@lindorm/aegis 0.4.4 → 0.5.0

package/dist/classes/CweKit.d.ts

@@ -1,14 +0,0 @@
-import { ICweKit } from "../interfaces";
-import { CweContent, CweEncryptOptions, CweKitOptions, DecodedCwe, DecryptedCwe, EncryptedCwe } from "../types";
-export declare class CweKit implements ICweKit {
-    private readonly encryption;
-    private readonly logger;
-    private readonly kryptos;
-    constructor(options: CweKitOptions);
-    encrypt(data: CweContent, options?: CweEncryptOptions): EncryptedCwe;
-    decrypt<T extends CweContent = string>(token: CweContent): DecryptedCwe<T>;
-    static isCwe(token: Buffer | string): boolean;
-    static decode(token: CweContent): DecodedCwe;
-    private contentType;
-}
-//# sourceMappingURL=CweKit.d.ts.map

package/dist/classes/CweKit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CweKit.d.ts","sourceRoot":"","sources":["../../src/classes/CweKit.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,YAAY,EAEZ,YAAY,EAEb,MAAM,UAAU,CAAC;AAKlB,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;gBAEhB,OAAO,EAAE,aAAa;IAMlC,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,GAAE,iBAAsB,GAAG,YAAY;IA6DxE,OAAO,CAAC,CAAC,SAAS,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC;WAgFnE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;WAStC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU;IAoCnD,OAAO,CAAC,WAAW;CAMpB"}

package/dist/classes/CweKit.js

@@ -1,151 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CweKit = void 0;
-const aes_1 = require("@lindorm/aes");
-const is_1 = require("@lindorm/is");
-const cbor_1 = require("cbor");
-const crypto_1 = require("crypto");
-const errors_1 = require("../errors");
-const auth_tag_length_1 = require("#internal/utils/auth-tag-length");
-const header_1 = require("#internal/utils/cose/header");
-const token_header_1 = require("#internal/utils/token-header");
-class CweKit {
-    encryption;
-    logger;
-    kryptos;
-    constructor(options) {
-        this.logger = options.logger.child(["CoseEncryptKit"]);
-        this.kryptos = options.kryptos;
-        this.encryption = options.encryption ?? options.kryptos.encryption ?? "A256GCM";
-    }
-    encrypt(data, options = {}) {
-        const kit = new aes_1.AesKit({ encryption: this.encryption, kryptos: this.kryptos });
-        this.logger.debug("Encrypting token", { options });
-        const objectId = options.objectId ?? (0, crypto_1.randomBytes)(20).toString("base64url");
-        const target = options.target ?? "internal";
-        const prepared = kit.prepareEncryption();
-        const protectedHeader = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            algorithm: this.encryption,
-            contentType: this.contentType(data),
-            headerType: "application/cose; cose-type=cose-encrypt",
-        }), target);
-        const protectedCbor = (0, cbor_1.encode)(protectedHeader);
-        const aad = protectedCbor;
-        const { authTag, content, initialisationVector } = prepared.encrypt(data, { aad });
-        const unprotectedHeader = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            ...(options.header ?? {}),
-            initialisationVector,
-            objectId,
-        }), target);
-        const ciphertext = Buffer.concat([content, authTag]);
-        const recipientHeader = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            algorithm: this.kryptos.algorithm,
-            keyId: this.kryptos.id,
-            publicEncryptionJwk: prepared.headerParams.publicEncryptionJwk,
-        }), target);
-        const recipientPublicKey = prepared.publicEncryptionKey ?? null;
-        const recipients = [[(0, cbor_1.encode)(new Map()), recipientHeader, recipientPublicKey]];
-        const buffer = (0, cbor_1.encode)([protectedCbor, unprotectedHeader, ciphertext, recipients]);
-        const token = buffer.toString("base64url");
-        this.logger.debug("Token encrypted", { token });
-        return { buffer, token };
-    }
-    decrypt(token) {
-        const kit = new aes_1.AesKit({ encryption: this.encryption, kryptos: this.kryptos });
-        this.logger.debug("Decrypting token", { token });
-        const decoded = CweKit.decode(token);
-        if (this.encryption !== decoded.protected.alg) {
-            throw new errors_1.CoseEncryptError("Invalid content encryption", {
-                debug: {
-                    expect: this.encryption,
-                    actual: decoded.protected.alg,
-                },
-            });
-        }
-        if (this.kryptos.algorithm !== decoded.recipient.unprotected.alg) {
-            throw new errors_1.CoseEncryptError("Invalid key management algorithm", {
-                debug: {
-                    expect: this.kryptos.algorithm,
-                    actual: decoded.recipient.unprotected.alg,
-                },
-            });
-        }
-        const initialisationVector = decoded.unprotected.iv;
-        const publicEncryptionJwk = decoded.recipient.unprotected.epk;
-        const publicEncryptionKey = decoded.recipient.publicEncryptionKey;
-        if (!initialisationVector) {
-            throw new errors_1.CoseEncryptError("Missing iv");
-        }
-        const header = (0, token_header_1.parseTokenHeader)({
-            ...decoded.protected,
-            epk: decoded.recipient.unprotected.epk,
-            kid: decoded.recipient.unprotected.kid,
-            oid: decoded.unprotected.oid,
-        });
-        if (header.critical?.length) {
-            for (const param of header.critical) {
-                throw new errors_1.CoseEncryptError(`Unsupported critical header parameter: ${param}`);
-            }
-        }
-        const aad = decoded.protectedCbor;
-        const payload = kit.decrypt({
-            authTag: decoded.authTag,
-            content: decoded.content,
-            contentType: decoded.protected.cty ?? "text/plain",
-            encryption: decoded.protected.alg,
-            initialisationVector,
-            publicEncryptionJwk,
-            publicEncryptionKey,
-        }, { aad });
-        this.logger.debug("Token decrypted");
-        return {
-            decoded,
-            header,
-            payload,
-            token: (0, is_1.isString)(token) ? token : token.toString("base64url"),
-        };
-    }
-    static isCwe(token) {
-        try {
-            const decode = CweKit.decode(token);
-            return decode.protected.typ === "application/cose; cose-type=cose-encrypt";
-        }
-        catch {
-            return false;
-        }
-    }
-    static decode(token) {
-        const [protectedCbor, unprotectedCose, ciphertext, recipients] = (0, cbor_1.decode)((0, is_1.isBuffer)(token) ? token : Buffer.from(token, "base64url"));
-        const protectedDict = (0, header_1.decodeCoseHeader)((0, cbor_1.decode)(protectedCbor));
-        const unprotectedDict = (0, header_1.decodeCoseHeader)(unprotectedCose);
-        const [recipient] = recipients;
-        const [_, recipientHeader, publicEncryptionKey] = recipient;
-        const recipientDict = (0, header_1.decodeCoseHeader)(recipientHeader);
-        const length = (0, auth_tag_length_1.authTagLength)(protectedDict.alg);
-        const authTag = ciphertext.slice(-length);
-        const content = ciphertext.slice(0, -length);
-        return {
-            protected: protectedDict,
-            protectedCbor: Buffer.isBuffer(protectedCbor)
-                ? protectedCbor
-                : Buffer.from(protectedCbor),
-            unprotected: unprotectedDict,
-            recipient: {
-                unprotected: recipientDict,
-                initialisationVector: recipientDict.iv,
-                publicEncryptionKey,
-            },
-            initialisationVector: unprotectedDict.iv,
-            content,
-            authTag,
-        };
-    }
-    contentType(input) {
-        if ((0, is_1.isBuffer)(input)) {
-            return "application/octet-stream";
-        }
-        return "text/plain";
-    }
-}
-exports.CweKit = CweKit;
-//# sourceMappingURL=CweKit.js.map

package/dist/classes/CweKit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CweKit.js","sourceRoot":"","sources":["../../src/classes/CweKit.ts"],"names":[],"mappings":";;;AAAA,sCAA2E;AAC3E,oCAAiD;AAGjD,+BAAsC;AACtC,mCAAqC;AACrC,sCAA6C;AAY7C,qEAAgE;AAChE,wDAA8E;AAC9E,+DAAgF;AAEhF,MAAa,MAAM;IACA,UAAU,CAAoB;IAC9B,MAAM,CAAU;IAChB,OAAO,CAAW;IAEnC,YAAmB,OAAsB;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC;IAClF,CAAC;IAEM,OAAO,CAAC,IAAgB,EAAE,UAA6B,EAAE;QAC9D,MAAM,GAAG,GAAG,IAAI,YAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAG5C,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAIzC,MAAM,eAAe,GAAG,IAAA,sBAAa,EACnC,IAAA,6BAAc,EAAC;YACb,SAAS,EAAE,IAAI,CAAC,UAAkC;YAClD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACnC,UAAU,EAAE,0CAA0C;SACvD,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC;QAG9C,MAAM,GAAG,GAAG,aAAa,CAAC;QAG1B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAGnF,MAAM,iBAAiB,GAAG,IAAA,sBAAa,EACrC,IAAA,6BAAc,EAAC;YACb,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACzB,oBAAoB;YACpB,QAAQ;SACT,CAAC,EACF,MAAM,CACP,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAGrD,MAAM,eAAe,GAAG,IAAA,sBAAa,EACnC,IAAA,6BAAc,EAAC;YACb,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACtB,mBAAmB,EAAE,QAAQ,CAAC,YAAY,CAAC,mBAAmB;SAC/D,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC;QAChE,MAAM,UAAU,GAAG,CAAC,CAAC,IAAA,aAAM,EAAC,IAAI,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,IAAA,aAAM,EAAC,CAAC,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEM,OAAO,CAAgC,KAAiB;QAC7D,MAAM,GAAG,GAAG,IAAI,YAAM,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAE/E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAGrC,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YAC9C,MAAM,IAAI,yBAAgB,CAAC,4BAA4B,EAAE;gBACvD,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI,CAAC,UAAU;oBACvB,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;iBAC9B;aACF,CAAC,CAAC;QACL,CAAC;QAGD,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,yBAAgB,CAAC,kCAAkC,EAAE;gBAC7D,KAAK,EAAE;oBACL,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;oBAC9B,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG;iBAC1C;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,MAAM,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;QAC9D,MAAM,mBAAmB,GAAG,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC;QAElE,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,MAAM,IAAI,yBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3C,CAAC;QAID,MAAM,MAAM,GAAG,IAAA,+BAAgB,EAAC;YAC9B,GAAI,OAAO,CAAC,SAAiB;YAC7B,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG;YACtC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG;YACtC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG;SAC7B,CAAkC,CAAC;QAGpC,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,yBAAgB,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAGD,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC;QAGlC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CACzB;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW,EAAG,OAAO,CAAC,SAAS,CAAC,GAAsB,IAAI,YAAY;YACtE,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;YACjC,oBAAoB;YACpB,mBAAmB;YACnB,mBAAmB;SACU,EAC/B,EAAE,GAAG,EAAE,CACR,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAErC,OAAO;YACL,OAAO;YACP,MAAM;YACN,OAAO;YACP,KAAK,EAAE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC7D,CAAC;IACJ,CAAC;IAIM,MAAM,CAAC,KAAK,CAAC,KAAsB;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,0CAA0C,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,MAAM,CAAC,KAAiB;QACpC,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,IAAA,aAAM,EACrE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAC1D,CAAC;QAEF,MAAM,aAAa,GAAG,IAAA,yBAAgB,EAAC,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,IAAA,yBAAgB,EAAC,eAAe,CAAC,CAAC;QAE1D,MAAM,CAAC,SAAS,CAAC,GAAG,UAAU,CAAC;QAC/B,MAAM,CAAC,CAAC,EAAE,eAAe,EAAE,mBAAmB,CAAC,GAAG,SAAS,CAAC;QAC5D,MAAM,aAAa,GAAG,IAAA,yBAAgB,EAAC,eAAe,CAAC,CAAC;QAGxD,MAAM,MAAM,GAAG,IAAA,+BAAa,EAAC,aAAa,CAAC,GAAwB,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAE7C,OAAO;YACL,SAAS,EAAE,aAAoB;YAC/B,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC3C,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YAC9B,WAAW,EAAE,eAAsB;YACnC,SAAS,EAAE;gBACT,WAAW,EAAE,aAAoB;gBACjC,oBAAoB,EAAE,aAAa,CAAC,EAAE;gBACtC,mBAAmB;aACpB;YACD,oBAAoB,EAAE,eAAe,CAAC,EAAG;YACzC,OAAO;YACP,OAAO;SACR,CAAC;IACJ,CAAC;IAIO,WAAW,CAAC,KAAiB;QACnC,IAAI,IAAA,aAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,0BAA0B,CAAC;QACpC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;CACF;AA3MD,wBA2MC"}

package/dist/classes/CwsKit.d.ts

@@ -1,13 +0,0 @@
-import { ICwsKit } from "../interfaces";
-import { CwsContent, CwsKitOptions, DecodedCws, ParsedCws, SignCwsOptions, SignedCws } from "../types";
-export declare class CwsKit implements ICwsKit {
-    private readonly logger;
-    private readonly kryptos;
-    constructor(options: CwsKitOptions);
-    sign(data: CwsContent, options?: SignCwsOptions): SignedCws;
-    verify<T extends CwsContent>(token: CwsContent): ParsedCws<T>;
-    static isCws(token: Buffer | string): boolean;
-    static decode<T extends CwsContent>(token: CwsContent): DecodedCws<T>;
-    static parse<T extends CwsContent>(token: CwsContent): ParsedCws<T>;
-}
-//# sourceMappingURL=CwsKit.d.ts.map

package/dist/classes/CwsKit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CwsKit.d.ts","sourceRoot":"","sources":["../../src/classes/CwsKit.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,UAAU,EACV,aAAa,EACb,UAAU,EACV,SAAS,EAET,cAAc,EACd,SAAS,EACV,MAAM,UAAU,CAAC;AAMlB,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;gBAEhB,OAAO,EAAE,aAAa;IAKlC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,GAAE,cAAmB,GAAG,SAAS;IAoD/D,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;WAmEtD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;WAStC,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC;WAsB9D,KAAK,CAAC,CAAC,SAAS,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC;CAU3E"}

package/dist/classes/CwsKit.js

@@ -1,139 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CwsKit = void 0;
-const is_1 = require("@lindorm/is");
-const cbor_1 = require("cbor");
-const crypto_1 = require("crypto");
-const errors_1 = require("../errors");
-const cose_sign_token_1 = require("#internal/utils/cose-sign-token");
-const cose_signature_1 = require("#internal/utils/cose-signature");
-const header_1 = require("#internal/utils/cose/header");
-const token_header_1 = require("#internal/utils/token-header");
-class CwsKit {
-    logger;
-    kryptos;
-    constructor(options) {
-        this.logger = options.logger.child(["CoseSignKit"]);
-        this.kryptos = options.kryptos;
-    }
-    sign(data, options = {}) {
-        const objectId = options.objectId ?? (0, crypto_1.randomBytes)(20).toString("base64url");
-        this.logger.debug("Signing token", { options });
-        const target = options.target ?? "internal";
-        const protectedHeader = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            algorithm: this.kryptos.algorithm,
-            contentType: options.contentType
-                ? options.contentType
-                : (0, is_1.isString)(data)
-                    ? "text/plain; charset=utf-8"
-                    : "application/octet-stream",
-            headerType: "application/cose; cose-type=cose-sign",
-        }), target);
-        const protectedCbor = (0, cbor_1.encode)(protectedHeader);
-        const unprotectedHeader = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            ...(options.header ?? {}),
-            keyId: this.kryptos.id,
-            objectId,
-        }), target);
-        const payloadBuffer = (0, is_1.isBuffer)(data) ? data : Buffer.from(data, "utf-8");
-        const payloadCbor = (0, cbor_1.encode)(payloadBuffer);
-        const signature = (0, cose_signature_1.createCoseSignature)({
-            kryptos: this.kryptos,
-            payload: payloadCbor,
-            protectedHeader: protectedCbor,
-        });
-        const buffer = (0, cose_sign_token_1.createCoseSignToken)({
-            payload: payloadCbor,
-            protectedHeader: protectedCbor,
-            unprotectedHeader,
-            signature,
-        });
-        const token = buffer.toString("base64url");
-        this.logger.debug("Token signed", { token });
-        return { buffer, objectId, token };
-    }
-    verify(token) {
-        this.logger.debug("Verifying token", { token });
-        const [protectedCbor, unprotectedCose, payloadCbor, signature] = (0, cbor_1.decode)((0, is_1.isBuffer)(token) ? token : Buffer.from(token, "base64url"));
-        const protectedDict = (0, header_1.decodeCoseHeader)((0, cbor_1.decode)(protectedCbor));
-        if (this.kryptos.algorithm !== protectedDict.alg) {
-            throw new errors_1.CoseSignError("Invalid token", {
-                data: { algorithm: protectedDict.alg },
-                debug: { expected: this.kryptos.algorithm },
-            });
-        }
-        const verified = (0, cose_signature_1.verifyCoseSignature)({
-            kryptos: this.kryptos,
-            payload: payloadCbor,
-            protectedHeader: protectedCbor,
-            signature,
-        });
-        if (!verified) {
-            throw new errors_1.CoseSignError("Invalid token", {
-                data: { verified, token },
-            });
-        }
-        const unprotectedDict = (0, header_1.decodeCoseHeader)(unprotectedCose);
-        const payloadBuffer = (0, cbor_1.decode)(payloadCbor);
-        const decoded = {
-            protected: protectedDict,
-            unprotected: unprotectedDict,
-            payload: payloadBuffer,
-            signature: signature,
-        };
-        const header = (0, token_header_1.parseTokenHeader)({
-            ...protectedDict,
-            ...unprotectedDict,
-        });
-        if (header.critical?.length) {
-            for (const param of header.critical) {
-                throw new errors_1.CoseSignError(`Unsupported critical header parameter: ${param}`);
-            }
-        }
-        const payload = header.contentType === "text/plain; charset=utf-8"
-            ? payloadBuffer.toString("utf-8")
-            : payloadBuffer;
-        this.logger.debug("Token verified");
-        return {
-            decoded,
-            header,
-            payload,
-            token: (0, is_1.isBuffer)(token) ? token.toString("base64url") : token,
-        };
-    }
-    static isCws(token) {
-        try {
-            const decode = CwsKit.decode(token);
-            return decode.protected.typ === "application/cose; cose-type=cose-sign";
-        }
-        catch {
-            return false;
-        }
-    }
-    static decode(token) {
-        const [protectedCbor, unprotectedHeader, payloadCbor, signature] = (0, cbor_1.decode)((0, is_1.isBuffer)(token) ? token : Buffer.from(token, "base64url"));
-        const protectedDict = (0, header_1.decodeCoseHeader)((0, cbor_1.decode)(protectedCbor));
-        const unprotectedDict = (0, header_1.decodeCoseHeader)(unprotectedHeader);
-        const payloadBuffer = (0, cbor_1.decode)(payloadCbor);
-        const payload = protectedDict.cty === "text/plain; charset=utf-8"
-            ? payloadBuffer.toString("utf-8")
-            : payloadBuffer;
-        return {
-            protected: protectedDict,
-            unprotected: unprotectedDict,
-            payload,
-            signature: signature.toString("base64url"),
-        };
-    }
-    static parse(token) {
-        const decoded = CwsKit.decode(token);
-        return {
-            decoded,
-            header: (0, token_header_1.parseTokenHeader)({ ...decoded.protected, ...decoded.unprotected }),
-            payload: decoded.payload,
-            token: (0, is_1.isBuffer)(token) ? token.toString("base64url") : token,
-        };
-    }
-}
-exports.CwsKit = CwsKit;
-//# sourceMappingURL=CwsKit.js.map

package/dist/classes/CwsKit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CwsKit.js","sourceRoot":"","sources":["../../src/classes/CwsKit.ts"],"names":[],"mappings":";;;AAAA,oCAAiD;AAGjD,+BAAsC;AACtC,mCAAqC;AACrC,sCAA0C;AAW1C,qEAAsE;AACtE,mEAA0F;AAC1F,wDAA8E;AAC9E,+DAAgF;AAEhF,MAAa,MAAM;IACA,MAAM,CAAU;IAChB,OAAO,CAAW;IAEnC,YAAmB,OAAsB;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;IAEM,IAAI,CAAC,IAAgB,EAAE,UAA0B,EAAE;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAE5C,MAAM,eAAe,GAAG,IAAA,sBAAa,EACnC,IAAA,6BAAc,EAAC;YACb,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAC9B,CAAC,CAAC,OAAO,CAAC,WAAW;gBACrB,CAAC,CAAC,IAAA,aAAQ,EAAC,IAAI,CAAC;oBACd,CAAC,CAAC,2BAA2B;oBAC7B,CAAC,CAAC,0BAA0B;YAChC,UAAU,EAAE,uCAAuC;SACpD,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,eAAe,CAAC,CAAC;QAE9C,MAAM,iBAAiB,GAAG,IAAA,sBAAa,EACrC,IAAA,6BAAc,EAAC;YACb,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACzB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACtB,QAAQ;SACT,CAAC,EACF,MAAM,CACP,CAAC;QAEF,MAAM,aAAa,GAAG,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,IAAA,oCAAmB,EAAC;YACpC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,qCAAmB,EAAC;YACjC,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,aAAa;YAC9B,iBAAiB;YACjB,SAAS;SACV,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IAEM,MAAM,CAAuB,KAAiB;QACnD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAEhD,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,IAAA,aAAM,EACrE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAC1D,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,yBAAgB,EAAC,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,CAAC;QAE9D,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,aAAa,CAAC,GAAG,EAAE,CAAC;YACjD,MAAM,IAAI,sBAAa,CAAC,eAAe,EAAE;gBACvC,IAAI,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE;gBACtC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,oCAAmB,EAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,aAAa;YAC9B,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,eAAe,EAAE;gBACvC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,eAAe,GAAG,IAAA,yBAAgB,EAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC;QAE1C,MAAM,OAAO,GAAkB;YAC7B,SAAS,EAAE,aAAoB;YAC/B,WAAW,EAAE,eAAsB;YACnC,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,SAAS;SACrB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,+BAAgB,EAAkB;YAC/C,GAAG,aAAa;YAChB,GAAG,eAAe;SACZ,CAAC,CAAC;QAGV,IAAI,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,IAAI,sBAAa,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GACX,MAAM,CAAC,WAAW,KAAK,2BAA2B;YAChD,CAAC,CAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAO;YACxC,CAAC,CAAC,aAAa,CAAC;QAEpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAEpC,OAAO;YACL,OAAO;YACP,MAAM;YACN,OAAO;YACP,KAAK,EAAE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK;SAC7D,CAAC;IACJ,CAAC;IAIM,MAAM,CAAC,KAAK,CAAC,KAAsB;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,uCAAuC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,MAAM,CAAuB,KAAiB;QAC1D,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,IAAA,aAAM,EACvE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAC1D,CAAC;QAEF,MAAM,aAAa,GAAG,IAAA,yBAAgB,EAAC,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,IAAA,yBAAgB,EAAC,iBAAiB,CAAC,CAAC;QAE5D,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,OAAO,GACX,aAAa,CAAC,GAAG,KAAK,2BAA2B;YAC/C,CAAC,CAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAO;YACxC,CAAC,CAAC,aAAa,CAAC;QAEpB,OAAO;YACL,SAAS,EAAE,aAAoB;YAC/B,WAAW,EAAE,eAAsB;YACnC,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC3C,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,KAAK,CAAuB,KAAiB;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAI,KAAK,CAAC,CAAC;QAExC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,IAAA,+BAAgB,EAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,WAAW,EAAS,CAAC;YACjF,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK;SAC7D,CAAC;IACJ,CAAC;CACF;AAzKD,wBAyKC"}

package/dist/classes/CwtKit.d.ts

@@ -1,17 +0,0 @@
-import { Dict } from "@lindorm/types";
-import { ICwtKit } from "../interfaces";
-import { CwtKitOptions, DecodedCwt, ParsedCwt, ParsedCwtPayload, SignCwtContent, SignCwtOptions, SignedCwt, ValidateCwtOptions, VerifyCwtOptions } from "../types";
-export declare class CwtKit implements ICwtKit {
-    private readonly clockTolerance;
-    private readonly issuer;
-    private readonly logger;
-    private readonly kryptos;
-    constructor(options: CwtKitOptions);
-    sign<C extends Dict = Dict>(content: SignCwtContent<C>, options?: SignCwtOptions): SignedCwt;
-    verify<C extends Dict = Dict>(token: Buffer | string, verify?: VerifyCwtOptions): ParsedCwt<C>;
-    static isCwt(token: Buffer | string): boolean;
-    static decode<C extends Dict = Dict>(token: Buffer | string): DecodedCwt<C>;
-    static parse<C extends Dict = Dict>(token: Buffer | string): ParsedCwt<C>;
-    static validate<C extends Dict = Dict>(payload: ParsedCwtPayload<C>, options: ValidateCwtOptions): void;
-}
-//# sourceMappingURL=CwtKit.d.ts.map

package/dist/classes/CwtKit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CwtKit.d.ts","sourceRoot":"","sources":["../../src/classes/CwtKit.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,aAAa,EACb,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAWlB,qBAAa,MAAO,YAAW,OAAO;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAU;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAW;gBAEhB,OAAO,EAAE,aAAa;IAQlC,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC/B,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,GAAE,cAAmB,GAC3B,SAAS;IAmEL,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EACjC,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,MAAM,GAAE,gBAAqB,GAC5B,SAAS,CAAC,CAAC,CAAC;WA4ED,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;WAStC,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;WAepE,KAAK,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;WAWlE,QAAQ,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC1C,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAC5B,OAAO,EAAE,kBAAkB,GAC1B,IAAI;CAKR"}

package/dist/classes/CwtKit.js

@@ -1,166 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CwtKit = void 0;
-const date_1 = require("@lindorm/date");
-const is_1 = require("@lindorm/is");
-const cbor_1 = require("cbor");
-const crypto_1 = require("crypto");
-const errors_1 = require("../errors");
-const claims_1 = require("#internal/utils/cose/claims");
-const header_1 = require("#internal/utils/cose/header");
-const cose_sign_token_1 = require("#internal/utils/cose-sign-token");
-const cose_signature_1 = require("#internal/utils/cose-signature");
-const jwt_validate_1 = require("#internal/utils/jwt-validate");
-const jwt_payload_1 = require("#internal/utils/jwt-payload");
-const jwt_verify_1 = require("#internal/utils/jwt-verify");
-const token_header_1 = require("#internal/utils/token-header");
-const validate_1 = require("#internal/utils/validate");
-class CwtKit {
-    clockTolerance;
-    issuer;
-    logger;
-    kryptos;
-    constructor(options) {
-        this.logger = options.logger.child(["CwtKit"]);
-        this.kryptos = options.kryptos;
-        this.issuer = options.issuer ?? null;
-        this.clockTolerance = options.clockTolerance ?? 0;
-    }
-    sign(content, options = {}) {
-        this.logger.debug("Signing token", { content, options });
-        if (!this.issuer) {
-            throw new errors_1.CwtError("Issuer is required to sign CWT");
-        }
-        const objectId = options.objectId ?? content.subject ?? (0, crypto_1.randomBytes)(20).toString("base64url");
-        const target = options.target ?? "internal";
-        const protectedDict = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            algorithm: this.kryptos.algorithm,
-            contentType: "application/json",
-            headerType: "application/cwt",
-        }), target);
-        const protectedCbor = (0, cbor_1.encode)(protectedDict);
-        const unprotectedDict = (0, header_1.mapCoseHeader)((0, token_header_1.mapTokenHeader)({
-            ...(options.header ?? {}),
-            keyId: this.kryptos.id,
-            objectId,
-        }), target);
-        const claims = (0, jwt_payload_1.mapJwtContentToClaims)({ algorithm: this.kryptos.algorithm, issuer: this.issuer }, content, { tokenId: (0, crypto_1.randomBytes)(20).toString("base64url"), ...options });
-        const payloadDict = (0, claims_1.mapCoseClaims)({ ...claims, ...(content.claims ?? {}) }, target);
-        const payloadCbor = (0, cbor_1.encode)(payloadDict);
-        const signature = (0, cose_signature_1.createCoseSignature)({
-            kryptos: this.kryptos,
-            payload: payloadCbor,
-            protectedHeader: protectedCbor,
-        });
-        const buffer = (0, cose_sign_token_1.createCoseSignToken)({
-            payload: payloadCbor,
-            protectedHeader: protectedCbor,
-            unprotectedHeader: unprotectedDict,
-            signature,
-        });
-        const token = buffer.toString("base64url");
-        const { expiresAt, expiresIn, expiresOn } = (0, date_1.expires)(content.expires);
-        this.logger.debug("Token signed", { token });
-        return {
-            buffer,
-            expiresAt,
-            expiresIn,
-            expiresOn,
-            objectId,
-            token,
-            tokenId: claims.jti,
-        };
-    }
-    verify(token, verify = {}) {
-        this.logger.debug("Verifying token", { token, verify });
-        const [protectedCbor, unprotectedCose, payloadCbor, signature] = (0, cbor_1.decode)((0, is_1.isBuffer)(token) ? token : Buffer.from(token, "base64url"));
-        const protectedDict = (0, header_1.decodeCoseHeader)((0, cbor_1.decode)(protectedCbor));
-        const unprotectedDict = (0, header_1.decodeCoseHeader)(unprotectedCose);
-        const payloadDict = (0, claims_1.decodeCoseClaims)((0, cbor_1.decode)(payloadCbor));
-        if (this.kryptos.algorithm !== protectedDict.alg) {
-            throw new errors_1.CwtError("Invalid token", {
-                data: { algorithm: protectedDict.alg },
-                debug: { expected: this.kryptos.algorithm },
-            });
-        }
-        const verified = (0, cose_signature_1.verifyCoseSignature)({
-            kryptos: this.kryptos,
-            payload: payloadCbor,
-            protectedHeader: protectedCbor,
-            signature,
-        });
-        if (!verified) {
-            throw new errors_1.CwtError("Invalid token", {
-                data: { verified, token },
-            });
-        }
-        const predicate = (0, jwt_verify_1.createJwtVerify)(this.kryptos.algorithm, verify, this.clockTolerance);
-        const withDates = {
-            ...payloadDict,
-            exp: payloadDict.exp ? new Date(payloadDict.exp * 1000) : undefined,
-            iat: payloadDict.iat ? new Date(payloadDict.iat * 1000) : undefined,
-            nbf: payloadDict.nbf ? new Date(payloadDict.nbf * 1000) : undefined,
-            auth_time: payloadDict.auth_time
-                ? new Date(payloadDict.auth_time * 1000)
-                : undefined,
-        };
-        try {
-            (0, validate_1.validate)(withDates, predicate);
-        }
-        catch (err) {
-            throw new errors_1.CwtError("Invalid token", { data: err.data });
-        }
-        const decoded = {
-            protected: protectedDict,
-            unprotected: unprotectedDict,
-            payload: payloadDict,
-            signature: signature,
-        };
-        const payload = (0, jwt_payload_1.parseTokenPayload)(payloadDict);
-        this.logger.debug("Token verified");
-        return {
-            decoded,
-            header: (0, token_header_1.parseTokenHeader)({
-                ...protectedDict,
-                ...unprotectedDict,
-            }),
-            payload,
-            token: (0, is_1.isBuffer)(token) ? token.toString("base64url") : token,
-        };
-    }
-    static isCwt(token) {
-        try {
-            const decode = CwtKit.decode(token);
-            return decode.protected.typ === "application/cwt";
-        }
-        catch {
-            return false;
-        }
-    }
-    static decode(token) {
-        const [protectedCbor, unprotectedHeader, payloadCbor, signature] = (0, cbor_1.decode)((0, is_1.isBuffer)(token) ? token : Buffer.from(token, "base64url"));
-        const protectedCose = (0, cbor_1.decode)(protectedCbor);
-        const payloadCose = (0, cbor_1.decode)(payloadCbor);
-        return {
-            protected: (0, header_1.decodeCoseHeader)(protectedCose),
-            unprotected: (0, header_1.decodeCoseHeader)(unprotectedHeader),
-            payload: (0, claims_1.decodeCoseClaims)(payloadCose),
-            signature: signature.toString("base64url"),
-        };
-    }
-    static parse(token) {
-        const decoded = CwtKit.decode(token);
-        return {
-            decoded,
-            header: (0, token_header_1.parseTokenHeader)({ ...decoded.protected, ...decoded.unprotected }),
-            payload: (0, jwt_payload_1.parseTokenPayload)(decoded.payload),
-            token: (0, is_1.isBuffer)(token) ? token.toString("base64url") : token,
-        };
-    }
-    static validate(payload, options) {
-        const operators = (0, jwt_validate_1.createJwtValidate)(options);
-        (0, validate_1.validate)(payload, operators);
-    }
-}
-exports.CwtKit = CwtKit;
-//# sourceMappingURL=CwtKit.js.map

package/dist/classes/CwtKit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CwtKit.js","sourceRoot":"","sources":["../../src/classes/CwtKit.ts"],"names":[],"mappings":";;;AAAA,wCAAwC;AACxC,oCAAuC;AAIvC,+BAAsC;AACtC,mCAAqC;AACrC,sCAAqC;AAarC,wDAA8E;AAC9E,wDAA8E;AAC9E,qEAAsE;AACtE,mEAA0F;AAC1F,+DAAiE;AACjE,6DAAuF;AACvF,2DAA6D;AAC7D,+DAAgF;AAChF,uDAAoD;AAEpD,MAAa,MAAM;IACA,cAAc,CAAS;IACvB,MAAM,CAAgB;IACtB,MAAM,CAAU;IAChB,OAAO,CAAW;IAEnC,YAAmB,OAAsB;QACvC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC;QAErC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC;IACpD,CAAC;IAEM,IAAI,CACT,OAA0B,EAC1B,UAA0B,EAAE;QAE5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,iBAAQ,CAAC,gCAAgC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,OAAO,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAE5C,MAAM,aAAa,GAAG,IAAA,sBAAa,EACjC,IAAA,6BAAc,EAAC;YACb,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,WAAW,EAAE,kBAAkB;YAC/B,UAAU,EAAE,iBAAiB;SAC9B,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC;QAE5C,MAAM,eAAe,GAAG,IAAA,sBAAa,EACnC,IAAA,6BAAc,EAAC;YACb,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YACzB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;YACtB,QAAQ;SACT,CAAC,EACF,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,mCAAqB,EAClC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAC1D,OAAO,EACP,EAAE,OAAO,EAAE,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,CAC/D,CAAC;QACF,MAAM,WAAW,GAAG,IAAA,sBAAa,EAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpF,MAAM,WAAW,GAAG,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC;QAExC,MAAM,SAAS,GAAG,IAAA,oCAAmB,EAAC;YACpC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,aAAa;SAC/B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,qCAAmB,EAAC;YACjC,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,aAAa;YAC9B,iBAAiB,EAAE,eAAe;YAClC,SAAS;SACV,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE3C,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,cAAO,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7C,OAAO;YACL,MAAM;YACN,SAAS;YACT,SAAS;YACT,SAAS;YACT,QAAQ;YACR,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,GAAI;SACrB,CAAC;IACJ,CAAC;IAEM,MAAM,CACX,KAAsB,EACtB,SAA2B,EAAE;QAE7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAExD,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,IAAA,aAAM,EACrE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAC1D,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,yBAAgB,EAAC,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC,CAAC;QAC9D,MAAM,eAAe,GAAG,IAAA,yBAAgB,EAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAA,yBAAgB,EAAI,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC,CAAC;QAE7D,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,aAAa,CAAC,GAAG,EAAE,CAAC;YACjD,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE;gBAClC,IAAI,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,GAAG,EAAE;gBACtC,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,oCAAmB,EAAC;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,WAAW;YACpB,eAAe,EAAE,aAAa;YAC9B,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE;gBAClC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,4BAAe,EAC/B,IAAI,CAAC,OAAO,CAAC,SAAS,EACtB,MAAM,EACN,IAAI,CAAC,cAAc,CACpB,CAAC;QAEF,MAAM,SAAS,GAAG;YAChB,GAAG,WAAW;YACd,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,SAAS,EAAE,WAAW,CAAC,SAAS;gBAC9B,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC;gBACxC,CAAC,CAAC,SAAS;SACd,CAAC;QAEF,IAAI,CAAC;YACH,IAAA,mBAAQ,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,iBAAQ,CAAC,eAAe,EAAE,EAAE,IAAI,EAAG,GAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,OAAO,GAAkB;YAC7B,SAAS,EAAE,aAAoB;YAC/B,WAAW,EAAE,eAAsB;YACnC,OAAO,EAAE,WAAkB;YAC3B,SAAS,EAAE,SAAS;SACrB,CAAC;QAEF,MAAM,OAAO,GAAG,IAAA,+BAAiB,EAAC,WAAW,CAAC,CAAC;QAE/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAEpC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,IAAA,+BAAgB,EAAC;gBACvB,GAAG,aAAa;gBAChB,GAAG,eAAe;aACZ,CAAC;YACT,OAAO;YACP,KAAK,EAAE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK;SAC7D,CAAC;IACJ,CAAC;IAIM,MAAM,CAAC,KAAK,CAAC,KAAsB;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,iBAAiB,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,MAAM,CAAwB,KAAsB;QAChE,MAAM,CAAC,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,IAAA,aAAM,EACvE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAC1D,CAAC;QACF,MAAM,aAAa,GAAG,IAAA,aAAM,EAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAA,aAAM,EAAC,WAAW,CAAC,CAAC;QAExC,OAAO;YACL,SAAS,EAAE,IAAA,yBAAgB,EAAC,aAAa,CAAQ;YACjD,WAAW,EAAE,IAAA,yBAAgB,EAAC,iBAAiB,CAAQ;YACvD,OAAO,EAAE,IAAA,yBAAgB,EAAC,WAAW,CAAC;YACtC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC3C,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,KAAK,CAAwB,KAAsB;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAI,KAAK,CAAC,CAAC;QAExC,OAAO;YACL,OAAO;YACP,MAAM,EAAE,IAAA,+BAAgB,EAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;YAC1E,OAAO,EAAE,IAAA,+BAAiB,EAAC,OAAO,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,IAAA,aAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK;SAC7D,CAAC;IACJ,CAAC;IAEM,MAAM,CAAC,QAAQ,CACpB,OAA4B,EAC5B,OAA2B;QAE3B,MAAM,SAAS,GAAG,IAAA,gCAAiB,EAAC,OAAO,CAAC,CAAC;QAE7C,IAAA,mBAAQ,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;CACF;AA9MD,wBA8MC"}

package/dist/errors/CoseEncryptError.d.ts

@@ -1,4 +0,0 @@
-import { LindormError } from "@lindorm/errors";
-export declare class CoseEncryptError extends LindormError {
-}
-//# sourceMappingURL=CoseEncryptError.d.ts.map

package/dist/errors/CoseEncryptError.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CoseEncryptError.d.ts","sourceRoot":"","sources":["../../src/errors/CoseEncryptError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,gBAAiB,SAAQ,YAAY;CAAG"}

package/dist/errors/CoseEncryptError.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CoseEncryptError = void 0;
-const errors_1 = require("@lindorm/errors");
-class CoseEncryptError extends errors_1.LindormError {
-}
-exports.CoseEncryptError = CoseEncryptError;
-//# sourceMappingURL=CoseEncryptError.js.map

package/dist/errors/CoseEncryptError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CoseEncryptError.js","sourceRoot":"","sources":["../../src/errors/CoseEncryptError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,gBAAiB,SAAQ,qBAAY;CAAG;AAArD,4CAAqD"}

package/dist/errors/CoseSignError.d.ts

@@ -1,4 +0,0 @@
-import { LindormError } from "@lindorm/errors";
-export declare class CoseSignError extends LindormError {
-}
-//# sourceMappingURL=CoseSignError.d.ts.map

package/dist/errors/CoseSignError.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CoseSignError.d.ts","sourceRoot":"","sources":["../../src/errors/CoseSignError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,aAAc,SAAQ,YAAY;CAAG"}

package/dist/errors/CoseSignError.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CoseSignError = void 0;
-const errors_1 = require("@lindorm/errors");
-class CoseSignError extends errors_1.LindormError {
-}
-exports.CoseSignError = CoseSignError;
-//# sourceMappingURL=CoseSignError.js.map

package/dist/errors/CoseSignError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CoseSignError.js","sourceRoot":"","sources":["../../src/errors/CoseSignError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,aAAc,SAAQ,qBAAY;CAAG;AAAlD,sCAAkD"}

package/dist/errors/CwtError.d.ts

@@ -1,4 +0,0 @@
-import { LindormError } from "@lindorm/errors";
-export declare class CwtError extends LindormError {
-}
-//# sourceMappingURL=CwtError.d.ts.map

package/dist/errors/CwtError.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CwtError.d.ts","sourceRoot":"","sources":["../../src/errors/CwtError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,qBAAa,QAAS,SAAQ,YAAY;CAAG"}

package/dist/errors/CwtError.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CwtError = void 0;
-const errors_1 = require("@lindorm/errors");
-class CwtError extends errors_1.LindormError {
-}
-exports.CwtError = CwtError;
-//# sourceMappingURL=CwtError.js.map

package/dist/errors/CwtError.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CwtError.js","sourceRoot":"","sources":["../../src/errors/CwtError.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAE/C,MAAa,QAAS,SAAQ,qBAAY;CAAG;AAA7C,4BAA6C"}

package/dist/interfaces/CweKit.d.ts

@@ -1,6 +0,0 @@
-import { CweContent, CweEncryptOptions, DecryptedCwe, EncryptedCwe } from "../types";
-export interface ICweKit {
-    encrypt(data: CweContent, options?: CweEncryptOptions): EncryptedCwe;
-    decrypt<T extends CweContent = string>(token: CweContent): DecryptedCwe<T>;
-}
-//# sourceMappingURL=CweKit.d.ts.map

package/dist/interfaces/CweKit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"CweKit.d.ts","sourceRoot":"","sources":["../../src/interfaces/CweKit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAErF,MAAM,WAAW,OAAO;IACtB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,YAAY,CAAC;IACrE,OAAO,CAAC,CAAC,SAAS,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;CAC5E"}

package/dist/interfaces/CweKit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"CweKit.js","sourceRoot":"","sources":["../../src/interfaces/CweKit.ts"],"names":[],"mappings":""}