@konker.dev/neverthrow-r-auth-utils 0.0.1

package/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2026 Konrad Markus <mail@konker.dev>
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
+SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
+OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
+CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,3 @@
+# @konker.dev/neverthrow-r-auth-utils
+
+Auth utils for `neverthrow` and `@konker.dev/neverthrow-r`.

package/dist/aws-authorizer.d.ts

@@ -0,0 +1,7 @@
+import { type ResultR } from '@konker.dev/neverthrow-r';
+import type { APIGatewayAuthorizerResult } from 'aws-lambda';
+export declare function transformLambdaAuthorizerArn(arn: string): ResultR<unknown, string, Error>;
+export declare const generateLambdaAuthResult: (effect: "Allow" | "Deny") => (principalId: string, lambdaArn: string) => APIGatewayAuthorizerResult;
+export declare const generateLambdaAuthResultAllow: (principalId: string, lambdaArn: string) => APIGatewayAuthorizerResult;
+export declare const generateLambdaAuthResultDeny: (principalId: string, lambdaArn: string) => APIGatewayAuthorizerResult;
+//# sourceMappingURL=aws-authorizer.d.ts.map

package/dist/aws-authorizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-authorizer.d.ts","sourceRoot":"","sources":["../src/aws-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAG7D,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAOzF;AAED,eAAO,MAAM,wBAAwB,GAClC,QAAQ,OAAO,GAAG,MAAM,MACxB,aAAa,MAAM,EAAE,WAAW,MAAM,KAAG,0BAexC,CAAC;AAEL,eAAO,MAAM,6BAA6B,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,0BACrD,CAAC;AAEpC,eAAO,MAAM,4BAA4B,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,0BACrD,CAAC"}

package/dist/aws-authorizer.js

@@ -0,0 +1,28 @@
+import { fromResult } from '@konker.dev/neverthrow-r';
+import { err, ok } from 'neverthrow';
+export function transformLambdaAuthorizerArn(arn) {
+    const arnRe = /^(arn:aws:execute-api:[\w-]+:\d{12}:\w+\/[$\w]+\/)([\S/]+)+$/;
+    if (!arnRe.test(arn)) {
+        return fromResult(err(new Error('Invalid arn')));
+    }
+    return fromResult(ok(arn.replace(arnRe, '$1*')));
+}
+export const generateLambdaAuthResult = (effect) => (principalId, lambdaArn) => ({
+    principalId,
+    policyDocument: {
+        Version: '2012-10-17',
+        Statement: [
+            {
+                Action: 'execute-api:Invoke',
+                Effect: effect,
+                Resource: lambdaArn,
+            },
+        ],
+    },
+    context: {
+        principalId,
+    },
+});
+export const generateLambdaAuthResultAllow = generateLambdaAuthResult('Allow');
+export const generateLambdaAuthResultDeny = generateLambdaAuthResult('Deny');
+//# sourceMappingURL=aws-authorizer.js.map

package/dist/aws-authorizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-authorizer.js","sourceRoot":"","sources":["../src/aws-authorizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,MAAM,KAAK,GAAG,8DAA8D,CAAC;IAC7E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GACnC,CAAC,MAAwB,EAAE,EAAE,CAC7B,CAAC,WAAmB,EAAE,SAAiB,EAA8B,EAAE,CAAC,CAAC;IACvE,WAAW;IACX,cAAc,EAAE;QACd,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE;YACT;gBACE,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,SAAS;aACpB;SACF;KACF;IACD,OAAO,EAAE;QACP,WAAW;KACZ;CACF,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,6BAA6B,GACxC,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAEpC,MAAM,CAAC,MAAM,4BAA4B,GACvC,wBAAwB,CAAC,MAAM,CAAC,CAAC"}

package/dist/basic-auth.d.ts

@@ -0,0 +1,25 @@
+import { type ResultR } from '@konker.dev/neverthrow-r';
+export declare const BASIC_AUTH_WILDCARD_USERNAME = "*";
+export type BasicAuthCredentials = {
+    readonly username: string;
+    readonly password: string;
+};
+export type NonEmptyStringArray = readonly [string, ...Array<string>];
+export type ValidBasicAuthCredentials = {
+    readonly username: string;
+    readonly passwords: NonEmptyStringArray;
+};
+export type ValidBasicAuthCredentialSet = Array<ValidBasicAuthCredentials>;
+export type BasicAuthUserContext = {
+    readonly verified: false;
+} | {
+    readonly verified: true;
+    readonly userId?: string;
+};
+export declare function BasicAuthUserContext(verified: false): BasicAuthUserContext;
+export declare function BasicAuthUserContext(verified: true, userId: string): BasicAuthUserContext;
+export declare const basicAuthCredentialMatch: (basicAuth: BasicAuthCredentials) => (valid: ValidBasicAuthCredentials) => boolean;
+export declare function basicAuthDecodeHeaderValue(basicAuthHeaderValue: string | undefined): ResultR<unknown, BasicAuthCredentials, Error>;
+export declare function basicAuthEncodeHeaderValue(basicAuthCredentials: BasicAuthCredentials): ResultR<unknown, string, never>;
+export declare const basicAuthVerifyCredentials: (valid: ValidBasicAuthCredentialSet) => (basicAuth: BasicAuthCredentials) => ResultR<unknown, BasicAuthUserContext, never>;
+//# sourceMappingURL=basic-auth.d.ts.map

package/dist/basic-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic-auth.d.ts","sourceRoot":"","sources":["../src/basic-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAGpE,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAE3E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GAC5B;IACE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,KAAK,GAAG,oBAAoB,CAAC;AAC5E,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAAC;AAS3F,eAAO,MAAM,wBAAwB,GAAI,WAAW,oBAAoB,MAAM,OAAO,yBAAyB,YAEhE,CAAC;AAW/C,wBAAgB,0BAA0B,CACxC,oBAAoB,EAAE,MAAM,GAAG,SAAS,GACvC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAa/C;AAED,wBAAgB,0BAA0B,CACxC,oBAAoB,EAAE,oBAAoB,GACzC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAMjC;AAED,eAAO,MAAM,0BAA0B,GACpC,OAAO,2BAA2B,MAClC,WAAW,oBAAoB,KAAG,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,KAAK,CAO5E,CAAC"}

package/dist/basic-auth.js

@@ -0,0 +1,37 @@
+import { fromResult } from '@konker.dev/neverthrow-r';
+import { err, ok } from 'neverthrow';
+export const BASIC_AUTH_WILDCARD_USERNAME = '*';
+export function BasicAuthUserContext(verified, userId) {
+    return verified
+        ? userId !== undefined && userId !== ''
+            ? { verified: true, userId }
+            : { verified: true }
+        : { verified: false };
+}
+export const basicAuthCredentialMatch = (basicAuth) => (valid) => (valid.username === BASIC_AUTH_WILDCARD_USERNAME || valid.username === basicAuth.username) &&
+    valid.passwords.includes(basicAuth.password);
+function decodeBase64String(value) {
+    const base64Re = /^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/;
+    if (!value || !base64Re.test(value)) {
+        return err(new Error('Invalid base64 input'));
+    }
+    return ok(Buffer.from(value, 'base64').toString('utf8'));
+}
+export function basicAuthDecodeHeaderValue(basicAuthHeaderValue) {
+    return fromResult(decodeBase64String(basicAuthHeaderValue).andThen((decoded) => {
+        const parts = decoded.split(':');
+        return parts.length === 2
+            ? ok({
+                username: parts[0],
+                password: parts[1],
+            })
+            : err(new Error('Invalid basic auth payload'));
+    }));
+}
+export function basicAuthEncodeHeaderValue(basicAuthCredentials) {
+    return fromResult(ok(`Basic ${Buffer.from(`${basicAuthCredentials.username}:${basicAuthCredentials.password}`, 'utf8').toString('base64')}`));
+}
+export const basicAuthVerifyCredentials = (valid) => (basicAuth) => fromResult(ok(valid.some(basicAuthCredentialMatch(basicAuth))
+    ? BasicAuthUserContext(true, basicAuth.username)
+    : BasicAuthUserContext(false)));
+//# sourceMappingURL=basic-auth.js.map

package/dist/basic-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic-auth.js","sourceRoot":"","sources":["../src/basic-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,YAAY,CAAC;AAElD,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAyBhD,MAAM,UAAU,oBAAoB,CAAC,QAAiB,EAAE,MAAe;IACrE,OAAO,QAAQ;QACb,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;YACrC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;YAC5B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACtB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,SAA+B,EAAE,EAAE,CAAC,CAAC,KAAgC,EAAE,EAAE,CAChH,CAAC,KAAK,CAAC,QAAQ,KAAK,4BAA4B,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC;IAC1F,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE/C,SAAS,kBAAkB,CAAC,KAAyB;IACnD,MAAM,QAAQ,GAAG,kEAAkE,CAAC;IACpF,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,oBAAwC;IAExC,OAAO,UAAU,CACf,kBAAkB,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAe,EAAE,EAAE;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAEjC,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;YACvB,CAAC,CAAC,EAAE,CAAC;gBACD,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAE;gBACnB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAE;aACpB,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,oBAA0C;IAE1C,OAAO,UAAU,CACf,EAAE,CACA,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,IAAI,oBAAoB,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CACvH,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,0BAA0B,GACrC,CAAC,KAAkC,EAAE,EAAE,CACvC,CAAC,SAA+B,EAAiD,EAAE,CACjF,UAAU,CACR,EAAE,CACA,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC;IAChD,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAChC,CACF,CAAC"}

package/dist/helpers.d.ts

@@ -0,0 +1,4 @@
+import { type ResultR } from '@konker.dev/neverthrow-r';
+export declare function extractBearerToken(authorization?: string): ResultR<unknown, string, Error>;
+export declare function extractBasicAuthHeaderValue(authorization?: string): ResultR<unknown, string, Error>;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAGpE,wBAAgB,kBAAkB,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAK1F;AAED,wBAAgB,2BAA2B,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAKnG"}

package/dist/helpers.js

@@ -0,0 +1,13 @@
+import { fromResult } from '@konker.dev/neverthrow-r';
+import { err, ok } from 'neverthrow';
+export function extractBearerToken(authorization) {
+    const bearerRe = /^Bearer (\S+)$/;
+    const match = authorization?.match(bearerRe);
+    return fromResult(match?.[1] ? ok(match[1]) : err(new Error('No token found')));
+}
+export function extractBasicAuthHeaderValue(authorization) {
+    const basicAuthRe = /^Basic (\S+)$/;
+    const match = authorization?.match(basicAuthRe);
+    return fromResult(match?.[1] ? ok(match[1]) : err(new Error('No token found')));
+}
+//# sourceMappingURL=helpers.js.map

package/dist/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../src/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAErC,MAAM,UAAU,kBAAkB,CAAC,aAAsB;IACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE7C,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,aAAsB;IAChE,MAAM,WAAW,GAAG,eAAe,CAAC;IACpC,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAEhD,OAAO,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export * from './aws-authorizer.js';
+export * from './basic-auth.js';
+export * from './helpers.js';
+export * from './jwt/common.js';
+export * from './jwt/index.js';
+export * from './jwt/rsa.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from './aws-authorizer.js';
+export * from './basic-auth.js';
+export * from './helpers.js';
+export * from './jwt/common.js';
+export * from './jwt/index.js';
+export * from './jwt/rsa.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/jwt/common.d.ts

@@ -0,0 +1,16 @@
+import { type ResultR } from '@konker.dev/neverthrow-r';
+import type * as jwt from 'jsonwebtoken';
+export type JwtPayloadSubIss = jwt.JwtPayload & {
+    readonly sub: string;
+    readonly iss: string;
+};
+export type JwtUserContext = {
+    readonly verified: false;
+} | ({
+    readonly verified: true;
+    readonly userId: string;
+} & JwtPayloadSubIss);
+export declare function JwtUserContext(verified: false): JwtUserContext;
+export declare function JwtUserContext(verified: true, jwtPayload: JwtPayloadSubIss): JwtUserContext;
+export declare function checkJwtPayloadIssSub(payload: jwt.JwtPayload | string | null): ResultR<unknown, JwtPayloadSubIss, Error>;
+//# sourceMappingURL=common.d.ts.map

package/dist/jwt/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/jwt/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,KAAK,GAAG,MAAM,cAAc,CAAC;AAGzC,MAAM,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU,GAAG;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GAC5B,CAAC;IACC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,gBAAgB,CAAC,CAAC;AAE1B,wBAAgB,cAAc,CAAC,QAAQ,EAAE,KAAK,GAAG,cAAc,CAAC;AAChE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,GAAG,cAAc,CAAC;AAO7F,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,GAAG,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,GACtC,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAe3C"}

package/dist/jwt/common.js

@@ -0,0 +1,22 @@
+import { fromResult } from '@konker.dev/neverthrow-r';
+import { err, ok } from 'neverthrow';
+export function JwtUserContext(verified, jwtPayload) {
+    return verified && jwtPayload
+        ? { verified: true, userId: jwtPayload.sub, ...jwtPayload }
+        : { verified: false };
+}
+export function checkJwtPayloadIssSub(payload) {
+    if (!payload) {
+        return fromResult(err(new Error('Invalid token payload: null')));
+    }
+    if (typeof payload === 'string') {
+        return fromResult(err(new Error('Invalid token payload: string')));
+    }
+    const sub = payload.sub;
+    const iss = payload.iss;
+    if (!sub || !iss) {
+        return fromResult(err(new Error('Invalid token payload: missing iss or sub')));
+    }
+    return fromResult(ok({ ...payload, sub, iss }));
+}
+//# sourceMappingURL=common.js.map

package/dist/jwt/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/jwt/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAgBrC,MAAM,UAAU,cAAc,CAAC,QAAiB,EAAE,UAA6B;IAC7E,OAAO,QAAQ,IAAI,UAAU;QAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE;QACpE,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAc,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAuC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACjB,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/jwt/common.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=common.test.d.ts.map

package/dist/jwt/common.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.test.d.ts","sourceRoot":"","sources":["../../src/jwt/common.test.ts"],"names":[],"mappings":""}

package/dist/jwt/common.test.js

@@ -0,0 +1,53 @@
+import { provide } from '@konker.dev/neverthrow-r';
+import * as jwt from 'jsonwebtoken';
+import { afterAll, beforeAll, describe, expect, it, vi } from 'vitest';
+import { TEST_JWT_ISS, TEST_JWT_NOW_MS, TEST_JWT_SUB, TEST_SIGNED_PAYLOAD } from '../test/fixtures/jwt.js';
+import { TEST_TOKEN, TEST_TOKEN_STRING_PAYLOAD } from '../test/fixtures/test-jwt-tokens.js';
+import * as unit from './common.js';
+describe('jwt/common', () => {
+    beforeAll(() => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+    });
+    afterAll(() => {
+        vi.restoreAllMocks();
+    });
+    describe('JwtUserContext', () => {
+        it('should work as expected in the true case', () => {
+            expect(unit.JwtUserContext(true, { iss: TEST_JWT_ISS, sub: TEST_JWT_SUB, aud: 'some-aud' })).toStrictEqual({
+                verified: true,
+                userId: TEST_JWT_SUB,
+                iss: TEST_JWT_ISS,
+                sub: TEST_JWT_SUB,
+                aud: 'some-aud',
+            });
+        });
+        it('should work as expected in the false case', () => {
+            expect(unit.JwtUserContext(false)).toStrictEqual({
+                verified: false,
+            });
+        });
+    });
+    describe('checkJwtPayloadIssSub', () => {
+        it('should verify a valid token', () => {
+            const actual = unit.checkJwtPayloadIssSub(jwt.decode(TEST_TOKEN));
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual(TEST_SIGNED_PAYLOAD);
+        });
+        it('should return an error if the token is invalid, missing issuer', () => {
+            const actual = unit.checkJwtPayloadIssSub({ foo: 'bar', sub: TEST_JWT_SUB });
+            expect(provide(actual, undefined)._unsafeUnwrapErr().message).toBe('Invalid token payload: missing iss or sub');
+        });
+        it('should return an error if the token is invalid, missing subject', () => {
+            const actual = unit.checkJwtPayloadIssSub({ foo: 'bar', iss: TEST_JWT_ISS });
+            expect(provide(actual, undefined)._unsafeUnwrapErr().message).toBe('Invalid token payload: missing iss or sub');
+        });
+        it('should return an error if the token is invalid, string payload', () => {
+            const actual = unit.checkJwtPayloadIssSub(jwt.decode(TEST_TOKEN_STRING_PAYLOAD));
+            expect(provide(actual, undefined)._unsafeUnwrapErr().message).toBe('Invalid token payload: string');
+        });
+        it('should return an error if the token is invalid, null', () => {
+            const actual = unit.checkJwtPayloadIssSub(jwt.decode('banana'));
+            expect(provide(actual, undefined)._unsafeUnwrapErr().message).toBe('Invalid token payload: null');
+        });
+    });
+});
+//# sourceMappingURL=common.test.js.map

package/dist/jwt/common.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.test.js","sourceRoot":"","sources":["../../src/jwt/common.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC3G,OAAO,EAAE,UAAU,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AAEpC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;gBACzG,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,YAAY;gBACpB,GAAG,EAAE,YAAY;gBACjB,GAAG,EAAE,YAAY;gBACjB,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC/C,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7E,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAClH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7E,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAClH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;YACxE,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACjF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACpG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/jwt/index.d.ts

@@ -0,0 +1,16 @@
+import { type ResultR } from '@konker.dev/neverthrow-r';
+import * as jwt from 'jsonwebtoken';
+import type { JwtUserContext as JwtUserContextT } from './common.js';
+export type JwtSigningConfig = {
+    signingSecret: string;
+    issuer: string;
+    maxTtlSec: number;
+};
+export type JwtVerificationConfig = {
+    signingSecret: string;
+    issuer: string;
+};
+export declare function jwtDecodeToken(token: string): ResultR<unknown, jwt.JwtPayload, Error>;
+export declare function jwtSignToken(payload: jwt.JwtPayload, config: JwtSigningConfig): ResultR<unknown, string, Error>;
+export declare function jwtVerifyToken(token: string, config: JwtVerificationConfig): ResultR<unknown, JwtUserContextT, never>;
+//# sourceMappingURL=index.d.ts.map

package/dist/jwt/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/jwt/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AAIpC,OAAO,KAAK,EAAoB,cAAc,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AAGvF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAMrF;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAW/G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,CAarH"}

package/dist/jwt/index.js

@@ -0,0 +1,23 @@
+import { fromResult } from '@konker.dev/neverthrow-r';
+import * as jwt from 'jsonwebtoken';
+import { err, ok, Result } from 'neverthrow';
+import { toError } from '../lib/toError.js';
+import { checkJwtPayloadIssSub, JwtUserContext } from './common.js';
+export function jwtDecodeToken(token) {
+    return fromResult(Result.fromThrowable(() => jwt.decode(token), toError)().andThen((decoded) => !decoded || typeof decoded === 'string' ? err(new Error('Invalid token payload')) : ok(decoded)));
+}
+export function jwtSignToken(payload, config) {
+    return fromResult(Result.fromThrowable(() => jwt.sign(payload, config.signingSecret, {
+        issuer: config.issuer,
+        expiresIn: config.maxTtlSec,
+    }), toError)());
+}
+export function jwtVerifyToken(token, config) {
+    return fromResult(Result.fromThrowable(() => jwt.verify(token, config.signingSecret, {
+        issuer: config.issuer,
+    }), toError)()
+        .andThen((payload) => checkJwtPayloadIssSub(payload)({}))
+        .map((jwtPayload) => JwtUserContext(true, jwtPayload))
+        .orElse(() => ok(JwtUserContext(false))));
+}
+//# sourceMappingURL=index.js.map

package/dist/jwt/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jwt/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAapE,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,UAAU,CACf,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3E,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAChG,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAuB,EAAE,MAAwB;IAC5E,OAAO,UAAU,CACf,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,CACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,EACJ,OAAO,CACR,EAAE,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,MAA6B;IACzE,OAAO,UAAU,CACf,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,CACH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,EACJ,OAAO,CACR,EAAE;SACA,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,UAA4B,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SACvE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC"}

package/dist/jwt/index.test.d.ts

@@ -0,0 +1,4 @@
+import * as unit from './index.js';
+export declare const TEST_SIGNING_CONFIG: unit.JwtSigningConfig;
+export declare const TEST_VERIFICATION_CONFIG: unit.JwtVerificationConfig;
+//# sourceMappingURL=index.test.d.ts.map

package/dist/jwt/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../src/jwt/index.test.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,IAAI,MAAM,YAAY,CAAC;AAEnC,eAAO,MAAM,mBAAmB,EAAE,IAAI,CAAC,gBAItC,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,IAAI,CAAC,qBAG3C,CAAC"}

package/dist/jwt/index.test.js

@@ -0,0 +1,73 @@
+import { provide } from '@konker.dev/neverthrow-r';
+import { afterAll, beforeAll, describe, expect, it, vi } from 'vitest';
+import { TEST_JWT_ISS, TEST_JWT_NOW_MS, TEST_JWT_PAYLOAD, TEST_JWT_SIGNING_SECRET, TEST_SIGNED_PAYLOAD, } from '../test/fixtures/jwt.js';
+import { TEST_TOKEN, TEST_TOKEN_EXPIRED, TEST_TOKEN_MISSING_ISSUER, TEST_TOKEN_MISSING_SUBJECT, TEST_TOKEN_OTHER_ISSUER, TEST_TOKEN_STRING_PAYLOAD, } from '../test/fixtures/test-jwt-tokens.js';
+import * as unit from './index.js';
+export const TEST_SIGNING_CONFIG = {
+    signingSecret: TEST_JWT_SIGNING_SECRET,
+    issuer: TEST_JWT_ISS,
+    maxTtlSec: 3600,
+};
+export const TEST_VERIFICATION_CONFIG = {
+    signingSecret: TEST_JWT_SIGNING_SECRET,
+    issuer: TEST_JWT_ISS,
+};
+describe('jwt', () => {
+    beforeAll(() => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+    });
+    afterAll(() => {
+        vi.restoreAllMocks();
+    });
+    describe('jwtDecodeToken', () => {
+        it('should decode a token', () => {
+            const actual = unit.jwtDecodeToken(TEST_TOKEN);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual(TEST_SIGNED_PAYLOAD);
+        });
+        it('should fail to decode a token with a string payload', () => {
+            const actual = unit.jwtDecodeToken(TEST_TOKEN_STRING_PAYLOAD);
+            expect(provide(actual, undefined)._unsafeUnwrapErr().message).toBe('Invalid token payload');
+        });
+    });
+    describe('jwtSignToken', () => {
+        it('should sign a token', () => {
+            const actual = unit.jwtSignToken(TEST_JWT_PAYLOAD, TEST_SIGNING_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toBe(TEST_TOKEN);
+        });
+    });
+    describe('jwtVerifyToken', () => {
+        it('should verify a valid token', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({
+                userId: 'test-sub',
+                verified: true,
+                ...TEST_SIGNED_PAYLOAD,
+            });
+        });
+        it('should return verified false if the token is invalid, wrong secret', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN, Object.assign({}, TEST_VERIFICATION_CONFIG, { signingSecret: 'wrong' }));
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, expired', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN_EXPIRED, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, wrong issuer', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN_OTHER_ISSUER, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, missing issuer', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN_MISSING_ISSUER, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, missing subject', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN_MISSING_SUBJECT, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, string payload', () => {
+            const actual = unit.jwtVerifyToken(TEST_TOKEN_STRING_PAYLOAD, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+    });
+});
+//# sourceMappingURL=index.test.js.map

package/dist/jwt/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../src/jwt/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEvE,OAAO,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,IAAI,MAAM,YAAY,CAAC;AAEnC,MAAM,CAAC,MAAM,mBAAmB,GAA0B;IACxD,aAAa,EAAE,uBAAuB;IACtC,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAA+B;IAClE,aAAa,EAAE,uBAAuB;IACtC,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;IACnB,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,CAAC;YAC9D,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YACxE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;YACzE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC;gBAC/D,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,IAAI;gBACd,GAAG,mBAAmB;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAChC,UAAU,EACV,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,wBAAwB,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CACxE,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,kBAAkB,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,uBAAuB,EAAE,wBAAwB,CAAC,CAAC;YACtF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;YACxF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,0BAA0B,EAAE,wBAAwB,CAAC,CAAC;YACzF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;YACxF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/jwt/rsa.d.ts

@@ -0,0 +1,15 @@
+import { type ResultR } from '@konker.dev/neverthrow-r';
+import * as jwt from 'jsonwebtoken';
+import type { JwtUserContext as JwtUserContextT } from './common.js';
+export type JwtSigningConfigRsa = {
+    rsaPrivateKey: string;
+    issuer: string;
+    maxTtlSec: number;
+};
+export type JwtVerificationConfigRsa = {
+    rsaPublicKey: string;
+    issuer: string;
+};
+export declare function jwtSignTokenRsa(payload: jwt.JwtPayload, config: JwtSigningConfigRsa): ResultR<unknown, string, Error>;
+export declare function jwtVerifyTokenRsa(token: string, config: JwtVerificationConfigRsa): ResultR<unknown, JwtUserContextT, never>;
+//# sourceMappingURL=rsa.d.ts.map

package/dist/jwt/rsa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.d.ts","sourceRoot":"","sources":["../../src/jwt/rsa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AAIpC,OAAO,KAAK,EAAoB,cAAc,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AAGvF,MAAM,MAAM,mBAAmB,GAAG;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAYrH;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,CAc1C"}

package/dist/jwt/rsa.js

@@ -0,0 +1,22 @@
+import { fromResult } from '@konker.dev/neverthrow-r';
+import * as jwt from 'jsonwebtoken';
+import { ok, Result } from 'neverthrow';
+import { toError } from '../lib/toError.js';
+import { checkJwtPayloadIssSub, JwtUserContext } from './common.js';
+export function jwtSignTokenRsa(payload, config) {
+    return fromResult(Result.fromThrowable(() => jwt.sign(payload, config.rsaPrivateKey, {
+        issuer: config.issuer,
+        expiresIn: config.maxTtlSec,
+        algorithm: 'RS256',
+    }), toError)());
+}
+export function jwtVerifyTokenRsa(token, config) {
+    return fromResult(Result.fromThrowable(() => jwt.verify(token, config.rsaPublicKey, {
+        issuer: config.issuer,
+        algorithms: ['RS256'],
+    }), toError)()
+        .andThen((payload) => checkJwtPayloadIssSub(payload)({}))
+        .map((jwtPayload) => JwtUserContext(true, jwtPayload))
+        .orElse(() => ok(JwtUserContext(false))));
+}
+//# sourceMappingURL=rsa.js.map

package/dist/jwt/rsa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.js","sourceRoot":"","sources":["../../src/jwt/rsa.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAapE,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE,MAA2B;IAClF,OAAO,UAAU,CACf,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,CACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,OAAO;KACnB,CAAC,EACJ,OAAO,CACR,EAAE,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,MAAgC;IAEhC,OAAO,UAAU,CACf,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,CACH,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,CAAC,OAAO,CAAC;KACtB,CAAC,EACJ,OAAO,CACR,EAAE;SACA,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,UAA4B,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;SACvE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC"}

package/dist/jwt/rsa.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rsa.test.d.ts.map

package/dist/jwt/rsa.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.test.d.ts","sourceRoot":"","sources":["../../src/jwt/rsa.test.ts"],"names":[],"mappings":""}

package/dist/jwt/rsa.test.js

@@ -0,0 +1,64 @@
+import { provide } from '@konker.dev/neverthrow-r';
+import { afterAll, beforeAll, describe, expect, it, vi } from 'vitest';
+import { TEST_JWT_ISS, TEST_JWT_NOW_MS, TEST_JWT_PAYLOAD, TEST_JWT_SUB, TEST_SIGNED_PAYLOAD, } from '../test/fixtures/jwt.js';
+import { TEST_RSA_KEY_PRIVATE, TEST_RSA_KEY_PUBLIC, TEST_RSA_KEY_PUBLIC_OTHER, } from '../test/fixtures/test-jwt-rsa-keys.js';
+import { TEST_TOKEN_RSA, TEST_TOKEN_RSA_EXPIRED, TEST_TOKEN_RSA_MISSING_ISSUER, TEST_TOKEN_RSA_MISSING_SUBJECT, TEST_TOKEN_RSA_OTHER_ISSUER, TEST_TOKEN_RSA_STRING_PAYLOAD, } from '../test/fixtures/test-jwt-tokens-rsa.js';
+import * as unit from './rsa.js';
+const TEST_SIGNING_CONFIG = {
+    rsaPrivateKey: TEST_RSA_KEY_PRIVATE,
+    issuer: TEST_JWT_ISS,
+    maxTtlSec: 3600,
+};
+const TEST_VERIFICATION_CONFIG = {
+    rsaPublicKey: TEST_RSA_KEY_PUBLIC,
+    issuer: TEST_JWT_ISS,
+};
+describe('jwt/rsa', () => {
+    beforeAll(() => {
+        vi.spyOn(Date, 'now').mockReturnValue(TEST_JWT_NOW_MS);
+    });
+    afterAll(() => {
+        vi.restoreAllMocks();
+    });
+    describe('jwtSignTokenRsa', () => {
+        it('should sign a token', () => {
+            const actual = unit.jwtSignTokenRsa(TEST_JWT_PAYLOAD, TEST_SIGNING_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toBe(TEST_TOKEN_RSA);
+        });
+    });
+    describe('jwtVerifyTokenRsa', () => {
+        it('should verify a valid token', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({
+                verified: true,
+                userId: TEST_JWT_SUB,
+                ...TEST_SIGNED_PAYLOAD,
+            });
+        });
+        it('should return verified false if the token is invalid, wrong key', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA, Object.assign({}, TEST_VERIFICATION_CONFIG, { rsaPublicKey: TEST_RSA_KEY_PUBLIC_OTHER }));
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, expired', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA_EXPIRED, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, wrong issuer', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA_OTHER_ISSUER, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, missing issuer', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA_MISSING_ISSUER, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, missing subject', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA_MISSING_SUBJECT, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+        it('should return verified false if the token is invalid, string payload', () => {
+            const actual = unit.jwtVerifyTokenRsa(TEST_TOKEN_RSA_STRING_PAYLOAD, TEST_VERIFICATION_CONFIG);
+            expect(provide(actual, undefined)._unsafeUnwrap()).toStrictEqual({ verified: false });
+        });
+    });
+});
+//# sourceMappingURL=rsa.test.js.map

package/dist/jwt/rsa.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rsa.test.js","sourceRoot":"","sources":["../../src/jwt/rsa.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEvE,OAAO,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,6BAA6B,EAC7B,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,IAAI,MAAM,UAAU,CAAC;AAEjC,MAAM,mBAAmB,GAA6B;IACpD,aAAa,EAAE,oBAAoB;IACnC,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF,MAAM,wBAAwB,GAAkC;IAC9D,YAAY,EAAE,mBAAmB;IACjC,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YAC3E,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;YAChF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC;gBAC/D,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,YAAY;gBACpB,GAAG,mBAAmB;aACvB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CACnC,cAAc,EACd,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,wBAAwB,EAAE,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC,CACzF,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;YACvE,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;YACxF,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,EAAE,wBAAwB,CAAC,CAAC;YAC7F,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,EAAE,wBAAwB,CAAC,CAAC;YAC/F,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;YAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,EAAE,wBAAwB,CAAC,CAAC;YAChG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,EAAE,wBAAwB,CAAC,CAAC;YAC/F,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/lib/toError.d.ts

@@ -0,0 +1,2 @@
+export declare const toError: (error: unknown) => Error;
+//# sourceMappingURL=toError.d.ts.map

package/dist/lib/toError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toError.d.ts","sourceRoot":"","sources":["../../src/lib/toError.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,GAAI,OAAO,OAAO,KAAG,KAAoE,CAAC"}

package/dist/lib/toError.js

@@ -0,0 +1,2 @@
+export const toError = (error) => (error instanceof Error ? error : new Error(String(error)));
+//# sourceMappingURL=toError.js.map

package/dist/lib/toError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toError.js","sourceRoot":"","sources":["../../src/lib/toError.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAS,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/lib/toError.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=toError.test.d.ts.map

package/dist/lib/toError.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toError.test.d.ts","sourceRoot":"","sources":["../../src/lib/toError.test.ts"],"names":[],"mappings":""}

package/dist/lib/toError.test.js

@@ -0,0 +1,14 @@
+import { describe, expect, it } from 'vitest';
+import { toError } from './toError.js';
+describe('toError', () => {
+    it('returns Error instances unchanged', () => {
+        const error = new Error('boom');
+        expect(toError(error)).toBe(error);
+    });
+    it('converts non-Error values into Error instances', () => {
+        const actual = toError('boom');
+        expect(actual).toBeInstanceOf(Error);
+        expect(actual.message).toBe('boom');
+    });
+});
+//# sourceMappingURL=toError.test.js.map

package/dist/lib/toError.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toError.test.js","sourceRoot":"","sources":["../../src/lib/toError.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/fixtures/jwt.d.ts

@@ -0,0 +1,16 @@
+export declare const TEST_JWT_NOW_MS = 1671573808123;
+export declare const TEST_JWT_ISS = "test-iss";
+export declare const TEST_JWT_SUB = "test-sub";
+export declare const TEST_JWT_SIGNING_SECRET = "shhhhh";
+export declare const TEST_JWT_PAYLOAD: {
+    foo: string;
+    sub: string;
+};
+export declare const TEST_SIGNED_PAYLOAD: {
+    foo: string;
+    iat: number;
+    exp: number;
+    iss: string;
+    sub: string;
+};
+//# sourceMappingURL=jwt.d.ts.map

package/dist/test/fixtures/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/test/fixtures/jwt.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,uBAAuB,WAAW,CAAC;AAChD,eAAO,MAAM,gBAAgB;;;CAAkC,CAAC;AAChE,eAAO,MAAM,mBAAmB;;;;;;CAM/B,CAAC"}

package/dist/test/fixtures/jwt.js

@@ -0,0 +1,13 @@
+export const TEST_JWT_NOW_MS = 1671573808123;
+export const TEST_JWT_ISS = 'test-iss';
+export const TEST_JWT_SUB = 'test-sub';
+export const TEST_JWT_SIGNING_SECRET = 'shhhhh';
+export const TEST_JWT_PAYLOAD = { foo: 'bar', sub: 'test-sub' };
+export const TEST_SIGNED_PAYLOAD = {
+    foo: 'bar',
+    iat: Math.floor(TEST_JWT_NOW_MS / 1000),
+    exp: Math.floor(TEST_JWT_NOW_MS / 1000) + 3600,
+    iss: TEST_JWT_ISS,
+    sub: TEST_JWT_SUB,
+};
+//# sourceMappingURL=jwt.js.map

package/dist/test/fixtures/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../src/test/fixtures/jwt.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;AAC7C,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,QAAQ,CAAC;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC;IACvC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,IAAI;IAC9C,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,YAAY;CAClB,CAAC"}

package/dist/test/fixtures/test-jwt-rsa-keys.d.ts

@@ -0,0 +1,4 @@
+export declare const TEST_RSA_KEY_PUBLIC: string;
+export declare const TEST_RSA_KEY_PUBLIC_OTHER: string;
+export declare const TEST_RSA_KEY_PRIVATE: string;
+//# sourceMappingURL=test-jwt-rsa-keys.d.ts.map

package/dist/test/fixtures/test-jwt-rsa-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-jwt-rsa-keys.d.ts","sourceRoot":"","sources":["../../../src/test/fixtures/test-jwt-rsa-keys.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,QAaE,CAAC;AAEnC,eAAO,MAAM,yBAAyB,QAaJ,CAAC;AAEnC,eAAO,MAAM,oBAAoB,QAmDE,CAAC"}

package/dist/test/fixtures/test-jwt-rsa-keys.js

@@ -0,0 +1,78 @@
+export const TEST_RSA_KEY_PUBLIC = '-----BEGIN RSA PUBLIC KEY-----\n' +
+    'MIICCgKCAgEAsDMuBtC+IOyLVvuHrupVmrSPS3YVMOAoTLwIbRSOjWMSUc56iqKv\n' +
+    '7Umblpzk4CBEgZfHQWkoQaPetSmAxHbq3QH/qcirEGe1XtXukTqELHX+Awj3jvkt\n' +
+    'TMHUbX9K4HYBXTy2t93jrVCqN7JoMJw29TaFVrGq+H151W72WoMvVVCbBIQukJ6p\n' +
+    '8Huwi01IHCEPW5gHCYzkLb0LjO/XwfcZ1GmM0nude4OispJw/PefMdqgAiDn2egq\n' +
+    'W26goGrxreCTzUTkzT/ptrWoLF/O3NLNQ+Tp5ja7nqgl2HV86ZODHjjtO2vlwu71\n' +
+    '/lI/GJNbVQYT9NVp41WHn3bgvpE+9ZXpgCtxM28oYYC1Yv0x9TU7jeHaDIip0Bu4\n' +
+    'grsZ3LhJC97UKgvnyhjacUP5/0Dxpmfnbd/6ieybqCO7t6lzS1BohLH1/OmKutn2\n' +
+    '/Oh7MJLeHSfysObSrMW11IWo6KlUGPl8gkLary/rBFeWiDIW22gr9iSs0j67St4C\n' +
+    'rMNEob+PmV0Gu6GK5uAHoD4jAJl76EnIe+juQ472HkbCVw/tja8WdytczgKL5S90\n' +
+    'c+kwXx6qiQ7N/SNoKPwjOOBek9Go7QFcOMpJoi377qGRINfwjmD3UVw7FnWCjAMy\n' +
+    'gB7oQvS7eLAg6ZpYQXBPtYVYFTsPbD8vO10esTBQZTqNGHZ1z2UCH5MCAwEAAQ==\n' +
+    '-----END RSA PUBLIC KEY-----\n';
+export const TEST_RSA_KEY_PUBLIC_OTHER = '-----BEGIN RSA PUBLIC KEY-----\n' +
+    'MIICCgKCAgEAoBKxVWIjiJ06/mX1UL5/ELedioMZqeipudC8QlXN+4l6RrFgC3tu\n' +
+    'B8q6CXSnuuk27xABXsAKjNAOH11FzdgzSERxP08JCVzVUDcIAz9flkmIC9Yc0AUz\n' +
+    'hYUNQfgGSUSzZILaS7l24jpKYICyA9ChnqDfsq5hRr63klqaez+hvMrVSIJiMfrw\n' +
+    'RjtFsmtKYHoAZ7nK5CMVAWG2XUh6B9w4NCJ0m8SCpLKF9EjYqe26T3bmHn8dp490\n' +
+    '9oA6tCNrd+6vha848ytH6uiyGRzDSpyttNPzXagI9cOBYy1eM7WwmWkCgT6h9oFm\n' +
+    '9MjYtSo69wBLGngmgTec8hxTLB4bXPPAEwDfjGOAktU8w1afqycIPxsEpJE2C89u\n' +
+    'C4NW/U0TLDXQ6SQpCFdx4Mg2dCojMDAi8zGrARNlB3bB03hikd5ZSOMqtp40tx4E\n' +
+    'kLroFfUB8n/oW9ksV1VTK7CPOh7lRy0iIPl0ohQ5wx2KRPYwvhOI5nzbBnU/D6Pc\n' +
+    '+nG14GAbx++b5kB/CYcZihTMsYDSWu/vtq7AbnjWaWxutzg26UfPnL2qY+jEef9g\n' +
+    'vNZ5ZLutatrHeFoqrCQ0cSLKYO3G8jaWJk2H5w+Aq/tI2bva4YwU3/Q3HIefD7X/\n' +
+    'V0S2AAKJpgelvz4/f5cZ1aYOtZJY83MSOpZoKHkGl3+nEzYvsPX2EsUCAwEAAQ==\n' +
+    '-----END RSA PUBLIC KEY-----\n';
+export const TEST_RSA_KEY_PRIVATE = '-----BEGIN RSA PRIVATE KEY-----\n' +
+    'MIIJKQIBAAKCAgEAsDMuBtC+IOyLVvuHrupVmrSPS3YVMOAoTLwIbRSOjWMSUc56\n' +
+    'iqKv7Umblpzk4CBEgZfHQWkoQaPetSmAxHbq3QH/qcirEGe1XtXukTqELHX+Awj3\n' +
+    'jvktTMHUbX9K4HYBXTy2t93jrVCqN7JoMJw29TaFVrGq+H151W72WoMvVVCbBIQu\n' +
+    'kJ6p8Huwi01IHCEPW5gHCYzkLb0LjO/XwfcZ1GmM0nude4OispJw/PefMdqgAiDn\n' +
+    '2egqW26goGrxreCTzUTkzT/ptrWoLF/O3NLNQ+Tp5ja7nqgl2HV86ZODHjjtO2vl\n' +
+    'wu71/lI/GJNbVQYT9NVp41WHn3bgvpE+9ZXpgCtxM28oYYC1Yv0x9TU7jeHaDIip\n' +
+    '0Bu4grsZ3LhJC97UKgvnyhjacUP5/0Dxpmfnbd/6ieybqCO7t6lzS1BohLH1/OmK\n' +
+    'utn2/Oh7MJLeHSfysObSrMW11IWo6KlUGPl8gkLary/rBFeWiDIW22gr9iSs0j67\n' +
+    'St4CrMNEob+PmV0Gu6GK5uAHoD4jAJl76EnIe+juQ472HkbCVw/tja8WdytczgKL\n' +
+    '5S90c+kwXx6qiQ7N/SNoKPwjOOBek9Go7QFcOMpJoi377qGRINfwjmD3UVw7FnWC\n' +
+    'jAMygB7oQvS7eLAg6ZpYQXBPtYVYFTsPbD8vO10esTBQZTqNGHZ1z2UCH5MCAwEA\n' +
+    'AQKCAgAMjTDHqoIIvWD1qshRFP9RHHCiuwAqcaVdRf3Bq3e2KasJ6c//5TPsDtTH\n' +
+    'B1kkgBfxNVsr1S5Zcq9wL0stc50qbjSEpzdMXV7lqQ6sCMOWmTclhzN/W0+3So1z\n' +
+    '2V//mlhhiGwpr+RCmd7uRca3Q8GEeURJVzGrLuEJa7Sf4P1zseDBExtwEOVhLKZ4\n' +
+    'XeJ3ooFCEJPbwc4VVgSnHwS7G/uajoRKECU5QbjKyLTEyGzuM7k3PZnWg3vU9I37\n' +
+    'r3KU5M0Sj8hOuLFQ4yLeOlr1jwyxO/LPg/GcjTTY9RGXX/s0oXCAzaBZ4QTj/37g\n' +
+    'JMsaROsSA0veNl8JZIIBAT6/ZtTxvnntiMz6IHs9mH6r4c3kpT5jLAVJw1b0FBc4\n' +
+    'pD0IYRNMl9zZeak3FzT5xOBoquQUtk2ubNnQkIyg1a2BKc4PbQsMr4IoXoZW5cnk\n' +
+    'Cj4Md6no9sz7ud+yKYQiCswpYfBhRFDI+aA2MfFjAtLFF+JbFihGkWHk3GTZvU60\n' +
+    'tFKZVmb0FG1aHNL6BjbJpPj0Aq55QW6lnHdRvvM26Wtn/rO+9WfVHpVoPC8bSfPq\n' +
+    'CxpXMb59r+SHNqAu43kcHkYYpH/yCCjJXVVaIs04hicoCDL5BwYh7xy2K3bL02x6\n' +
+    'YHoThOiHb9soAoxiF23qt37G28p11i3zkx+DuliG0Qc5RfVz6QKCAQEA68cdUQka\n' +
+    '/J/MVPjPOq1bPJ5dSJ9Qpgpt1Kz9fUPvfRe+yjYy/icCldPOrTgy60u654zufo+s\n' +
+    'aEMY0OP9D5A3p+pSbACr5OfLBeQwDtP4Zhna9bHr1/e4qMd8EQrUfXxUvzsIks7v\n' +
+    'WHWlhF+Wgi5tBl0l9FPaGUllO3fgvIoDkZ60QGlrfOvKxr1esx5Mlj0k9fiAjD/V\n' +
+    'SeL0qEoMVieefnKqHw6ohiEvyHJrH3CzOV7cP93Yfft/+qkvCmumjr9UWx7kSpCV\n' +
+    'KRojDA73RZyCKsDqekA+mIyGyvL8rPvtBHx9HubYhcoP7lkeCddZxIm9zy5VTK02\n' +
+    'noH5bpy0xT1m+wKCAQEAv0/vo1E1DZeEaU/pcQpEIWgUIBL0VbLwZ5L4Ue6DHD/g\n' +
+    'ybBrkHMtu1VgifQ0fdsVWhGbnrpIbWbxPz+OVtJdtB6ZYOVy25OnjieV4XJ79iq5\n' +
+    'xbN2/Z8t+W8IsC7vwgLohS8AqJ1r7hHx/l0YuEmmJzO/1LOYA9PzGjbAIgPES4qM\n' +
+    'f9erzB0vhf5beghW/CXCmLS5b4J7M9HuCU3UTsZzftY0wVM+KhaCgAj+74ye6UZA\n' +
+    'lxZw5GbdWrpS6INHBKmjzgPcrAYD1hq9dClqLVAoqGEkQ381lLWIBop+PhKDFuzs\n' +
+    'xsEs8TDA74cPPhQNn1dlxop14I/OTGh/UaeSJ9umSQKCAQB2cAI5B8Lnrfn9oTKv\n' +
+    '/g87xy2C4oynq8t6Lx/zAeJWy0vK1ikNZFk3HDvQ5c8mRVdxI2lWaCOqCDJ6FFy1\n' +
+    'qbNbhSi8GiY/CXUB05uUh0RbPZexHhwj08uN9Q9MnE0bcA4+NZBb9tlibU6kzUOU\n' +
+    'x2965+W98zU2yJiyo8hfzVB3oOpZBNu619N3u/7LKWg9fB+J87fXO+WPhRNzSici\n' +
+    'TCqgyEbO7RUYs6kGHvvSwlE1e4JWDsHGn0StjLkVmfgD8vaUA1OYZUKYcAm07/uk\n' +
+    'mzcD9P6URJttFAJOBnuJBdANFd/gWwPfSR5xk5C0TtpIEQ0o+tRcfRJX02CSAOQJ\n' +
+    'xItrAoIBAQCtCFSbJ1jPuUoGokNmfT2P5X3GYL5jQJvVYgV8vTgSdegPI6S2Gqaz\n' +
+    'OA4/2AMeDegq9aAGGUBmyuPKK+bGujAMOFzLWdvfo5W5qi4SoaRiytQJbz9hNvaz\n' +
+    'Eu0NxPYPSOgbhZ6X4wH6anqwcG1qSRqhfFm1vNXyKGJJRFnUqgmBtYdMHboBvCf+\n' +
+    'jkcYgbCDEHgH+/V4WNCr1uTvv1gWA8H0ZzOB45NnJ8LSoNBLw6j7HhJPVPm4ax0r\n' +
+    '8TgJmqrCGdjQ/Yc6g5o2rSrLhKXG5ChR2sKc1dKVdPbZy6tQ4xdzxciGH7RRVaI7\n' +
+    'QrHTmPmVM8wWnabt+8NAModtSB2WNUEZAoIBAQCioTmED/UnuOrHi7RNt2PLR3X6\n' +
+    'p6C0wNch9DTRgl39f6e96eVwTanqen+Sl+7oW7Tbg+2+A4pPgBYSkXtUTpHXbblf\n' +
+    'oz1uHY833qyJqpnmu307s8/8uUOMWZmAiLKd3WRu7jk2osU2hy7f/AOpU6L3cYJT\n' +
+    'CoB5kNQHE3xLZEWcpq28hNEu4O4ul7ciAA8QFvE90/HfsqxdwU38fZiztdEufgM9\n' +
+    '+dpx+o4OIO6K79HruLa66naP7rarAuIErAV1zFZ4P5NNrExRIgJqTFrpsxpPzpl9\n' +
+    '8bf2miCj2aPbMjxK2tY/FzWNGurTVSw4W7xmqFDT6gMHPcdWsiAVi/Pc/GUj\n' +
+    '-----END RSA PRIVATE KEY-----\n';
+//# sourceMappingURL=test-jwt-rsa-keys.js.map

package/dist/test/fixtures/test-jwt-rsa-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-jwt-rsa-keys.js","sourceRoot":"","sources":["../../../src/test/fixtures/test-jwt-rsa-keys.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kCAAkC;IAClC,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,gCAAgC,CAAC;AAEnC,MAAM,CAAC,MAAM,yBAAyB,GACpC,kCAAkC;IAClC,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,gCAAgC,CAAC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAC/B,mCAAmC;IACnC,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,gEAAgE;IAChE,iCAAiC,CAAC"}

package/dist/test/fixtures/test-jwt-tokens-rsa.d.ts

@@ -0,0 +1,7 @@
+export declare const TEST_TOKEN_RSA = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4LCJpc3MiOiJ0ZXN0LWlzcyJ9.L_iuofq2Jt-DAmhwsMuoC4YqpcerPB8p6FHrWd8c7iAA25TiCCMPfFJ-sei0ES44qccfS1-aRKRCnthWKnUhtAsV8acwPE3x017nCoSrw_10tU3m2XrLwvz7QOvrBQYsu9-IhcRSCApJ0a9xy2To_oGjlGa9jcVO_E8MbL50Stf5XWHX6Jjt6MmQ7tVQLvcLAguWazCM7C0w3LNsG9GlGQnf4--wo_IDPok9ELkGR1rYok9p88QGrFjaYRkzV6so4L5RQUsfV_36EsiNekIFeUBJr_b3YoezIFZ-F_YxlZ1EaBtJ3O8rfySLcOQmiQR-iQ5jbs_WSPGrbw1ItPuxbjQwDVfEc3zn2GlwHYjaSaff6DyG_4tRmN96rqb4CGLFb9Nidc2FEeJc9RThc1Ygp65hxGQKM4I12k4jt7BzTfxhxmeRO7IJGFfH3-yJ-wGy1Vf9VWTi4SvjLa8jiF_9sWIaorifRSvvqaHqHjcI54EXlkmEG5BWfF5m4JrVoZhxLFohdlFW0HAP_oA3mKnI_QZUc1XVOtxpJwvo6ByM0A6A1pPdThWljfhZx7r56PSc2J5ZLkHKkavvMTjGaub1a1oLxsK0azX-xSg1fI8oy7yadVjyqY_0ArOhIYy22C1mwyBSLsSVylqig6go54PjVWh4JXepvMibmZQqZToayHA";
+export declare const TEST_TOKEN_RSA_EXPIRED = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTcxMzA4LCJpc3MiOiJ0ZXN0LWlzcyJ9.kVjkHPUhqd1UNOGeE8ovzegjqrFVymidv1tSzJoTkpmr_E9NELLsSRxppm4LQSFw5tDIzeqkI0zjmYxpCLuEwpAIxphF9JDEiViNGw_LjWVMh84lppUmJx0YU_cdLd5Xs71U0OgTHlWyz_amnQP3A7j0-pvbRY96E6s1NMp_lydQVeRxAWYRMficXALpJh7uZB8uq516nH1yGfWrGJyG1AUpgCP2VZbxavPHcYX5rGNmT0evbaxUxPM_NhSw10OqpZl7EbGEUEbjCSUW5crJxO5t6egG-bMZiQ868U2epCgRrpviCSduHlEiFOvTYa4yQFcgDexK1B9KuUXKttsdR60weGFmZZhiClEhN151fLdlj1HOH3JE8C8tDE0Eo0s7WAzPyWO52RFdGL_8ybzf8fawFhoUpCkRa6RlmVFj7XMHSW6i-KIPXJ1bMu7Z2Jf3MH_mNkzK_h_gh_me0OjjWLFVdKc3Ul0Di9AFk96zLjI9EEJ9bziXTOp6PoGEM-cC_vSf5tJqYqUjiGW6BPOfwvV8aHfUifc2ctf3qDXZjqVXtiPoZllEqxVV_M59AYcGYWTHo8t_JpX1N0FOcrx7kbR2huWPADTeZGHs4EM2-mbKjt06CQ9IrIlewNBsYAaHsmlMrsabJULAyOHSYtm-i5abP-qeMFpOqYlljiUwwGs";
+export declare const TEST_TOKEN_RSA_OTHER_ISSUER = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4LCJpc3MiOiJvdGhlci1pc3N1ZXIifQ.mwesZ-awkidNWD6rr0NuRYx9LmdPvfdyLOnEsEJAGaLiMdk9nz6FyXuNZfslGSU_Y8T8y8QqN100i-MxbJUeOJT8o00p2O0mkjkMyQJFeuaCazDoaWPyUqpfqKanj_D-saUeXlN1HXKgL2GNgAjc7LfIIT6lpZILpS7jqaGCyKprSer4ftNxgJOe47Exx6JlepOZ_Q-RreOd9vhjcWp06I4-hBBmz5BMzHf2oLCBR35NqLReNIuebIu_1CX95VVXK0Sv_9CMRKSXd8xtEIKmXqUXSPBx41oniC2ue0fe_vtGrpNAtles8kyWiNV5aR1cYpArCXeFnV8HoBZKDqNetCrMvN0N8EXX44rIRydXJP33R4UQTkt_Ap0Af6I4aFY9CIxK53Qtv9f9Os_0Xc8vs-KCf_zA46_jf34g-7wl68FnTMcpX04VwYjffaeLF-1EkplIu7f-vMPJmUvMA0ukC2yjBA7QjaUCOmOPZNmtxzlSov_D90W67UXea5neRCvDzOhPC5gdo7l8qjs7xXuuNf0QlVIqyfWWUeMNbYJcTaWZn_DmEGx_AMRTPwhXhLL-fIWoJQajbw_1PBbWohY_eONfD49SQtAE1tiE7PweG9mX-A3-bCp8Kx8SCTGs2iVZ2HgLOzPOleexxmpHIwvrnpsGMb3LGXuwTJ27RKe7Mnk";
+export declare const TEST_TOKEN_RSA_MISSING_ISSUER = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4fQ.kxDTeu4qZnCyandR-Z9k5xAsdtGCQT33w22FibCK3C8DMTLSRpRgHcjaN8gPOAjxkvPxvcF50mjNjxXP1I1yGt4zcBY3aMaRaCj44O1iUWv4K695sF3NOfHt244n5KKo4IG2mowGRRjQMjSNY95U6IkLt_2QKvpfEAIUxoU544jbXMXxkugiAbIH58uLAteMPqqLqn2OSpDucVC1pJgOpIFvfBQsrCaSLuANvtcj4AYgds2FnUtI_FqRTVIYQzg4gSxOQ9pDfOYZO_o2gg5LM4bgF-tXQN06avWENKO55b5QtigC3LeFXOqGXNRPLv-gQk06Hjm5C5tcY1mAkLI-eN7qg9ZrAXapBWpyrRnbhlI0oSqs1DjJkcm1yn71HgWL3P9LZZ6mrVxDOVnAFqkijMQum3L7fZ5MN6mKNXl9b2heXIGwoVG9I6NmuI36El40GGsN7X_Kq1wT2xBNpgo9r8TYgFlYYwFtH7ggGHc3y_KbVRpGGSO8AyTv_qxF7G7cKcZrRY_K_YfG84FL2x9R7rVb65xQSMuGX4b4GUvpats6r-29sVQ-NFWDD7NFNp5omwC-iwmQ0EoVtgs-yXK9H_kDgZBfxakHZNvqLA8XxMl6nk0kE7lgxCKFSwFRFRJVnJgx62qawSihUh7tMkdUxM5_XcsWLLrdFSlsSGAF0Gc";
+export declare const TEST_TOKEN_RSA_MISSING_SUBJECT = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzM4MDgsImV4cCI6MTY3MTU3NzQwOCwiaXNzIjoidGVzdC1pc3MifQ.FXa6cgr8lKaZmGu3ObMoMJKwD9pYLuH-x0hPn1-Q56u2k1sAJMswcmY9viFGYdK2kh4130kSFrih-VxZ8sd_gawPQPJzty5OIHm27tky5971GYLGsonvjAsDyB-dlvenfFQ9POujq04GxNgvjzutQYrQIgok9wJ8eLjYUhACZOeOd659zhHKe_aONfc07YDAZFNyQFs_v68pEQOr1gGwpxEKw3pBkTLXAmsOtQdkS-Ngc1NPMs_5NkEGJO5IJ1DcdlzCP1QU9wnrK7q_IxsYaFPVmjmstzyhsJ1eD-ZQVFQStCz6wItNRBX2VKwSXyA0t7CXUwa6SNFRFtvOjIvxjZp1CP4pcO1qWGzX9Udibhvj9_pvga1J96GqNH2KY-ZU5PRaCCnrZ0Je_2Mea1-6XKP5ZcF38z6rp1xJ0jVZNVVQ0mdU9sCQLDmk0Q1Ao35Y7LyKXyDowFlVWqe91jqVdntBuf_QCL5OnFWoUT5w3G7mssqOFv_Az8mN-ADTQALVjhZDNIE8rVL_xazPAHWSdTyvSrqrXuhz5at-unO9DY7nOkl7f6QEPJPQvzNyAcBbc0XYkrtY2RwySuNHhH4vS4oqsPyfsP2bbw4y0K4QuWGh08gO_pzDtpFcBdVLo3IDoiSdlP1UGaOqDppRoXUxKVmXFUJPUtgKa55oHt3vHSs";
+export declare const TEST_TOKEN_RSA_STRING_PAYLOAD = "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4fQ.kxDTeu4qZnCyandR-Z9k5xAsdtGCQT33w22FibCK3C8DMTLSRpRgHcjaN8gPOAjxkvPxvcF50mjNjxXP1I1yGt4zcBY3aMaRaCj44O1iUWv4K695sF3NOfHt244n5KKo4IG2mowGRRjQMjSNY95U6IkLt_2QKvpfEAIUxoU544jbXMXxkugiAbIH58uLAteMPqqLqn2OSpDucVC1pJgOpIFvfBQsrCaSLuANvtcj4AYgds2FnUtI_FqRTVIYQzg4gSxOQ9pDfOYZO_o2gg5LM4bgF-tXQN06avWENKO55b5QtigC3LeFXOqGXNRPLv-gQk06Hjm5C5tcY1mAkLI-eN7qg9ZrAXapBWpyrRnbhlI0oSqs1DjJkcm1yn71HgWL3P9LZZ6mrVxDOVnAFqkijMQum3L7fZ5MN6mKNXl9b2heXIGwoVG9I6NmuI36El40GGsN7X_Kq1wT2xBNpgo9r8TYgFlYYwFtH7ggGHc3y_KbVRpGGSO8AyTv_qxF7G7cKcZrRY_K_YfG84FL2x9R7rVb65xQSMuGX4b4GUvpats6r-29sVQ-NFWDD7NFNp5omwC-iwmQ0EoVtgs-yXK9H_kDgZBfxakHZNvqLA8XxMl6nk0kE7lgxCKFSwFRFRJVnJgx62qawSihUh7tMkdUxM5_XcsWLLrdFSlsSGAF0Gc";
+//# sourceMappingURL=test-jwt-tokens-rsa.d.ts.map

package/dist/test/fixtures/test-jwt-tokens-rsa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-jwt-tokens-rsa.d.ts","sourceRoot":"","sources":["../../../src/test/fixtures/test-jwt-tokens-rsa.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,k0BACsyB,CAAC;AACl0B,eAAO,MAAM,sBAAsB,k0BAC8xB,CAAC;AACl0B,eAAO,MAAM,2BAA2B,w0BAC+xB,CAAC;AACx0B,eAAO,MAAM,6BAA6B,4yBACiwB,CAAC;AAC5yB,eAAO,MAAM,8BAA8B,4yBACgwB,CAAC;AAC5yB,eAAO,MAAM,6BAA6B,4yBACiwB,CAAC"}

package/dist/test/fixtures/test-jwt-tokens-rsa.js

@@ -0,0 +1,7 @@
+export const TEST_TOKEN_RSA = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4LCJpc3MiOiJ0ZXN0LWlzcyJ9.L_iuofq2Jt-DAmhwsMuoC4YqpcerPB8p6FHrWd8c7iAA25TiCCMPfFJ-sei0ES44qccfS1-aRKRCnthWKnUhtAsV8acwPE3x017nCoSrw_10tU3m2XrLwvz7QOvrBQYsu9-IhcRSCApJ0a9xy2To_oGjlGa9jcVO_E8MbL50Stf5XWHX6Jjt6MmQ7tVQLvcLAguWazCM7C0w3LNsG9GlGQnf4--wo_IDPok9ELkGR1rYok9p88QGrFjaYRkzV6so4L5RQUsfV_36EsiNekIFeUBJr_b3YoezIFZ-F_YxlZ1EaBtJ3O8rfySLcOQmiQR-iQ5jbs_WSPGrbw1ItPuxbjQwDVfEc3zn2GlwHYjaSaff6DyG_4tRmN96rqb4CGLFb9Nidc2FEeJc9RThc1Ygp65hxGQKM4I12k4jt7BzTfxhxmeRO7IJGFfH3-yJ-wGy1Vf9VWTi4SvjLa8jiF_9sWIaorifRSvvqaHqHjcI54EXlkmEG5BWfF5m4JrVoZhxLFohdlFW0HAP_oA3mKnI_QZUc1XVOtxpJwvo6ByM0A6A1pPdThWljfhZx7r56PSc2J5ZLkHKkavvMTjGaub1a1oLxsK0azX-xSg1fI8oy7yadVjyqY_0ArOhIYy22C1mwyBSLsSVylqig6go54PjVWh4JXepvMibmZQqZToayHA';
+export const TEST_TOKEN_RSA_EXPIRED = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTcxMzA4LCJpc3MiOiJ0ZXN0LWlzcyJ9.kVjkHPUhqd1UNOGeE8ovzegjqrFVymidv1tSzJoTkpmr_E9NELLsSRxppm4LQSFw5tDIzeqkI0zjmYxpCLuEwpAIxphF9JDEiViNGw_LjWVMh84lppUmJx0YU_cdLd5Xs71U0OgTHlWyz_amnQP3A7j0-pvbRY96E6s1NMp_lydQVeRxAWYRMficXALpJh7uZB8uq516nH1yGfWrGJyG1AUpgCP2VZbxavPHcYX5rGNmT0evbaxUxPM_NhSw10OqpZl7EbGEUEbjCSUW5crJxO5t6egG-bMZiQ868U2epCgRrpviCSduHlEiFOvTYa4yQFcgDexK1B9KuUXKttsdR60weGFmZZhiClEhN151fLdlj1HOH3JE8C8tDE0Eo0s7WAzPyWO52RFdGL_8ybzf8fawFhoUpCkRa6RlmVFj7XMHSW6i-KIPXJ1bMu7Z2Jf3MH_mNkzK_h_gh_me0OjjWLFVdKc3Ul0Di9AFk96zLjI9EEJ9bziXTOp6PoGEM-cC_vSf5tJqYqUjiGW6BPOfwvV8aHfUifc2ctf3qDXZjqVXtiPoZllEqxVV_M59AYcGYWTHo8t_JpX1N0FOcrx7kbR2huWPADTeZGHs4EM2-mbKjt06CQ9IrIlewNBsYAaHsmlMrsabJULAyOHSYtm-i5abP-qeMFpOqYlljiUwwGs';
+export const TEST_TOKEN_RSA_OTHER_ISSUER = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4LCJpc3MiOiJvdGhlci1pc3N1ZXIifQ.mwesZ-awkidNWD6rr0NuRYx9LmdPvfdyLOnEsEJAGaLiMdk9nz6FyXuNZfslGSU_Y8T8y8QqN100i-MxbJUeOJT8o00p2O0mkjkMyQJFeuaCazDoaWPyUqpfqKanj_D-saUeXlN1HXKgL2GNgAjc7LfIIT6lpZILpS7jqaGCyKprSer4ftNxgJOe47Exx6JlepOZ_Q-RreOd9vhjcWp06I4-hBBmz5BMzHf2oLCBR35NqLReNIuebIu_1CX95VVXK0Sv_9CMRKSXd8xtEIKmXqUXSPBx41oniC2ue0fe_vtGrpNAtles8kyWiNV5aR1cYpArCXeFnV8HoBZKDqNetCrMvN0N8EXX44rIRydXJP33R4UQTkt_Ap0Af6I4aFY9CIxK53Qtv9f9Os_0Xc8vs-KCf_zA46_jf34g-7wl68FnTMcpX04VwYjffaeLF-1EkplIu7f-vMPJmUvMA0ukC2yjBA7QjaUCOmOPZNmtxzlSov_D90W67UXea5neRCvDzOhPC5gdo7l8qjs7xXuuNf0QlVIqyfWWUeMNbYJcTaWZn_DmEGx_AMRTPwhXhLL-fIWoJQajbw_1PBbWohY_eONfD49SQtAE1tiE7PweG9mX-A3-bCp8Kx8SCTGs2iVZ2HgLOzPOleexxmpHIwvrnpsGMb3LGXuwTJ27RKe7Mnk';
+export const TEST_TOKEN_RSA_MISSING_ISSUER = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4fQ.kxDTeu4qZnCyandR-Z9k5xAsdtGCQT33w22FibCK3C8DMTLSRpRgHcjaN8gPOAjxkvPxvcF50mjNjxXP1I1yGt4zcBY3aMaRaCj44O1iUWv4K695sF3NOfHt244n5KKo4IG2mowGRRjQMjSNY95U6IkLt_2QKvpfEAIUxoU544jbXMXxkugiAbIH58uLAteMPqqLqn2OSpDucVC1pJgOpIFvfBQsrCaSLuANvtcj4AYgds2FnUtI_FqRTVIYQzg4gSxOQ9pDfOYZO_o2gg5LM4bgF-tXQN06avWENKO55b5QtigC3LeFXOqGXNRPLv-gQk06Hjm5C5tcY1mAkLI-eN7qg9ZrAXapBWpyrRnbhlI0oSqs1DjJkcm1yn71HgWL3P9LZZ6mrVxDOVnAFqkijMQum3L7fZ5MN6mKNXl9b2heXIGwoVG9I6NmuI36El40GGsN7X_Kq1wT2xBNpgo9r8TYgFlYYwFtH7ggGHc3y_KbVRpGGSO8AyTv_qxF7G7cKcZrRY_K_YfG84FL2x9R7rVb65xQSMuGX4b4GUvpats6r-29sVQ-NFWDD7NFNp5omwC-iwmQ0EoVtgs-yXK9H_kDgZBfxakHZNvqLA8XxMl6nk0kE7lgxCKFSwFRFRJVnJgx62qawSihUh7tMkdUxM5_XcsWLLrdFSlsSGAF0Gc';
+export const TEST_TOKEN_RSA_MISSING_SUBJECT = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzM4MDgsImV4cCI6MTY3MTU3NzQwOCwiaXNzIjoidGVzdC1pc3MifQ.FXa6cgr8lKaZmGu3ObMoMJKwD9pYLuH-x0hPn1-Q56u2k1sAJMswcmY9viFGYdK2kh4130kSFrih-VxZ8sd_gawPQPJzty5OIHm27tky5971GYLGsonvjAsDyB-dlvenfFQ9POujq04GxNgvjzutQYrQIgok9wJ8eLjYUhACZOeOd659zhHKe_aONfc07YDAZFNyQFs_v68pEQOr1gGwpxEKw3pBkTLXAmsOtQdkS-Ngc1NPMs_5NkEGJO5IJ1DcdlzCP1QU9wnrK7q_IxsYaFPVmjmstzyhsJ1eD-ZQVFQStCz6wItNRBX2VKwSXyA0t7CXUwa6SNFRFtvOjIvxjZp1CP4pcO1qWGzX9Udibhvj9_pvga1J96GqNH2KY-ZU5PRaCCnrZ0Je_2Mea1-6XKP5ZcF38z6rp1xJ0jVZNVVQ0mdU9sCQLDmk0Q1Ao35Y7LyKXyDowFlVWqe91jqVdntBuf_QCL5OnFWoUT5w3G7mssqOFv_Az8mN-ADTQALVjhZDNIE8rVL_xazPAHWSdTyvSrqrXuhz5at-unO9DY7nOkl7f6QEPJPQvzNyAcBbc0XYkrtY2RwySuNHhH4vS4oqsPyfsP2bbw4y0K4QuWGh08gO_pzDtpFcBdVLo3IDoiSdlP1UGaOqDppRoXUxKVmXFUJPUtgKa55oHt3vHSs';
+export const TEST_TOKEN_RSA_STRING_PAYLOAD = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4fQ.kxDTeu4qZnCyandR-Z9k5xAsdtGCQT33w22FibCK3C8DMTLSRpRgHcjaN8gPOAjxkvPxvcF50mjNjxXP1I1yGt4zcBY3aMaRaCj44O1iUWv4K695sF3NOfHt244n5KKo4IG2mowGRRjQMjSNY95U6IkLt_2QKvpfEAIUxoU544jbXMXxkugiAbIH58uLAteMPqqLqn2OSpDucVC1pJgOpIFvfBQsrCaSLuANvtcj4AYgds2FnUtI_FqRTVIYQzg4gSxOQ9pDfOYZO_o2gg5LM4bgF-tXQN06avWENKO55b5QtigC3LeFXOqGXNRPLv-gQk06Hjm5C5tcY1mAkLI-eN7qg9ZrAXapBWpyrRnbhlI0oSqs1DjJkcm1yn71HgWL3P9LZZ6mrVxDOVnAFqkijMQum3L7fZ5MN6mKNXl9b2heXIGwoVG9I6NmuI36El40GGsN7X_Kq1wT2xBNpgo9r8TYgFlYYwFtH7ggGHc3y_KbVRpGGSO8AyTv_qxF7G7cKcZrRY_K_YfG84FL2x9R7rVb65xQSMuGX4b4GUvpats6r-29sVQ-NFWDD7NFNp5omwC-iwmQ0EoVtgs-yXK9H_kDgZBfxakHZNvqLA8XxMl6nk0kE7lgxCKFSwFRFRJVnJgx62qawSihUh7tMkdUxM5_XcsWLLrdFSlsSGAF0Gc';
+//# sourceMappingURL=test-jwt-tokens-rsa.js.map

package/dist/test/fixtures/test-jwt-tokens-rsa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-jwt-tokens-rsa.js","sourceRoot":"","sources":["../../../src/test/fixtures/test-jwt-tokens-rsa.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GACzB,+zBAA+zB,CAAC;AACl0B,MAAM,CAAC,MAAM,sBAAsB,GACjC,+zBAA+zB,CAAC;AACl0B,MAAM,CAAC,MAAM,2BAA2B,GACtC,q0BAAq0B,CAAC;AACx0B,MAAM,CAAC,MAAM,6BAA6B,GACxC,yyBAAyyB,CAAC;AAC5yB,MAAM,CAAC,MAAM,8BAA8B,GACzC,yyBAAyyB,CAAC;AAC5yB,MAAM,CAAC,MAAM,6BAA6B,GACxC,yyBAAyyB,CAAC"}

package/dist/test/fixtures/test-jwt-tokens.d.ts

@@ -0,0 +1,7 @@
+export declare const TEST_TOKEN = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4LCJpc3MiOiJ0ZXN0LWlzcyJ9.IfZ_IlbKl2S7pkKBqTis0kyBmDuXGbBkCdCkrDdLq_Q";
+export declare const TEST_TOKEN_EXPIRED = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzM4MDAsImV4cCI6MTY3MTU3MzgwMSwiaXNzIjoib3RoZXIifQ.hqHdbRzB4HqiYA1FRADQwR7RUE22N7vMsPGwDsvwdMo";
+export declare const TEST_TOKEN_OTHER_ISSUER = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzQ0MzYsImV4cCI6MTY3MTU4NDQzNiwiaXNzIjoib3RoZXIifQ.lW7nOIQNHlFAv5dfzivR-V-ufHiZ4MTNo1IPyQXoZ8k";
+export declare const TEST_TOKEN_MISSING_ISSUER = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzQ0MzYsImV4cCI6MTY3MTU4NDQzNiwiaXNzIjoib3RoZXIifQ.lW7nOIQNHlFAv5dfzivR-V-ufHiZ4MTNo1IPyQXoZ8k";
+export declare const TEST_TOKEN_MISSING_SUBJECT = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzM4MDgsImV4cCI6MTY3MTU3NzQwOCwiaXNzIjoidGVzdC1pc3MifQ.G5yi_IPSIj5GZp2jz4aV3DfdTotwUy3xivHlU79_ppc";
+export declare const TEST_TOKEN_STRING_PAYLOAD = "eyJhbGciOiJIUzI1NiJ9.anVzdCBhIHN0cmluZw.WY-fOyNQW58U_kiDUfXPP5m_Bsl2_0Jj0AvVgsrRwWE";
+//# sourceMappingURL=test-jwt-tokens.d.ts.map

package/dist/test/fixtures/test-jwt-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-jwt-tokens.d.ts","sourceRoot":"","sources":["../../../src/test/fixtures/test-jwt-tokens.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,UAAU,kMAC0K,CAAC;AAClM,eAAO,MAAM,kBAAkB,wKACwI,CAAC;AACxK,eAAO,MAAM,uBAAuB,wKACmI,CAAC;AACxK,eAAO,MAAM,yBAAyB,wKACiI,CAAC;AACxK,eAAO,MAAM,0BAA0B,4KACoI,CAAC;AAC5K,eAAO,MAAM,yBAAyB,wFACiD,CAAC"}

package/dist/test/fixtures/test-jwt-tokens.js

@@ -0,0 +1,7 @@
+export const TEST_TOKEN = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJzdWIiOiJ0ZXN0LXN1YiIsImlhdCI6MTY3MTU3MzgwOCwiZXhwIjoxNjcxNTc3NDA4LCJpc3MiOiJ0ZXN0LWlzcyJ9.IfZ_IlbKl2S7pkKBqTis0kyBmDuXGbBkCdCkrDdLq_Q';
+export const TEST_TOKEN_EXPIRED = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzM4MDAsImV4cCI6MTY3MTU3MzgwMSwiaXNzIjoib3RoZXIifQ.hqHdbRzB4HqiYA1FRADQwR7RUE22N7vMsPGwDsvwdMo';
+export const TEST_TOKEN_OTHER_ISSUER = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzQ0MzYsImV4cCI6MTY3MTU4NDQzNiwiaXNzIjoib3RoZXIifQ.lW7nOIQNHlFAv5dfzivR-V-ufHiZ4MTNo1IPyQXoZ8k';
+export const TEST_TOKEN_MISSING_ISSUER = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzQ0MzYsImV4cCI6MTY3MTU4NDQzNiwiaXNzIjoib3RoZXIifQ.lW7nOIQNHlFAv5dfzivR-V-ufHiZ4MTNo1IPyQXoZ8k';
+export const TEST_TOKEN_MISSING_SUBJECT = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJpYXQiOjE2NzE1NzM4MDgsImV4cCI6MTY3MTU3NzQwOCwiaXNzIjoidGVzdC1pc3MifQ.G5yi_IPSIj5GZp2jz4aV3DfdTotwUy3xivHlU79_ppc';
+export const TEST_TOKEN_STRING_PAYLOAD = 'eyJhbGciOiJIUzI1NiJ9.anVzdCBhIHN0cmluZw.WY-fOyNQW58U_kiDUfXPP5m_Bsl2_0Jj0AvVgsrRwWE';
+//# sourceMappingURL=test-jwt-tokens.js.map

package/dist/test/fixtures/test-jwt-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-jwt-tokens.js","sourceRoot":"","sources":["../../../src/test/fixtures/test-jwt-tokens.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GACrB,+LAA+L,CAAC;AAClM,MAAM,CAAC,MAAM,kBAAkB,GAC7B,qKAAqK,CAAC;AACxK,MAAM,CAAC,MAAM,uBAAuB,GAClC,qKAAqK,CAAC;AACxK,MAAM,CAAC,MAAM,yBAAyB,GACpC,qKAAqK,CAAC;AACxK,MAAM,CAAC,MAAM,0BAA0B,GACrC,yKAAyK,CAAC;AAC5K,MAAM,CAAC,MAAM,yBAAyB,GACpC,qFAAqF,CAAC"}

package/package.json

@@ -0,0 +1,138 @@
+{
+  "name": "@konker.dev/neverthrow-r-auth-utils",
+  "version": "0.0.1",
+  "type": "module",
+  "author": "Konrad Markus <mail@konker.dev>",
+  "license": "ISC",
+  "description": "Auth utils for neverthrow and @konker.dev/neverthrow-r.",
+  "homepage": "https://konker.dev/",
+  "keywords": [
+    "node",
+    "neverthrow",
+    "neverthrow-r",
+    "typescript",
+    "functional-programming"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/konker/konker.dev/packages/neverthrow-r-auth-utils"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./jwt/common": {
+      "types": "./dist/jwt/common.d.ts",
+      "import": "./dist/jwt/common.js"
+    },
+    "./jwt": {
+      "types": "./dist/jwt/index.d.ts",
+      "import": "./dist/jwt/index.js"
+    },
+    "./jwt/rsa": {
+      "types": "./dist/jwt/rsa.d.ts",
+      "import": "./dist/jwt/rsa.js"
+    },
+    "./lib/toError": {
+      "types": "./dist/lib/toError.d.ts",
+      "import": "./dist/lib/toError.js"
+    },
+    "./test/fixtures/jwt": {
+      "types": "./dist/test/fixtures/jwt.d.ts",
+      "import": "./dist/test/fixtures/jwt.js"
+    },
+    "./test/fixtures/test-jwt-rsa-keys": {
+      "types": "./dist/test/fixtures/test-jwt-rsa-keys.d.ts",
+      "import": "./dist/test/fixtures/test-jwt-rsa-keys.js"
+    },
+    "./test/fixtures/test-jwt-tokens-rsa": {
+      "types": "./dist/test/fixtures/test-jwt-tokens-rsa.d.ts",
+      "import": "./dist/test/fixtures/test-jwt-tokens-rsa.js"
+    },
+    "./test/fixtures/test-jwt-tokens": {
+      "types": "./dist/test/fixtures/test-jwt-tokens.d.ts",
+      "import": "./dist/test/fixtures/test-jwt-tokens.js"
+    },
+    "./aws-authorizer": {
+      "types": "./dist/aws-authorizer.d.ts",
+      "import": "./dist/aws-authorizer.js"
+    },
+    "./basic-auth": {
+      "types": "./dist/basic-auth.d.ts",
+      "import": "./dist/basic-auth.js"
+    },
+    "./helpers": {
+      "types": "./dist/helpers.d.ts",
+      "import": "./dist/helpers.js"
+    }
+  },
+  "files": [
+    "dist/**/*",
+    "!dist/**/*.test.*"
+  ],
+  "main": "dist/index.js",
+  "peerDependencies": {
+    "aws-lambda": "^1.0.7",
+    "jsonwebtoken": "^9.0.2"
+  },
+  "devDependencies": {
+    "@arethetypeswrong/cli": "^0.18.2",
+    "@effect/language-service": "^0.86.1",
+    "@eslint/compat": "^2.0.1",
+    "@eslint/js": "^9.39.2",
+    "@konker.dev/common-config": "^0.8.0",
+    "@types/aws-lambda": "^8.10.159",
+    "@types/jsonwebtoken": "^9.0.10",
+    "@types/node": "^25.8.0",
+    "@vitest/coverage-istanbul": "^4.1.6",
+    "aws-lambda": "^1.0.7",
+    "aws-sdk-client-mock": "^4.1.0",
+    "aws-sdk-client-mock-vitest": "^7.0.1",
+    "eslint": "^9.39.2",
+    "eslint-plugin-fp": "^2.3.0",
+    "eslint-plugin-prettier": "^5.5.5",
+    "eslint-plugin-simple-import-sort": "^12.1.1",
+    "eslint-plugin-sort-destructure-keys": "^2.0.0",
+    "jsonwebtoken": "^9.0.3",
+    "leasot": "^14.4.0",
+    "madge": "^8.0.0",
+    "prettier": "^3.8.3",
+    "tsx": "^4.22.1",
+    "type-coverage": "^2.29.7",
+    "typedoc": "^0.28.15",
+    "typedoc-plugin-markdown": "^4.4.0",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.52.0",
+    "vitest": "^4.1.6",
+    "zod": "^3.23.0"
+  },
+  "dependencies": {
+    "neverthrow": "^8.2.0",
+    "@konker.dev/neverthrow-r": "0.0.1"
+  },
+  "scripts": {
+    "test": "vitest run --coverage",
+    "clean": "rm -rf dist && rm -f tsconfig.tsbuildinfo",
+    "typecheck": "tsc --noEmit",
+    "build": "pnpm run clean && tsc",
+    "type-coverage-check": "type-coverage --detail --at-least 97",
+    "circular-check": "madge --extensions ts --circular --no-color --no-spinner --warning src",
+    "eslint-check": "eslint --max-warnings=0 '**/*.{ts,js,json}'",
+    "eslint-fix": "npx eslint --fix||true",
+    "generated-exports-check": "npx --package=@konker.dev/common-config generate-exports-verify `pwd`",
+    "docs-generate": "typedoc",
+    "generated-docs-check": "pnpm run docs-generate && git diff --exit-code docs/reference",
+    "exports-check": "NPM_CONFIG_CACHE=.npm-cache attw --pack . --ignore-rules=cjs-resolves-to-esm --profile=esm-only",
+    "fixme-check": "leasot --exit-nicely --skip-unsupported src",
+    "prettier-check": "npx prettier --check --ignore-path .gitignore --ignore-path .prettierignore '**/*.{css,html,js,ts,json,md,yaml,yml}'",
+    "prettier-fix": "pnpm run prettier-check --write",
+    "lint-check": "pnpm run eslint-check && pnpm run prettier-check && pnpm run circular-check && pnpm run fixme-check",
+    "lint-fix": "pnpm run eslint-fix && pnpm run prettier-fix",
+    "pre-push": "pnpm run lint-check && pnpm run typecheck",
+    "codecov": "npx --package=@konker.dev/common-config codecov-upload `pwd` '@konker.dev/neverthrow-r-auth-utils'",
+    "ci": "pnpm run lint-check && pnpm run typecheck && pnpm run type-coverage-check && pnpm run test && pnpm run build && pnpm run generated-exports-check && pnpm run generated-docs-check && pnpm run exports-check && pnpm run fixme-check",
+    "cd": "pnpm run build && npx --package=@konker.dev/common-config npm-publish-if-version-not-exists `pwd`"
+  }
+}