@lindorm/aegis 0.4.4 → 0.6.0

package/dist/classes/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/classes/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,iDAA+B"}

package/dist/constants/token-type.d.ts

@@ -0,0 +1,6 @@
+export declare const KNOWN_TOKEN_TYPES: readonly ["access_token", "refresh_token", "id_token", "logout_token", "security_event", "dpop"];
+type KnownTokenType = (typeof KNOWN_TOKEN_TYPES)[number];
+export type TokenType = KnownTokenType | (string & {});
+export declare const TOKEN_TYPE_TO_SHORT_NAME: Record<KnownTokenType, string>;
+export {};
+//# sourceMappingURL=token-type.d.ts.map

package/dist/constants/token-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-type.d.ts","sourceRoot":"","sources":["../../src/constants/token-type.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,kGAOpB,CAAC;AAEX,KAAK,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,MAAM,MAAM,SAAS,GAAG,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEvD,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAOnE,CAAC"}

package/dist/constants/token-type.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOKEN_TYPE_TO_SHORT_NAME = exports.KNOWN_TOKEN_TYPES = void 0;
+exports.KNOWN_TOKEN_TYPES = [
+    "access_token",
+    "refresh_token",
+    "id_token",
+    "logout_token",
+    "security_event",
+    "dpop",
+];
+exports.TOKEN_TYPE_TO_SHORT_NAME = {
+    access_token: "at",
+    refresh_token: "rt",
+    id_token: "JWT",
+    logout_token: "logout",
+    security_event: "secevent",
+    dpop: "dpop",
+};
+//# sourceMappingURL=token-type.js.map

package/dist/constants/token-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-type.js","sourceRoot":"","sources":["../../src/constants/token-type.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG;IAC/B,cAAc;IACd,eAAe;IACf,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,MAAM;CACE,CAAC;AAME,QAAA,wBAAwB,GAAmC;IACtE,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,UAAU;IAC1B,IAAI,EAAE,MAAM;CACb,CAAC"}

package/dist/errors/index.d.ts

@@ -1,7 +1,4 @@
 export * from "./AegisError";
-export * from "./CoseEncryptError";
-export * from "./CoseSignError";
-export * from "./CwtError";
 export * from "./JweError";
 export * from "./JwsError";
 export * from "./JwtError";

package/dist/errors/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/errors/index.js

@@ -15,9 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./AegisError"), exports);
-__exportStar(require("./CoseEncryptError"), exports);
-__exportStar(require("./CoseSignError"), exports);
-__exportStar(require("./CwtError"), exports);
 __exportStar(require("./JweError"), exports);
 __exportStar(require("./JwsError"), exports);
 __exportStar(require("./JwtError"), exports);

package/dist/errors/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,qDAAmC;AACnC,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,6CAA2B;AAC3B,6CAA2B;AAC3B,6CAA2B"}

package/dist/guards/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./is-parsed-jws";
+export * from "./is-parsed-jwt";
+//# sourceMappingURL=index.d.ts.map

package/dist/guards/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC"}

package/dist/{types/cws → guards}/index.js

@@ -14,8 +14,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./cws-decode"), exports);
-__exportStar(require("./cws-kit"), exports);
-__exportStar(require("./cws-parse"), exports);
-__exportStar(require("./cws-sign"), exports);
+__exportStar(require("./is-parsed-jws"), exports);
+__exportStar(require("./is-parsed-jwt"), exports);
 //# sourceMappingURL=index.js.map

package/dist/guards/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guards/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,kDAAgC"}

package/dist/guards/is-parsed-jws.d.ts

@@ -0,0 +1,3 @@
+import { ParsedJws, ParsedJwt } from "../types";
+export declare const isParsedJws: <T extends Buffer | string = Buffer | string>(token: ParsedJwt | ParsedJws<T>) => token is ParsedJws<T>;
+//# sourceMappingURL=is-parsed-jws.d.ts.map

package/dist/guards/is-parsed-jws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-parsed-jws.d.ts","sourceRoot":"","sources":["../../src/guards/is-parsed-jws.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEhD,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EACrE,OAAO,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,KAC9B,KAAK,IAAI,SAAS,CAAC,CAAC,CAAsC,CAAC"}

package/dist/guards/is-parsed-jws.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isParsedJws = void 0;
+const isParsedJws = (token) => token.header.baseFormat === "JWS";
+exports.isParsedJws = isParsedJws;
+//# sourceMappingURL=is-parsed-jws.js.map

package/dist/guards/is-parsed-jws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-parsed-jws.js","sourceRoot":"","sources":["../../src/guards/is-parsed-jws.ts"],"names":[],"mappings":";;;AAEO,MAAM,WAAW,GAAG,CACzB,KAA+B,EACR,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC;AAFjD,QAAA,WAAW,eAEsC"}

package/dist/guards/is-parsed-jwt.d.ts

@@ -0,0 +1,3 @@
+import { ParsedJws, ParsedJwt } from "../types";
+export declare const isParsedJwt: (token: ParsedJwt | ParsedJws<any>) => token is ParsedJwt;
+//# sourceMappingURL=is-parsed-jwt.d.ts.map

package/dist/guards/is-parsed-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-parsed-jwt.d.ts","sourceRoot":"","sources":["../../src/guards/is-parsed-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEhD,eAAO,MAAM,WAAW,GAAI,OAAO,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,KAAG,KAAK,IAAI,SACtC,CAAC"}

package/dist/guards/is-parsed-jwt.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isParsedJwt = void 0;
+const isParsedJwt = (token) => token.header.baseFormat === "JWT";
+exports.isParsedJwt = isParsedJwt;
+//# sourceMappingURL=is-parsed-jwt.js.map

package/dist/guards/is-parsed-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-parsed-jwt.js","sourceRoot":"","sources":["../../src/guards/is-parsed-jwt.ts"],"names":[],"mappings":";;;AAEO,MAAM,WAAW,GAAG,CAAC,KAAiC,EAAsB,EAAE,CACnF,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC;AADvB,QAAA,WAAW,eACY"}

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export * from "./classes";
 export * from "./errors";
+export * from "./guards";
 export * from "./interfaces";
 export * from "./mocks";
 export * from "./types";
+export type { TokenType } from "./constants/token-type";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AAExB,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -16,6 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./classes"), exports);
 __exportStar(require("./errors"), exports);
+__exportStar(require("./guards"), exports);
 __exportStar(require("./interfaces"), exports);
 __exportStar(require("./mocks"), exports);
 __exportStar(require("./types"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,2CAAyB;AACzB,+CAA6B;AAC7B,0CAAwB;AACxB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,2CAAyB;AACzB,2CAAyB;AACzB,+CAA6B;AAC7B,0CAAwB;AACxB,0CAAwB"}

package/dist/interfaces/Aegis.d.ts

@@ -1,24 +1,12 @@
-import { AesDecryptionRecord, AesEncryptionRecord, SerialisedAesDecryption, SerialisedAesEncryption } from "@lindorm/aes";
+import { AesContent, AesDecryptionRecord, AesEncryptionRecord, SerialisedAesDecryption, SerialisedAesEncryption } from "@lindorm/aes";
 import { Dict } from "@lindorm/types";
-import { CweContent, CweEncryptOptions, CwsContent, DecryptedCwe, DecryptedJwe, EncryptedCwe, EncryptedJwe, JweEncryptOptions, JwsContent, ParsedCws, ParsedCwt, ParsedJws, ParsedJwt, SignCwsOptions, SignCwtContent, SignCwtOptions, SignJwsOptions, SignJwtContent, SignJwtOptions, SignedCws, SignedCwt, SignedJws, SignedJwt, VerifyCwtOptions, VerifyJwtOptions } from "../types";
+import { DecryptedJwe, EncryptedJwe, JweEncryptOptions, JwsContent, ParsedJws, ParsedJwt, SignJwsOptions, SignJwtContent, SignJwtOptions, SignedJws, SignedJwt, VerifyJwtOptions } from "../types";
 export interface IAegisAes {
-    encrypt(data: string, mode?: "encoded"): Promise<string>;
-    encrypt(data: string, mode: "record"): Promise<AesEncryptionRecord>;
-    encrypt(data: string, mode: "serialised"): Promise<SerialisedAesEncryption>;
-    encrypt(data: string, mode: "tokenised"): Promise<string>;
-    decrypt(data: AesDecryptionRecord | SerialisedAesDecryption | string): Promise<string>;
-}
-export interface IAegisCwe {
-    encrypt(data: CweContent, options?: CweEncryptOptions): Promise<EncryptedCwe>;
-    decrypt<T extends CweContent = string>(token: CweContent): Promise<DecryptedCwe<T>>;
-}
-export interface IAegisCws {
-    sign(data: CwsContent, options?: SignCwsOptions): Promise<SignedCws>;
-    verify<T extends CwsContent>(token: CwsContent): Promise<ParsedCws<T>>;
-}
-export interface IAegisCwt {
-    sign<T extends Dict = Dict>(content: SignCwtContent<T>, options?: SignCwtOptions): Promise<SignedCwt>;
-    verify<T extends Dict = Dict>(token: string, verify?: VerifyCwtOptions): Promise<ParsedCwt<T>>;
+    encrypt(data: AesContent, mode?: "encoded"): Promise<string>;
+    encrypt(data: AesContent, mode: "record"): Promise<AesEncryptionRecord>;
+    encrypt(data: AesContent, mode: "serialised"): Promise<SerialisedAesEncryption>;
+    encrypt(data: AesContent, mode: "tokenised"): Promise<string>;
+    decrypt<T extends AesContent = string>(data: AesDecryptionRecord | SerialisedAesDecryption | string): Promise<T>;
 }
 export interface IAegisJwe {
     encrypt(data: string, options?: JweEncryptOptions): Promise<EncryptedJwe>;
@@ -35,12 +23,10 @@ export interface IAegisJwt {
 export interface IAegis {
     issuer: string | null;
     aes: IAegisAes;
-    cwe: IAegisCwe;
-    cws: IAegisCws;
-    cwt: IAegisCwt;
     jwe: IAegisJwe;
     jws: IAegisJws;
     jwt: IAegisJwt;
+    verify(token: string): Promise<ParsedJwt | ParsedJws<any>>;
     verify<T extends ParsedJws<any>>(token: string): Promise<T>;
     verify<T extends ParsedJwt>(token: string, options?: VerifyJwtOptions): Promise<T>;
 }

package/dist/interfaces/Aegis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Aegis.d.ts","sourceRoot":"","sources":["../../src/interfaces/Aegis.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAElB,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxF;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC,SAAS,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EACxB,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC1B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,SAAS,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClF,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EACxB,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC1B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,GAAG,EAAE,SAAS,CAAC;IAEf,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IAEf,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IAEf,MAAM,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACpF"}
+{"version":3,"file":"Aegis.d.ts","sourceRoot":"","sources":["../../src/interfaces/Aegis.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,SAAS,EACT,cAAc,EACd,cAAc,EACd,cAAc,EACd,SAAS,EACT,SAAS,EACT,gBAAgB,EACjB,MAAM,UAAU,CAAC;AAElB,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,SAAS,UAAU,GAAG,MAAM,EACnC,IAAI,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,MAAM,GAC3D,OAAO,CAAC,CAAC,CAAC,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,SAAS,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClF,MAAM,CAAC,CAAC,SAAS,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EACxB,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,EAC1B,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAEtB,GAAG,EAAE,SAAS,CAAC;IAEf,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IAEf,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,CAAC,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,CAAC,SAAS,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACpF"}

package/dist/interfaces/index.d.ts

@@ -1,7 +1,4 @@
 export * from "./Aegis";
-export * from "./CweKit";
-export * from "./CwsKit";
-export * from "./CwtKit";
 export * from "./JweKit";
 export * from "./JwsKit";
 export * from "./JwtKit";

package/dist/interfaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC"}

package/dist/interfaces/index.js

@@ -15,9 +15,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./Aegis"), exports);
-__exportStar(require("./CweKit"), exports);
-__exportStar(require("./CwsKit"), exports);
-__exportStar(require("./CwtKit"), exports);
 __exportStar(require("./JweKit"), exports);
 __exportStar(require("./JwsKit"), exports);
 __exportStar(require("./JwtKit"), exports);

package/dist/interfaces/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interfaces/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,2CAAyB;AACzB,2CAAyB"}

package/dist/internal/constants/aegis-profile-keys.d.ts

@@ -0,0 +1,2 @@
+export declare const AEGIS_PROFILE_WIRE_KEYS: ReadonlySet<string>;
+//# sourceMappingURL=aegis-profile-keys.d.ts.map

package/dist/internal/constants/aegis-profile-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aegis-profile-keys.d.ts","sourceRoot":"","sources":["../../../src/internal/constants/aegis-profile-keys.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CA2CtD,CAAC"}

package/dist/internal/constants/aegis-profile-keys.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AEGIS_PROFILE_WIRE_KEYS = void 0;
+exports.AEGIS_PROFILE_WIRE_KEYS = new Set([
+    "address",
+    "email",
+    "email_verified",
+    "phone_number",
+    "phone_number_verified",
+    "picture",
+    "birthdate",
+    "family_name",
+    "gender",
+    "given_name",
+    "locale",
+    "middle_name",
+    "name",
+    "nickname",
+    "preferred_username",
+    "profile",
+    "updated_at",
+    "website",
+    "zoneinfo",
+    "display_name",
+    "honorific",
+    "legal_name",
+    "legal_name_verified",
+    "naming_system",
+    "preferred_accessibility",
+    "preferred_name",
+    "pronouns",
+    "department",
+    "job_title",
+    "occupation",
+    "organization",
+]);
+//# sourceMappingURL=aegis-profile-keys.js.map

package/dist/internal/constants/aegis-profile-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aegis-profile-keys.js","sourceRoot":"","sources":["../../../src/internal/constants/aegis-profile-keys.ts"],"names":[],"mappings":";;;AAOa,QAAA,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IAElE,SAAS;IAGT,OAAO;IACP,gBAAgB;IAChB,cAAc;IACd,uBAAuB;IAGvB,SAAS;IAGT,WAAW;IACX,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,MAAM;IACN,UAAU;IACV,oBAAoB;IACpB,SAAS;IACT,YAAY;IACZ,SAAS;IACT,UAAU;IAGV,cAAc;IACd,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,eAAe;IACf,yBAAyB;IACzB,gBAAgB;IAChB,UAAU;IAGV,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,cAAc;CACf,CAAC,CAAC"}

package/dist/internal/constants/header.d.ts

@@ -1,3 +1,3 @@
-export declare const TOKEN_HEADER_ALGORITHMS: readonly ["ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "ECDH-ES+A128GCMKW", "ECDH-ES+A192GCMKW", "ECDH-ES+A256GCMKW", "ES256", "ES384", "ES512", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "ECDH-ES+A128GCMKW", "ECDH-ES+A192GCMKW", "ECDH-ES+A256GCMKW", "EdDSA", "RSA-OAEP", "RSA-OAEP-256", "RSA-OAEP-384", "RSA-OAEP-512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "PBES2-HS256+A128KW", "PBES2-HS384+A192KW", "PBES2-HS512+A256KW", "HS256", "HS384", "HS512"];
-export declare const TOKEN_HEADER_TYPES: readonly ["JWE", "JWS", "JWT", "application/cwt", "application/cose; cose-type=cose-encrypt", "application/cose; cose-type=cose-mac", "application/cose; cose-type=cose-sign"];
+export declare const TOKEN_HEADER_ALGORITHMS: readonly ["ML-DSA-44", "ML-DSA-65", "ML-DSA-87", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "ECDH-ES+A128GCMKW", "ECDH-ES+A192GCMKW", "ECDH-ES+A256GCMKW", "ES256", "ES384", "ES512", "ECDH-ES", "ECDH-ES+A128KW", "ECDH-ES+A192KW", "ECDH-ES+A256KW", "ECDH-ES+A128GCMKW", "ECDH-ES+A192GCMKW", "ECDH-ES+A256GCMKW", "EdDSA", "RSA-OAEP", "RSA-OAEP-256", "RSA-OAEP-384", "RSA-OAEP-512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "dir", "A128KW", "A192KW", "A256KW", "A128GCMKW", "A192GCMKW", "A256GCMKW", "PBES2-HS256+A128KW", "PBES2-HS384+A192KW", "PBES2-HS512+A256KW", "HS256", "HS384", "HS512"];
+export declare const TOKEN_HEADER_TYPES: readonly ["JWE", "JWS", "JWT"];
 //# sourceMappingURL=header.d.ts.map

package/dist/internal/constants/header.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../../src/internal/constants/header.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,uBAAuB,0kBAU1B,CAAC;AAEX,eAAO,MAAM,kBAAkB,gLAWrB,CAAC"}
+{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../../src/internal/constants/header.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,uBAAuB,inBAW1B,CAAC;AAEX,eAAO,MAAM,kBAAkB,gCAKrB,CAAC"}

package/dist/internal/constants/header.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.TOKEN_HEADER_TYPES = exports.TOKEN_HEADER_ALGORITHMS = void 0;
 const kryptos_1 = require("@lindorm/kryptos");
 exports.TOKEN_HEADER_ALGORITHMS = [
+    ...kryptos_1.AKP_SIG_ALGORITHMS,
     ...kryptos_1.EC_ENC_ALGORITHMS,
     ...kryptos_1.EC_SIG_ALGORITHMS,
     ...kryptos_1.OKP_ENC_ALGORITHMS,
@@ -17,9 +18,5 @@ exports.TOKEN_HEADER_TYPES = [
     "JWE",
     "JWS",
     "JWT",
-    "application/cwt",
-    "application/cose; cose-type=cose-encrypt",
-    "application/cose; cose-type=cose-mac",
-    "application/cose; cose-type=cose-sign",
 ];
 //# sourceMappingURL=header.js.map

package/dist/internal/constants/header.js.map

@@ -1 +1 @@
-{"version":3,"file":"header.js","sourceRoot":"","sources":["../../../src/internal/constants/header.ts"],"names":[],"mappings":";;;AAAA,8CAU0B;AAEb,QAAA,uBAAuB,GAAG;IACrC,GAAG,2BAAiB;IACpB,GAAG,2BAAiB;IACpB,GAAG,4BAAkB;IACrB,GAAG,4BAAkB;IACrB,GAAG,4BAAkB;IACrB,GAAG,4BAAkB;IACrB,GAAG,gCAAsB;IACzB,GAAG,gCAAsB;IACzB,GAAG,4BAAkB;CACb,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAEhC,KAAK;IACL,KAAK;IACL,KAAK;IAGL,iBAAiB;IACjB,0CAA0C;IAC1C,sCAAsC;IACtC,uCAAuC;CAC/B,CAAC"}
+{"version":3,"file":"header.js","sourceRoot":"","sources":["../../../src/internal/constants/header.ts"],"names":[],"mappings":";;;AAAA,8CAW0B;AAEb,QAAA,uBAAuB,GAAG;IACrC,GAAG,4BAAkB;IACrB,GAAG,2BAAiB;IACpB,GAAG,2BAAiB;IACpB,GAAG,4BAAkB;IACrB,GAAG,4BAAkB;IACrB,GAAG,4BAAkB;IACrB,GAAG,4BAAkB;IACrB,GAAG,gCAAsB;IACzB,GAAG,gCAAsB;IACzB,GAAG,4BAAkB;CACb,CAAC;AAEE,QAAA,kBAAkB,GAAG;IAEhC,KAAK;IACL,KAAK;IACL,KAAK;CACG,CAAC"}

package/dist/internal/utils/compute-jwk-thumbprint.d.ts

@@ -0,0 +1,4 @@
+type RawJwk = Record<string, unknown>;
+export declare const computeJwkThumbprint: (jwk: RawJwk) => string;
+export {};
+//# sourceMappingURL=compute-jwk-thumbprint.d.ts.map

package/dist/internal/utils/compute-jwk-thumbprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-jwk-thumbprint.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/compute-jwk-thumbprint.ts"],"names":[],"mappings":"AAGA,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAQtC,eAAO,MAAM,oBAAoB,GAAI,KAAK,MAAM,KAAG,MAGlD,CAAC"}

package/dist/internal/utils/compute-jwk-thumbprint.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeJwkThumbprint = void 0;
+const sha_1 = require("@lindorm/sha");
+const errors_1 = require("../../errors");
+const computeJwkThumbprint = (jwk) => {
+    const canonical = computeCanonicalJwk(jwk);
+    return sha_1.ShaKit.S256(JSON.stringify(canonical));
+};
+exports.computeJwkThumbprint = computeJwkThumbprint;
+const computeCanonicalJwk = (jwk) => {
+    switch (jwk.kty) {
+        case "EC":
+            return { crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y };
+        case "RSA":
+            return { e: jwk.e, kty: jwk.kty, n: jwk.n };
+        case "OKP":
+            return { crv: jwk.crv, kty: jwk.kty, x: jwk.x };
+        case "oct":
+            return { k: jwk.k, kty: jwk.kty };
+        default:
+            throw new errors_1.JwtError(`Cannot compute JWK thumbprint: unsupported kty "${String(jwk.kty)}"`);
+    }
+};
+//# sourceMappingURL=compute-jwk-thumbprint.js.map

package/dist/internal/utils/compute-jwk-thumbprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-jwk-thumbprint.js","sourceRoot":"","sources":["../../../src/internal/utils/compute-jwk-thumbprint.ts"],"names":[],"mappings":";;;AAAA,sCAAsC;AACtC,yCAAwC;AAUjC,MAAM,oBAAoB,GAAG,CAAC,GAAW,EAAU,EAAE;IAC1D,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,YAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;AAChD,CAAC,CAAC;AAHW,QAAA,oBAAoB,wBAG/B;AAEF,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAA2B,EAAE;IACnE,QAAQ,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAE5D,KAAK,KAAK;YACR,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAE9C,KAAK,KAAK;YACR,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAElD,KAAK,KAAK;YACR,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QAEpC;YACE,MAAM,IAAI,iBAAQ,CAChB,mDAAmD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CACtE,CAAC;IACN,CAAC;AACH,CAAC,CAAC"}

package/dist/internal/utils/compute-typ-header.d.ts

@@ -0,0 +1,7 @@
+import { TokenType } from "../../constants/token-type";
+import { BaseTokenFormat } from "../../types/header";
+export type KitFormat = "jwt" | "jws" | "jwe";
+export declare const computeTypHeader: (tokenType: TokenType | undefined, kitFormat: KitFormat) => string;
+export declare const decodeTokenTypeFromTyp: (typ: string | undefined, kitFormat: KitFormat) => string | undefined;
+export declare const getBaseFormat: (typ: string | undefined) => BaseTokenFormat | undefined;
+//# sourceMappingURL=compute-typ-header.d.ts.map

package/dist/internal/utils/compute-typ-header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-typ-header.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/compute-typ-header.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAc9C,eAAO,MAAM,gBAAgB,GAC3B,WAAW,SAAS,GAAG,SAAS,EAChC,WAAW,SAAS,KACnB,MAsBF,CAAC;AAOF,eAAO,MAAM,sBAAsB,GACjC,KAAK,MAAM,GAAG,SAAS,EACvB,WAAW,SAAS,KACnB,MAAM,GAAG,SAeX,CAAC;AAQF,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,GAAG,SAAS,KAAG,eAAe,GAAG,SAczE,CAAC"}

package/dist/internal/utils/compute-typ-header.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBaseFormat = exports.decodeTokenTypeFromTyp = exports.computeTypHeader = void 0;
+const token_type_1 = require("../../constants/token-type");
+const FORMAT_FALLBACK = {
+    jwt: "JWT",
+    jws: "JWS",
+    jwe: "JWE",
+};
+const FORMAT_SUFFIX = {
+    jwt: "+jwt",
+    jws: "+jws",
+    jwe: "+jwe",
+};
+const computeTypHeader = (tokenType, kitFormat) => {
+    if (tokenType === undefined)
+        return FORMAT_FALLBACK[kitFormat];
+    if (tokenType === "") {
+        throw new Error("tokenType cannot be an empty string");
+    }
+    if (tokenType.trim() !== tokenType || /\s/.test(tokenType)) {
+        throw new Error("tokenType cannot contain whitespace");
+    }
+    if (tokenType.includes("+")) {
+        throw new Error('tokenType cannot contain \'+\' — pass the bare type (e.g. "access_token"), not the full typ header (e.g. "at+jwt")');
+    }
+    const shortName = token_type_1.TOKEN_TYPE_TO_SHORT_NAME[tokenType] ?? tokenType;
+    if (shortName === "JWT")
+        return "JWT";
+    return `${shortName}${FORMAT_SUFFIX[kitFormat]}`;
+};
+exports.computeTypHeader = computeTypHeader;
+const decodeTokenTypeFromTyp = (typ, kitFormat) => {
+    if (!typ)
+        return undefined;
+    if (typ === FORMAT_FALLBACK[kitFormat])
+        return undefined;
+    const suffix = FORMAT_SUFFIX[kitFormat];
+    if (typ.endsWith(suffix)) {
+        const shortName = typ.slice(0, -suffix.length);
+        for (const [tokenType, known] of Object.entries(token_type_1.TOKEN_TYPE_TO_SHORT_NAME)) {
+            if (known === shortName)
+                return tokenType;
+        }
+        return shortName;
+    }
+    return undefined;
+};
+exports.decodeTokenTypeFromTyp = decodeTokenTypeFromTyp;
+const getBaseFormat = (typ) => {
+    if (!typ)
+        return undefined;
+    if (typ === "JWT")
+        return "JWT";
+    if (typ === "JWS" || typ === "JOSE")
+        return "JWS";
+    if (typ === "JWE")
+        return "JWE";
+    if (typ.endsWith("+jwt"))
+        return "JWT";
+    if (typ.endsWith("+jws"))
+        return "JWS";
+    if (typ.endsWith("+jwe"))
+        return "JWE";
+    return undefined;
+};
+exports.getBaseFormat = getBaseFormat;
+//# sourceMappingURL=compute-typ-header.js.map

package/dist/internal/utils/compute-typ-header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-typ-header.js","sourceRoot":"","sources":["../../../src/internal/utils/compute-typ-header.ts"],"names":[],"mappings":";;;AAAA,2DAAiF;AAKjF,MAAM,eAAe,GAA8B;IACjD,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;CACX,CAAC;AAEF,MAAM,aAAa,GAA8B;IAC/C,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;CACZ,CAAC;AAEK,MAAM,gBAAgB,GAAG,CAC9B,SAAgC,EAChC,SAAoB,EACZ,EAAE;IACV,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;IAE/D,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GACZ,qCAAmD,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;IAG/E,IAAI,SAAS,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAEtC,OAAO,GAAG,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;AACnD,CAAC,CAAC;AAzBW,QAAA,gBAAgB,oBAyB3B;AAOK,MAAM,sBAAsB,GAAG,CACpC,GAAuB,EACvB,SAAoB,EACA,EAAE;IACtB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,GAAG,KAAK,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAEzD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE/C,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,qCAAwB,CAAC,EAAE,CAAC;YAC1E,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;QAC5C,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAlBW,QAAA,sBAAsB,0BAkBjC;AAQK,MAAM,aAAa,GAAG,CAAC,GAAuB,EAA+B,EAAE;IACpF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAG3B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAGhC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAdW,QAAA,aAAa,iBAcxB"}

package/dist/internal/utils/extract-aegis-profile.d.ts

@@ -0,0 +1,7 @@
+import { Dict } from "@lindorm/types";
+import { AegisProfile } from "../../types";
+export declare const extractAegisProfile: (data: Dict) => {
+    profile: AegisProfile | undefined;
+    rest: Dict;
+};
+//# sourceMappingURL=extract-aegis-profile.d.ts.map

package/dist/internal/utils/extract-aegis-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-aegis-profile.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/extract-aegis-profile.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAqB3C,eAAO,MAAM,mBAAmB,GAC9B,MAAM,IAAI,KACT;IAAE,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,IAAI,CAAA;CA6BjD,CAAC"}

package/dist/internal/utils/extract-aegis-profile.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractAegisProfile = void 0;
+const case_1 = require("@lindorm/case");
+const aegis_profile_keys_1 = require("../constants/aegis-profile-keys");
+const AEGIS_PROFILE_CAMEL_KEYS = new Set(Object.keys((0, case_1.camelKeys)(Object.fromEntries([...aegis_profile_keys_1.AEGIS_PROFILE_WIRE_KEYS].map((k) => [k, 1])))));
+const extractAegisProfile = (data) => {
+    const profileWire = {};
+    const profileCamel = {};
+    const rest = {};
+    for (const [key, value] of Object.entries(data)) {
+        if (aegis_profile_keys_1.AEGIS_PROFILE_WIRE_KEYS.has(key)) {
+            profileWire[key] = value;
+        }
+        else if (AEGIS_PROFILE_CAMEL_KEYS.has(key)) {
+            profileCamel[key] = value;
+        }
+        else {
+            rest[key] = value;
+        }
+    }
+    const hasWire = Object.keys(profileWire).length > 0;
+    const hasCamel = Object.keys(profileCamel).length > 0;
+    if (!hasWire && !hasCamel) {
+        return { profile: undefined, rest };
+    }
+    const merged = {
+        ...(hasWire ? (0, case_1.camelKeys)(profileWire) : {}),
+        ...profileCamel,
+    };
+    return { profile: merged, rest };
+};
+exports.extractAegisProfile = extractAegisProfile;
+//# sourceMappingURL=extract-aegis-profile.js.map

package/dist/internal/utils/extract-aegis-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-aegis-profile.js","sourceRoot":"","sources":["../../../src/internal/utils/extract-aegis-profile.ts"],"names":[],"mappings":";;;AAAA,wCAA0C;AAG1C,wEAA0E;AAK1E,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAC3D,MAAM,CAAC,IAAI,CACT,IAAA,gBAAS,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,4CAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/E,CACF,CAAC;AAWK,MAAM,mBAAmB,GAAG,CACjC,IAAU,EACyC,EAAE;IACrD,MAAM,WAAW,GAAS,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAS,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAS,EAAE,CAAC;IAEtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,4CAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;aAAM,IAAI,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,YAAY,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAGD,MAAM,MAAM,GAAS;QACnB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,gBAAS,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,YAAY;KAChB,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,MAAsB,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC,CAAC;AA/BW,QAAA,mBAAmB,uBA+B9B"}

package/dist/internal/utils/extract-claims.d.ts

@@ -0,0 +1,15 @@
+import { Dict } from "@lindorm/types";
+import { LindormClaims } from "../../types/claims/lindorm-claims";
+import { OAuthClaims } from "../../types/claims/oauth-claims";
+import { OidcClaims } from "../../types/claims/oidc-claims";
+import { PopClaims } from "../../types/claims/pop-claims";
+import { DelegationClaims } from "../../types/claims/delegation-claims";
+import { StdClaims } from "../../types/claims/std-claims";
+export type DomainClaims = StdClaims & OidcClaims & PopClaims & DelegationClaims & OAuthClaims & LindormClaims;
+export type ExtractClaimsResult = {
+    claims: DomainClaims;
+    rest: Dict;
+};
+export declare const extractDomainClaims: (input: Dict) => ExtractClaimsResult;
+export declare const DOMAIN_CLAIM_KEYS: Readonly<Record<string, ReadonlyArray<string>>>;
+//# sourceMappingURL=extract-claims.d.ts.map

package/dist/internal/utils/extract-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract-claims.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/extract-claims.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAItC,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAK1D,MAAM,MAAM,YAAY,GAAG,SAAS,GAClC,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,aAAa,CAAC;AAEhB,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,IAAI,CAAC;CACZ,CAAC;AAwIF,eAAO,MAAM,mBAAmB,GAAI,OAAO,IAAI,KAAG,mBA4GjD,CAAC;AAIF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAI7E,CAAC"}