@lindorm/aegis 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (219) hide show
  1. package/CHANGELOG.md +10 -0
  2. package/README.md +1 -0
  3. package/dist/classes/Aegis.d.ts +27 -0
  4. package/dist/classes/Aegis.d.ts.map +1 -0
  5. package/dist/classes/Aegis.js +113 -0
  6. package/dist/classes/Aegis.js.map +1 -0
  7. package/dist/classes/AegisVault.d.ts +24 -0
  8. package/dist/classes/AegisVault.d.ts.map +1 -0
  9. package/dist/classes/AegisVault.js +141 -0
  10. package/dist/classes/AegisVault.js.map +1 -0
  11. package/dist/classes/JweKit.d.ts +13 -0
  12. package/dist/classes/JweKit.d.ts.map +1 -0
  13. package/dist/classes/JweKit.js +154 -0
  14. package/dist/classes/JweKit.js.map +1 -0
  15. package/dist/classes/JwsKit.d.ts +11 -0
  16. package/dist/classes/JwsKit.d.ts.map +1 -0
  17. package/dist/classes/JwsKit.js +95 -0
  18. package/dist/classes/JwsKit.js.map +1 -0
  19. package/dist/classes/JwtKit.d.ts +14 -0
  20. package/dist/classes/JwtKit.d.ts.map +1 -0
  21. package/dist/classes/JwtKit.js +127 -0
  22. package/dist/classes/JwtKit.js.map +1 -0
  23. package/dist/classes/index.d.ts +6 -0
  24. package/dist/classes/index.d.ts.map +1 -0
  25. package/dist/classes/index.js +22 -0
  26. package/dist/classes/index.js.map +1 -0
  27. package/dist/errors/AegisError.d.ts +4 -0
  28. package/dist/errors/AegisError.d.ts.map +1 -0
  29. package/dist/errors/AegisError.js +8 -0
  30. package/dist/errors/AegisError.js.map +1 -0
  31. package/dist/errors/AegisVaultError.d.ts +4 -0
  32. package/dist/errors/AegisVaultError.d.ts.map +1 -0
  33. package/dist/errors/AegisVaultError.js +8 -0
  34. package/dist/errors/AegisVaultError.js.map +1 -0
  35. package/dist/errors/JweError.d.ts +4 -0
  36. package/dist/errors/JweError.d.ts.map +1 -0
  37. package/dist/errors/JweError.js +8 -0
  38. package/dist/errors/JweError.js.map +1 -0
  39. package/dist/errors/JwsError.d.ts +4 -0
  40. package/dist/errors/JwsError.d.ts.map +1 -0
  41. package/dist/errors/JwsError.js +8 -0
  42. package/dist/errors/JwsError.js.map +1 -0
  43. package/dist/errors/JwtError.d.ts +4 -0
  44. package/dist/errors/JwtError.d.ts.map +1 -0
  45. package/dist/errors/JwtError.js +8 -0
  46. package/dist/errors/JwtError.js.map +1 -0
  47. package/dist/errors/index.d.ts +6 -0
  48. package/dist/errors/index.d.ts.map +1 -0
  49. package/dist/errors/index.js +22 -0
  50. package/dist/errors/index.js.map +1 -0
  51. package/dist/index.d.ts +4 -0
  52. package/dist/index.d.ts.map +1 -0
  53. package/dist/index.js +20 -0
  54. package/dist/index.js.map +1 -0
  55. package/dist/types/aegis-vault.d.ts +29 -0
  56. package/dist/types/aegis-vault.d.ts.map +1 -0
  57. package/dist/types/aegis-vault.js +3 -0
  58. package/dist/types/aegis-vault.js.map +1 -0
  59. package/dist/types/aegis.d.ts +14 -0
  60. package/dist/types/aegis.d.ts.map +1 -0
  61. package/dist/types/aegis.js +3 -0
  62. package/dist/types/aegis.js.map +1 -0
  63. package/dist/types/header.d.ts +63 -0
  64. package/dist/types/header.d.ts.map +1 -0
  65. package/dist/types/header.js +3 -0
  66. package/dist/types/header.js.map +1 -0
  67. package/dist/types/index.d.ts +11 -0
  68. package/dist/types/index.d.ts.map +1 -0
  69. package/dist/types/index.js +27 -0
  70. package/dist/types/index.js.map +1 -0
  71. package/dist/types/interfaces/aegis-vault.d.ts +12 -0
  72. package/dist/types/interfaces/aegis-vault.d.ts.map +1 -0
  73. package/dist/types/interfaces/aegis-vault.js +3 -0
  74. package/dist/types/interfaces/aegis-vault.js.map +1 -0
  75. package/dist/types/interfaces/aegis.d.ts +22 -0
  76. package/dist/types/interfaces/aegis.d.ts.map +1 -0
  77. package/dist/types/interfaces/aegis.js +3 -0
  78. package/dist/types/interfaces/aegis.js.map +1 -0
  79. package/dist/types/interfaces/index.d.ts +6 -0
  80. package/dist/types/interfaces/index.d.ts.map +1 -0
  81. package/dist/types/interfaces/index.js +22 -0
  82. package/dist/types/interfaces/index.js.map +1 -0
  83. package/dist/types/interfaces/jwe-kit.d.ts +7 -0
  84. package/dist/types/interfaces/jwe-kit.d.ts.map +1 -0
  85. package/dist/types/interfaces/jwe-kit.js +3 -0
  86. package/dist/types/interfaces/jwe-kit.js.map +1 -0
  87. package/dist/types/interfaces/jws-kit.d.ts +6 -0
  88. package/dist/types/interfaces/jws-kit.d.ts.map +1 -0
  89. package/dist/types/interfaces/jws-kit.js +3 -0
  90. package/dist/types/interfaces/jws-kit.js.map +1 -0
  91. package/dist/types/interfaces/jwt-kit.d.ts +8 -0
  92. package/dist/types/interfaces/jwt-kit.d.ts.map +1 -0
  93. package/dist/types/interfaces/jwt-kit.js +3 -0
  94. package/dist/types/interfaces/jwt-kit.js.map +1 -0
  95. package/dist/types/jwe/index.d.ts +5 -0
  96. package/dist/types/jwe/index.d.ts.map +1 -0
  97. package/dist/types/jwe/index.js +21 -0
  98. package/dist/types/jwe/index.js.map +1 -0
  99. package/dist/types/jwe/jwe-decode.d.ts +9 -0
  100. package/dist/types/jwe/jwe-decode.d.ts.map +1 -0
  101. package/dist/types/jwe/jwe-decode.js +3 -0
  102. package/dist/types/jwe/jwe-decode.js.map +1 -0
  103. package/dist/types/jwe/jwe-decrypt.d.ts +14 -0
  104. package/dist/types/jwe/jwe-decrypt.d.ts.map +1 -0
  105. package/dist/types/jwe/jwe-decrypt.js +3 -0
  106. package/dist/types/jwe/jwe-decrypt.js.map +1 -0
  107. package/dist/types/jwe/jwe-encrypt.d.ts +7 -0
  108. package/dist/types/jwe/jwe-encrypt.d.ts.map +1 -0
  109. package/dist/types/jwe/jwe-encrypt.js +3 -0
  110. package/dist/types/jwe/jwe-encrypt.js.map +1 -0
  111. package/dist/types/jwe/jwe-kit.d.ts +9 -0
  112. package/dist/types/jwe/jwe-kit.d.ts.map +1 -0
  113. package/dist/types/jwe/jwe-kit.js +3 -0
  114. package/dist/types/jwe/jwe-kit.js.map +1 -0
  115. package/dist/types/jws/index.d.ts +5 -0
  116. package/dist/types/jws/index.d.ts.map +1 -0
  117. package/dist/types/jws/index.js +21 -0
  118. package/dist/types/jws/index.js.map +1 -0
  119. package/dist/types/jws/jws-decode.d.ts +7 -0
  120. package/dist/types/jws/jws-decode.d.ts.map +1 -0
  121. package/dist/types/jws/jws-decode.js +3 -0
  122. package/dist/types/jws/jws-decode.js.map +1 -0
  123. package/dist/types/jws/jws-kit.d.ts +9 -0
  124. package/dist/types/jws/jws-kit.d.ts.map +1 -0
  125. package/dist/types/jws/jws-kit.js +3 -0
  126. package/dist/types/jws/jws-kit.js.map +1 -0
  127. package/dist/types/jws/jws-sign.d.ts +9 -0
  128. package/dist/types/jws/jws-sign.d.ts.map +1 -0
  129. package/dist/types/jws/jws-sign.js +3 -0
  130. package/dist/types/jws/jws-sign.js.map +1 -0
  131. package/dist/types/jws/jws-verify.d.ts +14 -0
  132. package/dist/types/jws/jws-verify.d.ts.map +1 -0
  133. package/dist/types/jws/jws-verify.js +3 -0
  134. package/dist/types/jws/jws-verify.js.map +1 -0
  135. package/dist/types/jwt/index.d.ts +8 -0
  136. package/dist/types/jwt/index.d.ts.map +1 -0
  137. package/dist/types/jwt/index.js +24 -0
  138. package/dist/types/jwt/index.js.map +1 -0
  139. package/dist/types/jwt/jwt-claims.d.ts +38 -0
  140. package/dist/types/jwt/jwt-claims.d.ts.map +1 -0
  141. package/dist/types/jwt/jwt-claims.js +3 -0
  142. package/dist/types/jwt/jwt-claims.js.map +1 -0
  143. package/dist/types/jwt/jwt-decode.d.ts +9 -0
  144. package/dist/types/jwt/jwt-decode.d.ts.map +1 -0
  145. package/dist/types/jwt/jwt-decode.js +3 -0
  146. package/dist/types/jwt/jwt-decode.js.map +1 -0
  147. package/dist/types/jwt/jwt-kit.d.ts +9 -0
  148. package/dist/types/jwt/jwt-kit.d.ts.map +1 -0
  149. package/dist/types/jwt/jwt-kit.js +3 -0
  150. package/dist/types/jwt/jwt-kit.js.map +1 -0
  151. package/dist/types/jwt/jwt-parse.d.ts +34 -0
  152. package/dist/types/jwt/jwt-parse.d.ts.map +1 -0
  153. package/dist/types/jwt/jwt-parse.js +3 -0
  154. package/dist/types/jwt/jwt-parse.js.map +1 -0
  155. package/dist/types/jwt/jwt-sign.d.ts +48 -0
  156. package/dist/types/jwt/jwt-sign.d.ts.map +1 -0
  157. package/dist/types/jwt/jwt-sign.js +3 -0
  158. package/dist/types/jwt/jwt-sign.js.map +1 -0
  159. package/dist/types/jwt/jwt-validate.d.ts +32 -0
  160. package/dist/types/jwt/jwt-validate.d.ts.map +1 -0
  161. package/dist/types/jwt/jwt-validate.js +3 -0
  162. package/dist/types/jwt/jwt-validate.js.map +1 -0
  163. package/dist/types/jwt/jwt-verify.d.ts +41 -0
  164. package/dist/types/jwt/jwt-verify.d.ts.map +1 -0
  165. package/dist/types/jwt/jwt-verify.js +3 -0
  166. package/dist/types/jwt/jwt-verify.js.map +1 -0
  167. package/dist/types/level-of-assurance.d.ts +3 -0
  168. package/dist/types/level-of-assurance.d.ts.map +1 -0
  169. package/dist/types/level-of-assurance.js +3 -0
  170. package/dist/types/level-of-assurance.js.map +1 -0
  171. package/dist/types/oidc.d.ts +27 -0
  172. package/dist/types/oidc.d.ts.map +1 -0
  173. package/dist/types/oidc.js +3 -0
  174. package/dist/types/oidc.js.map +1 -0
  175. package/dist/types/operators.d.ts +27 -0
  176. package/dist/types/operators.d.ts.map +1 -0
  177. package/dist/types/operators.js +3 -0
  178. package/dist/types/operators.js.map +1 -0
  179. package/dist/utils/private/create-hash.d.ts +8 -0
  180. package/dist/utils/private/create-hash.d.ts.map +1 -0
  181. package/dist/utils/private/create-hash.js +30 -0
  182. package/dist/utils/private/create-hash.js.map +1 -0
  183. package/dist/utils/private/create-token-signature.d.ts +9 -0
  184. package/dist/utils/private/create-token-signature.d.ts.map +1 -0
  185. package/dist/utils/private/create-token-signature.js +41 -0
  186. package/dist/utils/private/create-token-signature.js.map +1 -0
  187. package/dist/utils/private/jwt-payload.d.ts +20 -0
  188. package/dist/utils/private/jwt-payload.d.ts.map +1 -0
  189. package/dist/utils/private/jwt-payload.js +132 -0
  190. package/dist/utils/private/jwt-payload.js.map +1 -0
  191. package/dist/utils/private/jwt-validate.d.ts +4 -0
  192. package/dist/utils/private/jwt-validate.d.ts.map +1 -0
  193. package/dist/utils/private/jwt-validate.js +45 -0
  194. package/dist/utils/private/jwt-validate.js.map +1 -0
  195. package/dist/utils/private/jwt-verify.d.ts +5 -0
  196. package/dist/utils/private/jwt-verify.d.ts.map +1 -0
  197. package/dist/utils/private/jwt-verify.js +109 -0
  198. package/dist/utils/private/jwt-verify.js.map +1 -0
  199. package/dist/utils/private/token-header.d.ts +5 -0
  200. package/dist/utils/private/token-header.d.ts.map +1 -0
  201. package/dist/utils/private/token-header.js +193 -0
  202. package/dist/utils/private/token-header.js.map +1 -0
  203. package/dist/utils/private/token-type.d.ts +3 -0
  204. package/dist/utils/private/token-type.d.ts.map +1 -0
  205. package/dist/utils/private/token-type.js +11 -0
  206. package/dist/utils/private/token-type.js.map +1 -0
  207. package/dist/utils/private/validate-value.d.ts +3 -0
  208. package/dist/utils/private/validate-value.d.ts.map +1 -0
  209. package/dist/utils/private/validate-value.js +91 -0
  210. package/dist/utils/private/validate-value.js.map +1 -0
  211. package/dist/utils/private/validate.d.ts +4 -0
  212. package/dist/utils/private/validate.d.ts.map +1 -0
  213. package/dist/utils/private/validate.js +19 -0
  214. package/dist/utils/private/validate.js.map +1 -0
  215. package/dist/utils/private/verify-token-signature.d.ts +3 -0
  216. package/dist/utils/private/verify-token-signature.d.ts.map +1 -0
  217. package/dist/utils/private/verify-token-signature.js +42 -0
  218. package/dist/utils/private/verify-token-signature.js.map +1 -0
  219. package/package.json +49 -0
@@ -0,0 +1,14 @@
1
+ import { Dict } from "@lindorm/types";
2
+ import { DecodedJwt, IJwtKit, JwtKitOptions, ParsedJwtPayload, SignJwtContent, SignJwtOptions, SignedJwt, ValidateJwtOptions, VerifiedJwt, VerifyJwtOptions } from "../types";
3
+ export declare class JwtKit implements IJwtKit {
4
+ private readonly clockTolerance;
5
+ private readonly issuer;
6
+ private readonly logger;
7
+ private readonly kryptos;
8
+ constructor(options: JwtKitOptions);
9
+ sign<C extends Dict = Dict>(content: SignJwtContent<C>, options?: SignJwtOptions): SignedJwt;
10
+ verify<C extends Dict = Dict>(jwt: string, verify?: VerifyJwtOptions): VerifiedJwt<C>;
11
+ static decode<C extends Dict = Dict>(jwt: string): DecodedJwt<C>;
12
+ static validate<C extends Dict = Dict>(payload: ParsedJwtPayload<C>, options: ValidateJwtOptions<C>): void;
13
+ }
14
+ //# sourceMappingURL=JwtKit.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JwtKit.d.ts","sourceRoot":"","sources":["../../src/classes/JwtKit.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAGtC,OAAO,EACL,UAAU,EACV,OAAO,EACP,aAAa,EAEb,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,SAAS,EAET,kBAAkB,EAClB,WAAW,EAEX,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAkBlB,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;gBAEhB,OAAO,EAAE,aAAa;IAQlC,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC/B,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,GAAE,cAAmB,GAC3B,SAAS;IAkDL,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EACjC,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,gBAAqB,GAC5B,WAAW,CAAC,CAAC,CAAC;WA2EH,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;WAWzD,QAAQ,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC1C,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC5B,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAC7B,IAAI;CAKR"}
@@ -0,0 +1,127 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.JwtKit = void 0;
4
+ const crypto_1 = require("crypto");
5
+ const errors_1 = require("../errors");
6
+ const create_token_signature_1 = require("../utils/private/create-token-signature");
7
+ const jwt_payload_1 = require("../utils/private/jwt-payload");
8
+ const jwt_validate_1 = require("../utils/private/jwt-validate");
9
+ const jwt_verify_1 = require("../utils/private/jwt-verify");
10
+ const token_header_1 = require("../utils/private/token-header");
11
+ const validate_1 = require("../utils/private/validate");
12
+ const validate_value_1 = require("../utils/private/validate-value");
13
+ const verify_token_signature_1 = require("../utils/private/verify-token-signature");
14
+ class JwtKit {
15
+ clockTolerance;
16
+ issuer;
17
+ logger;
18
+ kryptos;
19
+ constructor(options) {
20
+ this.logger = options.logger.child(["JwtKit"]);
21
+ this.kryptos = options.kryptos;
22
+ this.issuer = options.issuer;
23
+ this.clockTolerance = options.clockTolerance ?? 0;
24
+ }
25
+ sign(content, options = {}) {
26
+ const algorithm = this.kryptos.algorithm;
27
+ const jwksUri = this.kryptos.jwksUri;
28
+ const keyId = this.kryptos.id;
29
+ const objectId = options.objectId ?? content.subject ?? (0, crypto_1.randomUUID)();
30
+ const headerOptions = {
31
+ algorithm,
32
+ contentType: "application/json",
33
+ headerType: "JWT",
34
+ jwksUri,
35
+ keyId,
36
+ objectId,
37
+ };
38
+ const header = (0, token_header_1._encodeTokenHeader)(headerOptions);
39
+ this.logger.silly("Token header encoded", { header, options: headerOptions });
40
+ const { expiresAt, expiresIn, expiresOn, payload, tokenId } = (0, jwt_payload_1._encodeJwtPayload)({ algorithm, issuer: this.issuer }, content, options);
41
+ this.logger.silly("Token payload encoded", { payload, options: content });
42
+ const signature = (0, create_token_signature_1._createTokenSignature)({
43
+ header,
44
+ payload,
45
+ kryptos: this.kryptos,
46
+ });
47
+ this.logger.silly("Token signature created", { signature });
48
+ const token = `${header}.${payload}.${signature}`;
49
+ this.logger.silly("Token signed", {
50
+ expiresAt,
51
+ expiresIn,
52
+ expiresOn,
53
+ keyId,
54
+ objectId,
55
+ token,
56
+ tokenId,
57
+ });
58
+ return { expiresAt, expiresIn, expiresOn, objectId, token, tokenId };
59
+ }
60
+ verify(jwt, verify = {}) {
61
+ const decoded = JwtKit.decode(jwt);
62
+ if (decoded.header.typ !== "JWT") {
63
+ throw new errors_1.JwtError("Invalid token", {
64
+ data: { typ: decoded.header.typ },
65
+ });
66
+ }
67
+ if (!decoded.payload.iss) {
68
+ throw new errors_1.JwtError("Invalid token", {
69
+ data: { iss: decoded.payload.iss },
70
+ });
71
+ }
72
+ if (this.kryptos.algorithm !== decoded.header.alg) {
73
+ throw new errors_1.JwtError("Invalid token", {
74
+ data: { alg: decoded.header.alg },
75
+ debug: { expected: this.kryptos.algorithm },
76
+ });
77
+ }
78
+ const verified = (0, verify_token_signature_1._verifyTokenSignature)(this.kryptos, jwt);
79
+ this.logger.silly("Token signature verified", { verified, token: jwt });
80
+ if (!verified) {
81
+ throw new errors_1.JwtError("Invalid token", {
82
+ data: { verified, token: jwt },
83
+ });
84
+ }
85
+ const operators = (0, jwt_verify_1._createJwtVerify)(this.kryptos.algorithm, verify, this.clockTolerance);
86
+ const invalid = [];
87
+ const withDates = {
88
+ ...decoded.payload,
89
+ exp: decoded.payload.exp ? new Date(decoded.payload.exp * 1000) : undefined,
90
+ iat: decoded.payload.iat ? new Date(decoded.payload.iat * 1000) : undefined,
91
+ nbf: decoded.payload.nbf ? new Date(decoded.payload.nbf * 1000) : undefined,
92
+ auth_time: decoded.payload.auth_time
93
+ ? new Date(decoded.payload.auth_time * 1000)
94
+ : undefined,
95
+ };
96
+ this.logger.silly("Operators created", { operators });
97
+ for (const [key, ops] of Object.entries(operators)) {
98
+ const value = withDates[key];
99
+ if ((0, validate_value_1._validateValue)(value, ops))
100
+ continue;
101
+ invalid.push({ key, value, ops });
102
+ }
103
+ this.logger.silly("Operators verified", { invalid });
104
+ if (invalid.length) {
105
+ throw new errors_1.JwtError("Invalid token", { data: { invalid } });
106
+ }
107
+ const header = (0, token_header_1._parseTokenHeader)(decoded.header);
108
+ const payload = (0, jwt_payload_1._parseJwtPayload)(decoded.payload);
109
+ this.logger.silly("Token verified", { header, payload });
110
+ return { __jwt: decoded, header, payload };
111
+ }
112
+ static decode(jwt) {
113
+ const [header, payload, signature] = jwt.split(".");
114
+ const result = {
115
+ header: (0, token_header_1._decodeTokenHeader)(header),
116
+ payload: (0, jwt_payload_1._decodeJwtPayload)(payload),
117
+ signature,
118
+ };
119
+ return result;
120
+ }
121
+ static validate(payload, options) {
122
+ const operators = (0, jwt_validate_1._createJwtValidate)(options);
123
+ (0, validate_1._validate)(payload, operators);
124
+ }
125
+ }
126
+ exports.JwtKit = JwtKit;
127
+ //# sourceMappingURL=JwtKit.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JwtKit.js","sourceRoot":"","sources":["../../src/classes/JwtKit.ts"],"names":[],"mappings":";;;AAGA,mCAAoC;AACpC,sCAAqC;AAgBrC,oFAAgF;AAChF,8DAIsC;AACtC,gEAAmE;AACnE,4DAA+D;AAC/D,gEAIuC;AACvC,wDAAsD;AACtD,oEAAiE;AACjE,oFAAgF;AAEhF,MAAa,MAAM;IACA,cAAc,CAAS;IACvB,MAAM,CAAS;IACf,MAAM,CAAU;IAChB,OAAO,CAAW;IAEnC,YAAmB,OAAsB;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE7B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IACpD,CAAC;IAEM,IAAI,CACT,OAA0B,EAC1B,UAA0B,EAAE;QAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,IAAA,mBAAU,GAAE,CAAC;QAErE,MAAM,aAAa,GAA2B;YAC5C,SAAS;YACT,WAAW,EAAE,kBAAkB;YAC/B,UAAU,EAAE,KAAK;YACjB,OAAO;YACP,KAAK;YACL,QAAQ;SACT,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,iCAAkB,EAAC,aAAa,CAAC,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;QAE9E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAA,+BAAiB,EAC7E,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAClC,OAAO,EACP,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAE1E,MAAM,SAAS,GAAG,IAAA,8CAAqB,EAAC;YACtC,MAAM;YACN,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAElD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE;YAChC,SAAS;YACT,SAAS;YACT,SAAS;YACT,KAAK;YACL,QAAQ;YACR,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvE,CAAC;IAEM,MAAM,CACX,GAAW,EACX,SAA2B,EAAE;QAE7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAI,GAAG,CAAC,CAAC;QAEtC,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACjC,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE;gBAClC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE;gBAClC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE;gBAClC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;gBACjC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,8CAAqB,EAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE;gBAClC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,6BAAgB,EAChC,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,MAAM,EACN,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,MAAM,OAAO,GAAuD,EAAE,CAAC;QAEvE,MAAM,SAAS,GAAG;YAChB,GAAG,OAAO,CAAC,OAAO;YAClB,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;gBAClC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;gBAC5C,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAEtD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAE7B,IAAI,IAAA,+BAAc,EAAC,KAAK,EAAE,GAAG,CAAC;gBAAE,SAAS;YAEzC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAErD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,gCAAiB,EAAoB,OAAO,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,IAAA,8BAAgB,EAAI,OAAO,CAAC,OAAO,CAAC,CAAC;QAErD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAIM,MAAM,CAAC,MAAM,CAAwB,GAAW;QACrD,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,MAAM,GAAkB;YAC5B,MAAM,EAAE,IAAA,iCAAkB,EAAC,MAAM,CAAC;YAClC,OAAO,EAAE,IAAA,+BAAiB,EAAI,OAAO,CAAC;YACtC,SAAS;SACV,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,MAAM,CAAC,QAAQ,CACpB,OAA4B,EAC5B,OAA8B;QAE9B,MAAM,SAAS,GAAG,IAAA,iCAAkB,EAAC,OAAO,CAAC,CAAC;QAE9C,IAAA,oBAAS,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChC,CAAC;CACF;AApKD,wBAoKC"}
@@ -0,0 +1,6 @@
1
+ export * from "./Aegis";
2
+ export * from "./AegisVault";
3
+ export * from "./JweKit";
4
+ export * from "./JwsKit";
5
+ export * from "./JwtKit";
6
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
@@ -0,0 +1,22 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./Aegis"), exports);
18
+ __exportStar(require("./AegisVault"), exports);
19
+ __exportStar(require("./JweKit"), exports);
20
+ __exportStar(require("./JwsKit"), exports);
21
+ __exportStar(require("./JwtKit"), exports);
22
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,+CAA6B;AAC7B,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB"}
@@ -0,0 +1,4 @@
1
+ import { LindormError } from "@lindorm/errors";
2
+ export declare class AegisError extends LindormError {
3
+ }
4
+ //# sourceMappingURL=AegisError.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"AegisError.d.ts","sourceRoot":"","sources":["../../src/errors/AegisError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,UAAW,SAAQ,YAAY;CAAG"}
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.AegisError = void 0;
4
+ const errors_1 = require("@lindorm/errors");
5
+ class AegisError extends errors_1.LindormError {
6
+ }
7
+ exports.AegisError = AegisError;
8
+ //# sourceMappingURL=AegisError.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"AegisError.js","sourceRoot":"","sources":["../../src/errors/AegisError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,UAAW,SAAQ,qBAAY;CAAG;AAA/C,gCAA+C"}
@@ -0,0 +1,4 @@
1
+ import { LindormError } from "@lindorm/errors";
2
+ export declare class AegisVaultError extends LindormError {
3
+ }
4
+ //# sourceMappingURL=AegisVaultError.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"AegisVaultError.d.ts","sourceRoot":"","sources":["../../src/errors/AegisVaultError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,eAAgB,SAAQ,YAAY;CAAG"}
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.AegisVaultError = void 0;
4
+ const errors_1 = require("@lindorm/errors");
5
+ class AegisVaultError extends errors_1.LindormError {
6
+ }
7
+ exports.AegisVaultError = AegisVaultError;
8
+ //# sourceMappingURL=AegisVaultError.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"AegisVaultError.js","sourceRoot":"","sources":["../../src/errors/AegisVaultError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,eAAgB,SAAQ,qBAAY;CAAG;AAApD,0CAAoD"}
@@ -0,0 +1,4 @@
1
+ import { LindormError } from "@lindorm/errors";
2
+ export declare class JweError extends LindormError {
3
+ }
4
+ //# sourceMappingURL=JweError.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JweError.d.ts","sourceRoot":"","sources":["../../src/errors/JweError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,QAAS,SAAQ,YAAY;CAAG"}
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.JweError = void 0;
4
+ const errors_1 = require("@lindorm/errors");
5
+ class JweError extends errors_1.LindormError {
6
+ }
7
+ exports.JweError = JweError;
8
+ //# sourceMappingURL=JweError.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JweError.js","sourceRoot":"","sources":["../../src/errors/JweError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,QAAS,SAAQ,qBAAY;CAAG;AAA7C,4BAA6C"}
@@ -0,0 +1,4 @@
1
+ import { LindormError } from "@lindorm/errors";
2
+ export declare class JwsError extends LindormError {
3
+ }
4
+ //# sourceMappingURL=JwsError.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JwsError.d.ts","sourceRoot":"","sources":["../../src/errors/JwsError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,QAAS,SAAQ,YAAY;CAAG"}
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.JwsError = void 0;
4
+ const errors_1 = require("@lindorm/errors");
5
+ class JwsError extends errors_1.LindormError {
6
+ }
7
+ exports.JwsError = JwsError;
8
+ //# sourceMappingURL=JwsError.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JwsError.js","sourceRoot":"","sources":["../../src/errors/JwsError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,QAAS,SAAQ,qBAAY;CAAG;AAA7C,4BAA6C"}
@@ -0,0 +1,4 @@
1
+ import { LindormError } from "@lindorm/errors";
2
+ export declare class JwtError extends LindormError {
3
+ }
4
+ //# sourceMappingURL=JwtError.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JwtError.d.ts","sourceRoot":"","sources":["../../src/errors/JwtError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,QAAS,SAAQ,YAAY;CAAG"}
@@ -0,0 +1,8 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.JwtError = void 0;
4
+ const errors_1 = require("@lindorm/errors");
5
+ class JwtError extends errors_1.LindormError {
6
+ }
7
+ exports.JwtError = JwtError;
8
+ //# sourceMappingURL=JwtError.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"JwtError.js","sourceRoot":"","sources":["../../src/errors/JwtError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,QAAS,SAAQ,qBAAY;CAAG;AAA7C,4BAA6C"}
@@ -0,0 +1,6 @@
1
+ export * from "./AegisError";
2
+ export * from "./AegisVaultError";
3
+ export * from "./JweError";
4
+ export * from "./JwsError";
5
+ export * from "./JwtError";
6
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}
@@ -0,0 +1,22 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./AegisError"), exports);
18
+ __exportStar(require("./AegisVaultError"), exports);
19
+ __exportStar(require("./JweError"), exports);
20
+ __exportStar(require("./JwsError"), exports);
21
+ __exportStar(require("./JwtError"), exports);
22
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,oDAAkC;AAClC,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B"}
@@ -0,0 +1,4 @@
1
+ export * from "./classes";
2
+ export * from "./errors";
3
+ export * from "./types";
4
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
package/dist/index.js ADDED
@@ -0,0 +1,20 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./classes"), exports);
18
+ __exportStar(require("./errors"), exports);
19
+ __exportStar(require("./types"), exports);
20
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,2CAAyB;AACzB,0CAAwB"}
@@ -0,0 +1,29 @@
1
+ import { KryptosOperation, KryptosType, KryptosUse } from "@lindorm/kryptos";
2
+ import { ILogger } from "@lindorm/logger";
3
+ export type VaultConfig = {
4
+ issuer: string;
5
+ jwksUri: string;
6
+ };
7
+ export type VaultExternalOption = {
8
+ issuer?: string;
9
+ openIdConfigurationUri?: string;
10
+ jwksUri?: string;
11
+ };
12
+ export type AegisVaultOptions = {
13
+ external?: Array<VaultExternalOption>;
14
+ logger: ILogger;
15
+ };
16
+ export type AegisVaultQueryKey = "private" | "public";
17
+ export type AegisVaultQuery = {
18
+ id?: string;
19
+ algorithm?: string;
20
+ external?: boolean;
21
+ issuer?: string;
22
+ operation?: KryptosOperation;
23
+ ownerId?: string;
24
+ private?: boolean;
25
+ public?: boolean;
26
+ type?: KryptosType;
27
+ use?: KryptosUse;
28
+ };
29
+ //# sourceMappingURL=aegis-vault.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis-vault.d.ts","sourceRoot":"","sources":["../../src/types/aegis-vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtC,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEtD,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB,CAAC"}
@@ -0,0 +1,3 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ //# sourceMappingURL=aegis-vault.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis-vault.js","sourceRoot":"","sources":["../../src/types/aegis-vault.ts"],"names":[],"mappings":""}
@@ -0,0 +1,14 @@
1
+ import { KryptosEncAlgorithm, KryptosEncryption, KryptosSigAlgorithm } from "@lindorm/kryptos";
2
+ import { ILogger } from "@lindorm/logger";
3
+ import { IAegisVault } from "./interfaces";
4
+ export type AegisOptions = {
5
+ clockTolerance?: number;
6
+ encAlgorithm?: KryptosEncAlgorithm;
7
+ encryption?: KryptosEncryption;
8
+ issuer: string;
9
+ kryptosMayOverrideEncryption?: boolean;
10
+ logger: ILogger;
11
+ sigAlgorithm?: KryptosSigAlgorithm;
12
+ vault: IAegisVault;
13
+ };
14
+ //# sourceMappingURL=aegis.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis.d.ts","sourceRoot":"","sources":["../../src/types/aegis.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC"}
@@ -0,0 +1,3 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ //# sourceMappingURL=aegis.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis.js","sourceRoot":"","sources":["../../src/types/aegis.ts"],"names":[],"mappings":""}
@@ -0,0 +1,63 @@
1
+ import { PublicEncryptionJwk } from "@lindorm/aes";
2
+ import { KryptosAlgorithm, KryptosEncryption, KryptosJwk } from "@lindorm/kryptos";
3
+ export type TokenHeaderAlgorithm = KryptosAlgorithm;
4
+ export type TokenHeaderType = "JWE" | "JWS" | "JWT";
5
+ export type TokenHeaderClaims = {
6
+ alg: TokenHeaderAlgorithm;
7
+ crit?: Array<Exclude<keyof TokenHeaderClaims, "crit">>;
8
+ cty?: string;
9
+ enc?: KryptosEncryption;
10
+ epk?: PublicEncryptionJwk;
11
+ hkdf_salt?: string;
12
+ jku?: string;
13
+ jwk?: KryptosJwk;
14
+ kid?: string;
15
+ oid?: string;
16
+ p2c?: number;
17
+ p2s?: string;
18
+ typ: TokenHeaderType;
19
+ x5c?: Array<string>;
20
+ x5t?: string;
21
+ x5u?: string;
22
+ "x5t#S256"?: string;
23
+ };
24
+ export type DecodedTokenHeader = TokenHeaderClaims;
25
+ export type ParsedTokenHeader = {
26
+ algorithm: TokenHeaderAlgorithm;
27
+ contentType: string | undefined;
28
+ critical: Array<Exclude<keyof ParsedTokenHeader, "critical">>;
29
+ encryption: KryptosEncryption | undefined;
30
+ headerType: TokenHeaderType;
31
+ hkdfSalt: string | undefined;
32
+ jwk: KryptosJwk | undefined;
33
+ jwksUri: string | undefined;
34
+ keyId: string | undefined;
35
+ objectId: string | undefined;
36
+ pbkdfIterations: number | undefined;
37
+ pbkdfSalt: string | undefined;
38
+ publicEncryptionJwk: PublicEncryptionJwk | undefined;
39
+ x5c: Array<string> | undefined;
40
+ x5t: string | undefined;
41
+ x5u: string | undefined;
42
+ x5tS256: string | undefined;
43
+ };
44
+ export type TokenHeaderSignOptions = {
45
+ algorithm: TokenHeaderAlgorithm;
46
+ contentType?: string;
47
+ critical?: Array<Exclude<keyof TokenHeaderSignOptions, "critical">>;
48
+ encryption?: KryptosEncryption;
49
+ headerType: TokenHeaderType;
50
+ hkdfSalt?: string;
51
+ jwk?: KryptosJwk;
52
+ jwksUri?: string;
53
+ keyId: string;
54
+ objectId?: string;
55
+ pbkdfIterations?: number;
56
+ pbkdfSalt?: string;
57
+ publicEncryptionJwk?: PublicEncryptionJwk;
58
+ x5c?: Array<string>;
59
+ x5t?: string;
60
+ x5u?: string;
61
+ x5tS256?: string;
62
+ };
63
+ //# sourceMappingURL=header.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../src/types/header.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnF,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAEpD,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAGpD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,oBAAoB,CAAC;IAChC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9D,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,oBAAoB,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;IACpE,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC"}
@@ -0,0 +1,3 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ //# sourceMappingURL=header.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"header.js","sourceRoot":"","sources":["../../src/types/header.ts"],"names":[],"mappings":""}
@@ -0,0 +1,11 @@
1
+ export * from "./interfaces";
2
+ export * from "./jwe";
3
+ export * from "./jws";
4
+ export * from "./jwt";
5
+ export * from "./aegis";
6
+ export * from "./aegis-vault";
7
+ export * from "./header";
8
+ export * from "./level-of-assurance";
9
+ export * from "./oidc";
10
+ export * from "./operators";
11
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AAEtB,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AACrC,cAAc,QAAQ,CAAC;AACvB,cAAc,aAAa,CAAC"}
@@ -0,0 +1,27 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __exportStar = (this && this.__exportStar) || function(m, exports) {
14
+ for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
15
+ };
16
+ Object.defineProperty(exports, "__esModule", { value: true });
17
+ __exportStar(require("./interfaces"), exports);
18
+ __exportStar(require("./jwe"), exports);
19
+ __exportStar(require("./jws"), exports);
20
+ __exportStar(require("./jwt"), exports);
21
+ __exportStar(require("./aegis"), exports);
22
+ __exportStar(require("./aegis-vault"), exports);
23
+ __exportStar(require("./header"), exports);
24
+ __exportStar(require("./level-of-assurance"), exports);
25
+ __exportStar(require("./oidc"), exports);
26
+ __exportStar(require("./operators"), exports);
27
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AAEtB,0CAAwB;AACxB,gDAA8B;AAC9B,2CAAyB;AACzB,uDAAqC;AACrC,yCAAuB;AACvB,8CAA4B"}
@@ -0,0 +1,12 @@
1
+ import { IKryptos } from "@lindorm/kryptos";
2
+ import { AegisVaultQuery, VaultConfig } from "../aegis-vault";
3
+ export interface IAegisVault {
4
+ config: Array<VaultConfig>;
5
+ vault: Array<IKryptos>;
6
+ add(kryptos: Array<IKryptos> | IKryptos): void;
7
+ filter(query: AegisVaultQuery): Promise<Array<IKryptos>>;
8
+ find(query: AegisVaultQuery): Promise<IKryptos>;
9
+ refresh(): Promise<void>;
10
+ setup(): Promise<void>;
11
+ }
12
+ //# sourceMappingURL=aegis-vault.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis-vault.d.ts","sourceRoot":"","sources":["../../../src/types/interfaces/aegis-vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEvB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}
@@ -0,0 +1,3 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ //# sourceMappingURL=aegis-vault.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"aegis-vault.js","sourceRoot":"","sources":["../../../src/types/interfaces/aegis-vault.ts"],"names":[],"mappings":""}