@degenerate/generic 0.1.3 → 0.1.4

package/dist/_settings/authorization-settings.d.ts

@@ -0,0 +1,17 @@
+/**
+ * This contains the settings for the authorization functions.
+ */
+export declare const AuthorizationSettings: {
+    JWT: {
+        Algorithm: string;
+        ExpiresInDefault: string;
+        NotBeforeDefault: number;
+        EncodingDefault: string;
+        MutatePayload: boolean;
+        NoTimestamp: boolean;
+        AllowInsecureKeySizes: boolean;
+        AllowInvalidAsymmetricKeyTypes: boolean;
+        HeaderType: string;
+    };
+};
+//# sourceMappingURL=authorization-settings.d.ts.map

package/dist/_settings/authorization-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-settings.d.ts","sourceRoot":"","sources":["../../src/_settings/authorization-settings.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;CAYjC,CAAC"}

package/dist/_settings/authorization-settings.js

@@ -0,0 +1,20 @@
+"use strict";
+// This file contains the settings needed for authorization in the application.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationSettings = void 0;
+/**
+ * This contains the settings for the authorization functions.
+ */
+exports.AuthorizationSettings = {
+    JWT: {
+        Algorithm: 'ES512', // ECDSA using P-521 curve and SHA-512 hash algorithm
+        ExpiresInDefault: '1h', // the expiration time of the jwt token
+        NotBeforeDefault: 0, // the not before time of the jwt token
+        EncodingDefault: 'utf8', // the encoding to use when converting the payload to a string
+        MutatePayload: true, // If true, the payload object will be mutated with the standard claims (iat, exp, etc.). Default is false.
+        NoTimestamp: false, // If true, the iat (issued at) claim will not be included in the token.
+        AllowInsecureKeySizes: false, // If true, allows the use of insecure key sizes.
+        AllowInvalidAsymmetricKeyTypes: false, // If true, allows the use of invalid asymmetric key types
+        HeaderType: 'JWT', // the type of the token in the header
+    }
+};

package/dist/_settings/cryptography-settings.d.ts

@@ -6,22 +6,34 @@ import * as crypto from 'crypto';
  * This contains the settings for the cryptography. settings
  */
 export declare const CryptoSettings: {
-    TextEncoding: crypto.Encoding;
     Hash: {
         Algorithm: string;
+        Algorithm512: string;
         Digest: crypto.BinaryToTextEncoding;
     };
+    Format: {
+        hex: string;
+        base64: string;
+    };
+    TextEncoding: crypto.Encoding;
 };
+export declare const base64Encoding: BufferEncoding;
+export declare const hexEncoding: BufferEncoding;
+export declare const sec1KeyExportType = "sec1";
+export declare const spkiKeyExportType = "spki";
+export declare const keyExportFormatDer = "der";
 /**
  * This contains the values for the elliptical curvers for encryption
  */
 export declare enum EllipticalCurvesEncryption {
-    Curve25519 = "curve25519"
+    Curve25519 = "curve25519",
+    P521 = "p521"
 }
 /**
  * This contains the values for the elliptical curvers for signing
  */
 export declare enum EllipticalCurvesSigning {
-    Curve25519 = "ed25519"
+    Curve25519 = "ed25519",
+    P521 = "p521"
 }
 //# sourceMappingURL=cryptography-settings.d.ts.map

package/dist/_settings/cryptography-settings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cryptography-settings.d.ts","sourceRoot":"","sources":["../../src/_settings/cryptography-settings.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,cAAc;kBACC,MAAM,CAAC,QAAQ;;;gBAGlB,MAAM,CAAC,oBAAoB;;CAEnD,CAAC;AAEF;;GAEG;AACH,oBAAY,0BAA0B;IAClC,UAAU,eAAe;CAC5B;AAED;;GAEG;AACH,oBAAY,uBAAuB;IAC/B,UAAU,YAAY;CACzB"}
+{"version":3,"file":"cryptography-settings.d.ts","sourceRoot":"","sources":["../../src/_settings/cryptography-settings.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC;;GAEG;AACH,eAAO,MAAM,cAAc;;;;gBAIF,MAAM,CAAC,oBAAoB;;;;;;kBAMxB,MAAM,CAAC,QAAQ;CAC1C,CAAC;AAGF,eAAO,MAAM,cAAc,EAAe,cAAc,CAAC;AACzD,eAAO,MAAM,WAAW,EAAY,cAAc,CAAC;AAGnD,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAExC;;GAEG;AACH,oBAAY,0BAA0B;IAClC,UAAU,eAAe;IACzB,IAAI,SAAS;CAChB;AAED;;GAEG;AACH,oBAAY,uBAAuB;IAC/B,UAAU,YAAY;IACtB,IAAI,SAAS;CAChB"}

package/dist/_settings/cryptography-settings.js

@@ -1,22 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EllipticalCurvesSigning = exports.EllipticalCurvesEncryption = exports.CryptoSettings = void 0;
+exports.EllipticalCurvesSigning = exports.EllipticalCurvesEncryption = exports.keyExportFormatDer = exports.spkiKeyExportType = exports.sec1KeyExportType = exports.hexEncoding = exports.base64Encoding = exports.CryptoSettings = void 0;
 /**
  * This contains the settings for the cryptography. settings
  */
 exports.CryptoSettings = {
-    TextEncoding: 'utf8', // "utf8" | "ascii" | "latin1"
     Hash: {
         Algorithm: 'sha256',
+        Algorithm512: 'sha512',
         Digest: 'hex', // "hex" | "base64" | "base64url" | "binary"
     },
+    Format: {
+        hex: 'hex',
+        base64: 'base64',
+    },
+    TextEncoding: 'utf8', // "utf8" | "ascii" | "latin1"
 };
+// export the types fo buffer encodings
+exports.base64Encoding = 'base64';
+exports.hexEncoding = 'hex';
+// export the keyformats
+exports.sec1KeyExportType = 'sec1';
+exports.spkiKeyExportType = 'spki';
+exports.keyExportFormatDer = 'der';
 /**
  * This contains the values for the elliptical curvers for encryption
  */
 var EllipticalCurvesEncryption;
 (function (EllipticalCurvesEncryption) {
     EllipticalCurvesEncryption["Curve25519"] = "curve25519";
+    EllipticalCurvesEncryption["P521"] = "p521";
 })(EllipticalCurvesEncryption || (exports.EllipticalCurvesEncryption = EllipticalCurvesEncryption = {}));
 /**
  * This contains the values for the elliptical curvers for signing
@@ -24,4 +37,5 @@ var EllipticalCurvesEncryption;
 var EllipticalCurvesSigning;
 (function (EllipticalCurvesSigning) {
     EllipticalCurvesSigning["Curve25519"] = "ed25519";
+    EllipticalCurvesSigning["P521"] = "p521";
 })(EllipticalCurvesSigning || (exports.EllipticalCurvesSigning = EllipticalCurvesSigning = {}));

package/dist/authorization/index.d.ts

@@ -0,0 +1,24 @@
+export * from './jwt/keys/create-secret-key-pem';
+export * from './jwt/keys/create-public-key-pem';
+export * from './jwt/sign/create-authorization-issuer';
+export * from './jwt/sign/create-authorization-subject';
+export * from './jwt/sign/create-jwt-options';
+export * from './jwt/sign/create-jwt-signed-token';
+export * from './jwt/transform/transform-token-payload-to-safe-payload';
+export * from './jwt/verify/get-decoded-jwt-header';
+export * from './jwt/verify/get-decoded-jwt-signed-token-payload';
+export * from './jwt/verify/verify-jwt-signed-token';
+export * from './safe/authorization/authorized-authorities';
+export * from './safe/request/decode-bearer-token';
+export * from './safe/request/decode-safe-request';
+export * from './safe/request/determine-issuer-from-request';
+export * from './safe/request/issuer/determine-issuer-from-bearer-token';
+export * from './safe/validation/jwt/payload/verify-authorization-audience';
+export * from './safe/validation/jwt/payload/verify-authorization-expiration-time';
+export * from './safe/validation/jwt/payload/verify-authorization-issued-at-time';
+export * from './safe/validation/jwt/payload/verify-authorization-issuer';
+export * from './safe/validation/jwt/payload/verify-authorization-not-before-time';
+export * from './safe/validation/jwt/payload/verify-authorization-subject';
+export * from './safe/validation/jwt/verify-token-header';
+export * from './safe/validation/jwt/verify-token-payload';
+//# sourceMappingURL=index.d.ts.map

package/dist/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authorization/index.ts"],"names":[],"mappings":"AACA,cAAc,kCAAkC,CAAC;AACjD,cAAc,kCAAkC,CAAC;AAIjD,cAAc,wCAAwC,CAAC;AACvD,cAAc,yCAAyC,CAAC;AACxD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,oCAAoC,CAAC;AAInD,cAAc,yDAAyD,CAAC;AAIxE,cAAc,qCAAqC,CAAC;AACpD,cAAc,mDAAmD,CAAC;AAClE,cAAc,sCAAsC,CAAC;AAMrD,cAAc,6CAA6C,CAAC;AAI5D,cAAc,oCAAoC,CAAC;AACnD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAG7D,cAAc,0DAA0D,CAAC;AAWzE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,oEAAoE,CAAC;AACnF,cAAc,mEAAmE,CAAC;AAClF,cAAc,2DAA2D,CAAC;AAC1E,cAAc,oEAAoE,CAAC;AACnF,cAAc,4DAA4D,CAAC;AAI3E,cAAc,2CAA2C,CAAC;AAC1D,cAAc,4CAA4C,CAAC"}

package/dist/authorization/index.js

@@ -0,0 +1,61 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+//#region JWT Key functions
+__exportStar(require("./jwt/keys/create-secret-key-pem"), exports);
+__exportStar(require("./jwt/keys/create-public-key-pem"), exports);
+//#endregion JWT Key functions
+//#region JWT sign
+__exportStar(require("./jwt/sign/create-authorization-issuer"), exports);
+__exportStar(require("./jwt/sign/create-authorization-subject"), exports);
+__exportStar(require("./jwt/sign/create-jwt-options"), exports);
+__exportStar(require("./jwt/sign/create-jwt-signed-token"), exports);
+//#endregion JWT sign
+//#region JWT Transform
+__exportStar(require("./jwt/transform/transform-token-payload-to-safe-payload"), exports);
+//#endregion JWT Transform
+//#region JWT verify
+__exportStar(require("./jwt/verify/get-decoded-jwt-header"), exports);
+__exportStar(require("./jwt/verify/get-decoded-jwt-signed-token-payload"), exports);
+__exportStar(require("./jwt/verify/verify-jwt-signed-token"), exports);
+//#endregion JWT verify
+//#region Safe
+//#region Authorization
+__exportStar(require("./safe/authorization/authorized-authorities"), exports);
+//#endregion Authorization
+//#region Request
+__exportStar(require("./safe/request/decode-bearer-token"), exports);
+__exportStar(require("./safe/request/decode-safe-request"), exports);
+__exportStar(require("./safe/request/determine-issuer-from-request"), exports);
+//#region Issuer
+__exportStar(require("./safe/request/issuer/determine-issuer-from-bearer-token"), exports);
+//#endregion Issuer
+//#endregion Request
+//#region Validation
+//#region JWT
+//#region JWT Payload
+__exportStar(require("./safe/validation/jwt/payload/verify-authorization-audience"), exports);
+__exportStar(require("./safe/validation/jwt/payload/verify-authorization-expiration-time"), exports);
+__exportStar(require("./safe/validation/jwt/payload/verify-authorization-issued-at-time"), exports);
+__exportStar(require("./safe/validation/jwt/payload/verify-authorization-issuer"), exports);
+__exportStar(require("./safe/validation/jwt/payload/verify-authorization-not-before-time"), exports);
+__exportStar(require("./safe/validation/jwt/payload/verify-authorization-subject"), exports);
+//#endregion JWT Payload
+__exportStar(require("./safe/validation/jwt/verify-token-header"), exports);
+__exportStar(require("./safe/validation/jwt/verify-token-payload"), exports);
+//#endregion JWT
+//#endregion Validation
+//#endregion Safe

package/dist/authorization/jwt/keys/create-public-key-pem.d.ts

@@ -0,0 +1,9 @@
+/**
+ * This takes a public key in hex or Base64 format and creates a PEM key from it.
+ *
+ * @param publicKey the public key to create the PEM key from.
+ * @returns
+ */
+declare const createPublicKeyPem: (publicKey: string) => string;
+export { createPublicKeyPem };
+//# sourceMappingURL=create-public-key-pem.d.ts.map

package/dist/authorization/jwt/keys/create-public-key-pem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-public-key-pem.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/keys/create-public-key-pem.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,cAAe,MAAM,KAAG,MAW/C,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/authorization/jwt/keys/create-public-key-pem.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPublicKeyPem = void 0;
+const cryptography_helpers_1 = require("../../../helpers/crypto/cryptography-helpers");
+const object_validation_helpers_1 = require("../../../helpers/object-validation-helpers");
+/**
+ * This takes a public key in hex or Base64 format and creates a PEM key from it.
+ *
+ * @param publicKey the public key to create the PEM key from.
+ * @returns
+ */
+const createPublicKeyPem = (publicKey) => {
+    let jwtKey; // the key to return
+    const isValidHexString = (0, object_validation_helpers_1.validateStringHex)(publicKey);
+    if (isValidHexString) { // check if this is a hex encoded secret key.
+        const derKey = (0, cryptography_helpers_1.hexToBase64)(publicKey); // convert the hex to base 64
+        jwtKey = (0, cryptography_helpers_1.base64ToPublicPEM)(derKey);
+    }
+    else {
+        // add in the
+        jwtKey = (0, cryptography_helpers_1.base64ToPublicPEM)(publicKey);
+    }
+    return jwtKey;
+};
+exports.createPublicKeyPem = createPublicKeyPem;

package/dist/authorization/jwt/keys/create-secret-key-pem.d.ts

@@ -0,0 +1,9 @@
+/**
+ * This takes a secret key in hex or Base64 format and creates a PEM key from it.
+ *
+ * @param secretKey the secret key to create the PEM key from.
+ * @returns
+ */
+declare const createSecretKeyPem: (secretKey: string) => string;
+export { createSecretKeyPem };
+//# sourceMappingURL=create-secret-key-pem.d.ts.map

package/dist/authorization/jwt/keys/create-secret-key-pem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-secret-key-pem.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/keys/create-secret-key-pem.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,QAAA,MAAM,kBAAkB,cAAe,MAAM,KAAG,MAU/C,CAAC;AAEF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/authorization/jwt/keys/create-secret-key-pem.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecretKeyPem = void 0;
+const cryptography_helpers_1 = require("../../../helpers/crypto/cryptography-helpers");
+const object_validation_helpers_1 = require("../../../helpers/object-validation-helpers");
+/**
+ * This takes a secret key in hex or Base64 format and creates a PEM key from it.
+ *
+ * @param secretKey the secret key to create the PEM key from.
+ * @returns
+ */
+const createSecretKeyPem = (secretKey) => {
+    let jwtKey;
+    if ((0, object_validation_helpers_1.validateStringHex)(secretKey)) { // check if this is a hex encoded secret key.
+        const derKey = (0, cryptography_helpers_1.hexToBase64)(secretKey); // convert the hex to base 64
+        jwtKey = (0, cryptography_helpers_1.base64ToPrivateECPEM)(derKey);
+    }
+    else {
+        // add in the
+        jwtKey = (0, cryptography_helpers_1.base64ToPrivateECPEM)(secretKey);
+    }
+    return jwtKey;
+};
+exports.createSecretKeyPem = createSecretKeyPem;

package/dist/authorization/jwt/sign/create-authorization-issuer.d.ts

@@ -0,0 +1,10 @@
+import { IAuthorizationIssuer } from '../../../models/authorization/authorization-models';
+/**
+ * This function creates an authorization issuer.
+ * @param issuerName the name of the issuer (this should be letters and numbers only)
+ * @param publicKey the public key of the issuer (this should be a hex string)
+ * @returns
+ */
+declare const createAuthorizationIssuer: (issuerName: string, publicKey: string) => IAuthorizationIssuer;
+export { createAuthorizationIssuer };
+//# sourceMappingURL=create-authorization-issuer.d.ts.map

package/dist/authorization/jwt/sign/create-authorization-issuer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-authorization-issuer.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/sign/create-authorization-issuer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAE1F;;;;;GAKG;AACH,QAAA,MAAM,yBAAyB,eAAgB,MAAM,aAAa,MAAM,KAAG,oBAe1E,CAAC;AAEF,OAAO,EAAE,yBAAyB,EAAE,CAAC"}

package/dist/authorization/jwt/sign/create-authorization-issuer.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthorizationIssuer = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+const object_validation_helpers_1 = require("../../../helpers/object-validation-helpers");
+/**
+ * This function creates an authorization issuer.
+ * @param issuerName the name of the issuer (this should be letters and numbers only)
+ * @param publicKey the public key of the issuer (this should be a hex string)
+ * @returns
+ */
+const createAuthorizationIssuer = (issuerName, publicKey) => {
+    // make sure the incoming public key is a hex format
+    const publicKeyIsHex = (0, object_validation_helpers_1.validateStringHex)(publicKey);
+    if (!publicKeyIsHex) { // if the public key is not a valid hex string
+        throw new authorization_errors_1.SafeAuthorizationIssuerPublicKeyNotValidError(issuerName, publicKey);
+    }
+    if (publicKey.length < 8) { // if the public key is less than 8 characters
+        throw new authorization_errors_1.SafeAuthorizationIssuerPublicKeyNotValidError(issuerName, publicKey);
+    }
+    // get the last 8 characters of the public key
+    const publicKeyParse = publicKey.slice(-8);
+    const authorizationIssuer = `${issuerName}-${publicKeyParse}`;
+    return authorizationIssuer;
+};
+exports.createAuthorizationIssuer = createAuthorizationIssuer;

package/dist/authorization/jwt/sign/create-authorization-subject.d.ts

@@ -0,0 +1,12 @@
+import { AuthorizationSubjectStart, IAuthorizationSubject } from '../../../models/authorization/authorization-models';
+/**
+ * This creates an authorization subject.
+ *
+ * @param subjectType the type of the subject
+ * @param subjectId the id of the subject (userid, safenetworkid etc.)
+ *
+ * @returns
+ */
+declare const createAuthorizationSubject: (subjectType: AuthorizationSubjectStart, subjectId: string) => IAuthorizationSubject;
+export { createAuthorizationSubject };
+//# sourceMappingURL=create-authorization-subject.d.ts.map

package/dist/authorization/jwt/sign/create-authorization-subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-authorization-subject.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/sign/create-authorization-subject.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAEtH;;;;;;;GAOG;AACH,QAAA,MAAM,0BAA0B,gBACf,yBAAyB,aAC3B,MAAM,KAClB,qBAKF,CAAC;AAEF,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/authorization/jwt/sign/create-authorization-subject.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthorizationSubject = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+/**
+ * This creates an authorization subject.
+ *
+ * @param subjectType the type of the subject
+ * @param subjectId the id of the subject (userid, safenetworkid etc.)
+ *
+ * @returns
+ */
+const createAuthorizationSubject = (subjectType, subjectId) => {
+    if (!subjectId) {
+        throw new authorization_errors_1.SafeAuthorizationSubjectNotValidError(subjectType, subjectId);
+    }
+    return `${subjectType}:${subjectId}`;
+};
+exports.createAuthorizationSubject = createAuthorizationSubject;

package/dist/authorization/jwt/sign/create-jwt-options.d.ts

@@ -0,0 +1,17 @@
+import jwt from 'jsonwebtoken';
+import { AuthorizationAudience, IAuthorizationSubject } from '../../../models/authorization/authorization-models';
+/**
+ * This function creates the options for the jwt token issuance
+ *
+ * @param subject the subject of the token
+ * @param audience the audience of the token (default is sharedata)
+ * @param algorithm the algorithm to use (default is ES512)
+ * @param expiresIn the expiration time of the token (default is 1 hour)
+ * @param notBefore the not before time of the token (default is 0)
+ * @param keyid A unique identifier for the key used to sign the token. This can be used to prevent replay attacks. (optional)
+ * @param header An object containing additional header properties to include in the token. (optional)
+ * @returns
+ */
+declare const createJwtOptions: (subject: IAuthorizationSubject, audience?: AuthorizationAudience | AuthorizationAudience[], algorithm?: jwt.Algorithm, expiresIn?: string | number, notBefore?: string | number, keyid?: string, header?: jwt.JwtHeader) => jwt.SignOptions;
+export { createJwtOptions };
+//# sourceMappingURL=create-jwt-options.d.ts.map

package/dist/authorization/jwt/sign/create-jwt-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-jwt-options.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/sign/create-jwt-options.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAGlH;;;;;;;;;;;GAWG;AACH,QAAA,MAAM,gBAAgB,YACT,qBAAqB,aACpB,qBAAqB,GAAG,qBAAqB,EAAE,cAC9C,GAAG,CAAC,SAAS,cACb,MAAM,GAAG,MAAM,cACf,MAAM,GAAG,MAAM,UAClB,MAAM,WACL,GAAG,CAAC,SAAS,KACvB,GAAG,CAAC,WAkBN,CAAC;AAEF,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/authorization/jwt/sign/create-jwt-options.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createJwtOptions = void 0;
+const authorization_models_1 = require("../../../models/authorization/authorization-models");
+const authorization_settings_1 = require("../../../_settings/authorization-settings");
+/**
+ * This function creates the options for the jwt token issuance
+ *
+ * @param subject the subject of the token
+ * @param audience the audience of the token (default is sharedata)
+ * @param algorithm the algorithm to use (default is ES512)
+ * @param expiresIn the expiration time of the token (default is 1 hour)
+ * @param notBefore the not before time of the token (default is 0)
+ * @param keyid A unique identifier for the key used to sign the token. This can be used to prevent replay attacks. (optional)
+ * @param header An object containing additional header properties to include in the token. (optional)
+ * @returns
+ */
+const createJwtOptions = (subject, // the subject of the token
+audience = authorization_models_1.AuthorizationAudience.SHAREDATA, // audience
+algorithm = authorization_settings_1.AuthorizationSettings.JWT.Algorithm, // ECDSA using P-521 curve and SHA-512 hash algorithm
+expiresIn = authorization_settings_1.AuthorizationSettings.JWT.ExpiresInDefault, // Default expiration time
+notBefore = authorization_settings_1.AuthorizationSettings.JWT.NotBeforeDefault, // Default not before time
+keyid, // A unique identifier for the key used to sign the token. This can be used to prevent replay attacks.
+header) => {
+    const jwtOptions = {
+        subject,
+        audience,
+        algorithm,
+        expiresIn,
+        notBefore,
+        mutatePayload: authorization_settings_1.AuthorizationSettings.JWT.MutatePayload, // If true, the payload object will be mutated with the standard claims (iat, exp, etc.). Default is false.
+        noTimestamp: authorization_settings_1.AuthorizationSettings.JWT.NoTimestamp, // If true, the iat (issued at) claim will not be included in the token.
+        encoding: authorization_settings_1.AuthorizationSettings.JWT.EncodingDefault, // The encoding to use when converting the payload to a string.
+        allowInsecureKeySizes: authorization_settings_1.AuthorizationSettings.JWT.AllowInsecureKeySizes, // If true, allows the use of insecure key sizes.
+        allowInvalidAsymmetricKeyTypes: authorization_settings_1.AuthorizationSettings.JWT.AllowInvalidAsymmetricKeyTypes, // If true, allows the use of invalid asymmetric key types.
+    };
+    if (keyid)
+        jwtOptions.keyid = keyid;
+    if (header)
+        jwtOptions.header = header;
+    return jwtOptions;
+};
+exports.createJwtOptions = createJwtOptions;

package/dist/authorization/jwt/sign/create-jwt-signed-token.d.ts

@@ -0,0 +1,13 @@
+import { IAuthorizationPayload } from '../../../models/authorization/authorization-models';
+import jwt from 'jsonwebtoken';
+/**
+ * This creates a signed JWT token with the given payload and secret key.
+ *
+ * @param payload the payload to sign
+ * @param secretKey the secret key to sign the token with
+ * @param options the options for the signed jwt token
+ * @returns
+ */
+declare const createJWTSignedToken: (payload: IAuthorizationPayload, secretKey: string, options: jwt.SignOptions) => string;
+export { createJWTSignedToken };
+//# sourceMappingURL=create-jwt-signed-token.d.ts.map

package/dist/authorization/jwt/sign/create-jwt-signed-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-jwt-signed-token.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/sign/create-jwt-signed-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,qBAAqB,EACxB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,GAAG,MAAM,cAAc,CAAC;AAG/B;;;;;;;GAOG;AACH,QAAA,MAAM,oBAAoB,YACb,qBAAqB,aACnB,MAAM,WACR,GAAG,CAAC,WAAW,KACzB,MAIF,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/authorization/jwt/sign/create-jwt-signed-token.js

@@ -0,0 +1,22 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createJWTSignedToken = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+const create_secret_key_pem_1 = require("../keys/create-secret-key-pem");
+/**
+ * This creates a signed JWT token with the given payload and secret key.
+ *
+ * @param payload the payload to sign
+ * @param secretKey the secret key to sign the token with
+ * @param options the options for the signed jwt token
+ * @returns
+ */
+const createJWTSignedToken = (payload, secretKey, options) => {
+    const jwtKey = (0, create_secret_key_pem_1.createSecretKeyPem)(secretKey);
+    const jwtToken = jsonwebtoken_1.default.sign(payload, jwtKey, options);
+    return jwtToken;
+};
+exports.createJWTSignedToken = createJWTSignedToken;

package/dist/authorization/jwt/transform/transform-token-payload-to-safe-payload.d.ts

@@ -0,0 +1,10 @@
+import { IDecodedJwtToken, IValidSafeTokenPayload } from '../../../models/authorization/authorization-models';
+/**
+ * This function transforms the token payload to a safe payload with custom claims (if any).
+ *
+ * @param payload the payload to transform
+ * @returns the safe payload
+ */
+declare const transformTokenPayloadToSafePayload: (payload: IValidSafeTokenPayload) => IDecodedJwtToken;
+export { transformTokenPayloadToSafePayload };
+//# sourceMappingURL=transform-token-payload-to-safe-payload.d.ts.map

package/dist/authorization/jwt/transform/transform-token-payload-to-safe-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform-token-payload-to-safe-payload.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/transform/transform-token-payload-to-safe-payload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AAE9G;;;;;GAKG;AACH,QAAA,MAAM,kCAAkC,YAAa,sBAAsB,KAAG,gBAuB7E,CAAC;AAEF,OAAO,EAAE,kCAAkC,EAAE,CAAC"}

package/dist/authorization/jwt/transform/transform-token-payload-to-safe-payload.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.transformTokenPayloadToSafePayload = void 0;
+/**
+ * This function transforms the token payload to a safe payload with custom claims (if any).
+ *
+ * @param payload the payload to transform
+ * @returns the safe payload
+ */
+const transformTokenPayloadToSafePayload = (payload) => {
+    // get any other properties from the payload other than the default ones
+    const otherProperties = Object.keys(payload).reduce((acc, key) => {
+        if (!['iat', 'nbf', 'exp', 'sub', 'aud', 'iss'].includes(key)) {
+            acc[key] = payload[key];
+        }
+        return acc;
+    }, {});
+    const safePayload = {
+        iat: payload.iat,
+        nbf: payload.nbf,
+        exp: payload.exp,
+        sub: payload.sub,
+        aud: payload.aud,
+        iss: payload.iss,
+    };
+    if (Object.keys(otherProperties).length > 0) {
+        safePayload.customClaims = otherProperties;
+    }
+    return safePayload;
+};
+exports.transformTokenPayloadToSafePayload = transformTokenPayloadToSafePayload;

package/dist/authorization/jwt/verify/get-decoded-jwt-header.d.ts

@@ -0,0 +1,10 @@
+import { IAuthorizationHeader } from '../../../models/authorization/authorization-models';
+/**
+ * This function gets the decoded jwt header from the token.
+ *
+ * @param token the token to get the header from.
+ * @returns
+ */
+declare const getDecodedJwtHeader: (token: string) => IAuthorizationHeader;
+export { getDecodedJwtHeader };
+//# sourceMappingURL=get-decoded-jwt-header.d.ts.map

package/dist/authorization/jwt/verify/get-decoded-jwt-header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-decoded-jwt-header.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/verify/get-decoded-jwt-header.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAE1F;;;;;GAKG;AACH,QAAA,MAAM,mBAAmB,UAAW,MAAM,KAAG,oBAU5C,CAAC;AAEF,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/authorization/jwt/verify/get-decoded-jwt-header.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDecodedJwtHeader = void 0;
+const authorization_errors_1 = require("../../../errors/authorization/authorization-errors");
+/**
+ * This function gets the decoded jwt header from the token.
+ *
+ * @param token the token to get the header from.
+ * @returns
+ */
+const getDecodedJwtHeader = (token) => {
+    // break the token apart
+    const jwtTokenParts = token.split('.');
+    if (jwtTokenParts.length !== 3) {
+        throw new authorization_errors_1.SafeAuthorizationTokenNotBase64Error();
+    }
+    const header = JSON.parse(Buffer.from(jwtTokenParts[0], 'base64').toString('utf-8'));
+    return header;
+};
+exports.getDecodedJwtHeader = getDecodedJwtHeader;

package/dist/authorization/jwt/verify/get-decoded-jwt-signed-token-payload.d.ts

@@ -0,0 +1,9 @@
+import { JwtPayload } from 'jsonwebtoken';
+/**
+ * This function gets the decoded payload from a signed JWT token.
+ *
+ * @param token the token to get the payload from
+ */
+declare const getDecodedJwtSignedTokenPayload: (token: string) => JwtPayload | null | string;
+export { getDecodedJwtSignedTokenPayload };
+//# sourceMappingURL=get-decoded-jwt-signed-token-payload.d.ts.map

package/dist/authorization/jwt/verify/get-decoded-jwt-signed-token-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-decoded-jwt-signed-token-payload.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/verify/get-decoded-jwt-signed-token-payload.ts"],"names":[],"mappings":"AAAA,OAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C;;;;GAIG;AACH,QAAA,MAAM,+BAA+B,UAAW,MAAM,KAAG,UAAU,GAAG,IAAI,GAAG,MAG5E,CAAC;AAEF,OAAO,EAAE,+BAA+B,EAAE,CAAC"}

package/dist/authorization/jwt/verify/get-decoded-jwt-signed-token-payload.js

@@ -0,0 +1,17 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDecodedJwtSignedTokenPayload = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+/**
+ * This function gets the decoded payload from a signed JWT token.
+ *
+ * @param token the token to get the payload from
+ */
+const getDecodedJwtSignedTokenPayload = (token) => {
+    const payload = jsonwebtoken_1.default.decode(token);
+    return payload;
+};
+exports.getDecodedJwtSignedTokenPayload = getDecodedJwtSignedTokenPayload;

package/dist/authorization/jwt/verify/verify-jwt-signed-token.d.ts

@@ -0,0 +1,12 @@
+import jwt from 'jsonwebtoken';
+/**
+ * This verifies a JWT signed token with the given secret key or public key.
+ *
+ * @param tokenToVerify the jwt token to verify
+ * @param secretKey the secret key to verify the token with
+ * @param publicKey the public key to verify the token with
+ * @returns
+ */
+declare const verifyJwtSignedToken: (tokenToVerify: string, secretKey?: string, publicKey?: string) => string | jwt.JwtPayload;
+export { verifyJwtSignedToken };
+//# sourceMappingURL=verify-jwt-signed-token.d.ts.map

package/dist/authorization/jwt/verify/verify-jwt-signed-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-jwt-signed-token.d.ts","sourceRoot":"","sources":["../../../../src/authorization/jwt/verify/verify-jwt-signed-token.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,cAAc,CAAC;AAQ/B;;;;;;;GAOG;AACH,QAAA,MAAM,oBAAoB,kBACP,MAAM,cACT,MAAM,cACN,MAAM,KACnB,MAAM,GAAG,GAAG,CAAC,UAgBf,CAAC;AAEF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}