@lindorm/aegis 0.4.4 → 0.5.0

package/dist/types/header.d.ts

@@ -2,7 +2,7 @@ import { PublicEncryptionJwk } from "@lindorm/aes";
 import { KryptosEncryption, KryptosJwk } from "@lindorm/kryptos";
 import { TOKEN_HEADER_ALGORITHMS, TOKEN_HEADER_TYPES } from "#internal/constants/header";
 export type TokenHeaderAlgorithm = (typeof TOKEN_HEADER_ALGORITHMS)[number];
-export type TokenHeaderType = (typeof TOKEN_HEADER_TYPES)[number];
+export type TokenHeaderType = (typeof TOKEN_HEADER_TYPES)[number] | (string & {});
 export type TokenHeaderClaims = {
     alg: TokenHeaderAlgorithm;
     crit?: Array<string>;
@@ -20,7 +20,6 @@ export type TokenHeaderClaims = {
     typ?: string;
     x5c?: Array<string>;
     x5t?: string;
-    x5u?: string;
     "x5t#S256"?: string;
 };
 export type RawTokenHeaderClaims = {
@@ -40,12 +39,13 @@ export type RawTokenHeaderClaims = {
     typ?: TokenHeaderType;
     x5c?: Array<string>;
     x5t?: string;
-    x5u?: string;
     "x5t#S256"?: string;
 };
 export type DecodedTokenHeader = TokenHeaderClaims;
+export type BaseTokenFormat = "JWT" | "JWS" | "JWE";
 export type ParsedTokenHeader = {
     algorithm: TokenHeaderAlgorithm;
+    baseFormat: BaseTokenFormat | undefined;
     contentType: string | undefined;
     critical: Array<string>;
     encryption: KryptosEncryption | undefined;
@@ -59,9 +59,9 @@ export type ParsedTokenHeader = {
     pbkdfSalt: string | undefined;
     publicEncryptionJwk: PublicEncryptionJwk | undefined;
     publicEncryptionTag: string | undefined;
+    tokenType: string | undefined;
     x5c: Array<string> | undefined;
     x5t: string | undefined;
-    x5u: string | undefined;
     x5tS256: string | undefined;
 };
 export type TokenHeaderOptions = {
@@ -79,10 +79,17 @@ export type TokenHeaderOptions = {
     pbkdfSalt?: Buffer;
     publicEncryptionJwk?: PublicEncryptionJwk;
     publicEncryptionTag?: Buffer;
+};
+export type CertificateHeaderFields = {
     x5c?: Array<string>;
-    x5t?: string;
     x5tS256?: string;
-    x5u?: string;
 };
-export type TokenEncryptOrSignOptions = Pick<TokenHeaderOptions, "jwk" | "x5c" | "x5t" | "x5tS256" | "x5u">;
+export type TokenEncryptOrSignOptions = Pick<TokenHeaderOptions, "jwk">;
+export type BindCertificateMode = "thumbprint" | "chain" | "none";
+export type CertBindingMode = "strict" | "lax";
+export type RefinedTokenHeader<A> = Omit<ParsedTokenHeader, "algorithm" | "baseFormat" | "headerType"> & {
+    algorithm: A;
+    baseFormat: BaseTokenFormat;
+    headerType: string;
+};
 //# sourceMappingURL=header.d.ts.map

package/dist/types/header.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../src/types/header.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAGlE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,oBAAoB,CAAC;IAChC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,kBAAkB,EAClB,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAC1C,CAAC"}
+{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../src/types/header.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAGlF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,oBAAoB,CAAC;IAChC,UAAU,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAExE,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;AAElE,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE/C,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI,IAAI,CACtC,iBAAiB,EACjB,WAAW,GAAG,YAAY,GAAG,YAAY,CAC1C,GAAG;IACF,SAAS,EAAE,CAAC,CAAC;IACb,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/types/index.d.ts

@@ -1,12 +1,10 @@
-export * from "./cwe";
-export * from "./cws";
-export * from "./cwt";
+export * from "./claims";
 export * from "./jwe";
 export * from "./jws";
 export * from "./jwt";
 export * from "./aegis";
-export * from "./cose-target";
 export * from "./header";
+export * from "./kit";
 export * from "./level-of-assurance";
 export * from "./signature-kit";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AAEtB,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AAEtB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC"}

package/dist/types/index.js

@@ -14,15 +14,13 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./cwe"), exports);
-__exportStar(require("./cws"), exports);
-__exportStar(require("./cwt"), exports);
+__exportStar(require("./claims"), exports);
 __exportStar(require("./jwe"), exports);
 __exportStar(require("./jws"), exports);
 __exportStar(require("./jwt"), exports);
 __exportStar(require("./aegis"), exports);
-__exportStar(require("./cose-target"), exports);
 __exportStar(require("./header"), exports);
+__exportStar(require("./kit"), exports);
 __exportStar(require("./level-of-assurance"), exports);
 __exportStar(require("./signature-kit"), exports);
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AAEtB,0CAAwB;AACxB,gDAA8B;AAC9B,2CAAyB;AACzB,uDAAqC;AAErC,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AAEtB,0CAAwB;AACxB,2CAAyB;AACzB,wCAAsB;AACtB,uDAAqC;AAErC,kDAAgC"}

package/dist/types/jwe/jwe-decrypt.d.ts

@@ -1,10 +1,8 @@
 import { KryptosEncAlgorithm, KryptosEncryption } from "@lindorm/kryptos";
-import { ParsedTokenHeader } from "../header";
+import { RefinedTokenHeader } from "../header";
 import { DecodedJwe } from "./jwe-decode";
-export type DecryptedJweHeader = Omit<ParsedTokenHeader, "algorithm" | "encryption" | "headerType"> & {
-    algorithm: KryptosEncAlgorithm;
+export type DecryptedJweHeader = RefinedTokenHeader<KryptosEncAlgorithm> & {
     encryption: KryptosEncryption;
-    headerType: "JWE";
 };
 export type DecryptedJwe = {
     decoded: DecodedJwe;

package/dist/types/jwe/jwe-decrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe-decrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,iBAAiB,EACjB,WAAW,GAAG,YAAY,GAAG,YAAY,CAC1C,GAAG;IACF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,KAAK,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jwe-decrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,GAAG;IACzE,UAAU,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwe/jwe-encrypt.d.ts

@@ -1,7 +1,10 @@
-import { TokenEncryptOrSignOptions } from "../header";
+import { TokenType } from "../../constants/token-type";
+import { BindCertificateMode, TokenEncryptOrSignOptions } from "../header";
 export type JweEncryptOptions = {
+    bindCertificate?: BindCertificateMode;
     header?: TokenEncryptOrSignOptions;
     objectId?: string;
+    tokenType?: TokenType;
 };
 export type EncryptedJwe = {
     token: string;

package/dist/types/jwe/jwe-encrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe-encrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jwe-encrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwe/jwe-kit.d.ts

@@ -1,8 +1,3 @@
-import { IKryptos, KryptosEncryption } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
-export type JweKitOptions = {
-    encryption?: KryptosEncryption;
-    kryptos: IKryptos;
-    logger: ILogger;
-};
+import { EncryptKitOptions } from "../kit";
+export type JweKitOptions = EncryptKitOptions;
 //# sourceMappingURL=jwe-kit.d.ts.map

package/dist/types/jwe/jwe-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC"}
+{"version":3,"file":"jwe-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAE3C,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC"}

package/dist/types/jws/jws-kit.d.ts

@@ -1,8 +1,4 @@
-import { IKryptos } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
+import { SignKitOptions } from "../kit";
 export type JwsContent = Buffer | string;
-export type JwsKitOptions = {
-    logger: ILogger;
-    kryptos: IKryptos;
-};
+export type JwsKitOptions = SignKitOptions;
 //# sourceMappingURL=jws-kit.d.ts.map

package/dist/types/jws/jws-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}
+{"version":3,"file":"jws-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC"}

package/dist/types/jws/jws-parse.d.ts

@@ -1,10 +1,7 @@
 import { KryptosSigAlgorithm } from "@lindorm/kryptos";
-import { ParsedTokenHeader } from "../header";
+import { RefinedTokenHeader } from "../header";
 import { DecodedJws } from "./jws-decode";
-export type ParsedJwsHeader = Omit<ParsedTokenHeader, "algorithm" | "headerType"> & {
-    algorithm: KryptosSigAlgorithm;
-    headerType: "JWS";
-};
+export type ParsedJwsHeader = RefinedTokenHeader<KryptosSigAlgorithm>;
 export type ParsedJws<T extends Buffer | string> = {
     decoded: DecodedJws;
     header: ParsedJwsHeader;

package/dist/types/jws/jws-parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG;IAClF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,KAAK,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACjD,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jws-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACjD,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jws/jws-sign.d.ts

@@ -1,11 +1,14 @@
-import { TokenEncryptOrSignOptions } from "../header";
+import { TokenType } from "../../constants/token-type";
+import { BindCertificateMode, TokenEncryptOrSignOptions } from "../header";
 export type SignJwsOptions = {
+    bindCertificate?: BindCertificateMode;
     contentType?: string;
     header?: TokenEncryptOrSignOptions;
     objectId?: string;
+    tokenType?: TokenType;
 };
 export type SignedJws = {
-    objectId: string;
+    objectId: string | undefined;
     token: string;
 };
 //# sourceMappingURL=jws-sign.d.ts.map

package/dist/types/jws/jws-sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jws-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwt/index.d.ts

@@ -1,5 +1,7 @@
-export * from "./jwt-claims";
+export * from "./jwt-claim-matchers";
 export * from "./jwt-decode";
+export * from "./jwt-delegation";
+export * from "./jwt-dpop";
 export * from "./jwt-kit";
 export * from "./jwt-parse";
 export * from "./jwt-sign";

package/dist/types/jwt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/types/jwt/index.js

@@ -14,8 +14,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./jwt-claims"), exports);
+__exportStar(require("./jwt-claim-matchers"), exports);
 __exportStar(require("./jwt-decode"), exports);
+__exportStar(require("./jwt-delegation"), exports);
+__exportStar(require("./jwt-dpop"), exports);
 __exportStar(require("./jwt-kit"), exports);
 __exportStar(require("./jwt-parse"), exports);
 __exportStar(require("./jwt-sign"), exports);

package/dist/types/jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,4CAA0B;AAC1B,8CAA4B;AAC5B,6CAA2B;AAC3B,iDAA+B;AAC/B,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,+CAA6B;AAC7B,mDAAiC;AACjC,6CAA2B;AAC3B,4CAA0B;AAC1B,8CAA4B;AAC5B,6CAA2B;AAC3B,iDAA+B;AAC/B,+CAA6B"}

package/dist/types/jwt/jwt-claim-matchers.d.ts

@@ -0,0 +1,28 @@
+import { PredicateOperator } from "@lindorm/types";
+export type JwtClaimMatchers = {
+    accessToken?: string;
+    adjustedAccessLevel?: number | PredicateOperator<number>;
+    audience?: Array<string> | string | PredicateOperator<any>;
+    authCode?: string;
+    authContextClass?: string | PredicateOperator<string>;
+    authFactor?: string | PredicateOperator<string>;
+    authMethods?: Array<string> | string | PredicateOperator<any>;
+    authorizedParty?: string | PredicateOperator<string>;
+    authState?: string;
+    authTime?: PredicateOperator<Date>;
+    clientId?: Array<string> | string | PredicateOperator<any>;
+    entitlements?: Array<string> | string | PredicateOperator<any>;
+    grantType?: string | PredicateOperator<string>;
+    groups?: Array<string> | string | PredicateOperator<any>;
+    issuer?: string | PredicateOperator<string>;
+    levelOfAssurance?: number | PredicateOperator<number>;
+    nonce?: string | PredicateOperator<string>;
+    permissions?: Array<string> | string | PredicateOperator<any>;
+    roles?: Array<string> | string | PredicateOperator<any>;
+    scope?: Array<string> | string | PredicateOperator<any>;
+    sessionHint?: Array<string> | string | PredicateOperator<any>;
+    subject?: Array<string> | string | PredicateOperator<any>;
+    subjectHint?: string | PredicateOperator<string>;
+    tenantId?: Array<string> | string | PredicateOperator<any>;
+};
+//# sourceMappingURL=jwt-claim-matchers.d.ts.map

package/dist/types/jwt/jwt-claim-matchers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-claim-matchers.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-claim-matchers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC5D,CAAC"}

package/dist/types/jwt/jwt-claim-matchers.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=jwt-claim-matchers.js.map

package/dist/types/jwt/jwt-claim-matchers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-claim-matchers.js","sourceRoot":"","sources":["../../../src/types/jwt/jwt-claim-matchers.ts"],"names":[],"mappings":""}

package/dist/types/jwt/jwt-decode.d.ts

@@ -1,6 +1,6 @@
 import { Dict } from "@lindorm/types";
+import { JwtClaims } from "../claims/jwt/jwt-claims";
 import { TokenHeaderClaims } from "../header";
-import { JwtClaims } from "./jwt-claims";
 export type DecodedJwt<C extends Dict = Dict> = {
     header: TokenHeaderClaims;
     payload: JwtClaims & C;

package/dist/types/jwt/jwt-decode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-decode.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC9C,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"jwt-decode.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC9C,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/types/jwt/jwt-delegation.d.ts

@@ -0,0 +1,7 @@
+import { ActClaim } from "../claims/act-claim";
+export type TokenDelegation = {
+    currentActor: string | undefined;
+    actorChain: Array<ActClaim>;
+    isDelegated: boolean;
+};
+//# sourceMappingURL=jwt-delegation.d.ts.map

package/dist/types/jwt/jwt-delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-delegation.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAK/C,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC"}

package/dist/types/jwt/jwt-delegation.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=jwt-delegation.js.map

package/dist/types/jwt/jwt-delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-delegation.js","sourceRoot":"","sources":["../../../src/types/jwt/jwt-delegation.ts"],"names":[],"mappings":""}

package/dist/types/jwt/jwt-dpop.d.ts

@@ -0,0 +1,10 @@
+export type ParsedDpopProof = {
+    thumbprint: string;
+    tokenId: string;
+    httpMethod: string;
+    httpUri: string;
+    issuedAt: Date;
+    accessTokenHash?: string;
+    nonce?: string;
+};
+//# sourceMappingURL=jwt-dpop.d.ts.map

package/dist/types/jwt/jwt-dpop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-dpop.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-dpop.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC"}

package/dist/{interfaces/CwsKit.js → types/jwt/jwt-dpop.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=CwsKit.js.map
+//# sourceMappingURL=jwt-dpop.js.map

package/dist/types/jwt/jwt-dpop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-dpop.js","sourceRoot":"","sources":["../../../src/types/jwt/jwt-dpop.ts"],"names":[],"mappings":""}

package/dist/types/jwt/jwt-kit.d.ts

@@ -1,9 +1,7 @@
-import { IKryptos } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
-export type JwtKitOptions = {
+import { SignKitOptions } from "../kit";
+export type JwtKitOptions = SignKitOptions & {
     clockTolerance?: number;
+    dpopMaxSkew?: number;
     issuer?: string;
-    logger: ILogger;
-    kryptos: IKryptos;
 };
 //# sourceMappingURL=jwt-kit.d.ts.map

package/dist/types/jwt/jwt-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}
+{"version":3,"file":"jwt-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG;IAC3C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/types/jwt/jwt-parse.d.ts

@@ -1,45 +1,29 @@
 import { KryptosSigAlgorithm } from "@lindorm/kryptos";
 import { Dict } from "@lindorm/types";
-import { ParsedTokenHeader } from "../header";
-import { AdjustedAccessLevel, LevelOfAssurance } from "../level-of-assurance";
+import { AegisProfile, LindormClaims, OAuthClaims, OidcClaims, PopClaims, DelegationClaims, StdClaims } from "../claims";
+import { RefinedTokenHeader } from "../header";
 import { DecodedJwt } from "./jwt-decode";
-export type ParsedJwtHeader = Omit<ParsedTokenHeader, "algorithm" | "headerType"> & {
-    algorithm: KryptosSigAlgorithm;
-    headerType: "JWT";
-};
-export type ParsedJwtPayload<C extends Dict = Dict> = {
-    accessTokenHash: string | undefined;
-    adjustedAccessLevel: AdjustedAccessLevel | undefined;
+import { TokenDelegation } from "./jwt-delegation";
+import { ParsedDpopProof } from "./jwt-dpop";
+export type ParsedJwtHeader = RefinedTokenHeader<KryptosSigAlgorithm>;
+export type ParsedJwtPayload<C extends Dict = Dict> = StdClaims & OidcClaims & PopClaims & DelegationClaims & OAuthClaims & LindormClaims & {
     audience: Array<string>;
-    authContextClass: string | undefined;
-    authFactor: string | undefined;
     authMethods: Array<string>;
-    authorizedParty: string | undefined;
-    authTime: Date | undefined;
     claims: C;
-    clientId: string | undefined;
-    codeHash: string | undefined;
-    expiresAt: Date | undefined;
-    grantType: string | undefined;
-    issuedAt: Date | undefined;
+    entitlements: Array<string>;
+    groups: Array<string>;
     issuer: string;
-    levelOfAssurance: LevelOfAssurance | undefined;
-    nonce: string | undefined;
-    notBefore: Date | undefined;
     permissions: Array<string>;
+    profile: AegisProfile | undefined;
     roles: Array<string>;
     scope: Array<string>;
-    sessionHint: string | undefined;
-    sessionId: string | undefined;
-    stateHash: string | undefined;
     subject: string;
-    subjectHint: string | undefined;
-    tenantId: string | undefined;
     tokenId: string;
-    tokenType: string;
 };
 export type ParsedJwt<C extends Dict = Dict> = {
     decoded: DecodedJwt<C>;
+    delegation: TokenDelegation;
+    dpop?: ParsedDpopProof;
     header: ParsedJwtHeader;
     payload: ParsedJwtPayload<C>;
     token: string;

package/dist/types/jwt/jwt-parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG;IAClF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,KAAK,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IACpD,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC;IACV,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,IAAI,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,IAAI,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC/C,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,EAAE,IAAI,GAAG,SAAS,CAAC;IAC5B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC7C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jwt-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,SAAS,EACV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,SAAS,GAC7D,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,aAAa,GAAG;IACd,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC;IACV,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEJ,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC7C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwt/jwt-sign.d.ts

@@ -1,37 +1,20 @@
 import { Expiry } from "@lindorm/date";
 import { Dict } from "@lindorm/types";
-import { TokenEncryptOrSignOptions } from "../header";
-import { AdjustedAccessLevel, LevelOfAssurance } from "../level-of-assurance";
-export type SignJwtContent<C extends Dict = Dict> = {
+import { AegisProfile, LindormClaims, OAuthClaims, OidcClaims, PopClaims, DelegationClaims, StdClaims } from "../claims";
+import { BindCertificateMode, TokenEncryptOrSignOptions } from "../header";
+export type SignJwtContent<C extends Dict = Dict> = Omit<StdClaims, "expiresAt" | "issuedAt" | "issuer" | "tokenId"> & Omit<OidcClaims, "accessTokenHash" | "codeHash" | "stateHash"> & PopClaims & DelegationClaims & OAuthClaims & LindormClaims & {
     accessToken?: string;
-    adjustedAccessLevel?: AdjustedAccessLevel;
-    audience?: Array<string>;
     authCode?: string;
-    authContextClass?: string;
-    authFactor?: string;
-    authMethods?: Array<string>;
-    authorizedParty?: string;
     authState?: string;
-    authTime?: Date;
     claims?: C;
-    clientId?: string;
     expires: Expiry;
-    grantType?: string;
-    levelOfAssurance?: LevelOfAssurance;
-    nonce?: string;
-    notBefore?: Date;
-    permissions?: Array<string>;
-    roles?: Array<string>;
-    scope?: Array<string>;
-    sessionHint?: string;
-    sessionId?: string;
+    profile?: AegisProfile;
     subject: string;
-    subjectHint?: string;
-    tenantId?: string;
     tokenType: string;
 };
 export type SignJwtOptions = {
     accessTokenHash?: string;
+    bindCertificate?: BindCertificateMode;
     codeHash?: string;
     header?: TokenEncryptOrSignOptions;
     issuedAt?: Date;
@@ -43,7 +26,7 @@ export type SignedJwt = {
     expiresAt: Date;
     expiresIn: number;
     expiresOn: number;
-    objectId: string;
+    objectId: string | undefined;
     token: string;
     tokenId: string;
 };

package/dist/types/jwt/jwt-sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"jwt-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,SAAS,EACV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,IAAI,CACtD,SAAS,EACT,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAChD,GACC,IAAI,CAAC,UAAU,EAAE,iBAAiB,GAAG,UAAU,GAAG,WAAW,CAAC,GAC9D,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,aAAa,GAAG;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEJ,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/types/jwt/jwt-validate.d.ts

@@ -1,29 +1,8 @@
 import { KryptosAlgorithm } from "@lindorm/kryptos";
 import { PredicateOperator } from "@lindorm/types";
-export type ValidateJwtOptions = {
+import { JwtClaimMatchers } from "./jwt-claim-matchers";
+export type ValidateJwtOptions = JwtClaimMatchers & {
     algorithm?: KryptosAlgorithm;
-    accessToken?: string;
-    adjustedAccessLevel?: PredicateOperator<number>;
-    audience?: Array<string> | string | PredicateOperator<any>;
-    authCode?: string;
-    authContextClass?: string | PredicateOperator<string>;
-    authFactor?: string | PredicateOperator<string>;
-    authMethods?: Array<string> | string | PredicateOperator<any>;
-    authorizedParty?: string | PredicateOperator<string>;
-    authState?: string;
-    authTime?: PredicateOperator<Date>;
-    clientId?: Array<string> | string | PredicateOperator<any>;
-    grantType?: string | PredicateOperator<string>;
-    issuer?: string | PredicateOperator<string>;
-    levelOfAssurance?: number | PredicateOperator<number>;
-    nonce?: string | PredicateOperator<string>;
-    permissions?: Array<string> | string | PredicateOperator<any>;
-    roles?: Array<string> | string | PredicateOperator<any>;
-    scope?: Array<string> | string | PredicateOperator<any>;
-    sessionHint?: Array<string> | string | PredicateOperator<any>;
-    subject?: Array<string> | string | PredicateOperator<any>;
-    subjectHint?: string | PredicateOperator<string>;
-    tenantId?: Array<string> | string | PredicateOperator<any>;
     tokenType?: string | PredicateOperator<string>;
 };
 //# sourceMappingURL=jwt-validate.d.ts.map

package/dist/types/jwt/jwt-validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-validate.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;CAChD,CAAC"}
+{"version":3,"file":"jwt-validate.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG;IAClD,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;CAChD,CAAC"}