@lindorm/aegis 0.8.1 → 0.10.0

package/dist/types/claims/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/claims/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/claims/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,gBAAgB,CAAC"}

package/dist/types/claims/jwt/index.d.ts

@@ -6,6 +6,8 @@ export * from "./lindorm-claims-wire.js";
 export * from "./oauth-claims-wire.js";
 export * from "./oidc-claims-wire.js";
 export * from "./pop-claims-wire.js";
+export * from "./rar-claims-wire.js";
+export * from "./set-claims-wire.js";
 export * from "./sensitive-identity-claim-wire.js";
 export * from "./std-claims-wire.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/claims/jwt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC"}

package/dist/types/claims/jwt/index.js

@@ -6,6 +6,8 @@ export * from "./lindorm-claims-wire.js";
 export * from "./oauth-claims-wire.js";
 export * from "./oidc-claims-wire.js";
 export * from "./pop-claims-wire.js";
+export * from "./rar-claims-wire.js";
+export * from "./set-claims-wire.js";
 export * from "./sensitive-identity-claim-wire.js";
 export * from "./std-claims-wire.js";
 //# sourceMappingURL=index.js.map

package/dist/types/claims/jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oCAAoC,CAAC;AACnD,cAAc,sBAAsB,CAAC"}

package/dist/types/claims/jwt/jwt-claims.d.ts

@@ -3,7 +3,9 @@ import type { LindormClaimsWire } from "./lindorm-claims-wire.js";
 import type { OAuthClaimsWire } from "./oauth-claims-wire.js";
 import type { OidcClaimsWire } from "./oidc-claims-wire.js";
 import type { PopClaimsWire } from "./pop-claims-wire.js";
+import type { RarClaimsWire } from "./rar-claims-wire.js";
+import type { SetClaimsWire } from "./set-claims-wire.js";
 import type { SensitiveIdentityClaimWire } from "./sensitive-identity-claim-wire.js";
 import type { StdClaimsWire } from "./std-claims-wire.js";
-export type JwtClaims = StdClaimsWire & OidcClaimsWire & PopClaimsWire & DelegationClaimsWire & OAuthClaimsWire & LindormClaimsWire & SensitiveIdentityClaimWire;
+export type JwtClaims = StdClaimsWire & OidcClaimsWire & PopClaimsWire & DelegationClaimsWire & OAuthClaimsWire & RarClaimsWire & SetClaimsWire & LindormClaimsWire & SensitiveIdentityClaimWire;
 //# sourceMappingURL=jwt-claims.d.ts.map

package/dist/types/claims/jwt/jwt-claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-claims.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/jwt-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,MAAM,SAAS,GAAG,aAAa,GACnC,cAAc,GACd,aAAa,GACb,oBAAoB,GACpB,eAAe,GACf,iBAAiB,GACjB,0BAA0B,CAAC"}
+{"version":3,"file":"jwt-claims.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/jwt-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,MAAM,SAAS,GAAG,aAAa,GACnC,cAAc,GACd,aAAa,GACb,oBAAoB,GACpB,eAAe,GACf,aAAa,GACb,aAAa,GACb,iBAAiB,GACjB,0BAA0B,CAAC"}

package/dist/types/claims/jwt/lindorm-claims-wire.d.ts

@@ -1,10 +1,12 @@
-import type { AdjustedAccessLevel, LevelOfAssurance } from "../../level-of-assurance.js";
+import type { AuthenticatorAssuranceLevel, FederationAssuranceLevel, IdentityAssuranceLevel, LevelOfAssurance } from "../../level-of-assurance.js";
 import type { AuthFactor, SessionHint, SubjectHint } from "../lindorm-claims.js";
 export type LindormClaimsWire = {
-    aal?: AdjustedAccessLevel;
+    aal?: AuthenticatorAssuranceLevel;
     afr?: Array<AuthFactor>;
     client_id?: string;
+    fal?: FederationAssuranceLevel;
     gty?: string;
+    ial?: IdentityAssuranceLevel;
     loa?: LevelOfAssurance;
     permissions?: Array<string>;
     scope?: Array<string> | string;

package/dist/types/claims/jwt/lindorm-claims-wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lindorm-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/lindorm-claims-wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKjF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,GAAG,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC"}
+{"version":3,"file":"lindorm-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/lindorm-claims-wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKjF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,CAAC,EAAE,2BAA2B,CAAC;IAClC,GAAG,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,wBAAwB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,sBAAsB,CAAC;IAC7B,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC"}

package/dist/types/claims/jwt/oidc-claims-wire.d.ts

@@ -7,5 +7,7 @@ export type OidcClaimsWire = {
     c_hash?: string;
     nonce?: string;
     s_hash?: string;
+    vot?: string;
+    vtm?: string;
 };
 //# sourceMappingURL=oidc-claims-wire.d.ts.map

package/dist/types/claims/jwt/oidc-claims-wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oidc-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/oidc-claims-wire.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"oidc-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/oidc-claims-wire.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC"}

package/dist/types/claims/jwt/rar-claims-wire.d.ts

@@ -0,0 +1,5 @@
+import type { AuthorizationDetail } from "@lindorm/types";
+export type RarClaimsWire = {
+    authorization_details?: Array<AuthorizationDetail>;
+};
+//# sourceMappingURL=rar-claims-wire.d.ts.map

package/dist/types/claims/jwt/rar-claims-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rar-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/rar-claims-wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAK1D,MAAM,MAAM,aAAa,GAAG;IAC1B,qBAAqB,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACpD,CAAC"}

package/dist/types/claims/jwt/rar-claims-wire.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rar-claims-wire.js.map

package/dist/types/claims/jwt/rar-claims-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rar-claims-wire.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/rar-claims-wire.ts"],"names":[],"mappings":""}

package/dist/types/claims/jwt/set-claims-wire.d.ts

@@ -0,0 +1,9 @@
+import type { Dict } from "@lindorm/types";
+export type SetClaimsWire = {
+    events?: Record<string, Dict>;
+    sub_id?: {
+        format: string;
+    } & Dict;
+    txn?: string;
+};
+//# sourceMappingURL=set-claims-wire.d.ts.map

package/dist/types/claims/jwt/set-claims-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-claims-wire.d.ts","sourceRoot":"","sources":["../../../../src/types/claims/jwt/set-claims-wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAS3C,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC"}

package/dist/types/claims/jwt/set-claims-wire.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=set-claims-wire.js.map

package/dist/types/claims/jwt/set-claims-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-claims-wire.js","sourceRoot":"","sources":["../../../../src/types/claims/jwt/set-claims-wire.ts"],"names":[],"mappings":""}

package/dist/types/claims/lindorm-claims.d.ts

@@ -1,13 +1,15 @@
 import type { OpenIdGrantType, OpenIdScope } from "@lindorm/types";
-import type { AdjustedAccessLevel, LevelOfAssurance } from "../level-of-assurance.js";
+import type { AuthenticatorAssuranceLevel, FederationAssuranceLevel, IdentityAssuranceLevel, LevelOfAssurance } from "../level-of-assurance.js";
 export type AuthFactor = "knowledge" | "possession" | "inherence" | (string & {});
 export type SessionHint = "web" | "mobile" | "cli" | "service" | "machine" | (string & {});
 export type SubjectHint = "user" | "client" | "service" | "device" | (string & {});
 export type LindormClaims = {
-    adjustedAccessLevel?: AdjustedAccessLevel;
+    authenticatorAssuranceLevel?: AuthenticatorAssuranceLevel;
     authFactor?: Array<AuthFactor>;
     clientId?: string;
+    federationAssuranceLevel?: FederationAssuranceLevel;
     grantType?: OpenIdGrantType;
+    identityAssuranceLevel?: IdentityAssuranceLevel;
     levelOfAssurance?: LevelOfAssurance;
     permissions?: Array<string>;
     scope?: Array<OpenIdScope>;

package/dist/types/claims/lindorm-claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lindorm-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/lindorm-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEtF,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElF,MAAM,MAAM,WAAW,GACnB,KAAK,GACL,QAAQ,GACR,KAAK,GACL,SAAS,GACT,SAAS,GACT,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAGnF,MAAM,MAAM,aAAa,GAAG;IAC1B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,UAAU,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"lindorm-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/lindorm-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EACV,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElF,MAAM,MAAM,WAAW,GACnB,KAAK,GACL,QAAQ,GACR,KAAK,GACL,SAAS,GACT,SAAS,GACT,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAOnF,MAAM,MAAM,aAAa,GAAG;IAC1B,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,UAAU,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IACpD,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}

package/dist/types/claims/oidc-claims.d.ts

@@ -8,5 +8,7 @@ export type OidcClaims = {
     codeHash?: string;
     nonce?: string;
     stateHash?: string;
+    vectorOfTrust?: string;
+    vectorTrustMark?: string;
 };
 //# sourceMappingURL=oidc-claims.d.ts.map

package/dist/types/claims/oidc-claims.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oidc-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/oidc-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,MAAM,UAAU,GAAG;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC"}
+{"version":3,"file":"oidc-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/oidc-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,MAAM,UAAU,GAAG;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC"}

package/dist/types/claims/rar-claims.d.ts

@@ -0,0 +1,5 @@
+import type { AuthorizationDetail } from "@lindorm/types";
+export type RarClaims = {
+    authorizationDetails?: Array<AuthorizationDetail>;
+};
+//# sourceMappingURL=rar-claims.d.ts.map

package/dist/types/claims/rar-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rar-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/rar-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAM1D,MAAM,MAAM,SAAS,GAAG;IACtB,oBAAoB,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;CACnD,CAAC"}

package/dist/types/claims/rar-claims.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rar-claims.js.map

package/dist/types/claims/rar-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rar-claims.js","sourceRoot":"","sources":["../../../src/types/claims/rar-claims.ts"],"names":[],"mappings":""}

package/dist/types/claims/set-claims.d.ts

@@ -0,0 +1,8 @@
+import type { SecurityEvents } from "../../internal/claims/events.js";
+import type { SubjectIdentifier } from "../../internal/claims/sub-id.js";
+export type SetClaims = {
+    events?: SecurityEvents;
+    subjectId?: SubjectIdentifier;
+    transactionId?: string;
+};
+//# sourceMappingURL=set-claims.d.ts.map

package/dist/types/claims/set-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-claims.d.ts","sourceRoot":"","sources":["../../../src/types/claims/set-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAKzE,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC"}

package/dist/types/claims/set-claims.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=set-claims.js.map

package/dist/types/claims/set-claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-claims.js","sourceRoot":"","sources":["../../../src/types/claims/set-claims.ts"],"names":[],"mappings":""}

package/dist/types/jwt/index.d.ts

@@ -5,6 +5,7 @@ export * from "./jwt-dpop.js";
 export * from "./jwt-kit.js";
 export * from "./jwt-parse.js";
 export * from "./jwt-sign.js";
+export * from "./profile.js";
 export * from "./jwt-validate.js";
 export * from "./jwt-verify.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/jwt/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}

package/dist/types/jwt/index.js

@@ -5,6 +5,7 @@ export * from "./jwt-dpop.js";
 export * from "./jwt-kit.js";
 export * from "./jwt-parse.js";
 export * from "./jwt-sign.js";
+export * from "./profile.js";
 export * from "./jwt-validate.js";
 export * from "./jwt-verify.js";
 //# sourceMappingURL=index.js.map

package/dist/types/jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/jwt/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC"}

package/dist/types/jwt/jwt-claim-matchers.d.ts

@@ -1,7 +1,6 @@
 import type { PredicateOperator } from "@lindorm/types";
 export type JwtClaimMatchers = {
     accessToken?: string;
-    adjustedAccessLevel?: number | PredicateOperator<number>;
     audience?: Array<string> | string | PredicateOperator<any>;
     authCode?: string;
     authContextClass?: string | PredicateOperator<string>;
@@ -24,5 +23,7 @@ export type JwtClaimMatchers = {
     subject?: Array<string> | string | PredicateOperator<any>;
     subjectHint?: string | PredicateOperator<string>;
     tenantId?: Array<string> | string | PredicateOperator<any>;
+    vectorOfTrust?: string | PredicateOperator<string>;
+    vectorTrustMark?: string | PredicateOperator<string>;
 };
 //# sourceMappingURL=jwt-claim-matchers.d.ts.map

package/dist/types/jwt/jwt-claim-matchers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-claim-matchers.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-claim-matchers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;CAC5D,CAAC"}
+{"version":3,"file":"jwt-claim-matchers.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-claim-matchers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC/D,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5C,gBAAgB,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACtD,KAAK,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC3C,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxD,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1D,WAAW,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC3D,aAAa,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnD,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;CACtD,CAAC"}

package/dist/types/jwt/jwt-parse.d.ts

@@ -1,12 +1,12 @@
 import type { KryptosSigAlgorithm } from "@lindorm/kryptos";
 import type { Dict } from "@lindorm/types";
-import type { AegisProfile, AegisSensitiveIdentity, LindormClaims, OAuthClaims, OidcClaims, PopClaims, DelegationClaims, StdClaims } from "../claims/index.js";
+import type { AegisProfile, AegisSensitiveIdentity, LindormClaims, OAuthClaims, OidcClaims, PopClaims, RarClaims, DelegationClaims, StdClaims } from "../claims/index.js";
 import type { RefinedTokenHeader } from "../header.js";
 import type { DecodedJwt } from "./jwt-decode.js";
 import type { TokenDelegation } from "./jwt-delegation.js";
 import type { ParsedDpopProof } from "./jwt-dpop.js";
 export type ParsedJwtHeader = RefinedTokenHeader<KryptosSigAlgorithm>;
-export type ParsedJwtPayload<C extends Dict = Dict> = StdClaims & OidcClaims & PopClaims & DelegationClaims & OAuthClaims & LindormClaims & {
+export type ParsedJwtPayload<C extends Dict = Dict> = StdClaims & OidcClaims & PopClaims & DelegationClaims & OAuthClaims & RarClaims & LindormClaims & {
     audience: Array<string>;
     authMethods: Array<string>;
     claims: C;

package/dist/types/jwt/jwt-parse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-parse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,SAAS,GAC7D,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,aAAa,GAAG;IACd,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC;IACV,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,iBAAiB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEJ,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC7C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}
+{"version":3,"file":"jwt-parse.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-parse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,MAAM,MAAM,eAAe,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;AAEtE,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,SAAS,GAC7D,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,SAAS,GACT,aAAa,GAAG;IACd,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC;IACV,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,EAAE,YAAY,GAAG,SAAS,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,iBAAiB,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEJ,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI;IAC7C,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/types/jwt/jwt-sign.d.ts

@@ -1,13 +1,14 @@
 import type { Expiry } from "@lindorm/date";
 import type { Dict } from "@lindorm/types";
-import type { AegisProfile, AegisSensitiveIdentity, LindormClaims, OAuthClaims, OidcClaims, PopClaims, DelegationClaims, StdClaims } from "../claims/index.js";
+import type { AegisProfile, AegisSensitiveIdentity, LindormClaims, OAuthClaims, OidcClaims, PopClaims, RarClaims, DelegationClaims, SetClaims, StdClaims } from "../claims/index.js";
 import type { BindCertificateMode, TokenEncryptOrSignOptions } from "../header.js";
-export type SignJwtContent<C extends Dict = Dict> = Omit<StdClaims, "expiresAt" | "issuedAt" | "issuer" | "tokenId"> & Omit<OidcClaims, "accessTokenHash" | "codeHash" | "stateHash"> & PopClaims & DelegationClaims & OAuthClaims & LindormClaims & {
+export type SignJwtContent<C extends Dict = Dict> = Omit<StdClaims, "expiresAt" | "issuedAt" | "issuer" | "tokenId"> & Omit<OidcClaims, "accessTokenHash" | "codeHash" | "stateHash"> & PopClaims & DelegationClaims & OAuthClaims & RarClaims & SetClaims & LindormClaims & {
     accessToken?: string;
     authCode?: string;
     authState?: string;
     claims?: C;
     expires: Expiry;
+    issuer?: string;
     profile?: AegisProfile;
     sensitiveIdentity?: AegisSensitiveIdentity;
     subject: string;
@@ -22,13 +23,14 @@ export type SignJwtOptions = {
     objectId?: string;
     stateHash?: string;
     tokenId?: string;
+    typ?: string | null;
 };
 export type SignedJwt = {
-    expiresAt: Date;
-    expiresIn: number;
-    expiresOn: number;
+    expiresAt: Date | undefined;
+    expiresIn: number | undefined;
+    expiresOn: number | undefined;
     objectId: string | undefined;
     token: string;
-    tokenId: string;
+    tokenId: string | undefined;
 };
 //# sourceMappingURL=jwt-sign.d.ts.map

package/dist/types/jwt/jwt-sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-sign.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEnF,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,IAAI,CACtD,SAAS,EACT,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAChD,GACC,IAAI,CAAC,UAAU,EAAE,iBAAiB,GAAG,UAAU,GAAG,WAAW,CAAC,GAC9D,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,aAAa,GAAG;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;CACtD,CAAC;AAEJ,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"jwt-sign.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/jwt-sign.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,SAAS,EACV,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEnF,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,IAAI,GAAG,IAAI,IAAI,IAAI,CACtD,SAAS,EACT,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAChD,GACC,IAAI,CAAC,UAAU,EAAE,iBAAiB,GAAG,UAAU,GAAG,WAAW,CAAC,GAC9D,SAAS,GACT,gBAAgB,GAChB,WAAW,GACX,SAAS,GACT,SAAS,GACT,aAAa,GAAG;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;CACtD,CAAC;AAEJ,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IAOjB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,SAAS,EAAE,IAAI,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B,CAAC"}

package/dist/types/jwt/profile.d.ts

@@ -0,0 +1,99 @@
+import type { Expiry } from "@lindorm/date";
+import type { Dict } from "@lindorm/types";
+import type { KryptosEncAlgorithm, KryptosEncryption } from "@lindorm/kryptos";
+import type { TokenType } from "../../constants/token-type.js";
+import type { TokenFormat } from "../../internal/utils/select-encoder.js";
+import type { AegisPredicate } from "../aegis.js";
+import type { BindCertificateMode, TokenEncryptOrSignOptions } from "../header.js";
+import type { SignJwtContent, SignJwtOptions } from "./jwt-sign.js";
+import type { VerifyJwtOptions } from "./jwt-verify.js";
+export type SignContent = Partial<SignJwtContent>;
+export type DefaultContent = Required<Pick<SignContent, "subject" | "expires">> & Partial<Omit<SignContent, "subject" | "expires">>;
+export type AccessTokenContent = Required<Pick<SignContent, "subject" | "audience" | "clientId">> & Partial<Pick<SignContent, "scope" | "confirmation" | "act" | "mayAct" | "authorizationDetails" | "roles" | "permissions" | "groups" | "entitlements" | "sessionId" | "authTime" | "authContextClass" | "authMethods" | "authFactor" | "levelOfAssurance" | "authenticatorAssuranceLevel" | "identityAssuranceLevel" | "grantType" | "sessionHint" | "subjectHint" | "expires" | "vectorOfTrust" | "vectorTrustMark">>;
+export type IdTokenContent = Required<Pick<SignContent, "subject" | "audience">> & Partial<Pick<SignContent, "accessToken" | "authCode" | "authState" | "authTime" | "nonce" | "sessionId" | "authContextClass" | "authMethods" | "authFactor" | "levelOfAssurance" | "authenticatorAssuranceLevel" | "identityAssuranceLevel" | "federationAssuranceLevel" | "authorizedParty" | "vectorOfTrust" | "vectorTrustMark" | "sensitiveIdentity" | "profile" | "expires">>;
+export type LogoutTokenContent = Required<Pick<SignContent, "audience" | "events">> & Partial<Pick<SignContent, "subject" | "sessionId" | "expires">>;
+export type ErasureTokenContent = Required<Pick<SignContent, "audience" | "subject" | "events">> & Partial<Pick<SignContent, "expires">>;
+export type SecurityEventContent = Required<Pick<SignContent, "audience" | "subjectId" | "events">> & Partial<Pick<SignContent, "transactionId">>;
+export type DelegationContent = Required<Pick<SignContent, "issuer" | "subject" | "audience">> & Partial<Pick<SignContent, "expires">>;
+export type ClientAssertionContent = Required<Pick<SignContent, "issuer" | "subject" | "audience">> & Partial<Pick<SignContent, "expires">>;
+export type IntrospectionContent = Required<Pick<SignContent, "audience">> & Partial<Pick<SignContent, "claims" | "expires">>;
+export type UserinfoContent = Required<Pick<SignContent, "subject" | "audience">> & Partial<Pick<SignContent, "profile" | "claims" | "expires">>;
+export type JarmContent = Required<Pick<SignContent, "audience">> & Partial<Pick<SignContent, "claims" | "expires">>;
+export type ProfileContent = {
+    default: DefaultContent;
+    access_token: AccessTokenContent;
+    id_token: IdTokenContent;
+    logout_token: LogoutTokenContent;
+    erasure_token: ErasureTokenContent;
+    security_event: SecurityEventContent;
+    delegation: DelegationContent;
+    client_assertion: ClientAssertionContent;
+    introspection: IntrospectionContent;
+    userinfo: UserinfoContent;
+    jarm: JarmContent;
+};
+export type SignContext = Dict;
+export type InvalidEntry = {
+    key: string;
+    message: string;
+};
+export type ProfileAlgClass = "asymmetric" | "asymmetric-recommended" | "confidential" | "fapi";
+export type ProfileRules = {
+    actChainShape?: boolean;
+    audSingleResource?: boolean;
+    authorizationDetailsType?: boolean;
+    cnfShape?: boolean;
+    crossField?: boolean;
+    eventsShape?: boolean;
+    issUri?: boolean;
+    subIdShape?: boolean;
+};
+export type TokenProfile = {
+    name: string;
+    typ: string | null;
+    required: Array<string>;
+    forbidden: Array<string>;
+    requiredWhen: Array<{
+        claim: string;
+        when: (claims: Dict, ctx: SignContext) => boolean;
+    }>;
+    atLeastOneOf: Array<Array<string>>;
+    autoInject: {
+        iat: boolean;
+        jti: boolean;
+        nbf: boolean;
+        iss: boolean;
+    };
+    issuer: "platform" | "per-token";
+    lifetime?: Expiry | null;
+    encryptable: boolean;
+    algClass?: ProfileAlgClass;
+    rules?: ProfileRules;
+    validate: (claims: Dict, ctx: SignContext) => Array<InvalidEntry>;
+};
+export type ProfileSignOptions = SignJwtOptions & {
+    context?: SignContext;
+    format?: TokenFormat;
+    proprietary?: boolean;
+    encrypt?: {
+        kid?: string;
+        algorithm?: KryptosEncAlgorithm;
+        encryption?: KryptosEncryption;
+        predicate?: AegisPredicate;
+    };
+};
+export type ProfileVerifyOptions = VerifyJwtOptions & {
+    audience: string;
+    issuer?: string;
+    clockTolerance?: number;
+    format?: TokenFormat;
+};
+export type RawSignInput = {
+    bindCertificate?: BindCertificateMode;
+    contentType?: string;
+    header?: TokenEncryptOrSignOptions;
+    objectId?: string;
+    payload: Buffer | string | Dict;
+    tokenType?: TokenType;
+};
+//# sourceMappingURL=profile.d.ts.map

package/dist/types/jwt/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../src/types/jwt/profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQxD,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAMlD,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC,GAC7E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC;AASpD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CACvC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC,CACvD,GACC,OAAO,CACL,IAAI,CACF,WAAW,EACT,OAAO,GACP,cAAc,GACd,KAAK,GACL,QAAQ,GACR,sBAAsB,GACtB,OAAO,GACP,aAAa,GACb,QAAQ,GACR,cAAc,GACd,WAAW,GACX,UAAU,GACV,kBAAkB,GAClB,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,6BAA6B,GAC7B,wBAAwB,GACxB,WAAW,GACX,aAAa,GACb,aAAa,GACb,SAAS,GACT,eAAe,GACf,iBAAiB,CACpB,CACF,CAAC;AAEJ,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC,GAC9E,OAAO,CACL,IAAI,CACF,WAAW,EACT,aAAa,GACb,UAAU,GACV,WAAW,GACX,UAAU,GACV,OAAO,GACP,WAAW,GACX,kBAAkB,GAClB,aAAa,GACb,YAAY,GACZ,kBAAkB,GAClB,6BAA6B,GAC7B,wBAAwB,GACxB,0BAA0B,GAC1B,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,SAAS,GACT,SAAS,CACZ,CACF,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,QAAQ,CAAC,CAAC,GACjF,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC;AAElE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CACxC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC,CACrD,GACC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAExC,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CACzC,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC,CACvD,GACC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;AAE9C,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CACtC,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,CACrD,GACC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAExC,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAC3C,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC,CACrD,GACC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAExC,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,GACxE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;AAEnD,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC,GAC/E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;AAE/D,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,GAC/D,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;AAMnD,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,cAAc,CAAC;IACxB,YAAY,EAAE,kBAAkB,CAAC;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,EAAE,kBAAkB,CAAC;IACjC,aAAa,EAAE,mBAAmB,CAAC;IACnC,cAAc,EAAE,oBAAoB,CAAC;IACrC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,gBAAgB,EAAE,sBAAsB,CAAC;IACzC,aAAa,EAAE,oBAAoB,CAAC;IACpC,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,WAAW,CAAC;CACnB,CAAC;AAQF,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC;AAG/B,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAGF,MAAM,MAAM,eAAe,GACvB,YAAY,GACZ,wBAAwB,GACxB,cAAc,GACd,MAAM,CAAC;AAMX,MAAM,MAAM,YAAY,GAAG;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAQF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACzB,YAAY,EAAE,KAAK,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;KACnD,CAAC,CAAC;IACH,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,UAAU,EAAE;QACV,GAAG,EAAE,OAAO,CAAC;QACb,GAAG,EAAE,OAAO,CAAC;QACb,GAAG,EAAE,OAAO,CAAC;QACb,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,MAAM,EAAE,UAAU,GAAG,WAAW,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG;IAChD,OAAO,CAAC,EAAE,WAAW,CAAC;IAItB,MAAM,CAAC,EAAE,WAAW,CAAC;IASrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,mBAAmB,CAAC;QAChC,UAAU,CAAC,EAAE,iBAAiB,CAAC;QAC/B,SAAS,CAAC,EAAE,cAAc,CAAC;KAC5B,CAAC;CACH,CAAC;AAQF,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IAKxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAMF,MAAM,MAAM,YAAY,GAAG;IACzB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC"}

package/dist/types/jwt/profile.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=profile.js.map

package/dist/types/jwt/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../../src/types/jwt/profile.ts"],"names":[],"mappings":""}

package/dist/types/level-of-assurance.d.ts

@@ -1,3 +1,5 @@
-export type LevelOfAssurance = 0 | 1 | 2 | 3 | 4;
-export type AdjustedAccessLevel = LevelOfAssurance;
+export type LevelOfAssurance = 1 | 2 | 3 | 4;
+export type AuthenticatorAssuranceLevel = 1 | 2 | 3;
+export type IdentityAssuranceLevel = 1 | 2 | 3;
+export type FederationAssuranceLevel = 1 | 2 | 3;
 //# sourceMappingURL=level-of-assurance.d.ts.map

package/dist/types/level-of-assurance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"level-of-assurance.d.ts","sourceRoot":"","sources":["../../src/types/level-of-assurance.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,CAAC"}
+{"version":3,"file":"level-of-assurance.d.ts","sourceRoot":"","sources":["../../src/types/level-of-assurance.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAK7C,MAAM,MAAM,2BAA2B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAMpD,MAAM,MAAM,sBAAsB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAK/C,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lindorm/aegis",
-  "version": "0.8.1",
+  "version": "0.10.0",
   "license": "AGPL-3.0-or-later",
   "author": "Jonn Nilsson",
   "repository": {
@@ -44,21 +44,21 @@
     "verify": "npm run typecheck && npm run build && npm test"
   },
   "dependencies": {
-    "@lindorm/aes": "^0.7.2",
-    "@lindorm/akp": "^0.2.2",
+    "@lindorm/aes": "^0.8.1",
+    "@lindorm/akp": "^0.3.1",
     "@lindorm/b64": "^0.2.1",
-    "@lindorm/date": "^0.5.2",
-    "@lindorm/ec": "^0.3.2",
-    "@lindorm/errors": "^0.2.2",
-    "@lindorm/is": "^0.2.2",
-    "@lindorm/kryptos": "^0.8.2",
-    "@lindorm/oct": "^0.3.2",
-    "@lindorm/okp": "^0.3.2",
-    "@lindorm/rsa": "^0.3.2",
-    "@lindorm/sha": "^0.5.2",
-    "@lindorm/types": "^0.7.0",
-    "@lindorm/utils": "^0.8.2",
-    "cbor": "^10.0.12"
+    "@lindorm/date": "^0.5.3",
+    "@lindorm/ec": "^0.4.1",
+    "@lindorm/errors": "^0.4.0",
+    "@lindorm/is": "^0.2.3",
+    "@lindorm/kryptos": "^0.10.0",
+    "@lindorm/oct": "^0.4.1",
+    "@lindorm/okp": "^0.4.1",
+    "@lindorm/rsa": "^0.4.1",
+    "@lindorm/sha": "^0.6.1",
+    "@lindorm/types": "^0.8.0",
+    "@lindorm/utils": "^0.8.3",
+    "cbor2": "^2.3.0"
   },
   "peerDependencies": {
     "@lindorm/amphora": ">=0.4.0",
@@ -66,11 +66,12 @@
   },
   "devDependencies": {
     "@auth0/cose": "^1.0.2",
-    "@lindorm/amphora": "^0.5.3",
-    "@lindorm/logger": "^0.6.3",
+    "@lindorm/amphora": "^0.6.1",
+    "@lindorm/logger": "^0.6.5",
     "@types/jsonwebtoken": "^9.0.10",
+    "cose-js": "^0.9.0",
     "jose": "^6.2.1",
     "jsonwebtoken": "^9.0.3"
   },
-  "gitHead": "58e03da1d2143a50758781410e196db2e353ff2e"
+  "gitHead": "d77dfd6c3259d01d2e037f4a68b314511fe33861"
 }