@lindorm/aegis 0.4.4 → 0.6.0

package/dist/types/claims/jwt/oauth-claims-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-claims-wire.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/oauth-claims-wire.ts"],"names":[],"mappings":""}

package/dist/types/claims/jwt/oidc-claims-wire.d.ts

@@ -0,0 +1,11 @@
+export type OidcClaimsWire = {
+    acr?: string;
+    amr?: Array<string>;
+    at_hash?: string;
+    auth_time?: number;
+    azp?: string;
+    c_hash?: string;
+    nonce?: string;
+    s_hash?: string;
+};
+//# sourceMappingURL=oidc-claims-wire.d.ts.map

package/dist/types/claims/jwt/oidc-claims-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/oidc-claims-wire.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/types/claims/jwt/oidc-claims-wire.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=oidc-claims-wire.js.map

package/dist/types/claims/jwt/oidc-claims-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-claims-wire.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/oidc-claims-wire.ts"],"names":[],"mappings":""}

package/dist/types/claims/jwt/pop-claims-wire.d.ts

@@ -0,0 +1,5 @@
+import { ConfirmationClaimWire } from "./confirmation-claim-wire";
+export type PopClaimsWire = {
+    cnf?: ConfirmationClaimWire;
+};
+//# sourceMappingURL=pop-claims-wire.d.ts.map

package/dist/types/claims/jwt/pop-claims-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pop-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/pop-claims-wire.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAOlE,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,qBAAqB,CAAC;CAC7B,CAAC"}

package/dist/types/claims/jwt/pop-claims-wire.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=pop-claims-wire.js.map

package/dist/types/claims/jwt/pop-claims-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pop-claims-wire.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/pop-claims-wire.ts"],"names":[],"mappings":""}

package/dist/types/claims/jwt/std-claims-wire.d.ts

@@ -0,0 +1,10 @@
+export type StdClaimsWire = {
+    aud?: Array<string>;
+    exp?: number;
+    iat?: number;
+    iss?: string;
+    jti?: string;
+    nbf?: number;
+    sub?: string;
+};
+//# sourceMappingURL=std-claims-wire.d.ts.map

package/dist/types/claims/jwt/std-claims-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"std-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/std-claims-wire.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC"}

package/dist/types/claims/jwt/std-claims-wire.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=std-claims-wire.js.map

package/dist/types/claims/jwt/std-claims-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"std-claims-wire.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/std-claims-wire.ts"],"names":[],"mappings":""}

package/dist/types/claims/lindorm-claims.d.ts

@@ -0,0 +1,18 @@
+import { AdjustedAccessLevel, LevelOfAssurance } from "../level-of-assurance";
+export type AuthFactor = "knowledge" | "possession" | "inherence" | (string & {});
+export type SessionHint = "web" | "mobile" | "cli" | "service" | "machine" | (string & {});
+export type SubjectHint = "user" | "client" | "service" | "device" | (string & {});
+export type LindormClaims = {
+    adjustedAccessLevel?: AdjustedAccessLevel;
+    authFactor?: Array<AuthFactor>;
+    clientId?: string;
+    grantType?: string;
+    levelOfAssurance?: LevelOfAssurance;
+    permissions?: Array<string>;
+    scope?: Array<string>;
+    sessionHint?: SessionHint;
+    sessionId?: string;
+    subjectHint?: SubjectHint;
+    tenantId?: string;
+};
+//# sourceMappingURL=lindorm-claims.d.ts.map

package/dist/types/claims/lindorm-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lindorm-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/lindorm-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElF,MAAM,MAAM,WAAW,GACnB,KAAK,GACL,QAAQ,GACR,KAAK,GACL,SAAS,GACT,SAAS,GACT,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAGnF,MAAM,MAAM,aAAa,GAAG;IAC1B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,UAAU,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/types/claims/lindorm-claims.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=lindorm-claims.js.map

package/dist/types/claims/lindorm-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lindorm-claims.js","sourceRoot":"","sources":["../../../src/types/claims/lindorm-claims.ts"],"names":[],"mappings":""}

package/dist/types/claims/oauth-claims.d.ts

@@ -0,0 +1,6 @@
+export type OAuthClaims = {
+    entitlements?: Array<string>;
+    groups?: Array<string>;
+    roles?: Array<string>;
+};
+//# sourceMappingURL=oauth-claims.d.ts.map

package/dist/types/claims/oauth-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/oauth-claims.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CACvB,CAAC"}

package/dist/types/claims/oauth-claims.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=oauth-claims.js.map

package/dist/types/claims/oauth-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-claims.js","sourceRoot":"","sources":["../../../src/types/claims/oauth-claims.ts"],"names":[],"mappings":""}

package/dist/types/claims/oidc-claims.d.ts

@@ -0,0 +1,11 @@
+export type OidcClaims = {
+    accessTokenHash?: string;
+    authContextClass?: string;
+    authMethods?: Array<string>;
+    authorizedParty?: string;
+    authTime?: Date;
+    codeHash?: string;
+    nonce?: string;
+    stateHash?: string;
+};
+//# sourceMappingURL=oidc-claims.d.ts.map

package/dist/types/claims/oidc-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/oidc-claims.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,UAAU,GAAG;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/types/{cose-target.js → claims/oidc-claims.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=cose-target.js.map
+//# sourceMappingURL=oidc-claims.js.map

package/dist/types/claims/oidc-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-claims.js","sourceRoot":"","sources":["../../../src/types/claims/oidc-claims.ts"],"names":[],"mappings":""}

package/dist/types/claims/pop-claims.d.ts

@@ -0,0 +1,5 @@
+import { ConfirmationClaim } from "./confirmation-claim";
+export type PopClaims = {
+    confirmation?: ConfirmationClaim;
+};
+//# sourceMappingURL=pop-claims.d.ts.map

package/dist/types/claims/pop-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pop-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/pop-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAMzD,MAAM,MAAM,SAAS,GAAG;IACtB,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC,CAAC"}

package/dist/types/{cwe/cwe-decode.js → claims/pop-claims.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=cwe-decode.js.map
+//# sourceMappingURL=pop-claims.js.map

package/dist/types/claims/pop-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pop-claims.js","sourceRoot":"","sources":["../../../src/types/claims/pop-claims.ts"],"names":[],"mappings":""}

package/dist/types/claims/std-claims.d.ts

@@ -0,0 +1,10 @@
+export type StdClaims = {
+    audience?: Array<string>;
+    expiresAt?: Date;
+    issuedAt?: Date;
+    issuer?: string;
+    notBefore?: Date;
+    subject?: string;
+    tokenId?: string;
+};
+//# sourceMappingURL=std-claims.d.ts.map

package/dist/types/claims/std-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"std-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/std-claims.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC"}

package/dist/types/claims/std-claims.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=std-claims.js.map

package/dist/types/claims/std-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"std-claims.js","sourceRoot":"","sources":["../../../src/types/claims/std-claims.ts"],"names":[],"mappings":""}

package/dist/types/header.d.ts

@@ -1,8 +1,8 @@
 import { PublicEncryptionJwk } from "@lindorm/aes";
 import { KryptosEncryption, KryptosJwk } from "@lindorm/kryptos";
-import { TOKEN_HEADER_ALGORITHMS, TOKEN_HEADER_TYPES } from "#internal/constants/header";
+import { TOKEN_HEADER_ALGORITHMS, TOKEN_HEADER_TYPES } from "../internal/constants/header";
 export type TokenHeaderAlgorithm = (typeof TOKEN_HEADER_ALGORITHMS)[number];
-export type TokenHeaderType = (typeof TOKEN_HEADER_TYPES)[number];
+export type TokenHeaderType = (typeof TOKEN_HEADER_TYPES)[number] | (string & {});
 export type TokenHeaderClaims = {
     alg: TokenHeaderAlgorithm;
     crit?: Array<string>;
@@ -20,7 +20,6 @@ export type TokenHeaderClaims = {
     typ?: string;
     x5c?: Array<string>;
     x5t?: string;
-    x5u?: string;
     "x5t#S256"?: string;
 };
 export type RawTokenHeaderClaims = {
@@ -40,12 +39,13 @@ export type RawTokenHeaderClaims = {
     typ?: TokenHeaderType;
     x5c?: Array<string>;
     x5t?: string;
-    x5u?: string;
     "x5t#S256"?: string;
 };
 export type DecodedTokenHeader = TokenHeaderClaims;
+export type BaseTokenFormat = "JWT" | "JWS" | "JWE";
 export type ParsedTokenHeader = {
     algorithm: TokenHeaderAlgorithm;
+    baseFormat: BaseTokenFormat | undefined;
     contentType: string | undefined;
     critical: Array<string>;
     encryption: KryptosEncryption | undefined;
@@ -59,9 +59,9 @@ export type ParsedTokenHeader = {
     pbkdfSalt: string | undefined;
     publicEncryptionJwk: PublicEncryptionJwk | undefined;
     publicEncryptionTag: string | undefined;
+    tokenType: string | undefined;
     x5c: Array<string> | undefined;
     x5t: string | undefined;
-    x5u: string | undefined;
     x5tS256: string | undefined;
 };
 export type TokenHeaderOptions = {
@@ -79,10 +79,17 @@ export type TokenHeaderOptions = {
     pbkdfSalt?: Buffer;
     publicEncryptionJwk?: PublicEncryptionJwk;
     publicEncryptionTag?: Buffer;
+};
+export type CertificateHeaderFields = {
     x5c?: Array<string>;
-    x5t?: string;
     x5tS256?: string;
-    x5u?: string;
 };
-export type TokenEncryptOrSignOptions = Pick<TokenHeaderOptions, "jwk" | "x5c" | "x5t" | "x5tS256" | "x5u">;
+export type TokenEncryptOrSignOptions = Pick<TokenHeaderOptions, "jwk">;
+export type BindCertificateMode = "thumbprint" | "chain" | "none";
+export type CertBindingMode = "strict" | "lax";
+export type RefinedTokenHeader<A> = Omit<ParsedTokenHeader, "algorithm" | "baseFormat" | "headerType"> & {
+    algorithm: A;
+    baseFormat: BaseTokenFormat;
+    headerType: string;
+};
 //# sourceMappingURL=header.d.ts.map

package/dist/types/header.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../src/types/header.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEzF,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAGlE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,oBAAoB,CAAC;IAChC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,kBAAkB,EAClB,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,KAAK,CAC1C,CAAC"}
+{"version":3,"file":"header.d.ts","sourceRoot":"","sources":["../../src/types/header.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAGlF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,oBAAoB,CAAC;IAC1B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAEnD,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEpD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,oBAAoB,CAAC;IAChC,UAAU,EAAE,eAAe,GAAG,SAAS,CAAC;IACxC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,UAAU,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACrD,mBAAmB,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAC/B,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAExE,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC;AAElE,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE/C,MAAM,MAAM,kBAAkB,CAAC,CAAC,IAAI,IAAI,CACtC,iBAAiB,EACjB,WAAW,GAAG,YAAY,GAAG,YAAY,CAC1C,GAAG;IACF,SAAS,EAAE,CAAC,CAAC;IACb,UAAU,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/types/index.d.ts

@@ -1,12 +1,10 @@
-export * from "./cwe";
-export * from "./cws";
-export * from "./cwt";
+export * from "./claims";
 export * from "./jwe";
 export * from "./jws";
 export * from "./jwt";
 export * from "./aegis";
-export * from "./cose-target";
 export * from "./header";
+export * from "./kit";
 export * from "./level-of-assurance";
 export * from "./signature-kit";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AAEtB,cAAc,SAAS,CAAC;AACxB,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AACtB,cAAc,OAAO,CAAC;AAEtB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,sBAAsB,CAAC;AAErC,cAAc,iBAAiB,CAAC"}

package/dist/types/index.js

@@ -14,15 +14,13 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./cwe"), exports);
-__exportStar(require("./cws"), exports);
-__exportStar(require("./cwt"), exports);
+__exportStar(require("./claims"), exports);
 __exportStar(require("./jwe"), exports);
 __exportStar(require("./jws"), exports);
 __exportStar(require("./jwt"), exports);
 __exportStar(require("./aegis"), exports);
-__exportStar(require("./cose-target"), exports);
 __exportStar(require("./header"), exports);
+__exportStar(require("./kit"), exports);
 __exportStar(require("./level-of-assurance"), exports);
 __exportStar(require("./signature-kit"), exports);
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AAEtB,0CAAwB;AACxB,gDAA8B;AAC9B,2CAAyB;AACzB,uDAAqC;AAErC,kDAAgC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,wCAAsB;AACtB,wCAAsB;AACtB,wCAAsB;AAEtB,0CAAwB;AACxB,2CAAyB;AACzB,wCAAsB;AACtB,uDAAqC;AAErC,kDAAgC"}

package/dist/types/jwe/jwe-decrypt.d.ts

@@ -1,10 +1,8 @@
 import { KryptosEncAlgorithm, KryptosEncryption } from "@lindorm/kryptos";
-import { ParsedTokenHeader } from "../header";
+import { RefinedTokenHeader } from "../header";
 import { DecodedJwe } from "./jwe-decode";
-export type DecryptedJweHeader = Omit<ParsedTokenHeader, "algorithm" | "encryption" | "headerType"> & {
-    algorithm: KryptosEncAlgorithm;
+export type DecryptedJweHeader = RefinedTokenHeader<KryptosEncAlgorithm> & {
     encryption: KryptosEncryption;
-    headerType: "JWE";
 };
 export type DecryptedJwe = {
     decoded: DecodedJwe;

package/dist/types/jwe/jwe-decrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe-decrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,iBAAiB,EACjB,WAAW,GAAG,YAAY,GAAG,YAAY,CAC1C,GAAG;IACF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,UAAU,EAAE,KAAK,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jwe-decrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,GAAG;IACzE,UAAU,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwe/jwe-encrypt.d.ts

@@ -1,7 +1,10 @@
-import { TokenEncryptOrSignOptions } from "../header";
+import { TokenType } from "../../constants/token-type";
+import { BindCertificateMode, TokenEncryptOrSignOptions } from "../header";
 export type JweEncryptOptions = {
+    bindCertificate?: BindCertificateMode;
     header?: TokenEncryptOrSignOptions;
     objectId?: string;
+    tokenType?: TokenType;
 };
 export type EncryptedJwe = {
     token: string;

package/dist/types/jwe/jwe-encrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe-encrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jwe-encrypt.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-encrypt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwe/jwe-kit.d.ts

@@ -1,8 +1,3 @@
-import { IKryptos, KryptosEncryption } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
-export type JweKitOptions = {
-    encryption?: KryptosEncryption;
-    kryptos: IKryptos;
-    logger: ILogger;
-};
+import { EncryptKitOptions } from "../kit";
+export type JweKitOptions = EncryptKitOptions;
 //# sourceMappingURL=jwe-kit.d.ts.map

package/dist/types/jwe/jwe-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC"}
+{"version":3,"file":"jwe-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jwe/jwe-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAE3C,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC"}

package/dist/types/jws/jws-kit.d.ts

@@ -1,8 +1,4 @@
-import { IKryptos } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
+import { SignKitOptions } from "../kit";
 export type JwsContent = Buffer | string;
-export type JwsKitOptions = {
-    logger: ILogger;
-    kryptos: IKryptos;
-};
+export type JwsKitOptions = SignKitOptions;
 //# sourceMappingURL=jws-kit.d.ts.map

package/dist/types/jws/jws-kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,QAAQ,CAAC;CACnB,CAAC"}
+{"version":3,"file":"jws-kit.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC"}

package/dist/types/jws/jws-parse.d.ts

@@ -1,10 +1,7 @@
 import { KryptosSigAlgorithm } from "@lindorm/kryptos";
-import { ParsedTokenHeader } from "../header";
+import { RefinedTokenHeader } from "../header";
 import { DecodedJws } from "./jws-decode";
-export type ParsedJwsHeader = Omit<ParsedTokenHeader, "algorithm" | "headerType"> & {
-    algorithm: KryptosSigAlgorithm;
-    headerType: "JWS";
-};
+export type ParsedJwsHeader = RefinedTokenHeader<KryptosSigAlgorithm>;
 export type ParsedJws<T extends Buffer | string> = {
     decoded: DecodedJws;
     header: ParsedJwsHeader;

package/dist/types/jws/jws-parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,YAAY,CAAC,GAAG;IAClF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,KAAK,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACjD,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jws-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,IAAI;IACjD,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jws/jws-sign.d.ts

@@ -1,11 +1,14 @@
-import { TokenEncryptOrSignOptions } from "../header";
+import { TokenType } from "../../constants/token-type";
+import { BindCertificateMode, TokenEncryptOrSignOptions } from "../header";
 export type SignJwsOptions = {
+    bindCertificate?: BindCertificateMode;
     contentType?: string;
     header?: TokenEncryptOrSignOptions;
     objectId?: string;
+    tokenType?: TokenType;
 };
 export type SignedJws = {
-    objectId: string;
+    objectId: string | undefined;
     token: string;
 };
 //# sourceMappingURL=jws-sign.d.ts.map

package/dist/types/jws/jws-sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,MAAM,MAAM,cAAc,GAAG;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jws-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jws/jws-sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAE3E,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwt/index.d.ts

@@ -1,5 +1,7 @@
-export * from "./jwt-claims";
+export * from "./jwt-claim-matchers";
 export * from "./jwt-decode";
+export * from "./jwt-delegation";
+export * from "./jwt-dpop";
 export * from "./jwt-kit";
 export * from "./jwt-parse";
 export * from "./jwt-sign";

package/dist/types/jwt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/types/jwt/index.js

@@ -14,8 +14,10 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./jwt-claims"), exports);
+__exportStar(require("./jwt-claim-matchers"), exports);
 __exportStar(require("./jwt-decode"), exports);
+__exportStar(require("./jwt-delegation"), exports);
+__exportStar(require("./jwt-dpop"), exports);
 __exportStar(require("./jwt-kit"), exports);
 __exportStar(require("./jwt-parse"), exports);
 __exportStar(require("./jwt-sign"), exports);

package/dist/types/jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,4CAA0B;AAC1B,8CAA4B;AAC5B,6CAA2B;AAC3B,iDAA+B;AAC/B,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,+CAA6B;AAC7B,mDAAiC;AACjC,6CAA2B;AAC3B,4CAA0B;AAC1B,8CAA4B;AAC5B,6CAA2B;AAC3B,iDAA+B;AAC/B,+CAA6B"}

package/dist/types/jwt/jwt-claim-matchers.d.ts

@@ -0,0 +1,28 @@
+import { PredicateOperator } from "@lindorm/types";
+export type JwtClaimMatchers = {
+    accessToken?: string;
+    adjustedAccessLevel?: number | PredicateOperator<number>;
+    audience?: Array<string> | string | PredicateOperator<any>;
+    authCode?: string;
+    authContextClass?: string | PredicateOperator<string>;
+    authFactor?: string | PredicateOperator<string>;
+    authMethods?: Array<string> | string | PredicateOperator<any>;
+    authorizedParty?: string | PredicateOperator<string>;
+    authState?: string;
+    authTime?: PredicateOperator<Date>;
+    clientId?: Array<string> | string | PredicateOperator<any>;
+    entitlements?: Array<string> | string | PredicateOperator<any>;
+    grantType?: string | PredicateOperator<string>;
+    groups?: Array<string> | string | PredicateOperator<any>;
+    issuer?: string | PredicateOperator<string>;
+    levelOfAssurance?: number | PredicateOperator<number>;
+    nonce?: string | PredicateOperator<string>;
+    permissions?: Array<string> | string | PredicateOperator<any>;
+    roles?: Array<string> | string | PredicateOperator<any>;
+    scope?: Array<string> | string | PredicateOperator<any>;
+    sessionHint?: Array<string> | string | PredicateOperator<any>;
+    subject?: Array<string> | string | PredicateOperator<any>;
+    subjectHint?: string | PredicateOperator<string>;
+    tenantId?: Array<string> | string | PredicateOperator<any>;
+};
+//# sourceMappingURL=jwt-claim-matchers.d.ts.map

package/dist/types/jwt/jwt-claim-matchers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-claim-matchers.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-claim-matchers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC5D,CAAC"}

package/dist/types/jwt/jwt-claim-matchers.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=jwt-claim-matchers.js.map

package/dist/types/jwt/jwt-claim-matchers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-claim-matchers.js","sourceRoot":"","sources":["../../../src/types/jwt/jwt-claim-matchers.ts"],"names":[],"mappings":""}

package/dist/types/jwt/jwt-decode.d.ts

@@ -1,6 +1,6 @@
 import { Dict } from "@lindorm/types";
+import { JwtClaims } from "../claims/jwt/jwt-claims";
 import { TokenHeaderClaims } from "../header";
-import { JwtClaims } from "./jwt-claims";
 export type DecodedJwt<C extends Dict = Dict> = {
     header: TokenHeaderClaims;
     payload: JwtClaims & C;

package/dist/types/jwt/jwt-decode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-decode.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC9C,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"jwt-decode.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC9C,MAAM,EAAE,iBAAiB,CAAC;IAC1B,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/types/jwt/jwt-delegation.d.ts

@@ -0,0 +1,7 @@
+import { ActClaim } from "../claims/act-claim";
+export type TokenDelegation = {
+    currentActor: string | undefined;
+    actorChain: Array<ActClaim>;
+    isDelegated: boolean;
+};
+//# sourceMappingURL=jwt-delegation.d.ts.map

package/dist/types/jwt/jwt-delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-delegation.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAK/C,MAAM,MAAM,eAAe,GAAG;IAC5B,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC"}

package/dist/types/jwt/jwt-delegation.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=jwt-delegation.js.map

package/dist/types/jwt/jwt-delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-delegation.js","sourceRoot":"","sources":["../../../src/types/jwt/jwt-delegation.ts"],"names":[],"mappings":""}

package/dist/types/jwt/jwt-dpop.d.ts

@@ -0,0 +1,10 @@
+export type ParsedDpopProof = {
+    thumbprint: string;
+    tokenId: string;
+    httpMethod: string;
+    httpUri: string;
+    issuedAt: Date;
+    accessTokenHash?: string;
+    nonce?: string;
+};
+//# sourceMappingURL=jwt-dpop.d.ts.map

package/dist/types/jwt/jwt-dpop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-dpop.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-dpop.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,eAAe,GAAG;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC"}

package/dist/{interfaces/CwsKit.js → types/jwt/jwt-dpop.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=CwsKit.js.map
+//# sourceMappingURL=jwt-dpop.js.map

package/dist/types/jwt/jwt-dpop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-dpop.js","sourceRoot":"","sources":["../../../src/types/jwt/jwt-dpop.ts"],"names":[],"mappings":""}