@fedify/fedify 1.6.0-dev.814 → 1.6.0-experiment.0

package/dist/sig/proof.test.js

@@ -0,0 +1,263 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import { decode } from "../runtime/multibase/index.js";
+import { importMultibaseKey } from "../runtime/key.js";
+import { Create, DataIntegrityProof, Multikey, Note, Place } from "../vocab/vocab.js";
+import { createProof, signObject, verifyObject, verifyProof } from "./proof.js";
+import { assertEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_equals.js";
+import { assertInstanceOf } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_instance_of.js";
+import { test } from "../testing/mod.js";
+import { assertRejects } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_rejects.js";
+import { mockDocumentLoader } from "../testing/docloader.js";
+import { ed25519Multikey, ed25519PrivateKey, ed25519PublicKey, rsaPrivateKey2, rsaPublicKey2 } from "../testing/keys.js";
+import { decodeHex, encodeHex } from "byte-encodings/hex";
+
+//#region sig/proof.test.ts
+const fep8b32TestVectorPrivateKey = await crypto.subtle.importKey("jwk", {
+	"kty": "OKP",
+	"crv": "Ed25519",
+	"d": "yW756hDF5BTEcXI6_53nLDX6W3D66X6IMuysfS4rjtY",
+	"x": "sA2Nk45_dz1RVlqtNqYj9TRPf10ZYPnPPo4SYg6igQ8",
+	key_ops: ["sign"],
+	ext: true
+}, "Ed25519", true, ["sign"]);
+const fep8b32TestVectorKeyId = new URL("https://server.example/users/alice#ed25519-key");
+const fep8b32TestVectorActivity = new Create({
+	id: new URL("https://server.example/activities/1"),
+	actor: new URL("https://server.example/users/alice"),
+	object: new Note({
+		id: new URL("https://server.example/objects/1"),
+		attribution: new URL("https://server.example/users/alice"),
+		content: "Hello world",
+		location: new Place({
+			longitude: -71.184902,
+			latitude: 25.273962
+		})
+	})
+});
+test("createProof()", async () => {
+	const create = new Create({
+		actor: new URL("https://example.com/person"),
+		object: new Note({ content: "Hello, world!" })
+	});
+	const created = Temporal.Instant.from("2023-02-24T23:36:38Z");
+	const proof = await createProof(create, ed25519PrivateKey, ed25519PublicKey.id, {
+		created,
+		contextLoader: mockDocumentLoader
+	});
+	assertEquals(proof.cryptosuite, "eddsa-jcs-2022");
+	assertEquals(proof.verificationMethodId, ed25519PublicKey.id);
+	assertEquals(proof.proofPurpose, "assertionMethod");
+	console.log(encodeHex(proof.proofValue));
+	assertEquals(proof.proofValue, decodeHex("938622eea473de8223c31cd59f941251e620cd4e1fca9fcda7f37fcd7d27cf8f9b0f7f381938829d0fa4bb27095919ac8bc86a04e3013c6c3a10d6b73b8a300e"));
+	assertEquals(proof.created, created);
+	assertEquals(await verifyProof(await create.toJsonLd({
+		format: "compact",
+		contextLoader: mockDocumentLoader
+	}), proof, {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	}), ed25519Multikey);
+	const proof2 = await createProof(fep8b32TestVectorActivity, fep8b32TestVectorPrivateKey, fep8b32TestVectorKeyId, {
+		created,
+		contextLoader: mockDocumentLoader,
+		context: ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"]
+	});
+	assertEquals(proof2.cryptosuite, "eddsa-jcs-2022");
+	assertEquals(proof2.verificationMethodId, fep8b32TestVectorKeyId);
+	assertEquals(proof2.proofPurpose, "assertionMethod");
+	assertEquals(proof2.proofValue, decode("zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z"));
+	assertEquals(proof2.created, created);
+	await assertRejects(() => createProof(create, rsaPrivateKey2, rsaPublicKey2.id, {
+		created,
+		contextLoader: mockDocumentLoader
+	}), TypeError, "Unsupported algorithm");
+});
+test("signObject()", async () => {
+	const options = {
+		format: "compact",
+		contextLoader: mockDocumentLoader,
+		documentLoader: mockDocumentLoader,
+		context: ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"]
+	};
+	const created = Temporal.Instant.from("2023-02-24T23:36:38Z");
+	const signedObject = await signObject(fep8b32TestVectorActivity, fep8b32TestVectorPrivateKey, fep8b32TestVectorKeyId, {
+		...options,
+		created
+	});
+	assertEquals(await signedObject.toJsonLd(options), {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://server.example/activities/1",
+		type: "Create",
+		actor: "https://server.example/users/alice",
+		object: {
+			id: "https://server.example/objects/1",
+			type: "Note",
+			attributedTo: "https://server.example/users/alice",
+			content: "Hello world",
+			location: {
+				type: "Place",
+				longitude: -71.184902,
+				latitude: 25.273962
+			}
+		},
+		proof: {
+			"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+			type: "DataIntegrityProof",
+			cryptosuite: "eddsa-jcs-2022",
+			verificationMethod: "https://server.example/users/alice#ed25519-key",
+			proofPurpose: "assertionMethod",
+			proofValue: "zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z",
+			created: "2023-02-24T23:36:38Z"
+		}
+	});
+	const signedObject2 = await signObject(signedObject, ed25519PrivateKey, ed25519Multikey.id, {
+		...options,
+		created
+	});
+	assertEquals(await signedObject2.toJsonLd(options), {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://server.example/activities/1",
+		type: "Create",
+		actor: "https://server.example/users/alice",
+		object: {
+			id: "https://server.example/objects/1",
+			type: "Note",
+			attributedTo: "https://server.example/users/alice",
+			content: "Hello world",
+			location: {
+				type: "Place",
+				longitude: -71.184902,
+				latitude: 25.273962
+			}
+		},
+		proof: [{
+			"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+			type: "DataIntegrityProof",
+			cryptosuite: "eddsa-jcs-2022",
+			verificationMethod: "https://server.example/users/alice#ed25519-key",
+			proofPurpose: "assertionMethod",
+			proofValue: "zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z",
+			created: "2023-02-24T23:36:38Z"
+		}, {
+			"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+			created: "2023-02-24T23:36:38Z",
+			cryptosuite: "eddsa-jcs-2022",
+			proofPurpose: "assertionMethod",
+			proofValue: "zVrcY69MxozB9V9hmMmsjoB4YLCXvn6ienKr6jsP2rztSEr1WhMJymPqujKofkrV3C7A2C9iKYnRNSvtPgDQBCw2",
+			type: "DataIntegrityProof",
+			verificationMethod: "https://example.com/person2#key4"
+		}]
+	});
+	await assertRejects(() => signObject(fep8b32TestVectorActivity, rsaPrivateKey2, rsaPublicKey2.id, {
+		created,
+		contextLoader: mockDocumentLoader
+	}), TypeError, "Unsupported algorithm");
+});
+test("verifyProof()", async () => {
+	const cache = {};
+	const options = {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader,
+		keyCache: {
+			get(keyId) {
+				return Promise.resolve(cache[keyId.href]);
+			},
+			set(keyId, key) {
+				cache[keyId.href] = key;
+				return Promise.resolve();
+			}
+		}
+	};
+	const jsonLd = {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://server.example/activities/1",
+		type: "Create",
+		actor: "https://server.example/users/alice",
+		object: {
+			id: "https://server.example/objects/1",
+			type: "Note",
+			attributedTo: "https://server.example/users/alice",
+			content: "Hello world",
+			location: {
+				type: "Place",
+				longitude: -71.184902,
+				latitude: 25.273962
+			}
+		}
+	};
+	const proof = new DataIntegrityProof({
+		cryptosuite: "eddsa-jcs-2022",
+		verificationMethod: new URL("https://server.example/users/alice#ed25519-key"),
+		proofPurpose: "assertionMethod",
+		proofValue: decode("zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z"),
+		created: Temporal.Instant.from("2023-02-24T23:36:38Z")
+	});
+	const expectedKey = new Multikey({
+		id: new URL("https://server.example/users/alice#ed25519-key"),
+		controller: new URL("https://server.example/users/alice"),
+		publicKey: await importMultibaseKey("z6MkrJVnaZkeFzdQyMZu1cgjg7k1pZZ6pvBQ7XJPt4swbTQ2")
+	});
+	assertEquals(await verifyProof(jsonLd, proof, options), expectedKey);
+	assertEquals(cache["https://server.example/users/alice#ed25519-key"], expectedKey);
+	cache["https://server.example/users/alice#ed25519-key"] = ed25519Multikey;
+	assertEquals(await verifyProof(jsonLd, proof, options), expectedKey);
+	assertEquals(cache["https://server.example/users/alice#ed25519-key"], expectedKey);
+	const jsonLd2 = {
+		...jsonLd,
+		object: {
+			...jsonLd.object,
+			content: "bye"
+		}
+	};
+	assertEquals(await verifyProof(jsonLd2, proof, options), null);
+	const wrongProof = proof.clone({ created: Temporal.Now.instant() });
+	assertEquals(await verifyProof(jsonLd, wrongProof, options), null);
+});
+test("verifyObject()", async () => {
+	const options = {
+		documentLoader: mockDocumentLoader,
+		contextLoader: mockDocumentLoader
+	};
+	const create = await verifyObject(Create, {
+		"@context": ["https://www.w3.org/ns/activitystreams", "https://w3id.org/security/data-integrity/v1"],
+		id: "https://server.example/activities/1",
+		type: "Create",
+		actor: "https://server.example/users/alice",
+		object: {
+			id: "https://server.example/objects/1",
+			type: "Note",
+			attributedTo: "https://server.example/users/alice",
+			content: "Hello world",
+			location: {
+				type: "Place",
+				longitude: -71.184902,
+				latitude: 25.273962
+			}
+		},
+		proof: [{
+			type: "DataIntegrityProof",
+			cryptosuite: "eddsa-jcs-2022",
+			verificationMethod: "https://server.example/users/alice#ed25519-key",
+			proofPurpose: "assertionMethod",
+			proofValue: "zLaewdp4H9kqtwyrLatK4cjY5oRHwVcw4gibPSUDYDMhi4M49v8pcYk3ZB6D69dNpAPbUmY8ocuJ3m9KhKJEEg7z",
+			created: "2023-02-24T23:36:38Z"
+		}, {
+			created: "2023-02-24T23:36:38Z",
+			cryptosuite: "eddsa-jcs-2022",
+			proofPurpose: "assertionMethod",
+			proofValue: "zVrcY69MxozB9V9hmMmsjoB4YLCXvn6ienKr6jsP2rztSEr1WhMJymPqujKofkrV3C7A2C9iKYnRNSvtPgDQBCw2",
+			type: "DataIntegrityProof",
+			verificationMethod: "https://example.com/person2#key4"
+		}]
+	}, options);
+	assertInstanceOf(create, Create);
+	assertEquals(create.actorId, new URL("https://server.example/users/alice"));
+	const note = await create.getObject(options);
+	assertInstanceOf(note, Note);
+	assertEquals(note.content, "Hello world");
+});
+
+//#endregion

package/dist/testing/context.js

@@ -0,0 +1,94 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import { RouterError } from "../federation/router.js";
+import { lookupWebFinger } from "../webfinger/lookup.js";
+import { lookupObject, traverseCollection } from "../vocab/lookup.js";
+import { mockDocumentLoader } from "./docloader.js";
+import { trace } from "@opentelemetry/api";
+
+//#region testing/context.ts
+function createContext({ url, canonicalOrigin, data, documentLoader, contextLoader, tracerProvider, getNodeInfoUri, getActorUri, getObjectUri, getOutboxUri, getInboxUri, getFollowingUri, getFollowersUri, getLikedUri, getFeaturedUri, getFeaturedTagsUri, parseUri, getActorKeyPairs, getDocumentLoader, lookupObject: lookupObject$1, traverseCollection: traverseCollection$1, lookupNodeInfo, lookupWebFinger: lookupWebFinger$1, sendActivity, routeActivity }) {
+	function throwRouteError() {
+		throw new RouterError("Not implemented");
+	}
+	url ??= new URL("http://example.com/");
+	return {
+		data,
+		origin: url.origin,
+		canonicalOrigin: canonicalOrigin ?? url.origin,
+		host: url.host,
+		hostname: url.hostname,
+		documentLoader: documentLoader ?? mockDocumentLoader,
+		contextLoader: contextLoader ?? mockDocumentLoader,
+		tracerProvider: tracerProvider ?? trace.getTracerProvider(),
+		getNodeInfoUri: getNodeInfoUri ?? throwRouteError,
+		getActorUri: getActorUri ?? throwRouteError,
+		getObjectUri: getObjectUri ?? throwRouteError,
+		getOutboxUri: getOutboxUri ?? throwRouteError,
+		getInboxUri: getInboxUri ?? throwRouteError,
+		getFollowingUri: getFollowingUri ?? throwRouteError,
+		getFollowersUri: getFollowersUri ?? throwRouteError,
+		getLikedUri: getLikedUri ?? throwRouteError,
+		getFeaturedUri: getFeaturedUri ?? throwRouteError,
+		getFeaturedTagsUri: getFeaturedTagsUri ?? throwRouteError,
+		parseUri: parseUri ?? ((_uri) => {
+			throw new Error("Not implemented");
+		}),
+		getDocumentLoader: getDocumentLoader ?? ((_params) => {
+			throw new Error("Not implemented");
+		}),
+		getActorKeyPairs: getActorKeyPairs ?? ((_handle) => Promise.resolve([])),
+		lookupObject: lookupObject$1 ?? ((uri, options = {}) => {
+			return lookupObject(uri, {
+				documentLoader: options.documentLoader ?? documentLoader ?? mockDocumentLoader,
+				contextLoader: options.contextLoader ?? contextLoader ?? mockDocumentLoader
+			});
+		}),
+		traverseCollection: traverseCollection$1 ?? ((collection, options = {}) => {
+			return traverseCollection(collection, {
+				documentLoader: options.documentLoader ?? documentLoader ?? mockDocumentLoader,
+				contextLoader: options.contextLoader ?? contextLoader ?? mockDocumentLoader
+			});
+		}),
+		lookupNodeInfo: lookupNodeInfo ?? ((_params) => {
+			throw new Error("Not implemented");
+		}),
+		lookupWebFinger: lookupWebFinger$1 ?? ((resource, options = {}) => {
+			return lookupWebFinger(resource, options);
+		}),
+		sendActivity: sendActivity ?? ((_params) => {
+			throw new Error("Not implemented");
+		}),
+		routeActivity: routeActivity ?? ((_params) => {
+			throw new Error("Not implemented");
+		})
+	};
+}
+function createRequestContext(args) {
+	return {
+		...createContext(args),
+		request: args.request ?? new Request(args.url),
+		url: args.url,
+		getActor: args.getActor ?? (() => Promise.resolve(null)),
+		getObject: args.getObject ?? (() => Promise.resolve(null)),
+		getSignedKey: args.getSignedKey ?? (() => Promise.resolve(null)),
+		getSignedKeyOwner: args.getSignedKeyOwner ?? (() => Promise.resolve(null)),
+		sendActivity: args.sendActivity ?? ((_params) => {
+			throw new Error("Not implemented");
+		})
+	};
+}
+function createInboxContext(args) {
+	return {
+		...createContext(args),
+		recipient: args.recipient ?? null,
+		forwardActivity: args.forwardActivity ?? ((_params) => {
+			throw new Error("Not implemented");
+		})
+	};
+}
+
+//#endregion
+export { createInboxContext, createRequestContext };

package/dist/testing/docloader.js

@@ -0,0 +1,48 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import { dirname } from "../node_modules/.pnpm/@jsr_std__path@1.0.9/node_modules/@jsr/std__path/dirname.js";
+import { fromFileUrl } from "../node_modules/.pnpm/@jsr_std__path@1.0.9/node_modules/@jsr/std__path/from_file_url.js";
+import { join } from "../node_modules/.pnpm/@jsr_std__path@1.0.9/node_modules/@jsr/std__path/join.js";
+import { getLogger } from "@logtape/logtape";
+import { readFileSync } from "node:fs";
+
+//#region testing/docloader.ts
+const logger = getLogger([
+	"fedify",
+	"testing",
+	"docloader"
+]);
+/**
+* A mock of the document loader.  This does not make any actual HTTP requests
+* towards the remote server, but looks up the local fixture files instead.
+*
+* For instance, `mockDocumentLoader("http://example.com/foo/bar")` will look up
+* the file `testing/fixtures/http/example.com/foo/bar` (no suffix) and return
+* its content as the response.
+*/
+function mockDocumentLoader(resource) {
+	const url = new URL(resource);
+	const path = (url.host + url.pathname).split("/");
+	if (url.search) path.push(url.search);
+	const filePath = join(dirname(fromFileUrl(import.meta.url)), "fixtures", ...path);
+	let content;
+	try {
+		content = readFileSync(filePath, { encoding: "utf-8" });
+	} catch (error) {
+		logger.error("Failed to read fixture file {filePath}: {error}", {
+			filePath,
+			error
+		});
+		throw error;
+	}
+	return Promise.resolve({
+		contextUrl: null,
+		document: JSON.parse(content),
+		documentUrl: resource
+	});
+}
+
+//#endregion
+export { mockDocumentLoader };

package/dist/testing/docloader.test.d.ts

@@ -0,0 +1,2 @@
+import { Temporal } from "@js-temporal/polyfill";
+import { URLPattern } from "urlpattern-polyfill";

package/dist/testing/docloader.test.js

@@ -0,0 +1,15 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import { assertEquals } from "../node_modules/.pnpm/@jsr_std__assert@0.226.0/node_modules/@jsr/std__assert/assert_equals.js";
+import { test } from "./mod.js";
+import { mockDocumentLoader } from "./docloader.js";
+
+//#region testing/docloader.test.ts
+test("mockDocumentLoader()", async () => {
+	const response = await mockDocumentLoader("https://example.com/test");
+	assertEquals(await response.document, { "https://example.com/prop/test": { "@value": "foo" } });
+});
+
+//#endregion

package/dist/testing/keys.js

@@ -0,0 +1,123 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import { importSpki } from "../runtime/key.js";
+import { CryptographicKey, Multikey } from "../vocab/vocab.js";
+
+//#region testing/keys.ts
+const rsaPublicKey1 = new CryptographicKey({
+	id: new URL("https://example.com/key"),
+	owner: new URL("https://example.com/person"),
+	publicKey: await crypto.subtle.importKey("jwk", {
+		kty: "RSA",
+		alg: "RS256",
+		n: "yIB9rotX8G6r6_6toT-x24BUiQ_HaPH1Em9dOt4c94s-OPFoEdH7DY7Iym9A8LlH4JaGF8KD38bLHWe1S4x0jV3gHJKhK7veJfGZCKUENcQecBZ-YWUs5HWvUIX1vVB__0luHrg6BQKGOrSOE-WIAxyr0qsWCFfZzQrvSnUD2yvg1arJX2xhms14uxoRd5Kg9efKSCmmQaNEapicARUmFWrIEpGFa_nUUnqimssAGw1eZFqf3wA4TjhsuARBhGaJtv_3KEa016eMZxy3kDlOjZnXZTaTgWkXdodwUvy8563fes3Al6BlcS2iJ9qbtha8rSm0FHqoUKH73JsLPKQIwQ",
+		e: "AQAB",
+		key_ops: ["verify"],
+		ext: true
+	}, {
+		name: "RSASSA-PKCS1-v1_5",
+		hash: "SHA-256"
+	}, true, ["verify"])
+});
+const rsaPrivateKey2 = await crypto.subtle.importKey("jwk", {
+	kty: "RSA",
+	alg: "RS256",
+	n: "oRmBtnxbdFutoRd1GLGwwGTrsqlRRWUe11hHQaoRLGf5LwQ0tIc6I9q-dynliw-2kxYsLn9SH2je6HcTYOolgW7F_cOWXZQN04b-OiYcU1ConAhLjmn4k1uKawJ614y0ScPNd8PQ-CljsnlPxbq9ofaCMe2BV3B6y09aCuGFJ0nxn1_ubjmIBIWWFTAznoz1J9BhJDGyt3IO3ABy3f9zDVlR32L_n5VIkXnxkjUKdzMAOzYb62kuKOp1iznRTPrV71SNtivJMwSh_LVgBrmZjtIn_oim-KyX_fdLU3tQ7VClyqmJzyAjccOH6Qj6nFTPh-vX07gqN8IlLT2uye4waw",
+	e: "AQAB",
+	d: "f-Pa2L7Sb4YUSa1wlSEC-0li35uQ3DFRkY0QTG2xYnpMFGoXWTV9D1epGrqU8pePzias_mCvFiZPx2Y4aRiYm68P2Mu7hCBz9XfWPN1iYTXIFM51BOLVpk3mjdsTICkgOusJI0m9jDR3ZAjwLj14K6qhYvd0VbECmoItLjQoW64Sc9iDgD3CvGoTqv71oTfW70cy-Ve1xQ9CThAmMOTKe6rYCUTA8tMZcPszifZ4iOasOjgvRxyel86LqGNtyslY8k86gQlMtFpR3VeZV_8otAWZn0mDc4vVU8HUO-DzYiIFdAcVxfPJh6tx7snCTsdzze_98OEAK4EWYBn7vsGFeQ",
+	p: "xuDd7tE_47NWwvDTpB403X13EPA3768MlNpl_v_BGiuP-1uvWUnsOVZB0F3HXSVg1sBVNtec46v7OU0P693gvYUhouTmSQpayY_VFqMklprWgs7cfneqbeDzv3C4Fw5waY-vjoINDsE1jYELUnl5cVjXXyxuGFG-IaLJKmHmHX0",
+	q: "z17X2t9zO6WcMp6W04gXdKmniJlxekOrOmWnrX9AwaM8NYCLN3y23r59nqNP9aUAWG1eoGFmav2rYQitWhz_VsEu2pQUsfsYKZYHchu5p_jCYwuM3rIg7aCbhtGv_tBoWAf1NvKMhtp2es0ZaHZCzKDGSOkIYDOB-ZDmNigWigc",
+	dp: "lrXReSkZQXSmSxQ1TimV5kMt96gSu4_r-OGIabVmoG5irhjMyN08Jjc3qK9oZS3uNM-LxAOg4OdzefjsF9IMfZJl6wuLd85g_l4BHSaEk5zC8l3QugX1IU9XZ7wDxXUrutMoNtZXDtdbveAMtHNZlIu-qmEBDWzkqJiz2WpW-AE",
+	dq: "TCLoYcX0ywuNA9DSU6v94KmBh1e_IELEFVbJb5vvLKlAK-ycMK0rfzC1co9Hhkski1LskTnxnoqwZ5oF-7X10eZvy3Te_FHSl0IsTar8ST2-MRtGh2UjTdvP_nnygj4GcXvKfngjPEfthDzVfVMeR38oDhDxMFD5AaY_v9aMH_U",
+	qi: "KC6gWhVM_x7iQgl-gEoSh_iM1Jf314ZLJKAAz1DsTHMi5yuCkCMmmY7h6jlkAJVngK3KIf5LPoAeUoGJ26E1kocbRU_nZBftMDVXHCYICz8qMQXR5euN_5SeJnu_VWXH-CY83MKhPYAorWSZ1-G9gh-C16LlRMzJwoE6h5QNeNo",
+	"key_ops": ["sign"],
+	"ext": true
+}, {
+	name: "RSASSA-PKCS1-v1_5",
+	hash: "SHA-256"
+}, true, ["sign"]);
+const rsaPublicKey2 = new CryptographicKey({
+	id: new URL("https://example.com/key2"),
+	publicKey: await crypto.subtle.importKey("jwk", {
+		kty: "RSA",
+		alg: "RS256",
+		n: "oRmBtnxbdFutoRd1GLGwwGTrsqlRRWUe11hHQaoRLGf5LwQ0tIc6I9q-dynliw-2kxYsLn9SH2je6HcTYOolgW7F_cOWXZQN04b-OiYcU1ConAhLjmn4k1uKawJ614y0ScPNd8PQ-CljsnlPxbq9ofaCMe2BV3B6y09aCuGFJ0nxn1_ubjmIBIWWFTAznoz1J9BhJDGyt3IO3ABy3f9zDVlR32L_n5VIkXnxkjUKdzMAOzYb62kuKOp1iznRTPrV71SNtivJMwSh_LVgBrmZjtIn_oim-KyX_fdLU3tQ7VClyqmJzyAjccOH6Qj6nFTPh-vX07gqN8IlLT2uye4waw",
+		e: "AQAB",
+		key_ops: ["verify"],
+		ext: true
+	}, {
+		"name": "RSASSA-PKCS1-v1_5",
+		"hash": "SHA-256"
+	}, true, ["verify"])
+});
+const rsaPrivateKey3 = await crypto.subtle.importKey("jwk", {
+	kty: "RSA",
+	alg: "RS256",
+	n: "4GUqWgdiYlN3Su5Gr4l6i-xRS8gDDVKZ718vpGk6eIpvqs33q430nRbHIzbHRXRaAhc_1--rUBcK0V4_kjZlCSzVtRgGU6HMkmjcD-uE56a8XbTczfltbEDj7afoEuB2F3UhQEWrSz-QJ29DPXaLMIa1Yv61NR2vxGqNbdtoMjDORMBYtg77CYbcFkiJHw65PDa7-f_yjLxuCRPye5L7hncN0UZuuFoRJmHNRLSg5omBad9WTvQXmSyXEhEdk9fHwlI022AqAzlWbT79hldcDSKGGLLbQIs1c3JZIG8G5i6Uh5Vy0Z7tSNBcxbhqoI9i9je4f_x_OPIVc19f04BE1LgWuHsftZzRgW9Sdqz53W83XxVdxlyHeywXOnstSWT11f8dkLyQUcHKTH-E6urbH-aiPLiRpYK8W7D9KTQA9kZ5JXaEuveBd5vJX7wakhbzAn8pWJU7GYIHNY38YcokmivkU5pY8S2cKFMwY0b7ade3MComlir5P3ZYSjF-n6gRVsT96P-9mNfCu9gXt_f8XCyjKlH89kGwuJ7HhR8CuVdm0l-jYozVt6GsDy0hHYyn79NCCAEzP7ZbhBMR0T5Vrkl-TIGXoJH9WFiz4VxO-NnglF6dNQjDS5IzYLoFRXIK1f3cmQiEB4FZmL70l9HLrgwR-Xys83xia79OqFDRezM",
+	e: "AQAB",
+	d: "HJ_LD0Dx4-kRxpUunyXCZCb5F9mjygdHa6mQwkBKHSZLqFYtycyJ76AANxW9xbZZ5PpiQoFoMQc_cgW7xkL6EHmPqVIvPGvfVK3bpIw-n-49CRcRM5UlyDFe4eoRSJcpeUSPwUsh1q99DAq9YRHGH6KPcNlc9DGdQkj1UZYzbHOdXFfM-SxgCY8SdCU8mKGgL3Yr9HAZ2KoQv0e0Ht9ZBoYZVSDO7uVOWr8PGDySadYQlBjRQbERcZCmlL9qLnnQGZGy_Gj_8vlVdQob_Q8XxvUode4a2djoMJndlK2VC7fVapY910-WpTsvGmmz8FdaIF5rQqhK8lCvO9BmwOwT23GaDVs0iMpFrVqQ6c0ZwD5Q-c39U8HE3-mlSyyz5kdsa1OdcJ64JSJH7Xl_vwLRgFgO7pPQhPm1N1XkDUgZOHAE6Hg-PEM3QdXSWnj2_znildsdUagf-1RsWVouVBSDNjUk5MQFPERW4wH2ersndnkvYe7FeU_HfkIi2A9xBr7Ti4O-MPU0sl_HdZ9PXGhzSMpMTB9NSeMpi9gd1ZZKmAe_t3mj1x6m2qXBv-Z05Gifae82YcaghuqkZ6QCxlpNxwbeZjb0vmMVqsds_qLQ4eg9Ww-R-8AlWm5HGCOrdJk4JnHZ5HzrFtwCj55cuutd6gHAq3Q1cbaKVO8rM_Ve5cE",
+	p: "8P4sJeDvEDJFMxARDuzmztlwdPtGfmHBvtzDFCm5UbL1w8Ga3mSv7uQMDMuc9vBqAq2Jd9d4MDwlXtUrk8Q9weuwgGWKLFrsmdgwH6-shNrHzar1Tojf9Fgi-t-Tr_PQwKnyioaKQhtPNCbishGRt0GJuLq5ag0RPPtHXIX8Ch-00ppL1yW3wFpPBBiOV7yPLEhwowa33yPYElTsASNiDKKtS4c_EyzdRWuJjtMZmEPPWfXvrOQSqXR6KY71tOOuo1S7ZkSZibcf88IILSmaAdzidgkZWlazjBBmNo54KaT6j6x5EMSr6EyafW8tBU-bCLVs__Hap_kSYsQw95l8Fw",
+	q: "7l5l9KqwDE0uBPKlXzpdg6rZ1dDuInnx0QTp_XUj8GRaeVCP1JfLJoa38-lN39AoAGUvndiHpnXkKKbKizcR5WY-6LAUFkAcXit7NP4fHPDLyiOZvTblZEryCbDS6jJrF5ii7rBXcC8LziZEBce-I7W9CZHUwOXfDAJNeslqDVZ9tlFXezjXZnqiBo3eq0hWQxO7CweZv0qE4GxMjs0E6IndQk8SAXA5RRbyoFzfChOyRtKOf9gxXOhwTKcKqWkjhK3xdpwcmHDpWycRShur-hazt6yBCUbJ402nIxQRfOwdRIgfRO2K5-O54RzF7UkzHX3zeQdZIuzLeXGgu13fRQ",
+	dp: "qeITTxR0kg9N9sQRslrQDer8OorT082n3ZsULceH6w7j7v4w5StHVnkOAYsbeHxbzs10hbWv9RjBI0vUb1M8UdKK1sg9kiz6cy0SJ5QYYoMzrEkiqh0U-tOSvRUUsEmI0_g5kOts1VMZD2OGFQ8LkIqzwjRm9lqF114vnQqadKyLNJcudVkSYpeG8hU5aqHyr73VISdgQP2smKeiwt6lhNC8puyNS0AqL4CyNKuddFgA-KLFNTSF70y7vUYY8U47UsotXNdpAMrFzHjweJ3GAiAqyBh79dH-ufLpivX9wSWat-NWaLqrkJNHqLrRmtfWK1pxny9n-1c6XcN93V0mOw",
+	dq: "n_-xA_eGT9uGZj_RDQiKOJT3vvOMxIuB60EXJs_4HaXerMuMn7B75hJLa2dQpEh-cTV6LsNm2i8LxNWf4q5GTurAk0ONWBoUcIlTHBDvJWfkAny-9yjf9N_xctvD1vucsqv7waeQKXcKv4cj5ZVbZXDZwJCodApYGyF4jFCh5O4HV9dllwpiWyE5nJihu-rELCYUSKUDaElGw7Ut9jRbdRME9ztH5LtFVcC_fzCXbZYm9i7jA6FEEQ7cQjdliq1N8AMprum-r_wqRssEafAFEcsnOsSJoIZpgS9gXsVbr7R1OMj95DBmKpzK6fV8TXfy3XrrcHOkOzMiqRPCRcIO2Q",
+	qi: "LhkzXD7HOowopZpKmEklXoAZlZV-tPqZm9m_0fkh-dXoFaHfIj-eXUr-7Z8yJWx4-nnGITZR28Q10QHvnG5phqhvgUJ2nHixqaphXfYt80nictRfVcRW4bN_oHm-87zK0BS5OjJvLoMYKSREvdz1UqVJxA4jKsYURCIj6KSDJyZsd5ENAQWjxs0jEw73sKPT-J-ePCEz05V-euBp6RBSePnu3rphrtZ54MNnShyqhoimnymNqx7iXTFBdIP2OKRmzSyKMpwBLU54tctXIOlv_l89gN7V6F8_I0q359M9tdGmmqxjIzAKm9USP7jfcoejXXt3lpSglwKpEfQBfFF9yg",
+	key_ops: ["sign"],
+	ext: true
+}, {
+	name: "RSASSA-PKCS1-v1_5",
+	hash: "SHA-256"
+}, true, ["sign"]);
+const rsaPublicKey3 = new CryptographicKey({
+	id: new URL("https://example.com/person2#key3"),
+	owner: new URL("https://example.com/person2"),
+	publicKey: await crypto.subtle.importKey("jwk", {
+		kty: "RSA",
+		alg: "RS256",
+		n: "4GUqWgdiYlN3Su5Gr4l6i-xRS8gDDVKZ718vpGk6eIpvqs33q430nRbHIzbHRXRaAhc_1--rUBcK0V4_kjZlCSzVtRgGU6HMkmjcD-uE56a8XbTczfltbEDj7afoEuB2F3UhQEWrSz-QJ29DPXaLMIa1Yv61NR2vxGqNbdtoMjDORMBYtg77CYbcFkiJHw65PDa7-f_yjLxuCRPye5L7hncN0UZuuFoRJmHNRLSg5omBad9WTvQXmSyXEhEdk9fHwlI022AqAzlWbT79hldcDSKGGLLbQIs1c3JZIG8G5i6Uh5Vy0Z7tSNBcxbhqoI9i9je4f_x_OPIVc19f04BE1LgWuHsftZzRgW9Sdqz53W83XxVdxlyHeywXOnstSWT11f8dkLyQUcHKTH-E6urbH-aiPLiRpYK8W7D9KTQA9kZ5JXaEuveBd5vJX7wakhbzAn8pWJU7GYIHNY38YcokmivkU5pY8S2cKFMwY0b7ade3MComlir5P3ZYSjF-n6gRVsT96P-9mNfCu9gXt_f8XCyjKlH89kGwuJ7HhR8CuVdm0l-jYozVt6GsDy0hHYyn79NCCAEzP7ZbhBMR0T5Vrkl-TIGXoJH9WFiz4VxO-NnglF6dNQjDS5IzYLoFRXIK1f3cmQiEB4FZmL70l9HLrgwR-Xys83xia79OqFDRezM",
+		e: "AQAB",
+		key_ops: ["verify"],
+		ext: true
+	}, {
+		"name": "RSASSA-PKCS1-v1_5",
+		"hash": "SHA-256"
+	}, true, ["verify"])
+});
+const rsaMultikey4 = new Multikey({
+	id: new URL("https://example.com/person2#key3"),
+	controller: new URL("https://example.com/person2"),
+	publicKey: rsaPublicKey3.publicKey
+});
+const rsaPublicKey5 = new CryptographicKey({
+	id: new URL("https://remote.domain/users/bob#main-key"),
+	owner: new URL("https://remote.domain/users/bob"),
+	publicKey: await importSpki("-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIAYvNFGbZ5g4iiK6feS\ndXD4bDStFM58A7tHycYXaYtzZQpIeHXAmaXuZzXIwtrP4N0gIk8JNwZvXj2UPS+S\n07t0V9wNK94he01LV5EMz/GN4eNnFmDL64HIEuKLvV8TvgjbUPRD6Y5X0UpKi2ZI\nFLSb96Q5w0Z/k7ntpVKV52y8kz5Fjr/O/0JuHryZe0yItzJh8kzFfeMf0EXzfSna\nKvT7P9jhgC6uTre+jXyvVZjiHDrnqvvucdI3I7DRfXo1OqARBrLjy+TdseUAjNYJ\n+OuPRI1URIWQI01DCHqcohVu9+Ar+BiCjFp3ua+XMuJvrvbD61d1Fvig/9nbBRR+\n8QIDAQAB\n-----END PUBLIC KEY-----\n")
+});
+const ed25519PrivateKey = await crypto.subtle.importKey("jwk", {
+	crv: "Ed25519",
+	ext: true,
+	key_ops: ["sign"],
+	kty: "OKP",
+	d: "LledL195fP9TQGQrkE2l2Y2k48UvqCzYI9M1zXyh7zQ",
+	x: "LR8epAGDe-cVq5p2Tx49CCfphpk1rNhkNoY9i-XEUfg"
+}, "Ed25519", true, ["sign"]);
+const ed25519PublicKey = new CryptographicKey({
+	id: new URL("https://example.com/person2#key4"),
+	owner: new URL("https://example.com/person2"),
+	publicKey: await crypto.subtle.importKey("jwk", {
+		crv: "Ed25519",
+		ext: true,
+		key_ops: ["verify"],
+		kty: "OKP",
+		x: "LR8epAGDe-cVq5p2Tx49CCfphpk1rNhkNoY9i-XEUfg"
+	}, "Ed25519", true, ["verify"])
+});
+const ed25519Multikey = new Multikey({
+	id: new URL("https://example.com/person2#key4"),
+	controller: new URL("https://example.com/person2"),
+	publicKey: ed25519PublicKey.publicKey
+});
+
+//#endregion
+export { ed25519Multikey, ed25519PrivateKey, ed25519PublicKey, rsaPrivateKey2, rsaPrivateKey3, rsaPublicKey1, rsaPublicKey2, rsaPublicKey3, rsaPublicKey5 };

package/dist/testing/mod.js

@@ -0,0 +1,87 @@
+
+      import { Temporal } from "@js-temporal/polyfill";
+      import { URLPattern } from "urlpattern-polyfill";
+    
+import { configure, getConsoleSink, reset } from "@logtape/logtape";
+import { test } from "node:test";
+
+//#region testing/mod.ts
+function test$1(name, options, fn) {
+	const def = typeof name === "string" ? typeof options === "function" ? {
+		name,
+		fn: options
+	} : {
+		name,
+		...options,
+		fn
+	} : name;
+	const func = def.fn;
+	if ("Deno" in globalThis) Deno.test({
+		...def,
+		async fn(t) {
+			const records = [];
+			await configure({
+				sinks: {
+					buffer(record) {
+						if (record.category.length > 1 && record.category[0] === "logtape" && record.category[1] === "meta") return;
+						records.push(record);
+					},
+					console: getConsoleSink()
+				},
+				filters: {},
+				loggers: [{
+					category: [],
+					sinks: [Deno.env.get("LOG") === "always" ? "console" : "buffer"]
+				}]
+			});
+			try {
+				await func(t);
+			} catch (e) {
+				const consoleSink = getConsoleSink();
+				for (const record of records) consoleSink(record);
+				throw e;
+			} finally {
+				await reset();
+			}
+		}
+	});
+	else test(def.name, {
+		only: def.only,
+		skip: def.ignore
+	}, async (t) => {
+		await def.fn(intoDenoTestContext(def.name, t));
+	});
+}
+function intoDenoTestContext(name, ctx) {
+	async function step(defOrNameOrFn, fn) {
+		let def;
+		if (typeof defOrNameOrFn === "string") def = {
+			name: defOrNameOrFn,
+			fn
+		};
+		else if (typeof defOrNameOrFn === "function") def = {
+			name: defOrNameOrFn.name,
+			fn: defOrNameOrFn
+		};
+		else def = defOrNameOrFn;
+		let failed = false;
+		await ctx.test(def.name, async (ctx2) => {
+			try {
+				await def.fn(intoDenoTestContext(def.name, ctx2));
+			} catch (e) {
+				failed = true;
+				throw e;
+			}
+		});
+		return failed;
+	}
+	const denoCtx = {
+		name,
+		origin: ctx.filePath ?? "",
+		step
+	};
+	return denoCtx;
+}
+
+//#endregion
+export { test$1 as test };