@lindorm/aegis 0.6.0 → 0.7.1

package/dist/internal/utils/resolve-cert-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-cert-binding.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/resolve-cert-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE3E,eAAO,MAAM,kBAAkB,GAC7B,SAAS,QAAQ,EACjB,MAAM,mBAAmB,GAAG,SAAS,KACpC,uBAAuB,GAAG,SA4B5B,CAAC"}
+{"version":3,"file":"resolve-cert-binding.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/resolve-cert-binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEzF,eAAO,MAAM,kBAAkB,GAC7B,SAAS,QAAQ,EACjB,MAAM,mBAAmB,GAAG,SAAS,KACpC,uBAAuB,GAAG,SA4B5B,CAAC"}

package/dist/internal/utils/resolve-cert-binding.js

@@ -1,8 +1,5 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveCertBinding = void 0;
-const errors_1 = require("../../errors");
-const resolveCertBinding = (kryptos, mode) => {
+import { AegisError } from "../../errors/index.js";
+export const resolveCertBinding = (kryptos, mode) => {
     const resolved = mode === "none"
         ? "none"
         : mode === undefined
@@ -13,7 +10,7 @@ const resolveCertBinding = (kryptos, mode) => {
     if (resolved === "none")
         return undefined;
     if (!kryptos.hasCertificate) {
-        throw new errors_1.AegisError("bindCertificate requires kryptos with certificateChain", {
+        throw new AegisError("bindCertificate requires kryptos with certificateChain", {
             debug: { kryptosId: kryptos.id, mode },
         });
     }
@@ -26,5 +23,4 @@ const resolveCertBinding = (kryptos, mode) => {
     }
     return fields;
 };
-exports.resolveCertBinding = resolveCertBinding;
 //# sourceMappingURL=resolve-cert-binding.js.map

package/dist/internal/utils/resolve-cert-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-cert-binding.js","sourceRoot":"","sources":["../../../src/internal/utils/resolve-cert-binding.ts"],"names":[],"mappings":";;;AACA,yCAA0C;AAGnC,MAAM,kBAAkB,GAAG,CAChC,OAAiB,EACjB,IAAqC,EACA,EAAE;IACvC,MAAM,QAAQ,GACZ,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,OAAO,CAAC,cAAc;gBACtB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM;YACV,CAAC,CAAC,IAAI,CAAC;IAEb,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAE1C,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,mBAAU,CAAC,wDAAwD,EAAE;YAC7E,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,OAAO,CAAC,qBAAqB,IAAI,SAAS;KACpD,CAAC;IAEF,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG;YACR,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AA/BW,QAAA,kBAAkB,sBA+B7B"}
+{"version":3,"file":"resolve-cert-binding.js","sourceRoot":"","sources":["../../../src/internal/utils/resolve-cert-binding.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAiB,EACjB,IAAqC,EACA,EAAE;IACvC,MAAM,QAAQ,GACZ,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,OAAO,CAAC,cAAc;gBACtB,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM;YACV,CAAC,CAAC,IAAI,CAAC;IAEb,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAE1C,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,wDAAwD,EAAE;YAC7E,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,OAAO,CAAC,qBAAqB,IAAI,SAAS;KACpD,CAAC;IAEF,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG;YACR,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC"}

package/dist/internal/utils/token-header.d.ts

@@ -1,4 +1,4 @@
-import { CertificateHeaderFields, DecodedTokenHeader, ParsedTokenHeader, RawTokenHeaderClaims, TokenHeaderOptions } from "../../types";
+import type { CertificateHeaderFields, DecodedTokenHeader, ParsedTokenHeader, RawTokenHeaderClaims, TokenHeaderOptions } from "../../types/index.js";
 export declare const mapTokenHeader: (options: TokenHeaderOptions, cert?: CertificateHeaderFields) => RawTokenHeaderClaims;
 export declare const parseTokenHeader: <T extends ParsedTokenHeader = ParsedTokenHeader>(decoded: DecodedTokenHeader) => T;
 //# sourceMappingURL=token-header.d.ts.map

package/dist/internal/utils/token-header.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-header.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/token-header.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAGrB,eAAO,MAAM,cAAc,GACzB,SAAS,kBAAkB,EAC3B,OAAM,uBAA4B,KACjC,oBAsDF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,EAC9E,SAAS,kBAAkB,KAC1B,CA+DF,CAAC"}
+{"version":3,"file":"token-header.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/token-header.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAG9B,eAAO,MAAM,cAAc,GACzB,SAAS,kBAAkB,EAC3B,OAAM,uBAA4B,KACjC,oBAsDF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,CAAC,SAAS,iBAAiB,GAAG,iBAAiB,EAC9E,SAAS,kBAAkB,KAC1B,CA+DF,CAAC"}

package/dist/internal/utils/token-header.js

@@ -1,10 +1,7 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseTokenHeader = exports.mapTokenHeader = void 0;
-const is_1 = require("@lindorm/is");
-const utils_1 = require("@lindorm/utils");
-const compute_typ_header_1 = require("./compute-typ-header");
-const mapTokenHeader = (options, cert = {}) => {
+import { isFinite, isObject, isString, isUrlLike } from "@lindorm/is";
+import { removeUndefined } from "@lindorm/utils";
+import { getBaseFormat } from "./compute-typ-header.js";
+export const mapTokenHeader = (options, cert = {}) => {
     const crit = options.critical
         ?.map((key) => {
         switch (key) {
@@ -39,27 +36,26 @@ const mapTokenHeader = (options, cert = {}) => {
         }
     })
         .sort();
-    return (0, utils_1.removeUndefined)({
+    return removeUndefined({
         alg: options.algorithm,
         crit,
         cty: options.contentType,
-        enc: (0, is_1.isString)(options.encryption) ? options.encryption : undefined,
-        epk: (0, is_1.isObject)(options.publicEncryptionJwk) ? options.publicEncryptionJwk : undefined,
+        enc: isString(options.encryption) ? options.encryption : undefined,
+        epk: isObject(options.publicEncryptionJwk) ? options.publicEncryptionJwk : undefined,
         iv: options.initialisationVector,
-        jku: (0, is_1.isUrlLike)(options.jwksUri) ? options.jwksUri : undefined,
-        jwk: (0, is_1.isObject)(options.jwk) ? options.jwk : undefined,
+        jku: isUrlLike(options.jwksUri) ? options.jwksUri : undefined,
+        jwk: isObject(options.jwk) ? options.jwk : undefined,
         kid: options.keyId,
-        oid: (0, is_1.isString)(options.objectId) ? options.objectId : undefined,
-        p2c: (0, is_1.isFinite)(options.pbkdfIterations) ? options.pbkdfIterations : undefined,
+        oid: isString(options.objectId) ? options.objectId : undefined,
+        p2c: isFinite(options.pbkdfIterations) ? options.pbkdfIterations : undefined,
         p2s: options.pbkdfSalt,
         tag: options.publicEncryptionTag,
         typ: options.headerType,
         x5c: Array.isArray(cert.x5c) ? cert.x5c : undefined,
-        "x5t#S256": (0, is_1.isString)(cert.x5tS256) ? cert.x5tS256 : undefined,
+        "x5t#S256": isString(cert.x5tS256) ? cert.x5tS256 : undefined,
     });
 };
-exports.mapTokenHeader = mapTokenHeader;
-const parseTokenHeader = (decoded) => {
+export const parseTokenHeader = (decoded) => {
     const critical = decoded.crit
         ?.map((key) => {
         switch (key) {
@@ -100,9 +96,9 @@ const parseTokenHeader = (decoded) => {
         }
     })
         .sort() ?? [];
-    return (0, utils_1.removeUndefined)({
+    return removeUndefined({
         algorithm: decoded.alg,
-        baseFormat: (0, compute_typ_header_1.getBaseFormat)(decoded.typ),
+        baseFormat: getBaseFormat(decoded.typ),
         contentType: decoded.cty,
         critical,
         encryption: decoded.enc,
@@ -121,5 +117,4 @@ const parseTokenHeader = (decoded) => {
         x5tS256: decoded["x5t#S256"],
     });
 };
-exports.parseTokenHeader = parseTokenHeader;
 //# sourceMappingURL=token-header.js.map

package/dist/internal/utils/token-header.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-header.js","sourceRoot":"","sources":["../../../src/internal/utils/token-header.ts"],"names":[],"mappings":";;;AAAA,oCAAsE;AACtE,0CAAiD;AAQjD,6DAAqD;AAE9C,MAAM,cAAc,GAAG,CAC5B,OAA2B,EAC3B,OAAgC,EAAE,EACZ,EAAE;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ;QAC3B,EAAE,GAAG,CAAC,CAAC,GAAG,EAAU,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC;YACf,KAAK,aAAa;gBAChB,OAAO,KAAK,CAAC;YACf,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC;YACf,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,SAAS;gBACZ,OAAO,KAAK,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,KAAK,CAAC;YACf,KAAK,UAAU;gBACb,OAAO,KAAK,CAAC;YACf,KAAK,iBAAiB;gBACpB,OAAO,KAAK,CAAC;YACf,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC;YACf,KAAK,sBAAsB;gBACzB,OAAO,IAAI,CAAC;YACd,KAAK,qBAAqB;gBACxB,OAAO,KAAK,CAAC;YACf,KAAK,qBAAqB;gBACxB,OAAO,KAAK,CAAC;YACf;gBACE,OAAO,GAAG,CAAC;QACf,CAAC;IACH,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;IAEV,OAAO,IAAA,uBAAe,EAAC;QACrB,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,WAAW;QACxB,GAAG,EAAE,IAAA,aAAQ,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAClE,GAAG,EAAE,IAAA,aAAQ,EAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;QACpF,EAAE,EAAE,OAAO,CAAC,oBAAoB;QAChC,GAAG,EAAE,IAAA,cAAS,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC7D,GAAG,EAAE,IAAA,aAAQ,EAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACpD,GAAG,EAAE,OAAO,CAAC,KAAK;QAClB,GAAG,EAAE,IAAA,aAAQ,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC9D,GAAG,EAAE,IAAA,aAAQ,EAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC5E,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,GAAG,EAAE,OAAO,CAAC,mBAAmB;QAChC,GAAG,EAAE,OAAO,CAAC,UAAU;QACvB,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACnD,UAAU,EAAE,IAAA,aAAQ,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC,CAAC;AACL,CAAC,CAAC;AAzDW,QAAA,cAAc,kBAyDzB;AAEK,MAAM,gBAAgB,GAAG,CAC9B,OAA2B,EACxB,EAAE;IACL,MAAM,QAAQ,GACX,OAAO,CAAC,IAAI;QACX,EAAE,GAAG,CAAC,CAAC,GAAG,EAAU,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,KAAK;gBACR,OAAO,WAAW,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,aAAa,CAAC;YACvB,KAAK,KAAK;gBACR,OAAO,YAAY,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,qBAAqB,CAAC;YAC/B,KAAK,IAAI;gBACP,OAAO,sBAAsB,CAAC;YAChC,KAAK,KAAK;gBACR,OAAO,SAAS,CAAC;YACnB,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,OAAO,CAAC;YACjB,KAAK,KAAK;gBACR,OAAO,UAAU,CAAC;YACpB,KAAK,KAAK;gBACR,OAAO,iBAAiB,CAAC;YAC3B,KAAK,KAAK;gBACR,OAAO,WAAW,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,qBAAqB,CAAC;YAC/B,KAAK,KAAK;gBACR,OAAO,YAAY,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,UAAU;gBACb,OAAO,SAAS,CAAC;YACnB;gBACE,OAAO,GAAG,CAAC;QACf,CAAC;IACH,CAAC,CAAC;SACD,IAAI,EAAoC,IAAI,EAAE,CAAC;IAEpD,OAAO,IAAA,uBAAe,EAAC;QACrB,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,UAAU,EAAE,IAAA,kCAAa,EAAC,OAAO,CAAC,GAAG,CAAC;QACtC,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,oBAAoB,EAAE,OAAO,CAAC,EAAE;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,KAAK,EAAE,OAAO,CAAC,GAAG;QAClB,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,eAAe,EAAE,OAAO,CAAC,GAAG;QAC5B,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,mBAAmB,EAAE,OAAO,CAAC,GAAG;QAChC,mBAAmB,EAAE,OAAO,CAAC,GAAG;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC;KAC7B,CAAM,CAAC;AACV,CAAC,CAAC;AAjEW,QAAA,gBAAgB,oBAiE3B"}
+{"version":3,"file":"token-header.js","sourceRoot":"","sources":["../../../src/internal/utils/token-header.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAQjD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAA2B,EAC3B,OAAgC,EAAE,EACZ,EAAE;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ;QAC3B,EAAE,GAAG,CAAC,CAAC,GAAG,EAAU,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC;YACf,KAAK,aAAa;gBAChB,OAAO,KAAK,CAAC;YACf,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC;YACf,KAAK,YAAY;gBACf,OAAO,KAAK,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,SAAS;gBACZ,OAAO,KAAK,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,KAAK,CAAC;YACf,KAAK,UAAU;gBACb,OAAO,KAAK,CAAC;YACf,KAAK,iBAAiB;gBACpB,OAAO,KAAK,CAAC;YACf,KAAK,WAAW;gBACd,OAAO,KAAK,CAAC;YACf,KAAK,sBAAsB;gBACzB,OAAO,IAAI,CAAC;YACd,KAAK,qBAAqB;gBACxB,OAAO,KAAK,CAAC;YACf,KAAK,qBAAqB;gBACxB,OAAO,KAAK,CAAC;YACf;gBACE,OAAO,GAAG,CAAC;QACf,CAAC;IACH,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;IAEV,OAAO,eAAe,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,WAAW;QACxB,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAClE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS;QACpF,EAAE,EAAE,OAAO,CAAC,oBAAoB;QAChC,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC7D,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACpD,GAAG,EAAE,OAAO,CAAC,KAAK;QAClB,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAC9D,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAC5E,GAAG,EAAE,OAAO,CAAC,SAAS;QACtB,GAAG,EAAE,OAAO,CAAC,mBAAmB;QAChC,GAAG,EAAE,OAAO,CAAC,UAAU;QACvB,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;QACnD,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,OAA2B,EACxB,EAAE;IACL,MAAM,QAAQ,GACX,OAAO,CAAC,IAAI;QACX,EAAE,GAAG,CAAC,CAAC,GAAG,EAAU,EAAE;QACpB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,KAAK;gBACR,OAAO,WAAW,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,aAAa,CAAC;YACvB,KAAK,KAAK;gBACR,OAAO,YAAY,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,qBAAqB,CAAC;YAC/B,KAAK,IAAI;gBACP,OAAO,sBAAsB,CAAC;YAChC,KAAK,KAAK;gBACR,OAAO,SAAS,CAAC;YACnB,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,OAAO,CAAC;YACjB,KAAK,KAAK;gBACR,OAAO,UAAU,CAAC;YACpB,KAAK,KAAK;gBACR,OAAO,iBAAiB,CAAC;YAC3B,KAAK,KAAK;gBACR,OAAO,WAAW,CAAC;YACrB,KAAK,KAAK;gBACR,OAAO,qBAAqB,CAAC;YAC/B,KAAK,KAAK;gBACR,OAAO,YAAY,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,KAAK,CAAC;YACf,KAAK,UAAU;gBACb,OAAO,SAAS,CAAC;YACnB;gBACE,OAAO,GAAG,CAAC;QACf,CAAC;IACH,CAAC,CAAC;SACD,IAAI,EAAoC,IAAI,EAAE,CAAC;IAEpD,OAAO,eAAe,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC;QACtC,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,UAAU,EAAE,OAAO,CAAC,GAAG;QACvB,oBAAoB,EAAE,OAAO,CAAC,EAAE;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,KAAK,EAAE,OAAO,CAAC,GAAG;QAClB,QAAQ,EAAE,OAAO,CAAC,GAAG;QACrB,eAAe,EAAE,OAAO,CAAC,GAAG;QAC5B,SAAS,EAAE,OAAO,CAAC,GAAG;QACtB,mBAAmB,EAAE,OAAO,CAAC,GAAG;QAChC,mBAAmB,EAAE,OAAO,CAAC,GAAG;QAChC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC;KAC7B,CAAM,CAAC;AACV,CAAC,CAAC"}

package/dist/internal/utils/validate-actor.d.ts

@@ -1,3 +1,3 @@
-import { TokenDelegation, VerifyActorOptions } from "../../types/jwt";
+import type { TokenDelegation, VerifyActorOptions } from "../../types/jwt/index.js";
 export declare const validateActor: (delegation: TokenDelegation, options: VerifyActorOptions | undefined) => string | null;
 //# sourceMappingURL=validate-actor.d.ts.map

package/dist/internal/utils/validate-actor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-actor.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/validate-actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,eAAO,MAAM,aAAa,GACxB,YAAY,eAAe,EAC3B,SAAS,kBAAkB,GAAG,SAAS,KACtC,MAAM,GAAG,IA2BX,CAAC"}
+{"version":3,"file":"validate-actor.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/validate-actor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEpF,eAAO,MAAM,aAAa,GACxB,YAAY,eAAe,EAC3B,SAAS,kBAAkB,GAAG,SAAS,KACtC,MAAM,GAAG,IA2BX,CAAC"}

package/dist/internal/utils/validate-actor.js

@@ -1,7 +1,4 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateActor = void 0;
-const validateActor = (delegation, options) => {
+export const validateActor = (delegation, options) => {
     if (!options)
         return null;
     if (options.required && !delegation.isDelegated) {
@@ -23,5 +20,4 @@ const validateActor = (delegation, options) => {
     }
     return null;
 };
-exports.validateActor = validateActor;
 //# sourceMappingURL=validate-actor.js.map

package/dist/internal/utils/validate-actor.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-actor.js","sourceRoot":"","sources":["../../../src/internal/utils/validate-actor.ts"],"names":[],"mappings":";;;AAEO,MAAM,aAAa,GAAG,CAC3B,UAA2B,EAC3B,OAAuC,EACxB,EAAE;IACjB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,IACE,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC,aAAa,EACpD,CAAC;QACD,OAAO,wCAAwC,OAAO,CAAC,aAAa,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvE,OAAO,8BAA8B,KAAK,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AA9BW,QAAA,aAAa,iBA8BxB"}
+{"version":3,"file":"validate-actor.js","sourceRoot":"","sources":["../../../src/internal/utils/validate-actor.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,UAA2B,EAC3B,OAAuC,EACxB,EAAE;IACjB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,yCAAyC,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,IACE,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,OAAO,CAAC,aAAa,EACpD,CAAC;QACD,OAAO,wCAAwC,OAAO,CAAC,aAAa,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvE,OAAO,8BAA8B,KAAK,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/internal/utils/validate-crit.js

@@ -1,6 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateCrit = void 0;
 const IANA_REGISTERED_JOSE_HEADER_PARAMS = new Set([
     "alg",
     "jku",
@@ -28,7 +25,7 @@ const IANA_REGISTERED_JOSE_HEADER_PARAMS = new Set([
     "nonce",
     "svt",
 ]);
-const validateCrit = (decoded) => {
+export const validateCrit = (decoded) => {
     const crit = decoded.crit;
     if (crit === undefined)
         return null;
@@ -51,5 +48,4 @@ const validateCrit = (decoded) => {
     }
     return null;
 };
-exports.validateCrit = validateCrit;
 //# sourceMappingURL=validate-crit.js.map

package/dist/internal/utils/validate-crit.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-crit.js","sourceRoot":"","sources":["../../../src/internal/utils/validate-crit.ts"],"names":[],"mappings":";;;AAOA,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC;IAEjD,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,UAAU;IACV,KAAK;IACL,KAAK;IACL,MAAM;IAEN,KAAK;IACL,KAAK;IAEL,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IAEL,KAAK;IAEL,KAAK;IAEL,KAAK;IACL,OAAO;IAEP,KAAK;CACN,CAAC,CAAC;AAYI,MAAM,YAAY,GAAG,CAC1B,OAAqD,EACtC,EAAE;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAGD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,8BAA8B,CAAC;QACxC,CAAC;QAID,IAAI,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,OAAO,+DAA+D,IAAI,GAAG,CAAC;QAChF,CAAC;QAOD,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;YACvB,OAAO,0BAA0B,IAAI,gCAAgC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAtCW,QAAA,YAAY,gBAsCvB"}
+{"version":3,"file":"validate-crit.js","sourceRoot":"","sources":["../../../src/internal/utils/validate-crit.ts"],"names":[],"mappings":"AAOA,MAAM,kCAAkC,GAAG,IAAI,GAAG,CAAC;IAEjD,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,UAAU;IACV,KAAK;IACL,KAAK;IACL,MAAM;IAEN,KAAK;IACL,KAAK;IAEL,KAAK;IACL,KAAK;IACL,KAAK;IACL,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IAEL,KAAK;IAEL,KAAK;IAEL,KAAK;IACL,OAAO;IAEP,KAAK;CACN,CAAC,CAAC;AAYH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAAqD,EACtC,EAAE;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAGD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,8CAA8C,CAAC;IACxD,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,8BAA8B,CAAC;QACxC,CAAC;QAID,IAAI,kCAAkC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,OAAO,+DAA+D,IAAI,GAAG,CAAC;QAChF,CAAC;QAOD,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;YACvB,OAAO,0BAA0B,IAAI,gCAAgC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/internal/utils/validate.d.ts

@@ -1,3 +1,3 @@
-import { Dict, Predicate } from "@lindorm/types";
+import type { Dict, Predicate } from "@lindorm/types";
 export declare const validate: <C extends Dict = Dict>(dict: C, predicate: Predicate<C>) => void;
 //# sourceMappingURL=validate.d.ts.map

package/dist/internal/utils/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/validate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEjD,eAAO,MAAM,QAAQ,GAAI,CAAC,SAAS,IAAI,GAAG,IAAI,EAC5C,MAAM,CAAC,EACP,WAAW,SAAS,CAAC,CAAC,CAAC,KACtB,IAWF,CAAC"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/validate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEtD,eAAO,MAAM,QAAQ,GAAI,CAAC,SAAS,IAAI,GAAG,IAAI,EAC5C,MAAM,CAAC,EACP,WAAW,SAAS,CAAC,CAAC,CAAC,KACtB,IAWF,CAAC"}

package/dist/internal/utils/validate.js

@@ -1,18 +1,14 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validate = void 0;
-const errors_1 = require("@lindorm/errors");
-const utils_1 = require("@lindorm/utils");
-const validate = (dict, predicate) => {
-    if (utils_1.Predicated.match(dict, predicate))
+import { LindormError } from "@lindorm/errors";
+import { Predicated } from "@lindorm/utils";
+export const validate = (dict, predicate) => {
+    if (Predicated.match(dict, predicate))
         return;
     const invalid = [];
     for (const [key, ops] of Object.entries(predicate)) {
-        if (!utils_1.Predicated.match({ [key]: dict[key] }, { [key]: ops })) {
+        if (!Predicated.match({ [key]: dict[key] }, { [key]: ops })) {
             invalid.push({ key, value: dict[key] });
         }
     }
-    throw new errors_1.LindormError("Invalid token", { data: { invalid } });
+    throw new LindormError("Invalid token", { data: { invalid } });
 };
-exports.validate = validate;
 //# sourceMappingURL=validate.js.map

package/dist/internal/utils/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/internal/utils/validate.ts"],"names":[],"mappings":";;;AAAA,4CAA+C;AAC/C,0CAA4C;AAGrC,MAAM,QAAQ,GAAG,CACtB,IAAO,EACP,SAAuB,EACjB,EAAE;IACR,IAAI,kBAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,OAAO;IAE9C,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,kBAAU,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAS,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,qBAAY,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC,CAAC;AAdW,QAAA,QAAQ,YAcnB"}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/internal/utils/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG5C,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,IAAO,EACP,SAAuB,EACjB,EAAE;IACR,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,OAAO;IAE9C,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAS,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC,CAAC"}

package/dist/internal/utils/verify-cert-binding.d.ts

@@ -1,6 +1,6 @@
-import { IKryptos } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
-import { CertBindingMode } from "../../types";
+import type { IKryptos } from "@lindorm/kryptos";
+import type { ILogger } from "@lindorm/logger";
+import type { CertBindingMode } from "../../types/index.js";
 type VerifyCertBindingOptions = {
     header: {
         x5tS256: string | undefined;

package/dist/internal/utils/verify-cert-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-cert-binding.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/verify-cert-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,KAAK,wBAAwB,GAAG;IAC9B,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,eAAe,CAAC;CACvB,CAAC;AAqBF,eAAO,MAAM,iBAAiB,GAAI,oCAK/B,wBAAwB,KAAG,IAyB7B,CAAC"}
+{"version":3,"file":"verify-cert-binding.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/verify-cert-binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,KAAK,wBAAwB,GAAG;IAC9B,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACxC,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,eAAe,CAAC;CACvB,CAAC;AAqBF,eAAO,MAAM,iBAAiB,GAAI,oCAK/B,wBAAwB,KAAG,IAyB7B,CAAC"}

package/dist/internal/utils/verify-cert-binding.js

@@ -1,19 +1,16 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyCertBinding = void 0;
-const errors_1 = require("../../errors");
-const verifyCertBinding = ({ header, kryptos, logger, mode, }) => {
+import { AegisError } from "../../errors/index.js";
+export const verifyCertBinding = ({ header, kryptos, logger, mode, }) => {
     if (header.x5tS256 === undefined)
         return;
     if (kryptos.certificateThumbprint === null) {
         if (mode === "strict") {
-            throw new errors_1.AegisError("token header x5t#S256 present but signing kryptos has no certificateChain", { debug: { kryptosId: kryptos.id } });
+            throw new AegisError("token header x5t#S256 present but signing kryptos has no certificateChain", { debug: { kryptosId: kryptos.id } });
         }
         logger.warn("Cert binding: token header x5t#S256 present but signing kryptos has no certificateChain (lax mode — passing through)", { kryptosId: kryptos.id });
         return;
     }
     if (header.x5tS256 !== kryptos.certificateThumbprint) {
-        throw new errors_1.AegisError("signing certificate thumbprint mismatch", {
+        throw new AegisError("signing certificate thumbprint mismatch", {
             debug: {
                 expected: kryptos.certificateThumbprint,
                 received: header.x5tS256,
@@ -21,5 +18,4 @@ const verifyCertBinding = ({ header, kryptos, logger, mode, }) => {
         });
     }
 };
-exports.verifyCertBinding = verifyCertBinding;
 //# sourceMappingURL=verify-cert-binding.js.map

package/dist/internal/utils/verify-cert-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-cert-binding.js","sourceRoot":"","sources":["../../../src/internal/utils/verify-cert-binding.ts"],"names":[],"mappings":";;;AAEA,yCAA0C;AA6BnC,MAAM,iBAAiB,GAAG,CAAC,EAChC,MAAM,EACN,OAAO,EACP,MAAM,EACN,IAAI,GACqB,EAAQ,EAAE;IACnC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO;IAEzC,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAU,CAClB,2EAA2E,EAC3E,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CACT,sHAAsH,EACtH,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAC1B,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACrD,MAAM,IAAI,mBAAU,CAAC,yCAAyC,EAAE;YAC9D,KAAK,EAAE;gBACL,QAAQ,EAAE,OAAO,CAAC,qBAAqB;gBACvC,QAAQ,EAAE,MAAM,CAAC,OAAO;aACzB;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AA9BW,QAAA,iBAAiB,qBA8B5B"}
+{"version":3,"file":"verify-cert-binding.js","sourceRoot":"","sources":["../../../src/internal/utils/verify-cert-binding.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AA6BnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAChC,MAAM,EACN,OAAO,EACP,MAAM,EACN,IAAI,GACqB,EAAQ,EAAE;IACnC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO;IAEzC,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC3C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,UAAU,CAClB,2EAA2E,EAC3E,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CACT,sHAAsH,EACtH,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAC1B,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,qBAAqB,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,yCAAyC,EAAE;YAC9D,KAAK,EAAE;gBACL,QAAQ,EAAE,OAAO,CAAC,qBAAqB;gBACvC,QAAQ,EAAE,MAAM,CAAC,OAAO;aACzB;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC"}

package/dist/internal/utils/verify-dpop-proof.d.ts

@@ -1,4 +1,4 @@
-import { ParsedDpopProof } from "../../types/jwt/jwt-dpop";
+import type { ParsedDpopProof } from "../../types/jwt/jwt-dpop.js";
 type Options = {
     proof: string;
     accessToken: string;

package/dist/internal/utils/verify-dpop-proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-dpop-proof.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/verify-dpop-proof.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAM3D,KAAK,OAAO,GAAG;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAkBF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,eA8ElD,CAAC"}
+{"version":3,"file":"verify-dpop-proof.d.ts","sourceRoot":"","sources":["../../../src/internal/utils/verify-dpop-proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAMnE,KAAK,OAAO,GAAG;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAkBF,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,eA8ElD,CAAC"}

package/dist/internal/utils/verify-dpop-proof.js

@@ -1,66 +1,63 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyDpopProof = void 0;
-const kryptos_1 = require("@lindorm/kryptos");
-const sha_1 = require("@lindorm/sha");
-const errors_1 = require("../../errors");
-const compute_jwk_thumbprint_1 = require("./compute-jwk-thumbprint");
-const jose_header_1 = require("./jose-header");
-const jose_signature_1 = require("./jose-signature");
-const jwt_payload_1 = require("./jwt-payload");
+import { KryptosKit } from "@lindorm/kryptos";
+import { ShaKit } from "@lindorm/sha";
+import { JwtError } from "../../errors/index.js";
+import { computeJwkThumbprint } from "./compute-jwk-thumbprint.js";
+import { decodeJoseHeader } from "./jose-header.js";
+import { verifyJoseSignature } from "./jose-signature.js";
+import { decodeJwtPayload } from "./jwt-payload.js";
 const assertString = (value, claim) => {
     if (typeof value !== "string" || value.length === 0) {
-        throw new errors_1.JwtError(`Invalid DPoP proof: "${claim}" claim is required`);
+        throw new JwtError(`Invalid DPoP proof: "${claim}" claim is required`);
     }
     return value;
 };
-const verifyDpopProof = (options) => {
+export const verifyDpopProof = (options) => {
     const { proof, accessToken, expectedThumbprint, dpopMaxSkew } = options;
     const parts = proof.split(".");
     if (parts.length !== 3) {
-        throw new errors_1.JwtError("Invalid DPoP proof: not a compact JWS");
+        throw new JwtError("Invalid DPoP proof: not a compact JWS");
     }
     const [headerB64, payloadB64] = parts;
-    const header = (0, jose_header_1.decodeJoseHeader)(headerB64);
+    const header = decodeJoseHeader(headerB64);
     if (header.typ !== "dpop+jwt") {
-        throw new errors_1.JwtError("Invalid DPoP proof: header typ must be dpop+jwt", {
+        throw new JwtError("Invalid DPoP proof: header typ must be dpop+jwt", {
             data: { typ: header.typ },
         });
     }
     if (!header.jwk) {
-        throw new errors_1.JwtError("Invalid DPoP proof: header jwk is required");
+        throw new JwtError("Invalid DPoP proof: header jwk is required");
     }
     const rawJwk = header.jwk;
-    const thumbprint = (0, compute_jwk_thumbprint_1.computeJwkThumbprint)(rawJwk);
+    const thumbprint = computeJwkThumbprint(rawJwk);
     if (thumbprint !== expectedThumbprint) {
-        throw new errors_1.JwtError("Invalid DPoP proof: thumbprint does not match cnf.jkt", {
+        throw new JwtError("Invalid DPoP proof: thumbprint does not match cnf.jkt", {
             data: { expected: expectedThumbprint, actual: thumbprint },
         });
     }
-    const proofKryptos = kryptos_1.KryptosKit.from.jwk({
+    const proofKryptos = KryptosKit.from.jwk({
         ...rawJwk,
         alg: header.alg,
         use: "sig",
     });
-    if (!(0, jose_signature_1.verifyJoseSignature)(proofKryptos, proof)) {
-        throw new errors_1.JwtError("Invalid DPoP proof: signature verification failed");
+    if (!verifyJoseSignature(proofKryptos, proof)) {
+        throw new JwtError("Invalid DPoP proof: signature verification failed");
     }
-    const payload = (0, jwt_payload_1.decodeJwtPayload)(payloadB64);
+    const payload = decodeJwtPayload(payloadB64);
     const tokenId = assertString(payload.jti, "jti");
     const httpMethod = assertString(payload.htm, "htm");
     const httpUri = assertString(payload.htu, "htu");
     if (typeof payload.iat !== "number") {
-        throw new errors_1.JwtError("Invalid DPoP proof: iat claim is required");
+        throw new JwtError("Invalid DPoP proof: iat claim is required");
     }
     const now = Math.floor(Date.now() / 1000);
     if (Math.abs(now - payload.iat) > dpopMaxSkew) {
-        throw new errors_1.JwtError("Invalid DPoP proof: iat is outside the allowed skew window", {
+        throw new JwtError("Invalid DPoP proof: iat is outside the allowed skew window", {
             data: { iat: payload.iat, now, dpopMaxSkew },
         });
     }
-    const expectedAth = sha_1.ShaKit.S256(accessToken);
+    const expectedAth = ShaKit.S256(accessToken);
     if (payload.ath !== expectedAth) {
-        throw new errors_1.JwtError("Invalid DPoP proof: ath does not match access token hash");
+        throw new JwtError("Invalid DPoP proof: ath does not match access token hash");
     }
     return {
         thumbprint,
@@ -72,5 +69,4 @@ const verifyDpopProof = (options) => {
         nonce: typeof payload.nonce === "string" ? payload.nonce : undefined,
     };
 };
-exports.verifyDpopProof = verifyDpopProof;
 //# sourceMappingURL=verify-dpop-proof.js.map

package/dist/internal/utils/verify-dpop-proof.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-dpop-proof.js","sourceRoot":"","sources":["../../../src/internal/utils/verify-dpop-proof.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,sCAAsC;AACtC,yCAAwC;AAExC,qEAAgE;AAChE,+CAAiD;AACjD,qDAAuD;AACvD,+CAAiD;AAkBjD,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,KAAa,EAAU,EAAE;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iBAAQ,CAAC,wBAAwB,KAAK,qBAAqB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEK,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAmB,EAAE;IACnE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAExE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAQ,CAAC,uCAAuC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAA,8BAAgB,EAAC,SAAS,CAAC,CAAC;IAE3C,IAAI,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,iBAAQ,CAAC,iDAAiD,EAAE;YACpE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAQ,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAA8B,CAAC;IAIrD,MAAM,UAAU,GAAG,IAAA,6CAAoB,EAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,iBAAQ,CAAC,uDAAuD,EAAE;YAC1E,IAAI,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IAOD,MAAM,YAAY,GAAG,oBAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,GAAG,MAAM;QACT,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,KAAK;KACkC,CAAC,CAAC;IAEhD,IAAI,CAAC,IAAA,oCAAmB,EAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,iBAAQ,CAAC,mDAAmD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,8BAAgB,EAAmB,UAAU,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEjD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,iBAAQ,CAAC,2CAA2C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,iBAAQ,CAAC,4DAA4D,EAAE;YAC/E,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,YAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,iBAAQ,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO;QACL,UAAU;QACV,OAAO;QACP,UAAU;QACV,OAAO;QACP,QAAQ,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;QACtC,eAAe,EAAE,WAAW;QAC5B,KAAK,EAAE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC;AACJ,CAAC,CAAC;AA9EW,QAAA,eAAe,mBA8E1B"}
+{"version":3,"file":"verify-dpop-proof.js","sourceRoot":"","sources":["../../../src/internal/utils/verify-dpop-proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAkBpD,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,KAAa,EAAU,EAAE;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,wBAAwB,KAAK,qBAAqB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAmB,EAAE;IACnE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAExE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,uCAAuC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;IAEtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE3C,IAAI,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,iDAAiD,EAAE;YACpE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAA8B,CAAC;IAIrD,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,uDAAuD,EAAE;YAC1E,IAAI,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;IAOD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,GAAG,MAAM;QACT,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,KAAK;KACkC,CAAC,CAAC;IAEhD,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC,mDAAmD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAmB,UAAU,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEjD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,QAAQ,CAAC,2CAA2C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,QAAQ,CAAC,4DAA4D,EAAE;YAC/E,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,QAAQ,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO;QACL,UAAU;QACV,OAAO;QACP,UAAU;QACV,OAAO;QACP,QAAQ,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;QACtC,eAAe,EAAE,WAAW;QAC5B,KAAK,EAAE,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KACrE,CAAC;AACJ,CAAC,CAAC"}

package/dist/mocks/create-mock-aegis.d.ts

@@ -1,4 +1,4 @@
-import { IAegis } from "../interfaces";
-export type MockAegis = jest.Mocked<IAegis>;
-export declare const createMockAegis: () => MockAegis;
+import type { IAesKit } from "@lindorm/aes";
+import type { IAegis } from "../interfaces/index.js";
+export declare const _createMockAegis: (mockFn: () => any, aesKit: IAesKit) => IAegis;
 //# sourceMappingURL=create-mock-aegis.d.ts.map

package/dist/mocks/create-mock-aegis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-mock-aegis.d.ts","sourceRoot":"","sources":["../../src/mocks/create-mock-aegis.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,eAAe,QAAO,SA0DlC,CAAC"}
+{"version":3,"file":"create-mock-aegis.d.ts","sourceRoot":"","sources":["../../src/mocks/create-mock-aegis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,KAAG,MA+DrE,CAAC"}

package/dist/mocks/create-mock-aegis.js

@@ -1,40 +1,41 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createMockAegis = void 0;
-const aes_1 = require("@lindorm/aes");
-const createMockAegis = () => {
-    const mockAesKit = (0, aes_1.createMockAesKit)();
+export const _createMockAegis = (mockFn, aesKit) => {
+    const impl = (fn) => {
+        const m = mockFn();
+        m.mockImplementation(fn);
+        return m;
+    };
+    const resolves = (value) => {
+        const m = mockFn();
+        m.mockResolvedValue(value);
+        return m;
+    };
     return {
         issuer: "https://test.lindorm.io/",
         aes: {
-            encrypt: jest
-                .fn()
-                .mockImplementation((data, mode) => Promise.resolve(mockAesKit.encrypt(data, mode))),
-            decrypt: jest
-                .fn()
-                .mockImplementation((data) => Promise.resolve(mockAesKit.decrypt(data))),
+            encrypt: impl((data, mode) => Promise.resolve(aesKit.encrypt(data, mode))),
+            decrypt: impl((data) => Promise.resolve(aesKit.decrypt(data))),
         },
         jwe: {
-            encrypt: jest.fn().mockResolvedValue({ token: "mocked_token" }),
-            decrypt: jest.fn().mockResolvedValue({
+            encrypt: resolves({ token: "mocked_token" }),
+            decrypt: resolves({
                 decoded: {},
                 header: {},
                 payload: "mocked_payload",
             }),
         },
         jws: {
-            sign: jest.fn().mockResolvedValue({
+            sign: resolves({
                 objectId: "mocked_object_id",
                 token: "mocked_token",
             }),
-            verify: jest.fn().mockResolvedValue({
+            verify: resolves({
                 decoded: {},
                 header: {},
                 payload: "verified_payload",
             }),
         },
         jwt: {
-            sign: jest.fn().mockResolvedValue({
+            sign: resolves({
                 expiresAt: new Date("2999-01-01T00:00:00.000Z"),
                 expiresIn: 999,
                 expiresOn: 9999,
@@ -42,18 +43,17 @@ const createMockAegis = () => {
                 token: "mocked_token",
                 tokenId: "mocked_token_id",
             }),
-            verify: jest.fn().mockResolvedValue({
+            verify: resolves({
                 decoded: {},
                 header: {},
                 payload: { subject: "verified_subject" },
             }),
         },
-        verify: jest.fn().mockResolvedValue({
+        verify: resolves({
             decoded: {},
             header: {},
             payload: { subject: "verified_subject" },
         }),
     };
 };
-exports.createMockAegis = createMockAegis;
 //# sourceMappingURL=create-mock-aegis.js.map

package/dist/mocks/create-mock-aegis.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-mock-aegis.js","sourceRoot":"","sources":["../../src/mocks/create-mock-aegis.ts"],"names":[],"mappings":";;;AAAA,sCAAgD;AAKzC,MAAM,eAAe,GAAG,GAAc,EAAE;IAC7C,MAAM,UAAU,GAAG,IAAA,sBAAgB,GAAE,CAAC;IAEtC,OAAO;QACL,MAAM,EAAE,0BAA0B;QAElC,GAAG,EAAE;YACH,OAAO,EAAE,IAAI;iBACV,EAAE,EAAE;iBACJ,kBAAkB,CAAC,CAAC,IAAS,EAAE,IAAa,EAAE,EAAE,CAC/C,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAW,CAAC,CAAC,CACvD;YACH,OAAO,EAAE,IAAI;iBACV,EAAE,EAAE;iBACJ,kBAAkB,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;SAChF;QAED,GAAG,EAAE;YACH,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAC/D,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;gBACnC,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,gBAAgB;aAC1B,CAAC;SACH;QACD,GAAG,EAAE;YACH,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;gBAChC,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,cAAc;aACtB,CAAC;YACF,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;gBAClC,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,kBAAkB;aAC5B,CAAC;SACH;QACD,GAAG,EAAE;YACH,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;gBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;gBAC/C,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iBAAiB;aAC3B,CAAC;YACF,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;gBAClC,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACzC,CAAC;SACH;QAED,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAClC,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;SACzC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AA1DW,QAAA,eAAe,mBA0D1B"}
+{"version":3,"file":"create-mock-aegis.js","sourceRoot":"","sources":["../../src/mocks/create-mock-aegis.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAiB,EAAE,MAAe,EAAU,EAAE;IAC7E,MAAM,IAAI,GAAG,CAAC,EAAO,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,KAAU,EAAE,EAAE;QAC9B,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,0BAA0B;QAElC,GAAG,EAAE;YACH,OAAO,EAAE,IAAI,CAAC,CAAC,IAAS,EAAE,IAAa,EAAE,EAAE,CACzC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAW,CAAC,CAAC,CACnD;YACD,OAAO,EAAE,IAAI,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;SACpE;QAED,GAAG,EAAE;YACH,OAAO,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAC5C,OAAO,EAAE,QAAQ,CAAC;gBAChB,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,gBAAgB;aAC1B,CAAC;SACH;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ,CAAC;gBACb,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,cAAc;aACtB,CAAC;YACF,MAAM,EAAE,QAAQ,CAAC;gBACf,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,kBAAkB;aAC5B,CAAC;SACH;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ,CAAC;gBACb,SAAS,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC;gBAC/C,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,kBAAkB;gBAC5B,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,iBAAiB;aAC3B,CAAC;YACF,MAAM,EAAE,QAAQ,CAAC;gBACf,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;aACzC,CAAC;SACH;QAED,MAAM,EAAE,QAAQ,CAAC;YACf,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE;SACzC,CAAC;KACkB,CAAC;AACzB,CAAC,CAAC"}

package/dist/mocks/jest.d.ts

@@ -0,0 +1,5 @@
+import type { IAegis } from "../interfaces/index.js";
+type MockAegis = jest.Mocked<IAegis>;
+export declare const createMockAegis: () => MockAegis;
+export {};
+//# sourceMappingURL=jest.d.ts.map

package/dist/mocks/jest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jest.d.ts","sourceRoot":"","sources":["../../src/mocks/jest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,KAAK,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAErC,eAAO,MAAM,eAAe,QAAO,SACyB,CAAC"}

package/dist/mocks/jest.js

@@ -0,0 +1,4 @@
+import { createMockAesKit } from "@lindorm/aes/mocks/jest";
+import { _createMockAegis } from "./create-mock-aegis.js";
+export const createMockAegis = () => _createMockAegis(jest.fn, createMockAesKit());
+//# sourceMappingURL=jest.js.map

package/dist/mocks/jest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jest.js","sourceRoot":"","sources":["../../src/mocks/jest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI1D,MAAM,CAAC,MAAM,eAAe,GAAG,GAAc,EAAE,CAC7C,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAc,CAAC"}

package/dist/mocks/vitest.d.ts

@@ -0,0 +1,6 @@
+import { type Mocked } from "vitest";
+import type { IAegis } from "../interfaces/index.js";
+type MockAegis = Mocked<IAegis>;
+export declare const createMockAegis: () => MockAegis;
+export {};
+//# sourceMappingURL=vitest.d.ts.map

package/dist/mocks/vitest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitest.d.ts","sourceRoot":"","sources":["../../src/mocks/vitest.ts"],"names":[],"mappings":"AACA,OAAO,EAAM,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAEhC,eAAO,MAAM,eAAe,QAAO,SACuB,CAAC"}

package/dist/mocks/vitest.js

@@ -0,0 +1,5 @@
+import { createMockAesKit } from "@lindorm/aes/mocks/vitest";
+import { vi } from "vitest";
+import { _createMockAegis } from "./create-mock-aegis.js";
+export const createMockAegis = () => _createMockAegis(vi.fn, createMockAesKit());
+//# sourceMappingURL=vitest.js.map

package/dist/mocks/vitest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitest.js","sourceRoot":"","sources":["../../src/mocks/vitest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAe,MAAM,QAAQ,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI1D,MAAM,CAAC,MAAM,eAAe,GAAG,GAAc,EAAE,CAC7C,gBAAgB,CAAC,EAAE,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAc,CAAC"}

package/dist/types/aegis.d.ts

@@ -1,8 +1,8 @@
-import { AmphoraQuery, IAmphora } from "@lindorm/amphora";
-import { KryptosEncAlgorithm, KryptosEncryption, KryptosSigAlgorithm } from "@lindorm/kryptos";
-import { ILogger } from "@lindorm/logger";
-import { Predicate } from "@lindorm/types";
-import { CertBindingMode } from "./header";
+import type { AmphoraQuery, IAmphora } from "@lindorm/amphora";
+import type { KryptosEncAlgorithm, KryptosEncryption, KryptosSigAlgorithm } from "@lindorm/kryptos";
+import type { ILogger } from "@lindorm/logger";
+import type { Predicate } from "@lindorm/types";
+import type { CertBindingMode } from "./header.js";
 export type AegisPredicate = Predicate<Pick<AmphoraQuery, "id" | "curve" | "purpose" | "type" | "use" | "ownerId">>;
 export type AegisOptions = {
     amphora: IAmphora;