@degenerate/generic 0.1.2 → 0.1.4

package/dist/authorization/jwt/verify/get-decoded-jwt-signed-token-payload.js

@@ -0,0 +1,17 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDecodedJwtSignedTokenPayload = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+/**
+ * This function gets the decoded payload from a signed JWT token.
+ *
+ * @param token the token to get the payload from
+ */
+const getDecodedJwtSignedTokenPayload = (token) => {
+    const payload = jsonwebtoken_1.default.decode(token);
+    return payload;
+};
+exports.getDecodedJwtSignedTokenPayload = getDecodedJwtSignedTokenPayload;

package/dist/authorization/jwt/verify/verify-jwt-signed-token.d.ts

@@ -0,0 +1,12 @@
+import jwt from 'jsonwebtoken';
+/**
+ * This verifies a JWT signed token with the given secret key or public key.
+ *
+ * @param tokenToVerify the jwt token to verify
+ * @param secretKey the secret key to verify the token with
+ * @param publicKey the public key to verify the token with
+ * @returns
+ */
+declare const verifyJwtSignedToken: (tokenToVerify: string, secretKey?: string, publicKey?: string) => string | jwt.JwtPayload;
+export { verifyJwtSignedToken };
+//# sourceMappingURL=verify-jwt-signed-token.d.ts.map

package/dist/authorization/jwt/verify/verify-jwt-signed-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-jwt-signed-token.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/verify/verify-jwt-signed-token.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAQ/B;;;;;;;GAOG;AACH,QAAA,MAAM,oBAAoB,kBACP,MAAM,cACT,MAAM,cACN,MAAM,KACnB,MAAM,GAAG,GAAG,CAAC,UAgBf,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/authorization/jwt/verify/verify-jwt-signed-token.js

@@ -0,0 +1,34 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyJwtSignedToken = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+const create_public_key_pem_1 = require("../keys/create-public-key-pem");
+const create_secret_key_pem_1 = require("../keys/create-secret-key-pem");
+/**
+ * This verifies a JWT signed token with the given secret key or public key.
+ *
+ * @param tokenToVerify the jwt token to verify
+ * @param secretKey the secret key to verify the token with
+ * @param publicKey the public key to verify the token with
+ * @returns
+ */
+const verifyJwtSignedToken = (tokenToVerify, secretKey, publicKey) => {
+    // break the token apart
+    const jwtTokenParts = tokenToVerify.split('.');
+    if (jwtTokenParts.length !== 3) {
+        throw new authorization_errors_1.SafeAuthorizationTokenNotBase64Error();
+    }
+    if (!secretKey && !publicKey) {
+        throw new authorization_errors_1.SafeAuthorizationKeyNotIncludedForVerificationError();
+    }
+    // create the key
+    const jwtKey = (secretKey) ? (0, create_secret_key_pem_1.createSecretKeyPem)(secretKey) : (0, create_public_key_pem_1.createPublicKeyPem)(publicKey);
+    // verify the token
+    const payload = jsonwebtoken_1.default.verify(tokenToVerify, jwtKey);
+    return payload;
+};
+exports.verifyJwtSignedToken = verifyJwtSignedToken;

package/dist/authorization/safe/authorization/authorized-authorities.d.ts

@@ -0,0 +1,39 @@
+import { IAuthorizationIssuer, IJWTAuthority } from '../../../models/authorization/authorization-models';
+/**
+ * This class is used to keep and maintain the authorized authorities in the SAFE system.
+ */
+export declare class AuthorizedAuthorities {
+    private _authorizedJWTProviders;
+    private _currentJWTProvidersHash;
+    constructor();
+    /**
+     * This adds a JWT authority to the authorized authorities.
+     * @param authority the authority to add
+     * @param publicKey the public key for the authority
+     */
+    addJWTAuthority(authority: IAuthorizationIssuer, publicKey: string): void;
+    /**
+     * This removes a JWT authority from the authorized authorities.
+     *
+     * @param authority the authority to remove
+     */
+    removeJWTAuthority(authority: IAuthorizationIssuer): void;
+    /**
+     * This gets the public key for the given authority.
+     *
+     * @param authority the authority to get the public key for
+     * @returns
+     */
+    getJWTAuthorityPublicKey(authority: IAuthorizationIssuer): string | undefined;
+    /**
+     * This gets all the authorized JWT providers.
+     * @returns
+     */
+    getJWTProviders(): IJWTAuthority;
+    /**
+     * This gets the number of authorized JWT providers.
+     * @returns
+     */
+    getJWTProviderCount(): number;
+}
+//# sourceMappingURL=authorized-authorities.d.ts.map

package/dist/authorization/safe/authorization/authorized-authorities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-authorities.d.ts","sourceRoot":"","sources":["../../../../src/authorization/safe/authorization/authorized-authorities.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,oDAAoD,CAAC;AAEzG;;GAEG;AACH,qBAAa,qBAAqB;IAC9B,OAAO,CAAC,uBAAuB,CAAgB;IAC/C,OAAO,CAAC,wBAAwB,CAAS;;IAOzC;;;;OAIG;IACI,eAAe,CAAC,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIhF;;;;OAIG;IACI,kBAAkB,CAAC,SAAS,EAAE,oBAAoB,GAAG,IAAI;IAOhE;;;;;OAKG;IACI,wBAAwB,CAAC,SAAS,EAAE,oBAAoB,GAAG,MAAM,GAAG,SAAS;IAIpF;;;OAGG;IACI,eAAe,IAAI,aAAa;IAIvC;;;OAGG;IACI,mBAAmB,IAAI,MAAM;CAMvC"}

package/dist/authorization/safe/authorization/authorized-authorities.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizedAuthorities = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+/**
+ * This class is used to keep and maintain the authorized authorities in the SAFE system.
+ */
+class AuthorizedAuthorities {
+    constructor() {
+        this._authorizedJWTProviders = new Map();
+        this._currentJWTProvidersHash = '';
+    }
+    /**
+     * This adds a JWT authority to the authorized authorities.
+     * @param authority the authority to add
+     * @param publicKey the public key for the authority
+     */
+    addJWTAuthority(authority, publicKey) {
+        this._authorizedJWTProviders.set(authority, publicKey);
+    }
+    /**
+     * This removes a JWT authority from the authorized authorities.
+     *
+     * @param authority the authority to remove
+     */
+    removeJWTAuthority(authority) {
+        const removed = this._authorizedJWTProviders.delete(authority);
+        if (!removed) {
+            throw new authorization_errors_1.SafeAuthorizationIssuerDoesNotExistError(authority);
+        }
+    }
+    /**
+     * This gets the public key for the given authority.
+     *
+     * @param authority the authority to get the public key for
+     * @returns
+     */
+    getJWTAuthorityPublicKey(authority) {
+        return this._authorizedJWTProviders.get(authority);
+    }
+    /**
+     * This gets all the authorized JWT providers.
+     * @returns
+     */
+    getJWTProviders() {
+        return this._authorizedJWTProviders;
+    }
+    /**
+     * This gets the number of authorized JWT providers.
+     * @returns
+     */
+    getJWTProviderCount() {
+        return this._authorizedJWTProviders.size;
+    }
+}
+exports.AuthorizedAuthorities = AuthorizedAuthorities;

package/dist/authorization/safe/request/decode-bearer-token.d.ts

@@ -0,0 +1,11 @@
+import { IDecodedJwtToken } from '../../../models/authorization/authorization-models';
+/**
+ * This function decodes the bearer token and verifies the issuer is as expected.
+ *
+ * @param bearerToken the bearer token to decode
+ * @param verificationKey the key to verify the token with
+ * @param issuerExpected the expected issuer of the token
+ */
+declare const decodeBearerToken: (bearerToken: string, verificationKey: string, issuerExpected: string) => IDecodedJwtToken;
+export { decodeBearerToken };
+//# sourceMappingURL=decode-bearer-token.d.ts.map

package/dist/authorization/safe/request/decode-bearer-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-bearer-token.d.ts","sourceRoot":"","sources":["../../../../src/authorization/safe/request/decode-bearer-token.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAKtF;;;;;;GAMG;AACH,QAAA,MAAM,iBAAiB,gBAAiB,MAAM,mBAAmB,MAAM,kBAAkB,MAAM,KAAG,gBAkBjG,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/authorization/safe/request/decode-bearer-token.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeBearerToken = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+const transform_token_payload_to_safe_payload_1 = require("../../jwt/transform/transform-token-payload-to-safe-payload");
+const verify_jwt_signed_token_1 = require("../../jwt/verify/verify-jwt-signed-token");
+const verify_token_payload_1 = require("../validation/jwt/verify-token-payload");
+/**
+ * This function decodes the bearer token and verifies the issuer is as expected.
+ *
+ * @param bearerToken the bearer token to decode
+ * @param verificationKey the key to verify the token with
+ * @param issuerExpected the expected issuer of the token
+ */
+const decodeBearerToken = (bearerToken, verificationKey, issuerExpected) => {
+    const decodedToken = (0, verify_jwt_signed_token_1.verifyJwtSignedToken)(bearerToken, verificationKey);
+    if (!decodedToken || typeof decodedToken === 'string') {
+        throw new authorization_errors_1.SafeAuthorizationTokenNotObjectError();
+    }
+    if (issuerExpected !== decodedToken.iss) {
+        throw new authorization_errors_1.SafeAuthorizationIssuerNotMatchingExpectedError(issuerExpected, decodedToken.iss.toString());
+    }
+    // validate the token payload
+    if (!(0, verify_token_payload_1.verifyTokenPayload)(decodedToken)) {
+        throw new authorization_errors_1.SafeAuthorizationPayloadNotValidError();
+    }
+    // transform the token payload to a safe payload
+    const decodedTokenPayload = (0, transform_token_payload_to_safe_payload_1.transformTokenPayloadToSafePayload)(decodedToken);
+    return decodedTokenPayload;
+};
+exports.decodeBearerToken = decodeBearerToken;

package/dist/authorization/safe/request/decode-safe-request.d.ts

@@ -0,0 +1,11 @@
+import { IDecodedJwtToken } from '../../../models/authorization/authorization-models';
+/**
+ * This function decodes the safe request and returns the decoded token.
+ * This will throw an error if the request is not authorized.
+ *
+ * @param req the request to ensure authorization exists on.
+ * @returns
+ */
+declare const decodeSafeRequest: (req: any, verificationKey: string, issuerExpected: string) => IDecodedJwtToken;
+export { decodeSafeRequest };
+//# sourceMappingURL=decode-safe-request.d.ts.map

package/dist/authorization/safe/request/decode-safe-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-safe-request.d.ts","sourceRoot":"","sources":["../../../../src/authorization/safe/request/decode-safe-request.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oDAAoD,CAAC;AAEtF;;;;;;GAMG;AACH,QAAA,MAAM,iBAAiB,QAAS,GAAG,mBAAmB,MAAM,kBAAkB,MAAM,KAAG,gBAatF,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/authorization/safe/request/decode-safe-request.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeSafeRequest = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+const decode_bearer_token_1 = require("./decode-bearer-token");
+/**
+ * This function decodes the safe request and returns the decoded token.
+ * This will throw an error if the request is not authorized.
+ *
+ * @param req the request to ensure authorization exists on.
+ * @returns
+ */
+const decodeSafeRequest = (req, verificationKey, issuerExpected) => {
+    if (!req.headers)
+        throw new authorization_errors_1.SafeRequestAuthorizationHeadersNotFound();
+    if (!req.headers.authorization)
+        throw new authorization_errors_1.SafeRequestAuthorizationHeaderNotFound();
+    if (typeof req.headers.authorization === 'string' && req.headers.authorization.startsWith('Bearer ')) {
+        const bearerToken = req.headers.authorization.split('Bearer ')[1];
+        if (!bearerToken) {
+            throw new authorization_errors_1.SafeAuthorizationBearerTokenNotFound();
+        }
+        const decodedToken = (0, decode_bearer_token_1.decodeBearerToken)(bearerToken, verificationKey, issuerExpected);
+        return decodedToken;
+    }
+    else {
+        throw new authorization_errors_1.SafeAuthorizationBearerTokenNotFound();
+    }
+};
+exports.decodeSafeRequest = decodeSafeRequest;

package/dist/authorization/safe/request/determine-issuer-from-request.d.ts

@@ -0,0 +1,10 @@
+import { IAuthorizationIssuer } from '../../../models/authorization/authorization-models';
+/**
+ * This function determines the issuer from the request.
+ *
+ * @param req the request to determine the issuer from
+ * @returns
+ */
+declare const determineIssuerFromRequest: (req: any) => IAuthorizationIssuer;
+export { determineIssuerFromRequest };
+//# sourceMappingURL=determine-issuer-from-request.d.ts.map

package/dist/authorization/safe/request/determine-issuer-from-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"determine-issuer-from-request.d.ts","sourceRoot":"","sources":["../../../../src/authorization/safe/request/determine-issuer-from-request.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAG1F;;;;;GAKG;AACH,QAAA,MAAM,0BAA0B,QAAS,GAAG,KAAG,oBAa9C,CAAA;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/authorization/safe/request/determine-issuer-from-request.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.determineIssuerFromRequest = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+const determine_issuer_from_bearer_token_1 = require("./issuer/determine-issuer-from-bearer-token");
+/**
+ * This function determines the issuer from the request.
+ *
+ * @param req the request to determine the issuer from
+ * @returns
+ */
+const determineIssuerFromRequest = (req) => {
+    if (!req.headers)
+        throw new authorization_errors_1.SafeRequestAuthorizationHeadersNotFound();
+    if (!req.headers.authorization)
+        throw new authorization_errors_1.SafeRequestAuthorizationHeaderNotFound();
+    if (typeof req.headers.authorization === 'string' && req.headers.authorization.startsWith('Bearer ')) {
+        const bearerToken = req.headers.authorization.split('Bearer ')[1];
+        if (!bearerToken) {
+            throw new authorization_errors_1.SafeAuthorizationBearerTokenNotFound();
+        }
+        const issuer = (0, determine_issuer_from_bearer_token_1.determineIssuerFromBearerToken)(bearerToken);
+        return issuer;
+    }
+    else {
+        throw new authorization_errors_1.SafeAuthorizationBearerTokenNotFound();
+    }
+};
+exports.determineIssuerFromRequest = determineIssuerFromRequest;

package/dist/authorization/safe/request/issuer/determine-issuer-from-bearer-token.d.ts

@@ -0,0 +1,12 @@
+import { IAuthorizationIssuer } from '../../../../models/authorization/authorization-models';
+/**
+ * This function determines the issuer from the bearer token (if it exists).
+ * doesn't validate the signature of the token, just that the shape is correct and
+ * can be used to determine the signature to use to validate the token.
+ *
+ * @param bearerToken the bearer token to determine the issuer from
+ * @returns
+ */
+declare const determineIssuerFromBearerToken: (bearerToken: string) => IAuthorizationIssuer;
+export { determineIssuerFromBearerToken };
+//# sourceMappingURL=determine-issuer-from-bearer-token.d.ts.map

package/dist/authorization/safe/request/issuer/determine-issuer-from-bearer-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"determine-issuer-from-bearer-token.d.ts","sourceRoot":"","sources":["../../../../../src/authorization/safe/request/issuer/determine-issuer-from-bearer-token.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,uDAAuD,CAAC;AAI7F;;;;;;;GAOG;AACH,QAAA,MAAM,8BAA8B,gBAAiB,MAAM,KAAG,oBAiB7D,CAAC;AAEF,OAAO,EAAE,8BAA8B,EAAE,CAAC"}

package/dist/authorization/safe/request/issuer/determine-issuer-from-bearer-token.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.determineIssuerFromBearerToken = void 0;
+const authorization_errors_1 = require("../../../../errors/authorization/authorization-errors");
+const get_decoded_jwt_signed_token_payload_1 = require("../../../jwt/verify/get-decoded-jwt-signed-token-payload");
+const verify_authorization_issuer_1 = require("../../validation/jwt/payload/verify-authorization-issuer");
+/**
+ * This function determines the issuer from the bearer token (if it exists).
+ * doesn't validate the signature of the token, just that the shape is correct and
+ * can be used to determine the signature to use to validate the token.
+ *
+ * @param bearerToken the bearer token to determine the issuer from
+ * @returns
+ */
+const determineIssuerFromBearerToken = (bearerToken) => {
+    const decodedToken = (0, get_decoded_jwt_signed_token_payload_1.getDecodedJwtSignedTokenPayload)(bearerToken); // get the payload from the token
+    if (decodedToken === null || typeof decodedToken === 'string') {
+        throw new authorization_errors_1.SafeAuthorizationTokenNotObjectError();
+    }
+    // make sure the iss property exists
+    if (!decodedToken.iss) {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('iss', decodedToken.iss, 'string');
+    }
+    // make sure the type is an issuer
+    if (!(0, verify_authorization_issuer_1.verifyAuthorizationIssuer)(decodedToken.iss)) {
+        throw new authorization_errors_1.SafeAuthorizationIssuerNotValidError(decodedToken.iss);
+    }
+    return decodedToken.iss;
+};
+exports.determineIssuerFromBearerToken = determineIssuerFromBearerToken;

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-audience.d.ts

@@ -0,0 +1,10 @@
+import { AuthorizationAudience } from '../../../../../models/authorization/authorization-models';
+/**
+ * This verifiies the audience of the token
+ *
+ * @param aud the audience to verify
+ * @returns
+ */
+declare const verifyAuthorizationAudience: (aud: unknown) => aud is AuthorizationAudience;
+export { verifyAuthorizationAudience };
+//# sourceMappingURL=verify-authorization-audience.d.ts.map

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-audience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-authorization-audience.d.ts","sourceRoot":"","sources":["../../../../../../src/authorization/safe/validation/jwt/payload/verify-authorization-audience.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0DAA0D,CAAC;AAEjG;;;;;GAKG;AACH,QAAA,MAAM,2BAA2B,QAAS,OAAO,KAAG,GAAG,IAAI,qBAc1D,CAAA;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-audience.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationAudience = void 0;
+const authorization_errors_1 = require("../../../../../errors/authorization/authorization-errors");
+const authorization_models_1 = require("../../../../../models/authorization/authorization-models");
+/**
+ * This verifiies the audience of the token
+ *
+ * @param aud the audience to verify
+ * @returns
+ */
+const verifyAuthorizationAudience = (aud) => {
+    if (!aud) {
+        throw new authorization_errors_1.SafeAuthorizationMissingPropertyError('aud');
+    }
+    if (typeof aud !== 'string') {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('aud', aud, 'string');
+    }
+    if (!Object.values(authorization_models_1.AuthorizationAudience).includes(aud)) {
+        throw new authorization_errors_1.SafeAuthorizationPayloadNotValidError();
+    }
+    return true;
+};
+exports.verifyAuthorizationAudience = verifyAuthorizationAudience;

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-expiration-time.d.ts

@@ -0,0 +1,8 @@
+/**
+ * this function validates the expiration time of the token hasn't passed
+ *
+ * @param exp the expiration time of the token
+ */
+declare const verifyAuthorizationExpirationTime: (exp: unknown) => exp is number;
+export { verifyAuthorizationExpirationTime };
+//# sourceMappingURL=verify-authorization-expiration-time.d.ts.map

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-expiration-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-authorization-expiration-time.d.ts","sourceRoot":"","sources":["../../../../../../src/authorization/safe/validation/jwt/payload/verify-authorization-expiration-time.ts"],"names":[],"mappings":"AAMA;;;;GAIG;AACH,QAAA,MAAM,iCAAiC,QAAS,OAAO,KAAG,GAAG,IAAI,MAchE,CAAC;AAEF,OAAO,EAAE,iCAAiC,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-expiration-time.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationExpirationTime = void 0;
+const authorization_errors_1 = require("../../../../../errors/authorization/authorization-errors");
+/**
+ * this function validates the expiration time of the token hasn't passed
+ *
+ * @param exp the expiration time of the token
+ */
+const verifyAuthorizationExpirationTime = (exp) => {
+    if (!exp) {
+        throw new authorization_errors_1.SafeAuthorizationMissingPropertyError('exp');
+    }
+    if (typeof exp !== 'number') {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('exp', exp, 'number');
+    }
+    const currentTime = new Date().getTime() / 1000; // get the current time in unix format
+    if (exp < currentTime) {
+        throw new authorization_errors_1.SafeAuthorizationPayloadNotValidError();
+    }
+    return true;
+};
+exports.verifyAuthorizationExpirationTime = verifyAuthorizationExpirationTime;

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-issued-at-time.d.ts

@@ -0,0 +1,9 @@
+/**
+ * This function verifies that the issued at time is valid.
+ *
+ * @param iat the issued at time to verify
+ * @returns void (throws an error if the iat is not valid)
+ */
+declare const verifyAuthorizationIssuedAtTime: (iat: unknown) => iat is number;
+export { verifyAuthorizationIssuedAtTime };
+//# sourceMappingURL=verify-authorization-issued-at-time.d.ts.map

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-issued-at-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-authorization-issued-at-time.d.ts","sourceRoot":"","sources":["../../../../../../src/authorization/safe/validation/jwt/payload/verify-authorization-issued-at-time.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,QAAA,MAAM,+BAA+B,QAAS,OAAO,KAAG,GAAG,IAAI,MAc9D,CAAC;AAEF,OAAO,EAAE,+BAA+B,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-issued-at-time.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationIssuedAtTime = void 0;
+const authorization_errors_1 = require("../../../../../errors/authorization/authorization-errors");
+/**
+ * This function verifies that the issued at time is valid.
+ *
+ * @param iat the issued at time to verify
+ * @returns void (throws an error if the iat is not valid)
+ */
+const verifyAuthorizationIssuedAtTime = (iat) => {
+    if (!iat) {
+        throw new authorization_errors_1.SafeAuthorizationMissingPropertyError('iat');
+    }
+    if (typeof iat !== 'number') {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('iat', iat, 'number');
+    }
+    const currentTime = new Date().getTime() / 1000; // get the current time in unix format
+    if (iat > currentTime) {
+        throw new authorization_errors_1.SafeAuthorizationPayloadNotValidError();
+    }
+    return true;
+};
+exports.verifyAuthorizationIssuedAtTime = verifyAuthorizationIssuedAtTime;

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-issuer.d.ts

@@ -0,0 +1,10 @@
+import { IAuthorizationIssuer } from '../../../../../models/authorization/authorization-models';
+/**
+ * This function verifies that the incoming object is a valid authorization issuer.
+ *
+ * @param iss the object to verify
+ * @returns
+ */
+declare const verifyAuthorizationIssuer: (iss: unknown) => iss is IAuthorizationIssuer;
+export { verifyAuthorizationIssuer };
+//# sourceMappingURL=verify-authorization-issuer.d.ts.map

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-issuer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-authorization-issuer.d.ts","sourceRoot":"","sources":["../../../../../../src/authorization/safe/validation/jwt/payload/verify-authorization-issuer.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAEhG;;;;;GAKG;AACH,QAAA,MAAM,yBAAyB,QAAS,OAAO,KAAG,GAAG,IAAI,oBAexD,CAAC;AAEF,OAAO,EAAE,yBAAyB,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-issuer.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationIssuer = void 0;
+const authorization_errors_1 = require("../../../../../errors/authorization/authorization-errors");
+/**
+ * This function verifies that the incoming object is a valid authorization issuer.
+ *
+ * @param iss the object to verify
+ * @returns
+ */
+const verifyAuthorizationIssuer = (iss) => {
+    if (!iss) {
+        throw new authorization_errors_1.SafeAuthorizationMissingPropertyError('iss');
+    }
+    if (typeof iss !== 'string') {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('iss', iss, 'string');
+    }
+    const regex = /^[a-zA-Z0-9]+-[0-9a-fA-F]{8}$/; // make sure the incoming object is in the format of the authorization issuer
+    const isValidShape = regex.test(iss); // check if the incoming object is in the correct format
+    if (!isValidShape) { // if the incoming object is not in the correct format
+        return false;
+    }
+    return true;
+};
+exports.verifyAuthorizationIssuer = verifyAuthorizationIssuer;

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-not-before-time.d.ts

@@ -0,0 +1,8 @@
+/**
+ * This function verifies that the not before time is valid.
+ *
+ * @param nbf the not before time is the time before which the token is not valid
+ */
+declare const verifyAuthorizationNotBeforeTime: (nbf: unknown) => nbf is number;
+export { verifyAuthorizationNotBeforeTime };
+//# sourceMappingURL=verify-authorization-not-before-time.d.ts.map

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-not-before-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-authorization-not-before-time.d.ts","sourceRoot":"","sources":["../../../../../../src/authorization/safe/validation/jwt/payload/verify-authorization-not-before-time.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,QAAA,MAAM,gCAAgC,QAAS,OAAO,KAAG,GAAG,IAAI,MAc/D,CAAC;AAEF,OAAO,EAAE,gCAAgC,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-not-before-time.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationNotBeforeTime = void 0;
+const authorization_errors_1 = require("../../../../../errors/authorization/authorization-errors");
+/**
+ * This function verifies that the not before time is valid.
+ *
+ * @param nbf the not before time is the time before which the token is not valid
+ */
+const verifyAuthorizationNotBeforeTime = (nbf) => {
+    if (!nbf) {
+        throw new authorization_errors_1.SafeAuthorizationMissingPropertyError('nbf');
+    }
+    if (typeof nbf !== 'number') {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('nbf', nbf, 'number');
+    }
+    const currentTime = new Date().getTime() / 1000; // get the current time in unix format
+    if (nbf > currentTime) {
+        throw new authorization_errors_1.SafeAuthorizationPayloadNotValidError();
+    }
+    return true;
+};
+exports.verifyAuthorizationNotBeforeTime = verifyAuthorizationNotBeforeTime;

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-subject.d.ts

@@ -0,0 +1,10 @@
+import { IAuthorizationSubject } from '../../../../../models/authorization/authorization-models';
+/**
+ * This function validates that the input string is a valid authorization subject.
+ *
+ * @param sub The input string to validate.
+ * @returns True if the input is a valid authorization subject, false otherwise.
+ */
+declare const verifyAuthorizationSubject: (sub: unknown) => sub is IAuthorizationSubject;
+export { verifyAuthorizationSubject };
+//# sourceMappingURL=verify-authorization-subject.d.ts.map

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-authorization-subject.d.ts","sourceRoot":"","sources":["../../../../../../src/authorization/safe/validation/jwt/payload/verify-authorization-subject.ts"],"names":[],"mappings":"AAIA,OAAO,EACH,qBAAqB,EAExB,MAAM,0DAA0D,CAAC;AAElE;;;;;GAKG;AACH,QAAA,MAAM,0BAA0B,QAAS,OAAO,KAAG,GAAG,IAAI,qBASzD,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/authorization/safe/validation/jwt/payload/verify-authorization-subject.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthorizationSubject = void 0;
+const authorization_errors_1 = require("../../../../../errors/authorization/authorization-errors");
+const authorization_models_1 = require("../../../../../models/authorization/authorization-models");
+/**
+ * This function validates that the input string is a valid authorization subject.
+ *
+ * @param sub The input string to validate.
+ * @returns True if the input is a valid authorization subject, false otherwise.
+ */
+const verifyAuthorizationSubject = (sub) => {
+    if (!sub) {
+        throw new authorization_errors_1.SafeAuthorizationMissingPropertyError('sub');
+    }
+    if (typeof sub !== 'string') {
+        throw new authorization_errors_1.SafeAuthorizationTokenPropertyDataTypeNotValidError('sub', sub, 'string');
+    }
+    const regex = new RegExp(`^(${Object.values(authorization_models_1.AuthorizationSubjectStart).join('|')}):.+$`);
+    return regex.test(sub);
+};
+exports.verifyAuthorizationSubject = verifyAuthorizationSubject;

package/dist/authorization/safe/validation/jwt/verify-token-header.d.ts

@@ -0,0 +1,9 @@
+/**
+ * This validates that the header encoding is the expected encoding for the token
+ *
+ * @param token the token to validate the header of.
+ * @returns
+ */
+declare const verifyTokenHeader: (token: string) => boolean;
+export { verifyTokenHeader };
+//# sourceMappingURL=verify-token-header.d.ts.map

package/dist/authorization/safe/validation/jwt/verify-token-header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-token-header.d.ts","sourceRoot":"","sources":["../../../../../src/authorization/safe/validation/jwt/verify-token-header.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,QAAA,MAAM,iBAAiB,UAAW,MAAM,KAAG,OAc1C,CAAC;AAEF,OAAO,EAAE,iBAAiB,EAAE,CAAC"}