@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13

package/dist/Jwt.js

@@ -0,0 +1,721 @@
+import { Brand, Context, Data, Duration, Effect, Encoding, Layer, Option, Redacted, Result, } from "effect";
+import { Crypto } from "./Crypto.js";
+import { UnixMillis } from "./Identifiers.js";
+import { currentUnixMillis, timingSafeEqualString } from "./Internal.js";
+export const JwtKeyId = Brand.nominal();
+export const JwtToken = Brand.nominal();
+export const JwtAlgorithms = ["HS256", "RS256", "ES256", "EdDSA"];
+export class JwtError extends Data.TaggedError("JwtError") {
+}
+export class JwtKeys extends Context.Service()("auth/JwtKeys") {
+}
+(function (JwtKeys) {
+    JwtKeys.make = (service) => JwtKeys.of(service);
+})(JwtKeys || (JwtKeys = {}));
+export class JwtIssuer extends Context.Service()("auth/JwtIssuer") {
+}
+(function (JwtIssuer) {
+    JwtIssuer.make = (service) => JwtIssuer.of(service);
+})(JwtIssuer || (JwtIssuer = {}));
+export class JwtVerifier extends Context.Service()("auth/JwtVerifier") {
+}
+(function (JwtVerifier) {
+    JwtVerifier.make = (service) => JwtVerifier.of(service);
+})(JwtVerifier || (JwtVerifier = {}));
+export class JwtSignature extends Context.Service()("auth/JwtSignature") {
+}
+(function (JwtSignature) {
+    JwtSignature.make = (service) => JwtSignature.of(service);
+})(JwtSignature || (JwtSignature = {}));
+export class Jwks extends Context.Service()("auth/Jwks") {
+}
+(function (Jwks) {
+    Jwks.make = (service) => Jwks.of(service);
+})(Jwks || (Jwks = {}));
+export class JwtRevocationStore extends Context.Service()("auth/JwtRevocationStore") {
+}
+(function (JwtRevocationStore) {
+    JwtRevocationStore.make = (service) => JwtRevocationStore.of(service);
+})(JwtRevocationStore || (JwtRevocationStore = {}));
+export class JwtRevocation extends Context.Service()("auth/JwtRevocation") {
+}
+(function (JwtRevocation) {
+    JwtRevocation.make = (service) => JwtRevocation.of(service);
+})(JwtRevocation || (JwtRevocation = {}));
+const textEncoder = new TextEncoder();
+const textDecoder = new TextDecoder();
+const jwtError = (operation, message, cause) => new JwtError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const isJwtAlgorithm = (value) => typeof value === "string" && JwtAlgorithms.includes(value);
+const signatureService = (dependencies) => {
+    if (dependencies.signature !== undefined) {
+        return dependencies.signature;
+    }
+    if (dependencies.crypto !== undefined) {
+        return makeJwtSignature({ crypto: dependencies.crypto });
+    }
+    throw jwtError("signature", "JWT signature service is not available");
+};
+const keyInfo = (key) => ({
+    id: key.id,
+    alg: key.alg,
+    status: key.status,
+    ...(key.createdAt === undefined ? {} : { createdAt: key.createdAt }),
+    ...(key.expiresAt === undefined ? {} : { expiresAt: key.expiresAt }),
+    ...(key.metadata === undefined ? {} : { metadata: key.metadata }),
+});
+const numericDate = (millis) => Math.floor(Number(millis) / 1000);
+const addDuration = (millis, duration) => UnixMillis(Number(millis) + Duration.toMillis(duration));
+const isUsableAt = (key, now) => now === undefined || key.expiresAt === undefined || Number(now) < Number(key.expiresAt);
+const isSigningKey = (key, alg, now) => key.alg === alg &&
+    key.status === "active" &&
+    (key.alg !== "HS256" || key.secret !== undefined) &&
+    isUsableAt(key, now);
+const isVerificationKey = (key, input) => key.id === input.kid &&
+    key.status !== "disabled" &&
+    (key.alg !== "HS256" || key.secret !== undefined) &&
+    (input.alg === undefined || key.alg === input.alg) &&
+    isUsableAt(key, input.now);
+const privateJwkMembers = new Set([
+    "d",
+    "p",
+    "q",
+    "dp",
+    "dq",
+    "qi",
+    "oth",
+    "k",
+]);
+const publicJwkFromKey = (key) => {
+    if (key.status === "disabled" || key.publicJwk === undefined) {
+        return undefined;
+    }
+    const jwk = {};
+    for (const [name, value] of Object.entries(key.publicJwk)) {
+        if (!privateJwkMembers.has(name) && value !== undefined) {
+            jwk[name] = value;
+        }
+    }
+    return {
+        ...jwk,
+        kty: String(jwk.kty ?? key.publicJwk.kty),
+        kid: String(jwk.kid ?? key.id),
+        alg: String(jwk.alg ?? key.alg),
+        use: String(jwk.use ?? "sig"),
+    };
+};
+export const makeJwtKeysMemory = (records) => {
+    const keys = records.map((record) => ({ ...record }));
+    return JwtKeys.make({
+        selectSigningKey: (input) => {
+            const alg = input?.alg ?? "HS256";
+            const key = keys.find((record) => isSigningKey(record, alg, input?.now));
+            return Effect.succeed(key === undefined ? Option.none() : Option.some(key));
+        },
+        findVerificationKey: (input) => {
+            const key = keys.find((record) => isVerificationKey(record, input));
+            return Effect.succeed(key === undefined ? Option.none() : Option.some(key));
+        },
+        listPublicJwks: (input) => Effect.succeed(keys
+            .filter((key) => isUsableAt(key, input?.now))
+            .flatMap((key) => {
+            const publicJwk = publicJwkFromKey(key);
+            return publicJwk === undefined ? [] : [publicJwk];
+        })),
+    });
+};
+export const JwtKeysMemoryLive = (records) => Layer.succeed(JwtKeys)(makeJwtKeysMemory(records));
+const cloneRevocationRecord = (record) => ({ ...record });
+export const makeJwtRevocationStoreMemory = () => {
+    const records = new Map();
+    return JwtRevocationStore.make({
+        revoke: (record) => Effect.sync(() => {
+            records.set(record.jwtId, cloneRevocationRecord(record));
+        }),
+        find: (jwtId) => Effect.sync(() => {
+            const record = records.get(jwtId);
+            return record === undefined
+                ? Option.none()
+                : Option.some(cloneRevocationRecord(record));
+        }),
+    });
+};
+export const JwtRevocationStoreMemoryLive = Layer.sync(JwtRevocationStore)(makeJwtRevocationStoreMemory);
+const normalizedJwtId = (jwtId) => {
+    const value = jwtId.trim();
+    return value.length === 0
+        ? Effect.fail(jwtError("revocation", "JWT ID must not be empty"))
+        : Effect.succeed(value);
+};
+const revocationRecordActiveAt = (record, now) => record.expiresAt === undefined || Number(now) < Number(record.expiresAt);
+const jwtIdFromClaims = (claims) => {
+    const jwtId = typeof claims.jti === "string" ? claims.jti.trim() : "";
+    return jwtId.length === 0 ? undefined : jwtId;
+};
+const expiresAtFromClaims = (claims) => typeof claims.exp === "number" ? UnixMillis(claims.exp * 1000) : undefined;
+export const makeJwtRevocation = (dependencies) => JwtRevocation.make({
+    revokeJwtId: Effect.fn("auth.jwt.revocation.revoke_jwt_id")(function* (input) {
+        const jwtId = yield* normalizedJwtId(input.jwtId);
+        const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
+        const record = {
+            jwtId,
+            revokedAt,
+            ...(input.expiresAt === undefined ? {} : { expiresAt: input.expiresAt }),
+            ...(input.reason === undefined ? {} : { reason: input.reason }),
+        };
+        yield* dependencies.store.revoke(record);
+        return record;
+    }),
+    isRevoked: Effect.fn("auth.jwt.revocation.is_revoked")(function* (input) {
+        const jwtId = yield* normalizedJwtId(input.jwtId);
+        const now = input.now ?? (yield* currentUnixMillis);
+        const record = yield* dependencies.store.find(jwtId);
+        return Option.isSome(record) && revocationRecordActiveAt(record.value, now);
+    }),
+    introspect: Effect.fn("auth.jwt.revocation.introspect")(function* (input) {
+        const verified = yield* dependencies.verifier.verify(input);
+        if (!verified.valid) {
+            return {
+                active: false,
+                reason: verified.reason,
+            };
+        }
+        const jwtId = jwtIdFromClaims(verified.claims);
+        const expiresAt = expiresAtFromClaims(verified.claims);
+        if (jwtId !== undefined) {
+            const now = input.now ?? (yield* currentUnixMillis);
+            const record = yield* dependencies.store.find(jwtId);
+            if (Option.isSome(record) && revocationRecordActiveAt(record.value, now)) {
+                return {
+                    active: false,
+                    reason: "revoked",
+                    jwtId,
+                    ...(expiresAt === undefined ? {} : { expiresAt }),
+                    revokedAt: record.value.revokedAt,
+                    ...(record.value.reason === undefined
+                        ? {}
+                        : { revokedReason: record.value.reason }),
+                };
+            }
+        }
+        return {
+            active: true,
+            header: verified.header,
+            claims: verified.claims,
+            key: verified.key,
+            ...(jwtId === undefined ? {} : { jwtId }),
+            ...(expiresAt === undefined ? {} : { expiresAt }),
+            revoked: false,
+        };
+    }),
+});
+const encodeJson = (value) => Encoding.encodeBase64Url(textEncoder.encode(JSON.stringify(value)));
+const decodeJsonObject = (value) => {
+    const bytes = Result.match(Encoding.decodeBase64Url(value), {
+        onSuccess: (decoded) => decoded,
+        onFailure: () => undefined,
+    });
+    if (bytes === undefined) {
+        return undefined;
+    }
+    try {
+        const parsed = JSON.parse(textDecoder.decode(bytes));
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+const decodeHeader = (part) => {
+    const value = decodeJsonObject(part);
+    if (value === undefined || typeof value.kid !== "string") {
+        return "malformed";
+    }
+    if (!isJwtAlgorithm(value.alg)) {
+        return "unsupported_alg";
+    }
+    return {
+        typ: "JWT",
+        alg: value.alg,
+        kid: JwtKeyId(value.kid),
+    };
+};
+const decodeClaims = (part) => {
+    const value = decodeJsonObject(part);
+    return value === undefined ? undefined : value;
+};
+const signHs256 = (crypto, key, data, operation) => crypto.hmacSha256({ key, data }).pipe(Effect.mapError((cause) => jwtError(operation, "Failed to calculate JWT signature", cause)));
+const getJwtWebCrypto = (options) => {
+    const crypto = options?.crypto ?? globalThis.crypto;
+    if (crypto === undefined) {
+        throw jwtError("signature", "Web Crypto is not available");
+    }
+    return crypto;
+};
+const rs256ImportAlgorithm = {
+    name: "RSASSA-PKCS1-v1_5",
+    hash: "SHA-256",
+};
+const es256ImportAlgorithm = {
+    name: "ECDSA",
+    namedCurve: "P-256",
+};
+const es256SignAlgorithm = {
+    name: "ECDSA",
+    hash: "SHA-256",
+};
+const ed25519ImportAlgorithm = {
+    name: "Ed25519",
+};
+const jwkForImport = (jwk) => ({ ...jwk });
+const decodeBase64UrlBytes = (value) => Result.match(Encoding.decodeBase64Url(value), {
+    onSuccess: (bytes) => bytes,
+    onFailure: () => undefined,
+});
+const readDerLength = (signature, offset) => {
+    const first = signature[offset];
+    if (first === undefined) {
+        return undefined;
+    }
+    if (first < 0x80) {
+        return [first, offset + 1];
+    }
+    const byteLength = first & 0x7f;
+    if (byteLength === 0 || byteLength > 2 || offset + byteLength >= signature.length) {
+        return undefined;
+    }
+    let length = 0;
+    for (let index = 0; index < byteLength; index += 1) {
+        length = (length << 8) | (signature[offset + 1 + index] ?? 0);
+    }
+    return [length, offset + 1 + byteLength];
+};
+const normalizeDerInteger = (value, byteLength) => {
+    let offset = 0;
+    while (offset < value.length - 1 && value[offset] === 0) {
+        offset += 1;
+    }
+    const normalized = value.slice(offset);
+    if (normalized.length > byteLength) {
+        return undefined;
+    }
+    const output = new Uint8Array(byteLength);
+    output.set(normalized, byteLength - normalized.length);
+    return output;
+};
+const derEcdsaSignatureToJose = (signature, byteLength) => {
+    if (signature.length === byteLength * 2) {
+        return signature;
+    }
+    if (signature[0] !== 0x30) {
+        return undefined;
+    }
+    const sequenceLength = readDerLength(signature, 1);
+    if (sequenceLength === undefined) {
+        return undefined;
+    }
+    const [length, sequenceOffset] = sequenceLength;
+    let offset = sequenceOffset;
+    if (offset + length !== signature.length || signature[offset] !== 0x02) {
+        return undefined;
+    }
+    const rLength = readDerLength(signature, offset + 1);
+    if (rLength === undefined) {
+        return undefined;
+    }
+    const [rSize, rOffset] = rLength;
+    const r = normalizeDerInteger(signature.slice(rOffset, rOffset + rSize), byteLength);
+    offset = rOffset + rSize;
+    if (r === undefined || signature[offset] !== 0x02) {
+        return undefined;
+    }
+    const sLength = readDerLength(signature, offset + 1);
+    if (sLength === undefined) {
+        return undefined;
+    }
+    const [sSize, sOffset] = sLength;
+    const s = normalizeDerInteger(signature.slice(sOffset, sOffset + sSize), byteLength);
+    if (s === undefined || sOffset + sSize !== signature.length) {
+        return undefined;
+    }
+    const output = new Uint8Array(byteLength * 2);
+    output.set(r, 0);
+    output.set(s, byteLength);
+    return output;
+};
+const derInteger = (value) => {
+    let offset = 0;
+    while (offset < value.length - 1 && value[offset] === 0) {
+        offset += 1;
+    }
+    const normalized = value.slice(offset);
+    const needsPadding = (normalized[0] ?? 0) >= 0x80;
+    const output = new Uint8Array(normalized.length + (needsPadding ? 3 : 2));
+    output[0] = 0x02;
+    output[1] = normalized.length + (needsPadding ? 1 : 0);
+    if (needsPadding) {
+        output[2] = 0;
+        output.set(normalized, 3);
+    }
+    else {
+        output.set(normalized, 2);
+    }
+    return output;
+};
+const joseEcdsaSignatureToDer = (signature, byteLength) => {
+    if (signature.length !== byteLength * 2) {
+        return undefined;
+    }
+    const r = derInteger(signature.slice(0, byteLength));
+    const s = derInteger(signature.slice(byteLength));
+    const payloadLength = r.length + s.length;
+    const output = new Uint8Array(2 + payloadLength);
+    output[0] = 0x30;
+    output[1] = payloadLength;
+    output.set(r, 2);
+    output.set(s, 2 + r.length);
+    return output;
+};
+export const makeJwtSignature = (dependencies) => JwtSignature.make({
+    supports: (alg) => alg === "HS256",
+    canSign: (input) => input.alg === "HS256" && input.key.secret !== undefined,
+    canVerify: (input) => input.alg === "HS256" && input.key.secret !== undefined,
+    sign: Effect.fn("auth.jwt.signature.sign")(function* (input) {
+        if (input.alg !== "HS256" || input.key.secret === undefined) {
+            return yield* jwtError("signature", "JWT signature algorithm is not supported");
+        }
+        return yield* signHs256(dependencies.crypto, input.key.secret, input.signingInput, "signature");
+    }),
+    verify: Effect.fn("auth.jwt.signature.verify")(function* (input) {
+        if (input.alg !== "HS256" || input.key.secret === undefined) {
+            return false;
+        }
+        const expectedSignature = yield* signHs256(dependencies.crypto, input.key.secret, input.signingInput, "signature");
+        return yield* timingSafeEqualString(dependencies.crypto, expectedSignature, input.signature).pipe(Effect.mapError((cause) => jwtError("signature", "Failed to compare JWT signature", cause)));
+    }),
+});
+export const makeJwtWebCryptoRs256Signature = (options) => JwtSignature.make({
+    supports: (alg) => alg === "RS256",
+    canSign: (input) => input.alg === "RS256" && input.key.privateJwk !== undefined,
+    canVerify: (input) => input.alg === "RS256" && input.key.publicJwk !== undefined,
+    sign: Effect.fn("auth.jwt.signature.webcrypto_rs256.sign")(function* (input) {
+        const { privateJwk } = input.key;
+        if (input.alg !== "RS256" || privateJwk === undefined) {
+            return yield* jwtError("signature", "JWT RS256 private key is not available");
+        }
+        return yield* Effect.tryPromise({
+            try: async () => {
+                const crypto = getJwtWebCrypto(options);
+                const key = await crypto.subtle.importKey("jwk", jwkForImport(privateJwk), rs256ImportAlgorithm, false, ["sign"]);
+                const signature = await crypto.subtle.sign(rs256ImportAlgorithm, key, textEncoder.encode(input.signingInput));
+                return Encoding.encodeBase64Url(new Uint8Array(signature));
+            },
+            catch: (cause) => jwtError("signature", "Failed to sign RS256 JWT", cause),
+        });
+    }),
+    verify: Effect.fn("auth.jwt.signature.webcrypto_rs256.verify")(function* (input) {
+        const { publicJwk } = input.key;
+        if (input.alg !== "RS256" || publicJwk === undefined) {
+            return false;
+        }
+        const signature = decodeBase64UrlBytes(input.signature);
+        if (signature === undefined) {
+            return false;
+        }
+        return yield* Effect.tryPromise({
+            try: async () => {
+                const crypto = getJwtWebCrypto(options);
+                const key = await crypto.subtle.importKey("jwk", jwkForImport(publicJwk), rs256ImportAlgorithm, false, ["verify"]);
+                return await crypto.subtle.verify(rs256ImportAlgorithm, key, signature, textEncoder.encode(input.signingInput));
+            },
+            catch: (cause) => jwtError("signature", "Failed to verify RS256 JWT", cause),
+        });
+    }),
+});
+export const makeJwtWebCryptoEs256Signature = (options) => JwtSignature.make({
+    supports: (alg) => alg === "ES256",
+    canSign: (input) => input.alg === "ES256" && input.key.privateJwk !== undefined,
+    canVerify: (input) => input.alg === "ES256" && input.key.publicJwk !== undefined,
+    sign: Effect.fn("auth.jwt.signature.webcrypto_es256.sign")(function* (input) {
+        const { privateJwk } = input.key;
+        if (input.alg !== "ES256" || privateJwk === undefined) {
+            return yield* jwtError("signature", "JWT ES256 private key is not available");
+        }
+        return yield* Effect.tryPromise({
+            try: async () => {
+                const crypto = getJwtWebCrypto(options);
+                const key = await crypto.subtle.importKey("jwk", jwkForImport(privateJwk), es256ImportAlgorithm, false, ["sign"]);
+                const signature = new Uint8Array(await crypto.subtle.sign(es256SignAlgorithm, key, textEncoder.encode(input.signingInput)));
+                const joseSignature = derEcdsaSignatureToJose(signature, 32);
+                if (joseSignature === undefined) {
+                    throw new Error("Invalid ES256 signature encoding");
+                }
+                return Encoding.encodeBase64Url(joseSignature);
+            },
+            catch: (cause) => jwtError("signature", "Failed to sign ES256 JWT", cause),
+        });
+    }),
+    verify: Effect.fn("auth.jwt.signature.webcrypto_es256.verify")(function* (input) {
+        const { publicJwk } = input.key;
+        if (input.alg !== "ES256" || publicJwk === undefined) {
+            return false;
+        }
+        const signature = decodeBase64UrlBytes(input.signature);
+        if (signature === undefined || signature.length !== 64) {
+            return false;
+        }
+        return yield* Effect.tryPromise({
+            try: async () => {
+                const crypto = getJwtWebCrypto(options);
+                const key = await crypto.subtle.importKey("jwk", jwkForImport(publicJwk), es256ImportAlgorithm, false, ["verify"]);
+                const signingInput = textEncoder.encode(input.signingInput);
+                try {
+                    if (await crypto.subtle.verify(es256SignAlgorithm, key, signature, signingInput)) {
+                        return true;
+                    }
+                }
+                catch {
+                    // Some WebCrypto implementations expect DER-encoded ECDSA signatures.
+                }
+                const derSignature = joseEcdsaSignatureToDer(signature, 32);
+                return derSignature === undefined
+                    ? false
+                    : await crypto.subtle.verify(es256SignAlgorithm, key, derSignature, signingInput);
+            },
+            catch: (cause) => jwtError("signature", "Failed to verify ES256 JWT", cause),
+        });
+    }),
+});
+export const makeJwtWebCryptoEdDsaSignature = (options) => JwtSignature.make({
+    supports: (alg) => alg === "EdDSA",
+    canSign: (input) => input.alg === "EdDSA" && input.key.privateJwk !== undefined,
+    canVerify: (input) => input.alg === "EdDSA" && input.key.publicJwk !== undefined,
+    sign: Effect.fn("auth.jwt.signature.webcrypto_eddsa.sign")(function* (input) {
+        const { privateJwk } = input.key;
+        if (input.alg !== "EdDSA" || privateJwk === undefined) {
+            return yield* jwtError("signature", "JWT EdDSA private key is not available");
+        }
+        return yield* Effect.tryPromise({
+            try: async () => {
+                const crypto = getJwtWebCrypto(options);
+                const key = await crypto.subtle.importKey("jwk", jwkForImport(privateJwk), ed25519ImportAlgorithm, false, ["sign"]);
+                const signature = await crypto.subtle.sign(ed25519ImportAlgorithm, key, textEncoder.encode(input.signingInput));
+                return Encoding.encodeBase64Url(new Uint8Array(signature));
+            },
+            catch: (cause) => jwtError("signature", "Failed to sign EdDSA JWT", cause),
+        });
+    }),
+    verify: Effect.fn("auth.jwt.signature.webcrypto_eddsa.verify")(function* (input) {
+        const { publicJwk } = input.key;
+        if (input.alg !== "EdDSA" || publicJwk === undefined) {
+            return false;
+        }
+        const signature = decodeBase64UrlBytes(input.signature);
+        if (signature === undefined || signature.length !== 64) {
+            return false;
+        }
+        return yield* Effect.tryPromise({
+            try: async () => {
+                const crypto = getJwtWebCrypto(options);
+                const key = await crypto.subtle.importKey("jwk", jwkForImport(publicJwk), ed25519ImportAlgorithm, false, ["verify"]);
+                return await crypto.subtle.verify(ed25519ImportAlgorithm, key, signature, textEncoder.encode(input.signingInput));
+            },
+            catch: (cause) => jwtError("signature", "Failed to verify EdDSA JWT", cause),
+        });
+    }),
+});
+const audienceValues = (value) => {
+    if (typeof value === "string") {
+        return [value];
+    }
+    if (Array.isArray(value) && value.every((item) => typeof item === "string")) {
+        return value;
+    }
+    return [];
+};
+const clockToleranceSeconds = (input) => input.clockTolerance === undefined
+    ? 0
+    : Math.ceil(Duration.toMillis(input.clockTolerance) / 1000);
+const validateClaims = (claims, input, now) => {
+    const nowSeconds = numericDate(now);
+    const toleranceSeconds = clockToleranceSeconds(input);
+    if (claims.exp !== undefined &&
+        (typeof claims.exp !== "number" || nowSeconds - toleranceSeconds >= claims.exp)) {
+        return "expired";
+    }
+    if (claims.nbf !== undefined &&
+        (typeof claims.nbf !== "number" || nowSeconds + toleranceSeconds < claims.nbf)) {
+        return "not_yet_valid";
+    }
+    if (input.issuer !== undefined && claims.iss !== input.issuer) {
+        return "issuer_mismatch";
+    }
+    if (input.audience !== undefined) {
+        const expected = audienceValues(input.audience);
+        const actual = audienceValues(claims.aud);
+        if (expected.length === 0 ||
+            actual.length === 0 ||
+            !expected.some((audience) => actual.includes(audience))) {
+            return "audience_mismatch";
+        }
+    }
+    return undefined;
+};
+const issuedClaims = (input, issuedAt) => {
+    const expiresAt = input.expiresAt ??
+        (input.expiresIn === undefined ? undefined : addDuration(issuedAt, input.expiresIn));
+    return {
+        ...input.claims,
+        ...(input.issuer === undefined ? {} : { iss: input.issuer }),
+        ...(input.subject === undefined ? {} : { sub: input.subject }),
+        ...(input.audience === undefined ? {} : { aud: input.audience }),
+        ...(expiresAt === undefined ? {} : { exp: numericDate(expiresAt) }),
+        ...(input.notBefore === undefined ? {} : { nbf: numericDate(input.notBefore) }),
+        iat: numericDate(issuedAt),
+        ...(input.jwtId === undefined ? {} : { jti: input.jwtId }),
+    };
+};
+export const makeJwtIssuer = (dependencies) => {
+    const signature = signatureService(dependencies);
+    return JwtIssuer.make({
+        issue: Effect.fn("auth.jwt.issue")(function* (input) {
+            const issuedAt = input.issuedAt ?? (yield* currentUnixMillis);
+            const alg = input.alg ?? "HS256";
+            if (!signature.supports(alg)) {
+                return yield* jwtError("issue", "JWT algorithm is not supported");
+            }
+            const key = yield* dependencies.keys.selectSigningKey({
+                alg,
+                now: issuedAt,
+            });
+            if (Option.isNone(key)) {
+                return yield* jwtError("issue", "No active JWT signing key is available");
+            }
+            if (!signature.canSign({ alg: key.value.alg, key: key.value })) {
+                return yield* jwtError("issue", "Selected JWT signing key is not supported by the signature service");
+            }
+            const header = {
+                typ: "JWT",
+                alg: key.value.alg,
+                kid: key.value.id,
+            };
+            const claims = issuedClaims(input, issuedAt);
+            const signingInput = `${encodeJson(header)}.${encodeJson(claims)}`;
+            const tokenSignature = yield* signature.sign({
+                alg: key.value.alg,
+                key: key.value,
+                signingInput,
+            });
+            return {
+                token: Redacted.make(JwtToken(`${signingInput}.${tokenSignature}`)),
+                header,
+                claims,
+                key: keyInfo(key.value),
+            };
+        }),
+    });
+};
+export const makeJwtVerifier = (dependencies) => {
+    const signature = signatureService(dependencies);
+    return JwtVerifier.make({
+        verify: Effect.fn("auth.jwt.verify")(function* (input) {
+            const token = Redacted.value(input.token).trim();
+            const parts = token.split(".");
+            if (parts.length !== 3) {
+                return { valid: false, reason: "malformed" };
+            }
+            const [headerPart, payloadPart, signaturePart] = parts;
+            const header = decodeHeader(headerPart);
+            if (typeof header === "string") {
+                return { valid: false, reason: header };
+            }
+            if (!signature.supports(header.alg)) {
+                return {
+                    valid: false,
+                    reason: "unsupported_alg",
+                };
+            }
+            const now = input.now ?? (yield* currentUnixMillis);
+            const key = yield* dependencies.keys.findVerificationKey({
+                kid: header.kid,
+                alg: header.alg,
+                now,
+            });
+            if (Option.isNone(key)) {
+                return { valid: false, reason: "unknown_key" };
+            }
+            if (!signature.canVerify({ alg: header.alg, key: key.value })) {
+                return { valid: false, reason: "unknown_key" };
+            }
+            const signatureMatches = yield* signature.verify({
+                alg: header.alg,
+                key: key.value,
+                signingInput: `${headerPart}.${payloadPart}`,
+                signature: signaturePart,
+            });
+            if (!signatureMatches) {
+                return {
+                    valid: false,
+                    reason: "invalid_signature",
+                };
+            }
+            const claims = decodeClaims(payloadPart);
+            if (claims === undefined) {
+                return { valid: false, reason: "malformed" };
+            }
+            const invalidReason = validateClaims(claims, input, now);
+            if (invalidReason !== undefined) {
+                return { valid: false, reason: invalidReason };
+            }
+            return {
+                valid: true,
+                header,
+                claims,
+                key: keyInfo(key.value),
+            };
+        }),
+    });
+};
+export const makeJwks = (dependencies) => Jwks.make({
+    document: Effect.fn("auth.jwks.document")(function* (input) {
+        const now = input?.now ?? (yield* currentUnixMillis);
+        const keys = yield* dependencies.keys.listPublicJwks({ now });
+        return { keys };
+    }),
+});
+export const JwtSignatureLive = Layer.effect(JwtSignature)(Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    return makeJwtSignature({ crypto });
+}));
+export const JwtWebCryptoRs256SignatureLive = (options) => Layer.succeed(JwtSignature)(makeJwtWebCryptoRs256Signature(options));
+export const JwtWebCryptoEs256SignatureLive = (options) => Layer.succeed(JwtSignature)(makeJwtWebCryptoEs256Signature(options));
+export const JwtWebCryptoEdDsaSignatureLive = (options) => Layer.succeed(JwtSignature)(makeJwtWebCryptoEdDsaSignature(options));
+export const JwtIssuerWithSignatureLive = Layer.effect(JwtIssuer)(Effect.gen(function* () {
+    const keys = yield* JwtKeys;
+    const signature = yield* JwtSignature;
+    return makeJwtIssuer({ keys, signature });
+}));
+export const JwtVerifierWithSignatureLive = Layer.effect(JwtVerifier)(Effect.gen(function* () {
+    const keys = yield* JwtKeys;
+    const signature = yield* JwtSignature;
+    return makeJwtVerifier({ keys, signature });
+}));
+export const JwtIssuerLive = JwtIssuerWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
+export const JwtVerifierLive = JwtVerifierWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
+export const JwksLive = Layer.effect(Jwks)(Effect.gen(function* () {
+    const keys = yield* JwtKeys;
+    return makeJwks({ keys });
+}));
+export const JwtRevocationLive = Layer.effect(JwtRevocation)(Effect.gen(function* () {
+    const verifier = yield* JwtVerifier;
+    const store = yield* JwtRevocationStore;
+    return makeJwtRevocation({ verifier, store });
+}));
+export const JwtWithSignatureLive = Layer.mergeAll(JwtIssuerWithSignatureLive, JwtVerifierWithSignatureLive, JwksLive);
+export const JwtLive = JwtWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
+//# sourceMappingURL=Jwt.js.map