@jsprismarine/auth 0.0.0-stage → 0.14.1

package/dist/DefaultSkin.cjs.cjs

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+// src/DefaultSkin.ts
+/** A Bedrock skin texture is always RGBA, and 64x64 is the classic layout. */
+var SKIN_WIDTH = 64;
+var SKIN_HEIGHT = 64;
+var BYTES_PER_PIXEL = 4;
+var SKIN_TONE = [
+	200,
+	159,
+	123
+];
+var SHIRT = [
+	63,
+	111,
+	168
+];
+var TROUSERS = [
+	57,
+	63,
+	82
+];
+var REGIONS = [
+	{
+		x: 0,
+		y: 0,
+		width: 32,
+		height: 8,
+		colour: [
+			74,
+			54,
+			40
+		]
+	},
+	{
+		x: 0,
+		y: 8,
+		width: 32,
+		height: 8,
+		colour: SKIN_TONE
+	},
+	{
+		x: 16,
+		y: 16,
+		width: 24,
+		height: 16,
+		colour: SHIRT
+	},
+	{
+		x: 40,
+		y: 16,
+		width: 16,
+		height: 16,
+		colour: SHIRT
+	},
+	{
+		x: 32,
+		y: 48,
+		width: 16,
+		height: 16,
+		colour: SHIRT
+	},
+	{
+		x: 0,
+		y: 16,
+		width: 16,
+		height: 16,
+		colour: TROUSERS
+	},
+	{
+		x: 16,
+		y: 48,
+		width: 16,
+		height: 16,
+		colour: TROUSERS
+	}
+];
+/**
+* The skin the client wears when nothing else has been supplied.
+*
+* Generated rather than shipped as a PNG, and generated from flat colour blocks that are
+* ours: Mojang's textures cannot be redistributed, and a client that refuses to log in
+* without one would be useless. It is deliberately plain - the point is a valid, original
+* 16 KiB of RGBA, not a good-looking character.
+*
+* @returns 64 * 64 * 4 bytes of RGBA, row major from the top left.
+*/
+var createDefaultSkinImage = () => {
+	const image = Buffer.alloc(4096 * BYTES_PER_PIXEL);
+	for (const region of REGIONS) for (let y = region.y; y < region.y + region.height; y++) for (let x = region.x; x < region.x + region.width; x++) {
+		const offset = (y * 64 + x) * BYTES_PER_PIXEL;
+		const shade = 1 - (y - region.y) / region.height * .15;
+		image[offset] = Math.round(region.colour[0] * shade);
+		image[offset + 1] = Math.round(region.colour[1] * shade);
+		image[offset + 2] = Math.round(region.colour[2] * shade);
+		image[offset + 3] = 255;
+	}
+	return image;
+};
+/**
+* Which model the client should hang the texture on.
+*
+* `geometry.humanoid.custom` is resolved by the client against a model it already has, so
+* this is a reference rather than geometry we would have to ship. `SkinGeometryData` stays
+* empty for the same reason.
+*/
+var DEFAULT_SKIN_RESOURCE_PATCH = JSON.stringify({ geometry: { default: "geometry.humanoid.custom" } });
+exports.DEFAULT_SKIN_RESOURCE_PATCH = DEFAULT_SKIN_RESOURCE_PATCH;
+exports.SKIN_HEIGHT = SKIN_HEIGHT;
+exports.SKIN_WIDTH = SKIN_WIDTH;
+exports.createDefaultSkinImage = createDefaultSkinImage;
+
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/dist/DefaultSkin.d.ts

@@ -0,0 +1,23 @@
+/** A Bedrock skin texture is always RGBA, and 64x64 is the classic layout. */
+export declare const SKIN_WIDTH = 64;
+export declare const SKIN_HEIGHT = 64;
+/**
+ * The skin the client wears when nothing else has been supplied.
+ *
+ * Generated rather than shipped as a PNG, and generated from flat colour blocks that are
+ * ours: Mojang's textures cannot be redistributed, and a client that refuses to log in
+ * without one would be useless. It is deliberately plain - the point is a valid, original
+ * 16 KiB of RGBA, not a good-looking character.
+ *
+ * @returns 64 * 64 * 4 bytes of RGBA, row major from the top left.
+ */
+export declare const createDefaultSkinImage: () => Buffer;
+/**
+ * Which model the client should hang the texture on.
+ *
+ * `geometry.humanoid.custom` is resolved by the client against a model it already has, so
+ * this is a reference rather than geometry we would have to ship. `SkinGeometryData` stays
+ * empty for the same reason.
+ */
+export declare const DEFAULT_SKIN_RESOURCE_PATCH: string;
+//# sourceMappingURL=DefaultSkin.d.ts.map

package/dist/DefaultSkin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DefaultSkin.d.ts","sourceRoot":"","sources":["../src/DefaultSkin.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,eAAO,MAAM,UAAU,KAAK,CAAC;AAC7B,eAAO,MAAM,WAAW,KAAK,CAAC;AAsC9B;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,QAAO,MAmBzC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,QAEtC,CAAC"}

package/dist/DefaultSkin.es.js

@@ -0,0 +1,108 @@
+// src/DefaultSkin.ts
+/** A Bedrock skin texture is always RGBA, and 64x64 is the classic layout. */
+var SKIN_WIDTH = 64;
+var SKIN_HEIGHT = 64;
+var BYTES_PER_PIXEL = 4;
+var SKIN_TONE = [
+	200,
+	159,
+	123
+];
+var SHIRT = [
+	63,
+	111,
+	168
+];
+var TROUSERS = [
+	57,
+	63,
+	82
+];
+var REGIONS = [
+	{
+		x: 0,
+		y: 0,
+		width: 32,
+		height: 8,
+		colour: [
+			74,
+			54,
+			40
+		]
+	},
+	{
+		x: 0,
+		y: 8,
+		width: 32,
+		height: 8,
+		colour: SKIN_TONE
+	},
+	{
+		x: 16,
+		y: 16,
+		width: 24,
+		height: 16,
+		colour: SHIRT
+	},
+	{
+		x: 40,
+		y: 16,
+		width: 16,
+		height: 16,
+		colour: SHIRT
+	},
+	{
+		x: 32,
+		y: 48,
+		width: 16,
+		height: 16,
+		colour: SHIRT
+	},
+	{
+		x: 0,
+		y: 16,
+		width: 16,
+		height: 16,
+		colour: TROUSERS
+	},
+	{
+		x: 16,
+		y: 48,
+		width: 16,
+		height: 16,
+		colour: TROUSERS
+	}
+];
+/**
+* The skin the client wears when nothing else has been supplied.
+*
+* Generated rather than shipped as a PNG, and generated from flat colour blocks that are
+* ours: Mojang's textures cannot be redistributed, and a client that refuses to log in
+* without one would be useless. It is deliberately plain - the point is a valid, original
+* 16 KiB of RGBA, not a good-looking character.
+*
+* @returns 64 * 64 * 4 bytes of RGBA, row major from the top left.
+*/
+var createDefaultSkinImage = () => {
+	const image = Buffer.alloc(4096 * BYTES_PER_PIXEL);
+	for (const region of REGIONS) for (let y = region.y; y < region.y + region.height; y++) for (let x = region.x; x < region.x + region.width; x++) {
+		const offset = (y * 64 + x) * BYTES_PER_PIXEL;
+		const shade = 1 - (y - region.y) / region.height * .15;
+		image[offset] = Math.round(region.colour[0] * shade);
+		image[offset + 1] = Math.round(region.colour[1] * shade);
+		image[offset + 2] = Math.round(region.colour[2] * shade);
+		image[offset + 3] = 255;
+	}
+	return image;
+};
+/**
+* Which model the client should hang the texture on.
+*
+* `geometry.humanoid.custom` is resolved by the client against a model it already has, so
+* this is a reference rather than geometry we would have to ship. `SkinGeometryData` stays
+* empty for the same reason.
+*/
+var DEFAULT_SKIN_RESOURCE_PATCH = JSON.stringify({ geometry: { default: "geometry.humanoid.custom" } });
+export { DEFAULT_SKIN_RESOURCE_PATCH, SKIN_HEIGHT, SKIN_WIDTH, createDefaultSkinImage };
+
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/dist/IAuthProvider.cjs.cjs

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });

package/dist/IAuthProvider.d.ts

@@ -0,0 +1,75 @@
+/**
+ * The two JWT blobs a `Login` packet carries.
+ *
+ * Deliberately the *encoded* form rather than the data behind it: an offline provider signs
+ * these itself, and an Xbox one receives most of the chain already signed by Mojang and
+ * cannot reconstruct it. What they have in common is the pair of strings that goes on the
+ * wire, so that is what the interface is about.
+ */
+export interface LoginCredentials {
+    /**
+     * `{"chain": [...]}` - one JWT per link. Offline that is a single self-signed token;
+     * authenticated it is the client's own token followed by Mojang's.
+     */
+    readonly chainData: string;
+    /** One JWT: skin, device, language, and the address the client thinks it dialled. */
+    readonly clientData: string;
+}
+/** Who the player is, as far as the login is concerned. */
+export interface Identity {
+    /** Empty when not authenticated. A server in online mode refuses that. */
+    readonly xuid: string;
+    /** The uuid the client is known by. The server rejects a login with no identity. */
+    readonly identity: string;
+    readonly displayName: string;
+    readonly titleId?: string;
+}
+export interface LoginRequest {
+    /** Where we are connecting, as the client reports it: `host:port`. */
+    readonly serverAddress: string;
+    /** The protocol version being spoken, echoed into the client data. */
+    readonly protocolVersion: number;
+}
+/**
+ * Where a login identity comes from.
+ *
+ * The seam exists so that what the bot harness needs - hundreds of throwaway identities, no
+ * network, no token cache - and what a real client needs are the same shape to everything
+ * upstream. It is also what keeps Xbox Live out of the headless build: a provider is chosen
+ * at the edge, and nothing in the client core imports one.
+ */
+export interface IAuthProvider {
+    /** For logs and for choosing between cached sessions. */
+    readonly name: string;
+    /**
+     * The identity this provider will log in as.
+     *
+     * Available before {@link createLoginCredentials} so a caller can label a connection
+     * before it has made one - a bot harness reporting which of five hundred it is waiting
+     * on, say.
+     */
+    getIdentity(): Promise<Identity>;
+    /**
+     * Signs, or fetches, the credentials for one login.
+     *
+     * Called once per connection attempt rather than cached, because the client data
+     * carries the address being dialled and the chain carries an expiry.
+     */
+    createLoginCredentials(request: LoginRequest): Promise<LoginCredentials>;
+    /**
+     * The public half of the key the chain is signed with, DER encoded and base64'd - the
+     * same string the chain's `identityPublicKey` claim carries.
+     *
+     * Encryption derives its shared secret from this key, so a provider has to expose it
+     * even though nothing in the login itself asks for it separately.
+     */
+    getIdentityPublicKey(): Promise<string>;
+    /**
+     * The private key, for the ECDH half of the encryption handshake.
+     *
+     * Returned as a PEM-encoded PKCS#8 string rather than a `KeyObject` so that a provider
+     * backed by something that is not node's crypto stays possible.
+     */
+    getIdentityPrivateKey(): Promise<string>;
+}
+//# sourceMappingURL=IAuthProvider.d.ts.map

package/dist/IAuthProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IAuthProvider.d.ts","sourceRoot":"","sources":["../src/IAuthProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,2DAA2D;AAC3D,MAAM,WAAW,QAAQ;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IACzB,sEAAsE;IACtE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;;;OAMG;IACH,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEjC;;;;;OAKG;IACH,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEzE;;;;;;OAMG;IACH,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAExC;;;;;OAKG;IACH,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5C"}

package/dist/OfflineAuthProvider.cjs.cjs

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperties(exports, {
+	__esModule: { value: true },
+	[Symbol.toStringTag]: { value: "Module" }
+});
+const require_ClientData = require("./ClientData.cjs.cjs");
+let fast_jwt = require("fast-jwt");
+let node_crypto = require("node:crypto");
+// src/OfflineAuthProvider.ts
+/**
+* The curve Bedrock's identity keys use, and the JOSE algorithm that goes with it. Not
+* configurable: a server derives its encryption secret from this key, so both ends have to
+* agree, and the protocol fixes the answer.
+*/
+var CURVE = "secp384r1";
+var ALGORITHM = "ES384";
+/** How long a self-signed chain claims to be valid for. */
+var CHAIN_LIFETIME_SECONDS = 21600;
+/**
+* The first protocol whose servers want a multiplayer token rather than a certificate chain.
+*
+* 1.26.10 moved the offline identity out of the chain: what used to be a self-signed link
+* carrying `extraData` is now a self-signed OIDC token in a `Token` field beside a chain that
+* exists only to hold its place. A server at or past this refuses the old shape - and refuses
+* it by going quiet at the RakNet layer rather than by answering, which is why the version
+* this compares against is worth stating rather than discovering.
+*/
+var FIRST_TOKEN_PROTOCOL = 944;
+/** What the token says it is for. A server checks the audience even when it verifies nothing else. */
+var MULTIPLAYER_AUDIENCE = "api://auth-minecraft-services/multiplayer";
+/** The value naming a self-signed identity, as opposed to one Xbox Live vouched for. */
+var AUTHENTICATION_TYPE_SELF_SIGNED = 2;
+/**
+* A login identity that talks to nothing.
+*
+* The chain is a single JWT this provider signs with a key it just generated, which is
+* exactly what the real client sends when it is not signed in to Xbox Live. A server in
+* online mode refuses it - there is no XUID to check, and it says so - and a server with
+* `online-mode` off accepts it, which covers JSPrismarine itself, a LAN game, and the
+* whole of the bot harness.
+*
+* The key is generated per instance rather than per login. It is the identity: reusing one
+* across two concurrent connections would have them claim to be the same client, and the
+* encryption handshake would derive the same secret for both.
+*
+* @example
+* ```typescript
+* const auth = new OfflineAuthProvider({ displayName: 'Steve' });
+* const credentials = await auth.createLoginCredentials({ serverAddress: '127.0.0.1:19132', protocolVersion: 748 });
+* ```
+*/
+var OfflineAuthProvider = class {
+	options;
+	name = "offline";
+	identity;
+	privateKeyPem;
+	publicKeyDer;
+	clientRandomId;
+	constructor(options) {
+		this.options = options;
+		const { publicKey, privateKey } = (0, node_crypto.generateKeyPairSync)("ec", { namedCurve: CURVE });
+		this.publicKeyDer = publicKey.export({
+			type: "spki",
+			format: "der"
+		}).toString("base64");
+		this.privateKeyPem = privateKey.export({
+			type: "pkcs8",
+			format: "pem"
+		}).toString();
+		this.identity = {
+			xuid: "",
+			identity: options.identity ?? (0, node_crypto.randomUUID)(),
+			displayName: options.displayName
+		};
+		this.clientRandomId = (0, node_crypto.randomInt)(0, 2147483647);
+	}
+	async getIdentity() {
+		return this.identity;
+	}
+	async getIdentityPublicKey() {
+		return this.publicKeyDer;
+	}
+	async getIdentityPrivateKey() {
+		return this.privateKeyPem;
+	}
+	async createLoginCredentials(request) {
+		return {
+			chainData: request.protocolVersion >= FIRST_TOKEN_PROTOCOL ? this.signTokenRequest() : JSON.stringify({ chain: [this.signChainLink()] }),
+			clientData: this.signClientData(request)
+		};
+	}
+	/**
+	* The identity as a server from 1.26.10 on wants it.
+	*
+	* The chain is one empty string. That is not a placeholder for something missing: the
+	* field is still read, and an offline client has no certificate to put in it, so it holds
+	* a link that says nothing while the `Token` beside it carries the identity. `Certificate`
+	* is a *string* of JSON rather than an object, which is the shape the server parses.
+	*/
+	signTokenRequest() {
+		return JSON.stringify({
+			Certificate: JSON.stringify({ chain: [""] }),
+			AuthenticationType: AUTHENTICATION_TYPE_SELF_SIGNED,
+			Token: this.signMultiplayerToken()
+		});
+	}
+	/**
+	* The self-signed token that replaced the chain link.
+	*
+	* The claim names are short and unobvious because they are an identity provider's, not
+	* Minecraft's: `cpk` is the key the encryption handshake will use, `xid` the Xbox id an
+	* offline player does not have, `leguuid` the uuid that has to stand in for it. The
+	* PlayFab fields are sent empty rather than omitted, because a real client always sends
+	* them and a field that is present-and-empty is the smaller departure from that.
+	*/
+	signMultiplayerToken() {
+		const now = Math.floor(Date.now() / 1e3);
+		return (0, fast_jwt.createSigner)({
+			algorithm: ALGORITHM,
+			key: this.privateKeyPem,
+			header: {
+				alg: ALGORITHM,
+				x5u: this.publicKeyDer
+			}
+		})({
+			aud: MULTIPLAYER_AUDIENCE,
+			nbf: now - CHAIN_LIFETIME_SECONDS,
+			exp: now + CHAIN_LIFETIME_SECONDS,
+			iat: now,
+			ipt: "",
+			mid: "",
+			tid: "",
+			cpk: this.publicKeyDer,
+			xid: this.identity.xuid,
+			xname: this.identity.displayName,
+			leguuid: this.identity.identity
+		});
+	}
+	/**
+	* The one link an unauthenticated chain has: self-signed, and vouching for nothing but
+	* itself.
+	*
+	* The `x5u` header and the `identityPublicKey` claim are the same key, which is how a
+	* verifier knows the token signed itself. An authenticated chain has Mojang's key in
+	* `x5u` and this one in the claim, and the difference between the two is the whole of
+	* what online mode checks.
+	*/
+	signChainLink() {
+		const now = Math.floor(Date.now() / 1e3);
+		return (0, fast_jwt.createSigner)({
+			algorithm: ALGORITHM,
+			key: this.privateKeyPem,
+			header: {
+				alg: ALGORITHM,
+				x5u: this.publicKeyDer
+			}
+		})({
+			nbf: now - 60,
+			exp: now + CHAIN_LIFETIME_SECONDS,
+			iat: now,
+			identityPublicKey: this.publicKeyDer,
+			extraData: {
+				XUID: this.identity.xuid,
+				identity: this.identity.identity,
+				displayName: this.identity.displayName,
+				titleId: this.identity.titleId ?? ""
+			}
+		});
+	}
+	signClientData(request) {
+		return (0, fast_jwt.createSigner)({
+			algorithm: ALGORITHM,
+			key: this.privateKeyPem,
+			header: {
+				alg: ALGORITHM,
+				x5u: this.publicKeyDer
+			},
+			noTimestamp: true
+		})(require_ClientData.createClientData({
+			...this.options.clientData,
+			serverAddress: request.serverAddress,
+			clientRandomId: this.clientRandomId,
+			selfSignedId: this.identity.identity,
+			displayName: this.identity.displayName
+		}));
+	}
+};
+exports.default = OfflineAuthProvider;
+
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/dist/OfflineAuthProvider.d.ts

@@ -0,0 +1,77 @@
+import type { ClientDataOptions } from './ClientData';
+import type { IAuthProvider, Identity, LoginCredentials, LoginRequest } from './IAuthProvider';
+export interface OfflineAuthOptions {
+    /** The name that shows up in chat and the player list. */
+    readonly displayName: string;
+    /**
+     * The uuid the server knows this player by, stable across reconnects if you supply it.
+     *
+     * Worth supplying for a client with a world to come back to, and worth *not* supplying
+     * for a bot fleet, where five hundred connections each need their own.
+     */
+    readonly identity?: string;
+    readonly clientData?: Partial<ClientDataOptions>;
+}
+/**
+ * A login identity that talks to nothing.
+ *
+ * The chain is a single JWT this provider signs with a key it just generated, which is
+ * exactly what the real client sends when it is not signed in to Xbox Live. A server in
+ * online mode refuses it - there is no XUID to check, and it says so - and a server with
+ * `online-mode` off accepts it, which covers JSPrismarine itself, a LAN game, and the
+ * whole of the bot harness.
+ *
+ * The key is generated per instance rather than per login. It is the identity: reusing one
+ * across two concurrent connections would have them claim to be the same client, and the
+ * encryption handshake would derive the same secret for both.
+ *
+ * @example
+ * ```typescript
+ * const auth = new OfflineAuthProvider({ displayName: 'Steve' });
+ * const credentials = await auth.createLoginCredentials({ serverAddress: '127.0.0.1:19132', protocolVersion: 748 });
+ * ```
+ */
+export default class OfflineAuthProvider implements IAuthProvider {
+    private readonly options;
+    readonly name = "offline";
+    private readonly identity;
+    private readonly privateKeyPem;
+    private readonly publicKeyDer;
+    private readonly clientRandomId;
+    constructor(options: OfflineAuthOptions);
+    getIdentity(): Promise<Identity>;
+    getIdentityPublicKey(): Promise<string>;
+    getIdentityPrivateKey(): Promise<string>;
+    createLoginCredentials(request: LoginRequest): Promise<LoginCredentials>;
+    /**
+     * The identity as a server from 1.26.10 on wants it.
+     *
+     * The chain is one empty string. That is not a placeholder for something missing: the
+     * field is still read, and an offline client has no certificate to put in it, so it holds
+     * a link that says nothing while the `Token` beside it carries the identity. `Certificate`
+     * is a *string* of JSON rather than an object, which is the shape the server parses.
+     */
+    private signTokenRequest;
+    /**
+     * The self-signed token that replaced the chain link.
+     *
+     * The claim names are short and unobvious because they are an identity provider's, not
+     * Minecraft's: `cpk` is the key the encryption handshake will use, `xid` the Xbox id an
+     * offline player does not have, `leguuid` the uuid that has to stand in for it. The
+     * PlayFab fields are sent empty rather than omitted, because a real client always sends
+     * them and a field that is present-and-empty is the smaller departure from that.
+     */
+    private signMultiplayerToken;
+    /**
+     * The one link an unauthenticated chain has: self-signed, and vouching for nothing but
+     * itself.
+     *
+     * The `x5u` header and the `identityPublicKey` claim are the same key, which is how a
+     * verifier knows the token signed itself. An authenticated chain has Mojang's key in
+     * `x5u` and this one in the claim, and the difference between the two is the whole of
+     * what online mode checks.
+     */
+    private signChainLink;
+    private signClientData;
+}
+//# sourceMappingURL=OfflineAuthProvider.d.ts.map

package/dist/OfflineAuthProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OfflineAuthProvider.d.ts","sourceRoot":"","sources":["../src/OfflineAuthProvider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AA8B/F,MAAM,WAAW,kBAAkB;IAC/B,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,OAAO,OAAO,mBAAoB,YAAW,aAAa;IAQ1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP3C,SAAgB,IAAI,aAAa;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IAExC,YAAoC,OAAO,EAAE,kBAAkB,EAmB9D;IAEY,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAE5C;IAEY,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEnD;IAEY,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEpD;IAEY,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAQpF;IAED;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;;;;;;;OAQG;IACH,OAAO,CAAC,oBAAoB;IAuB5B;;;;;;;;OAQG;IACH,OAAO,CAAC,aAAa;IAsBrB,OAAO,CAAC,cAAc;CAkBzB"}