@molecule/api-jwt 1.0.5 → 1.0.7

package/README.md

@@ -3,21 +3,21 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-10-16T09:59:40.216Z
+Generated: 2026-10-16T23:41:58.848Z
 -->
 
 # @molecule/api-jwt
 
-> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
-> It is written to be read by coding agents as much as by people, and is generated from this
-> package's source — edit `src/index.ts` JSDoc, not this file.
-
 JWT interface for molecule.dev.
 
 Provides an abstract JWT interface that can be backed by any JWT library.
 Use `setProvider` to provide a concrete implementation
 such as `@molecule/api-jwt-jsonwebtoken`.
 
+> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
+> It is written to be read by coding agents as much as by people, and is generated from this
+> package's source — edit `src/index.ts` JSDoc, not this file.
+
 ## Quick Start
 
 ```ts
@@ -242,6 +242,24 @@ token it mints is not by itself a session. For a session, use
 `authorization.set()` from `@molecule/api-resource-user` — the app's global
 `verifyMiddleware` accepts a JWT only when its payload also carries a
 `deviceId` naming an active row in `devices` (see the module `@remarks`).
+The sequence is device → session, and the device call RESOLVES TO THE ID:
+`const deviceId = await get<DeviceService>('device')?.createOrUpdate(userId, deviceName)`
+(`DeviceService` is exported by `@molecule/api-resource-device`), then
+`authorization.set(req, res, { userId, deviceId })`.
+
+**There is ONE JWT provider per app, and this signs with it.** The scaffold
+bonds `@molecule/api-jwt-jsonwebtoken` once (the app's `api/src/bonds/`), keyed
+by `JWT_PRIVATE_KEY`/`JWT_PUBLIC_KEY` (auto-generated on first boot when unset)
+with algorithm `JWT_ALGORITHM` (default `RS256`). There is no `JWT_SECRET` and
+no second verifier to match: `setProvider()` in your own file REPLACES the
+provider for the whole process, so every token this app and its packages mint
+and verify changes with it.
+
+To return a session token in a response BODY — an API whose clients send
+`Authorization: Token <jwt>` — do not sign a second token with another key or
+algorithm. `authorization.set(req, res, { userId, deviceId })` from
+
+_(description truncated — read the full text in `node_modules/@molecule/api-jwt/dist/provider.d.ts`.)_
 
 ```typescript
 function sign(
@@ -390,9 +408,14 @@ anything security-relevant; `decode()` is only for reading a token you do NOT tr
   also carries a `deviceId` naming an ACTIVE row in the app's `devices` table, so a
   payload without one is treated as no session: `sign({ userId })` answers 401 on every
   route although the token itself verifies. Mint a session with `authorization.set()`
-  from `@molecule/api-resource-user`, which signs and writes the session cookies — call
-  `get('device').createOrUpdate(userId, deviceName)` first and pass `{ userId, deviceId }`
-  to `set()`, as that package's own log-in handler does.
+  from `@molecule/api-resource-user`, which signs and writes the session cookies — the
+  sequence is device → session, and the device call RESOLVES TO THE ID:
+  `const deviceId = await get<DeviceService>('device')?.createOrUpdate(userId, deviceName)`
+  (the `DeviceService` type comes from `@molecule/api-resource-device`; do not hand-type a
+  `get<{ createOrUpdate(): … }>('device')` generic — a wrong one compiles and yields
+  `undefined`), then `authorization.set(req, res, { userId, deviceId })`, as that package's
+  own log-in handler does. `authorization.set()` throws when the device id is missing
+  rather than mint a token every route answers 401.
 - **Re-signing decoded claims (refresh flows): strip `exp`/`iat` first.** `sign()`
   always sets `expiresIn` (default {@link JWT_EXPIRES_TIME}), and the underlying library
   throws (`Bad "options.expiresIn" option the payload already has an "exp" property`)

package/dist/index.d.ts

@@ -26,9 +26,14 @@
  *   also carries a `deviceId` naming an ACTIVE row in the app's `devices` table, so a
  *   payload without one is treated as no session: `sign({ userId })` answers 401 on every
  *   route although the token itself verifies. Mint a session with `authorization.set()`
- *   from `@molecule/api-resource-user`, which signs and writes the session cookies — call
- *   `get('device').createOrUpdate(userId, deviceName)` first and pass `{ userId, deviceId }`
- *   to `set()`, as that package's own log-in handler does.
+ *   from `@molecule/api-resource-user`, which signs and writes the session cookies — the
+ *   sequence is device → session, and the device call RESOLVES TO THE ID:
+ *   `const deviceId = await get<DeviceService>('device')?.createOrUpdate(userId, deviceName)`
+ *   (the `DeviceService` type comes from `@molecule/api-resource-device`; do not hand-type a
+ *   `get<{ createOrUpdate(): … }>('device')` generic — a wrong one compiles and yields
+ *   `undefined`), then `authorization.set(req, res, { userId, deviceId })`, as that package's
+ *   own log-in handler does. `authorization.set()` throws when the device id is missing
+ *   rather than mint a token every route answers 401.
  * - **Re-signing decoded claims (refresh flows): strip `exp`/`iat` first.** `sign()`
  *   always sets `expiresIn` (default {@link JWT_EXPIRES_TIME}), and the underlying library
  *   throws (`Bad "options.expiresIn" option the payload already has an "exp" property`)

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA"}

package/dist/index.js

@@ -26,9 +26,14 @@
  *   also carries a `deviceId` naming an ACTIVE row in the app's `devices` table, so a
  *   payload without one is treated as no session: `sign({ userId })` answers 401 on every
  *   route although the token itself verifies. Mint a session with `authorization.set()`
- *   from `@molecule/api-resource-user`, which signs and writes the session cookies — call
- *   `get('device').createOrUpdate(userId, deviceName)` first and pass `{ userId, deviceId }`
- *   to `set()`, as that package's own log-in handler does.
+ *   from `@molecule/api-resource-user`, which signs and writes the session cookies — the
+ *   sequence is device → session, and the device call RESOLVES TO THE ID:
+ *   `const deviceId = await get<DeviceService>('device')?.createOrUpdate(userId, deviceName)`
+ *   (the `DeviceService` type comes from `@molecule/api-resource-device`; do not hand-type a
+ *   `get<{ createOrUpdate(): … }>('device')` generic — a wrong one compiles and yields
+ *   `undefined`), then `authorization.set(req, res, { userId, deviceId })`, as that package's
+ *   own log-in handler does. `authorization.set()` throws when the device id is missing
+ *   rather than mint a token every route answers 401.
  * - **Re-signing decoded claims (refresh flows): strip `exp`/`iat` first.** `sign()`
  *   always sets `expiresIn` (default {@link JWT_EXPIRES_TIME}), and the underlying library
  *   throws (`Bad "options.expiresIn" option the payload already has an "exp" property`)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAEH,cAAc,oBAAoB,CAAA;AAClC,cAAc,WAAW,CAAA;AACzB,cAAc,eAAe,CAAA;AAC7B,cAAc,YAAY,CAAA"}

package/dist/provider.d.ts

@@ -55,6 +55,25 @@ export declare const hasProvider: () => boolean;
  * `authorization.set()` from `@molecule/api-resource-user` — the app's global
  * `verifyMiddleware` accepts a JWT only when its payload also carries a
  * `deviceId` naming an active row in `devices` (see the module `@remarks`).
+ * The sequence is device → session, and the device call RESOLVES TO THE ID:
+ * `const deviceId = await get<DeviceService>('device')?.createOrUpdate(userId, deviceName)`
+ * (`DeviceService` is exported by `@molecule/api-resource-device`), then
+ * `authorization.set(req, res, { userId, deviceId })`.
+ *
+ * **There is ONE JWT provider per app, and this signs with it.** The scaffold
+ * bonds `@molecule/api-jwt-jsonwebtoken` once (the app's `api/src/bonds/`), keyed
+ * by `JWT_PRIVATE_KEY`/`JWT_PUBLIC_KEY` (auto-generated on first boot when unset)
+ * with algorithm `JWT_ALGORITHM` (default `RS256`). There is no `JWT_SECRET` and
+ * no second verifier to match: `setProvider()` in your own file REPLACES the
+ * provider for the whole process, so every token this app and its packages mint
+ * and verify changes with it.
+ *
+ * To return a session token in a response BODY — an API whose clients send
+ * `Authorization: Token <jwt>` — do not sign a second token with another key or
+ * algorithm. `authorization.set(req, res, { userId, deviceId })` from
+ * `@molecule/api-resource-user` RETURNS the signed token; mount
+ * `verifyMiddleware({ allowCookieSession: false })` in front of the routes that
+ * sign users in so no session cookie is written alongside it.
  *
  * @param object - The JSON payload to sign.
  * @param options - Signing options; `algorithm` defaults to `JWT_ALGORITHM`, `expiresIn` defaults to `JWT_EXPIRES_TIME`.

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,cAAc,EACd,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAkDnB;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,cAAwB,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAA2D,CAAA;AAExF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAkD,CAAA;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,UAAU,WAAW,KAAG,IAEnD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW,QAAO,WAE9B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAO,OAE9B,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,IAAI,GACf,QAAQ,UAAU,EAClB,oCAAsE,cAAmB,EACzF,aAAY,MAAM,GAAG,MAAwB,KAC5C,MAAmF,CAAA;AAEtF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,GACjB,OAAO,MAAM,EACb,0BAA2C,gBAAqB,EAChE,YAAW,MAAM,GAAG,MAAuB,KAC1C,MAAM,GAAG,UAA6E,CAAA;AAEzF;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,GAAI,OAAO,MAAM,EAAE,UAAU,gBAAgB,KAAG,MAAM,GAAG,UAAU,GAAG,IACnD,CAAA"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,cAAc,EACd,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAkDnB;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,cAAwB,CAAA;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,QAA2D,CAAA;AAExF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAkD,CAAA;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,WAAW,GAAI,UAAU,WAAW,KAAG,IAEnD,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,WAAW,QAAO,WAE9B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAO,OAE9B,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,IAAI,GACf,QAAQ,UAAU,EAClB,oCAAsE,cAAmB,EACzF,aAAY,MAAM,GAAG,MAAwB,KAC5C,MAAmF,CAAA;AAEtF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,GACjB,OAAO,MAAM,EACb,0BAA2C,gBAAqB,EAChE,YAAW,MAAM,GAAG,MAAuB,KAC1C,MAAM,GAAG,UAA6E,CAAA;AAEzF;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,GAAI,OAAO,MAAM,EAAE,UAAU,gBAAgB,KAAG,MAAM,GAAG,UAAU,GAAG,IACnD,CAAA"}

package/dist/provider.js

@@ -104,6 +104,25 @@ export const hasProvider = () => {
  * `authorization.set()` from `@molecule/api-resource-user` — the app's global
  * `verifyMiddleware` accepts a JWT only when its payload also carries a
  * `deviceId` naming an active row in `devices` (see the module `@remarks`).
+ * The sequence is device → session, and the device call RESOLVES TO THE ID:
+ * `const deviceId = await get<DeviceService>('device')?.createOrUpdate(userId, deviceName)`
+ * (`DeviceService` is exported by `@molecule/api-resource-device`), then
+ * `authorization.set(req, res, { userId, deviceId })`.
+ *
+ * **There is ONE JWT provider per app, and this signs with it.** The scaffold
+ * bonds `@molecule/api-jwt-jsonwebtoken` once (the app's `api/src/bonds/`), keyed
+ * by `JWT_PRIVATE_KEY`/`JWT_PUBLIC_KEY` (auto-generated on first boot when unset)
+ * with algorithm `JWT_ALGORITHM` (default `RS256`). There is no `JWT_SECRET` and
+ * no second verifier to match: `setProvider()` in your own file REPLACES the
+ * provider for the whole process, so every token this app and its packages mint
+ * and verify changes with it.
+ *
+ * To return a session token in a response BODY — an API whose clients send
+ * `Authorization: Token <jwt>` — do not sign a second token with another key or
+ * algorithm. `authorization.set(req, res, { userId, deviceId })` from
+ * `@molecule/api-resource-user` RETURNS the signed token; mount
+ * `verifyMiddleware({ allowCookieSession: false })` in front of the routes that
+ * sign users in so no session cookie is written alongside it.
  *
  * @param object - The JSON payload to sign.
  * @param options - Signing options; `algorithm` defaults to `JWT_ALGORITHM`, `expiresIn` defaults to `JWT_EXPIRES_TIME`.

package/dist/provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAElG,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAW3D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAE1B,MAAM,SAAS,GAAG,KAAK,CAAA;AACvB,UAAU,CAAC,SAAS,CAAC,CAAA;AAErB,8DAA8D;AAC9D,MAAM,oBAAoB,GAA4B;IACpD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,mBAAmB,GAAG,GAAiB,EAAE;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAK,oBAA0C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,GAAmB,CAAA;IAC5B,CAAC;IACD,MAAM,CAAC,IAAI,CACT,4BAA4B,GAAG,6CAA6C;QAC1E,4CAA4C,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjF,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAA;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA,CAAC,SAAS;AAElG;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAA,CAAC,SAAS;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAqB,EAAQ,EAAE;IACzD,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AAC3B,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAgB,EAAE;IAC3C,OAAO,WAAW,CAAc,SAAS,CAAC,CAAA;AAC5C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAY,EAAE;IACvC,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,MAAkB,EAClB,EAAE,SAAS,GAAG,aAAa,EAAE,SAAS,GAAG,gBAAgB,EAAE,GAAG,IAAI,KAAqB,EAAE,EACzF,aAA8B,eAAe,EACrC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,UAAU,CAAC,CAAA;AAEtF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,KAAa,EACb,EAAE,UAAU,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,KAAuB,EAAE,EAChE,YAA6B,cAAc,EACtB,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,SAAS,CAAC,CAAA;AAEzF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAA0B,EAA8B,EAAE,CAC9F,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAElG,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAW3D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;AAE1B,MAAM,SAAS,GAAG,KAAK,CAAA;AACvB,UAAU,CAAC,SAAS,CAAC,CAAA;AAErB,8DAA8D;AAC9D,MAAM,oBAAoB,GAA4B;IACpD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,mBAAmB,GAAG,GAAiB,EAAE;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,IAAK,oBAA0C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,GAAmB,CAAA;IAC5B,CAAC;IACD,MAAM,CAAC,IAAI,CACT,4BAA4B,GAAG,6CAA6C;QAC1E,4CAA4C,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjF,CAAA;IACD,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAA;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA,CAAC,SAAS;AAElG;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAA,CAAC,SAAS;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAqB,EAAQ,EAAE;IACzD,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;AAC3B,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAgB,EAAE;IAC3C,OAAO,WAAW,CAAc,SAAS,CAAC,CAAA;AAC5C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,GAAY,EAAE;IACvC,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,MAAkB,EAClB,EAAE,SAAS,GAAG,aAAa,EAAE,SAAS,GAAG,gBAAgB,EAAE,GAAG,IAAI,KAAqB,EAAE,EACzF,aAA8B,eAAe,EACrC,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,UAAU,CAAC,CAAA;AAEtF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,KAAa,EACb,EAAE,UAAU,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,IAAI,KAAuB,EAAE,EAChE,YAA6B,cAAc,EACtB,EAAE,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,SAAS,CAAC,CAAA;AAEzF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,OAA0B,EAA8B,EAAE,CAC9F,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-jwt",
-  "version": "1.0.5",
+  "version": "1.0.7",
   "description": "JWT interface and key management for molecule.dev",
   "type": "module",
   "main": "dist/index.js",