},{"version":"811c71eee4aa0ac5f7adf713323a5c41b0cf6c4e17367a34fbce379e12bbf0a4","affectsGlobalScope":true},{"version":"15b98a533864d324e5f57cd3cfc0579b231df58c1c0f6063ea0fcb13c3c74ff9","affectsGlobalScope":true},{"version":"0a6282c8827e4b9a95f4bf4f5c205673ada31b982f50572d27103df8ceb8013c","affectsGlobalScope":true},{"version":"ac77cb3e8c6d3565793eb90a8373ee8033146315a3dbead3bde8db5eaf5e5ec6","affectsGlobalScope":true},{"version":"d4b1d2c51d058fc21ec2629fff7a76249dec2e36e12960ea056e3ef89174080f","affectsGlobalScope":true},{"version":"2fef54945a13095fdb9b84f705f2b5994597640c46afeb2ce78352fab4cb3279","affectsGlobalScope":true},{"version":"56e4ed5aab5f5920980066a9409bfaf53e6d21d3f8d020c17e4de584d29600ad","affectsGlobalScope":true},{"version":"33358442698bb565130f52ba79bfd3d4d484ac85fe33f3cb1759c54d18201393","affectsGlobalScope":true},{"version":"782dec38049b92d4e85c1585fbea5474a219c6984a35b004963b00beb1aab538","affectsGlobalScope":true},{"version":"338a4664a1baf17d437ac4b8a0db384ffdf70f6a01a278030f7ca30e12724ab1","signature":"92a65026787db3de09e45fec4233f1c43dec71f63d1ce46a6e0e356c22a9d7ca"},{"version":"ae1d9741986f7803e21916a3b91866c3e039f4f5a0063c04ab0250efdf9ddff2","affectsGlobalScope":true},"b85e0cacbcbddaeaed7497fc24c779c06dbe9e1f7e16e1979c120831c92f0c0e","3f7413da40595a5149d55455ba7c80c95eaca631d62b886b0e42c2bcbdf0ff27",{"version":"e963efaceea653c1b2585ce1b85d4ca7b332a3bac9cff7157f56e41da09936aa","signature":"4302d32ef02c7cf08c7e3eca785667d5cc6688f8d4a5f0ac3c4175de1a7d2940"},{"version":"afcd7c8411c5f422c945e183b55b847c5cfa6ee62663d538b8d1b747e4f8e21b","signature":"75d40806d946050d89f474acf28066f26973f30e28a7f93c5300ea1decb0eefb"},{"version":"1b98bc2983d8c549b04517b788687817bad44a0592af1604128ab405078c0625","signature":"ce9006220f02a0f6acc093c788dbdcc62ace8bdebb482d0d64da3fc4a1297252"},{"version":"5d34e95e25a3edeb254e0ccf16419fef6549af5846e1140dfe5c0d92a1528292","signature":"2a7b39121b5a5ae14492e4bbe4d606b08e435422cb94fab427d3e092f71b96f4"},{"version":"d85f0062f68d39bb96120a892c71dd20830ba88d55fb4a2d73073bcf2867c3ae","signature":"a447a8efafff8d56fef76075b314e74a4094b7e0b9a27160a524f885782e526b"},{"version":"8c1fa50be5f0bef04350f0ab7e1b2467978e00d8bf4ccef1fe52242451252a6c","signature":"f71975db80858947889874100265eda412c01171e43477b31a288bf077615276"},"c0b55c29abe9d07ee39379de20db2650c46dbf903e242f21150b69a11c06ae36"],"root":[74,75,[78,84]],"options":{"composite":true,"esModuleInterop":true,"isolatedDeclarations":true,"module":1,"noFallthroughCasesInSwitch":true,"noImplicitReturns":true,"noUnusedLocals":true,"noUnusedParameters":true,"outDir":"./cjs","removeComments":true,"rootDir":"../src","strict":true,"target":99},"fileIdsList":[[76],[77,78],[78],[78,79,81,82,83],[74,78,80],[74,78,79,81,82]],"referencedMap":[[77,1],[79,2],[80,3],[84,4],[81,5],[83,6],[82,3]],"latestChangedDtsFile":"./cjs/index.d.ts"},"version":"5.5.4"}

package/dist/tsconfig.tsbuildinfo

@@ -0,0 +1 @@
+{"program":{"fileNames":["../../../node_modules/typescript/lib/lib.es5.d.ts","../../../node_modules/typescript/lib/lib.es2015.d.ts","../../../node_modules/typescript/lib/lib.es2016.d.ts","../../../node_modules/typescript/lib/lib.es2017.d.ts","../../../node_modules/typescript/lib/lib.es2018.d.ts","../../../node_modules/typescript/lib/lib.es2019.d.ts","../../../node_modules/typescript/lib/lib.es2020.d.ts","../../../node_modules/typescript/lib/lib.es2021.d.ts","../../../node_modules/typescript/lib/lib.es2022.d.ts","../../../node_modules/typescript/lib/lib.es2023.d.ts","../../../node_modules/typescript/lib/lib.esnext.d.ts","../../../node_modules/typescript/lib/lib.webworker.d.ts","../../../node_modules/typescript/lib/lib.webworker.iterable.d.ts","../../../node_modules/typescript/lib/lib.es2015.core.d.ts","../../../node_modules/typescript/lib/lib.es2015.collection.d.ts","../../../node_modules/typescript/lib/lib.es2015.generator.d.ts","../../../node_modules/typescript/lib/lib.es2015.iterable.d.ts","../../../node_modules/typescript/lib/lib.es2015.promise.d.ts","../../../node_modules/typescript/lib/lib.es2015.proxy.d.ts","../../../node_modules/typescript/lib/lib.es2015.reflect.d.ts","../../../node_modules/typescript/lib/lib.es2015.symbol.d.ts","../../../node_modules/typescript/lib/lib.es2015.symbol.wellknown.d.ts","../../../node_modules/typescript/lib/lib.es2016.array.include.d.ts","../../../node_modules/typescript/lib/lib.es2016.intl.d.ts","../../../node_modules/typescript/lib/lib.es2017.date.d.ts","../../../node_modules/typescript/lib/lib.es2017.object.d.ts","../../../node_modules/typescript/lib/lib.es2017.sharedmemory.d.ts","../../../node_modules/typescript/lib/lib.es2017.string.d.ts","../../../node_modules/typescript/lib/lib.es2017.intl.d.ts","../../../node_modules/typescript/lib/lib.es2017.typedarrays.d.ts","../../../node_modules/typescript/lib/lib.es2018.asyncgenerator.d.ts","../../../node_modules/typescript/lib/lib.es2018.asynciterable.d.ts","../../../node_modules/typescript/lib/lib.es2018.intl.d.ts","../../../node_modules/typescript/lib/lib.es2018.promise.d.ts","../../../node_modules/typescript/lib/lib.es2018.regexp.d.ts","../../../node_modules/typescript/lib/lib.es2019.array.d.ts","../../../node_modules/typescript/lib/lib.es2019.object.d.ts","../../../node_modules/typescript/lib/lib.es2019.string.d.ts","../../../node_modules/typescript/lib/lib.es2019.symbol.d.ts","../../../node_modules/typescript/lib/lib.es2019.intl.d.ts","../../../node_modules/typescript/lib/lib.es2020.bigint.d.ts","../../../node_modules/typescript/lib/lib.es2020.date.d.ts","../../../node_modules/typescript/lib/lib.es2020.promise.d.ts","../../../node_modules/typescript/lib/lib.es2020.sharedmemory.d.ts","../../../node_modules/typescript/lib/lib.es2020.string.d.ts","../../../node_modules/typescript/lib/lib.es2020.symbol.wellknown.d.ts","../../../node_modules/typescript/lib/lib.es2020.intl.d.ts","../../../node_modules/typescript/lib/lib.es2020.number.d.ts","../../../node_modules/typescript/lib/lib.es2021.promise.d.ts","../../../node_modules/typescript/lib/lib.es2021.string.d.ts","../../../node_modules/typescript/lib/lib.es2021.weakref.d.ts","../../../node_modules/typescript/lib/lib.es2021.intl.d.ts","../../../node_modules/typescript/lib/lib.es2022.array.d.ts","../../../node_modules/typescript/lib/lib.es2022.error.d.ts","../../../node_modules/typescript/lib/lib.es2022.intl.d.ts","../../../node_modules/typescript/lib/lib.es2022.object.d.ts","../../../node_modules/typescript/lib/lib.es2022.sharedmemory.d.ts","../../../node_modules/typescript/lib/lib.es2022.string.d.ts","../../../node_modules/typescript/lib/lib.es2022.regexp.d.ts","../../../node_modules/typescript/lib/lib.es2023.array.d.ts","../../../node_modules/typescript/lib/lib.es2023.collection.d.ts","../../../node_modules/typescript/lib/lib.es2023.intl.d.ts","../../../node_modules/typescript/lib/lib.esnext.array.d.ts","../../../node_modules/typescript/lib/lib.esnext.collection.d.ts","../../../node_modules/typescript/lib/lib.esnext.intl.d.ts","../../../node_modules/typescript/lib/lib.esnext.disposable.d.ts","../../../node_modules/typescript/lib/lib.esnext.string.d.ts","../../../node_modules/typescript/lib/lib.esnext.promise.d.ts","../../../node_modules/typescript/lib/lib.esnext.decorators.d.ts","../../../node_modules/typescript/lib/lib.esnext.object.d.ts","../../../node_modules/typescript/lib/lib.esnext.regexp.d.ts","../../../node_modules/typescript/lib/lib.decorators.d.ts","../../../node_modules/typescript/lib/lib.decorators.legacy.d.ts","../src/algs.ts","../src/declarations.d.ts","../../../node_modules/rfc4648/lib/src/codec.d.ts","../../../node_modules/rfc4648/lib/src/index.d.ts","../src/types.ts","../src/decode.ts","../src/discovery.ts","../src/jwks.ts","../src/verify.ts","../src/parse.ts","../src/index.ts"],"fileInfos":[{"version":"44e584d4f6444f58791784f1d530875970993129442a847597db702a073ca68c","affectsGlobalScope":true},"45b7ab580deca34ae9729e97c13cfd999df04416a79116c3bfb483804f85ded4","3facaf05f0c5fc569c5649dd359892c98a85557e3e0c847964caeb67076f4d75","9a68c0c07ae2fa71b44384a839b7b8d81662a236d4b9ac30916718f7510b1b2d","5e1c4c362065a6b95ff952c0eab010f04dcd2c3494e813b493ecfd4fcb9fc0d8","68d73b4a11549f9c0b7d352d10e91e5dca8faa3322bfb77b661839c42b1ddec7","5efce4fc3c29ea84e8928f97adec086e3dc876365e0982cc8479a07954a3efd4","feecb1be483ed332fad555aff858affd90a48ab19ba7272ee084704eb7167569","5514e54f17d6d74ecefedc73c504eadffdeda79c7ea205cf9febead32d45c4bc","27bdc30a0e32783366a5abeda841bc22757c1797de8681bbe81fbc735eeb1c10","17edc026abf73c5c2dd508652d63f68ec4efd9d4856e3469890d27598209feb5",{"version":"7ad342d4d126c62920de283dffe88f5c06f81b496bb47613df59f4506a1ef074","affectsGlobalScope":true},{"version":"3c01508aed780c01c623a8015b1668744f573b7ba3153f4431cf67b9a4e026ac","affectsGlobalScope":true},{"version":"6920e1448680767498a0b77c6a00a8e77d14d62c3da8967b171f1ddffa3c18e4","affectsGlobalScope":true},{"version":"dc2df20b1bcdc8c2d34af4926e2c3ab15ffe1160a63e58b7e09833f616efff44","affectsGlobalScope":true},{"version":"4443e68b35f3332f753eacc66a04ac1d2053b8b035a0e0ac1d455392b5e243b3","affectsGlobalScope":true},{"version":"bc47685641087c015972a3f072480889f0d6c65515f12bd85222f49a98952ed7","affectsGlobalScope":true},{"version":"0dc1e7ceda9b8b9b455c3a2d67b0412feab00bd2f66656cd8850e8831b08b537","affectsGlobalScope":true},{"version":"ce691fb9e5c64efb9547083e4a34091bcbe5bdb41027e310ebba8f7d96a98671","affectsGlobalScope":true},{"version":"8d697a2a929a5fcb38b7a65594020fcef05ec1630804a33748829c5ff53640d0","affectsGlobalScope":true},{"version":"4ff2a353abf8a80ee399af572debb8faab2d33ad38c4b4474cff7f26e7653b8d","affectsGlobalScope":true},{"version":"93495ff27b8746f55d19fcbcdbaccc99fd95f19d057aed1bd2c0cafe1335fbf0","affectsGlobalScope":true},{"version":"6fc23bb8c3965964be8c597310a2878b53a0306edb71d4b5a4dfe760186bcc01","affectsGlobalScope":true},{"version":"ea011c76963fb15ef1cdd7ce6a6808b46322c527de2077b6cfdf23ae6f5f9ec7","affectsGlobalScope":true},{"version":"38f0219c9e23c915ef9790ab1d680440d95419ad264816fa15009a8851e79119","affectsGlobalScope":true},{"version":"bb42a7797d996412ecdc5b2787720de477103a0b2e53058569069a0e2bae6c7e","affectsGlobalScope":true},{"version":"4738f2420687fd85629c9efb470793bb753709c2379e5f85bc1815d875ceadcd","affectsGlobalScope":true},{"version":"2f11ff796926e0832f9ae148008138ad583bd181899ab7dd768a2666700b1893","affectsGlobalScope":true},{"version":"4de680d5bb41c17f7f68e0419412ca23c98d5749dcaaea1896172f06435891fc","affectsGlobalScope":true},{"version":"9fc46429fbe091ac5ad2608c657201eb68b6f1b8341bd6d670047d32ed0a88fa","affectsGlobalScope":true},{"version":"61c37c1de663cf4171e1192466e52c7a382afa58da01b1dc75058f032ddf0839","affectsGlobalScope":true},{"version":"b541a838a13f9234aba650a825393ffc2292dc0fc87681a5d81ef0c96d281e7a","affectsGlobalScope":true},{"version":"9e9fbd7030c440b33d021da145d3232984c8bb7916f277e8ffd3dc2e3eae2bdb","affectsGlobalScope":true},{"version":"811ec78f7fefcabbda4bfa93b3eb67d9ae166ef95f9bff989d964061cbf81a0c","affectsGlobalScope":true},{"version":"717937616a17072082152a2ef351cb51f98802fb4b2fdabd32399843875974ca","affectsGlobalScope":true},{"version":"d7e7d9b7b50e5f22c915b525acc5a49a7a6584cf8f62d0569e557c5cfc4b2ac2","affectsGlobalScope":true},{"version":"71c37f4c9543f31dfced6c7840e068c5a5aacb7b89111a4364b1d5276b852557","affectsGlobalScope":true},{"version":"576711e016cf4f1804676043e6a0a5414252560eb57de9faceee34d79798c850","affectsGlobalScope":true},{"version":"89c1b1281ba7b8a96efc676b11b264de7a8374c5ea1e6617f11880a13fc56dc6","affectsGlobalScope":true},{"version":"74f7fa2d027d5b33eb0471c8e82a6c87216223181ec31247c357a3e8e2fddc5b","affectsGlobalScope":true},{"version":"ae37d6ccd1560b0203ab88d46987393adaaa78c919e51acf32fb82c86502e98c","affectsGlobalScope":true},{"version":"063600664504610fe3e99b717a1223f8b1900087fab0b4cad1496a114744f8df","affectsGlobalScope":true},{"version":"934019d7e3c81950f9a8426d093458b65d5aff2c7c1511233c0fd5b941e608ab","affectsGlobalScope":true},{"version":"bf14a426dbbf1022d11bd08d6b8e709a2e9d246f0c6c1032f3b2edb9a902adbe","affectsGlobalScope":true},{"version":"5e07ed3809d48205d5b985642a59f2eba47c402374a7cf8006b686f79efadcbd","affectsGlobalScope":true},{"version":"2b72d528b2e2fe3c57889ca7baef5e13a56c957b946906d03767c642f386bbc3","affectsGlobalScope":true},{"version":"479553e3779be7d4f68e9f40cdb82d038e5ef7592010100410723ceced22a0f7","affectsGlobalScope":true},{"version":"368af93f74c9c932edd84c58883e736c9e3d53cec1fe24c0b0ff451f529ceab1","affectsGlobalScope":true},{"version":"af3dd424cf267428f30ccfc376f47a2c0114546b55c44d8c0f1d57d841e28d74","affectsGlobalScope":true},{"version":"995c005ab91a498455ea8dfb63aa9f83fa2ea793c3d8aa344be4a1678d06d399","affectsGlobalScope":true},{"version":"d3d7b04b45033f57351c8434f60b6be1ea71a2dfec2d0a0c3c83badbb0e3e693","affectsGlobalScope":true},{"version":"956d27abdea9652e8368ce029bb1e0b9174e9678a273529f426df4b3d90abd60","affectsGlobalScope":true},{"version":"4fa6ed14e98aa80b91f61b9805c653ee82af3502dc21c9da5268d3857772ca05","affectsGlobalScope":true},{"version":"e6633e05da3ff36e6da2ec170d0d03ccf33de50ca4dc6f5aeecb572cedd162fb","affectsGlobalScope":true},{"version":"d8670852241d4c6e03f2b89d67497a4bbefe29ecaa5a444e2c11a9b05e6fccc6","affectsGlobalScope":true},{"version":"8444af78980e3b20b49324f4a16ba35024fef3ee069a0eb67616ea6ca821c47a","affectsGlobalScope":true},{"version":"caccc56c72713969e1cfe5c3d44e5bab151544d9d2b373d7dbe5a1e4166652be","affectsGlobalScope":true},{"version":"3287d9d085fbd618c3971944b65b4be57859f5415f495b33a6adc994edd2f004","affectsGlobalScope":true},{"version":"b4b67b1a91182421f5df999988c690f14d813b9850b40acd06ed44691f6727ad","affectsGlobalScope":true},{"version":"9d540251809289a05349b70ab5f4b7b99f922af66ab3c39ba56a475dcf95d5ff","affectsGlobalScope":true},{"version":"436aaf437562f276ec2ddbee2f2cdedac7664c1e4c1d2c36839ddd582eeb3d0a","affectsGlobalScope":true},{"version":"8e3c06ea092138bf9fa5e874a1fdbc9d54805d074bee1de31b99a11e2fec239d","affectsGlobalScope":true},{"version":"0b11f3ca66aa33124202c80b70cd203219c3d4460cfc165e0707aa9ec710fc53","affectsGlobalScope":true},{"version":"6a3f5a0129cc80cf439ab71164334d649b47059a4f5afca90282362407d0c87f","affectsGlobalScope":true},{"version":"811c71eee4aa0ac5f7adf713323a5c41b0cf6c4e17367a34fbce379e12bbf0a4","affectsGlobalScope":true},{"version":"15b98a533864d324e5f57cd3cfc0579b231df58c1c0f6063ea0fcb13c3c74ff9","affectsGlobalScope":true},{"version":"0a6282c8827e4b9a95f4bf4f5c205673ada31b982f50572d27103df8ceb8013c","affectsGlobalScope":true},{"version":"ac77cb3e8c6d3565793eb90a8373ee8033146315a3dbead3bde8db5eaf5e5ec6","affectsGlobalScope":true},{"version":"d4b1d2c51d058fc21ec2629fff7a76249dec2e36e12960ea056e3ef89174080f","affectsGlobalScope":true},{"version":"2fef54945a13095fdb9b84f705f2b5994597640c46afeb2ce78352fab4cb3279","affectsGlobalScope":true},{"version":"56e4ed5aab5f5920980066a9409bfaf53e6d21d3f8d020c17e4de584d29600ad","affectsGlobalScope":true},{"version":"33358442698bb565130f52ba79bfd3d4d484ac85fe33f3cb1759c54d18201393","affectsGlobalScope":true},{"version":"782dec38049b92d4e85c1585fbea5474a219c6984a35b004963b00beb1aab538","affectsGlobalScope":true},{"version":"338a4664a1baf17d437ac4b8a0db384ffdf70f6a01a278030f7ca30e12724ab1","signature":"92a65026787db3de09e45fec4233f1c43dec71f63d1ce46a6e0e356c22a9d7ca"},{"version":"ae1d9741986f7803e21916a3b91866c3e039f4f5a0063c04ab0250efdf9ddff2","affectsGlobalScope":true},"b85e0cacbcbddaeaed7497fc24c779c06dbe9e1f7e16e1979c120831c92f0c0e","3f7413da40595a5149d55455ba7c80c95eaca631d62b886b0e42c2bcbdf0ff27",{"version":"e963efaceea653c1b2585ce1b85d4ca7b332a3bac9cff7157f56e41da09936aa","signature":"4302d32ef02c7cf08c7e3eca785667d5cc6688f8d4a5f0ac3c4175de1a7d2940"},{"version":"afcd7c8411c5f422c945e183b55b847c5cfa6ee62663d538b8d1b747e4f8e21b","signature":"75d40806d946050d89f474acf28066f26973f30e28a7f93c5300ea1decb0eefb"},{"version":"1b98bc2983d8c549b04517b788687817bad44a0592af1604128ab405078c0625","signature":"ce9006220f02a0f6acc093c788dbdcc62ace8bdebb482d0d64da3fc4a1297252"},{"version":"5d34e95e25a3edeb254e0ccf16419fef6549af5846e1140dfe5c0d92a1528292","signature":"2a7b39121b5a5ae14492e4bbe4d606b08e435422cb94fab427d3e092f71b96f4"},{"version":"d85f0062f68d39bb96120a892c71dd20830ba88d55fb4a2d73073bcf2867c3ae","signature":"a447a8efafff8d56fef76075b314e74a4094b7e0b9a27160a524f885782e526b"},{"version":"8c1fa50be5f0bef04350f0ab7e1b2467978e00d8bf4ccef1fe52242451252a6c","signature":"f71975db80858947889874100265eda412c01171e43477b31a288bf077615276"},"c0b55c29abe9d07ee39379de20db2650c46dbf903e242f21150b69a11c06ae36"],"root":[74,75,[78,84]],"options":{"composite":true,"esModuleInterop":true,"isolatedDeclarations":true,"noFallthroughCasesInSwitch":true,"noImplicitReturns":true,"noUnusedLocals":true,"noUnusedParameters":true,"outDir":"./esm","removeComments":true,"rootDir":"../src","strict":true,"target":99},"fileIdsList":[[76],[77,78],[78],[78,79,81,82,83],[74,78,80],[74,78,79,81,82]],"referencedMap":[[77,1],[79,2],[80,3],[84,4],[81,5],[83,6],[82,3]],"latestChangedDtsFile":"./esm/index.d.ts"},"version":"5.5.4"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cfworker/jwt",
   "type": "module",
-  "version": "5.2.0",
+  "version": "6.0.0",
   "description": "Tiny lib for decoding JWTs and verifying signatures, using native crypto APIs",
   "keywords": [
     "jwt",
@@ -11,16 +11,20 @@
     "workers",
     "service-worker"
   ],
-  "main": "dist/index.js",
-  "module": "dist/index.js",
+  "main": "dist/cjs/index.js",
+  "module": "dist/cjs/index.js",
   "source": "src/index.ts",
-  "types": "dist/index.d.ts",
+  "types": "dist/cjs/index.d.ts",
   "files": [
     "dist/**/*",
     "src/**/*",
     "README.md",
     "package.json"
   ],
+  "exports": {
+    "import": "./dist/esm/index.js",
+    "require": "./dist/cjs/index.js"
+  },
   "repository": "https://github.com/cfworker/cfworker",
   "author": "Jeremy Danyow <jdanyow@gmail.com>",
   "homepage": "https://github.com/cfworker/cfworker/tree/master/packages/jwt/README.md",
@@ -29,7 +33,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "tsc --build",
+    "build": "tsc --build & tsc --build tsconfig-cjs.json",
     "clean": "tsc --build --clean",
     "pretest": "esbuild test/test.ts --target=esnext --bundle --format=esm --conditions=worker,browser --outdir=dist-test --ignore-annotations",
     "test": "node ../../test.mjs"
@@ -44,6 +48,6 @@
     "esbuild": "^0.23.1",
     "mocha": "^10.7.3",
     "typescript": "^5.5.4",
-    "wrangler": "^3.72.0"
+    "wrangler": "^3.72.1"
   }
 }

package/src/algs.ts

@@ -4,4 +4,4 @@ export const algToHash: Record<string, string> = {
   RS512: 'SHA-512'
 };
 
-export const algs = Object.keys(algToHash);
+export const algs: string[] = Object.keys(algToHash);

package/src/index.ts

@@ -2,5 +2,4 @@ export { decodeJwt } from './decode.js';
 export { getJwks, getKey, importKey } from './jwks.js';
 export { parseJwt } from './parse.js';
 export * from './types.js';
-export { InvalidJwtReasonCode } from './types.js';
 export { verifyJwtSignature } from './verify.js';

package/src/jwks.ts

@@ -35,7 +35,7 @@ const importedKeys: Record<string, Record<string, CryptoKey>> = {};
  * @param iss The issuer. Serves as the first-level cache key.
  * @param jwks The JsonWebKeyset to import.
  */
-export async function importKey(iss: string, jwk: JsonWebKey) {
+export async function importKey(iss: string, jwk: JsonWebKey): Promise<void> {
   if (jwk.kty !== 'RSA') {
     throw new Error(
       `Unsupported jwk key type (kty) "${

package/src/types.ts

@@ -52,7 +52,7 @@ export interface InvalidJwtParseResult {
   decoded?: DecodedJwt;
 }
 
-export const enum InvalidJwtReasonCode {
+export enum InvalidJwtReasonCode {
   Other = 0,
   Expired = 1
 }

package/src/verify.ts

@@ -4,7 +4,10 @@ import { DecodedJwt } from './types.js';
  * Verify the JWT's signature.
  * @param {DecodedJwt} decoded
  */
-export async function verifyJwtSignature(decoded: DecodedJwt, key: CryptoKey) {
+export async function verifyJwtSignature(
+  decoded: DecodedJwt,
+  key: CryptoKey
+): Promise<boolean> {
   const encoder = new TextEncoder();
   const data = encoder.encode(`${decoded.raw.header}.${decoded.raw.payload}`);
 

package/dist/types.js

@@ -1 +0,0 @@
-export {};