@openid4vc/oauth2 0.3.0-alpha-20250206100745 → 0.3.0-alpha-20250224151429

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/index.d.mts +711 -641
  2. package/dist/index.d.ts +711 -641
  3. package/dist/index.js +409 -360
  4. package/dist/index.js.map +1 -1
  5. package/dist/index.mjs +338 -288
  6. package/dist/index.mjs.map +1 -1
  7. package/package.json +6 -6
package/dist/index.d.mts CHANGED
@@ -1,5 +1,5 @@
1
1
  import * as z from 'zod';
2
- import z__default from 'zod';
2
+ import z__default, { z as z$1 } from 'zod';
3
3
  import { HttpMethod, FetchHeaders, ContentType, OrPromise, Fetch, BaseSchema, FetchResponse, FetchRequestInit, StringWithAutoCompletion } from '@openid4vc/utils';
4
4
  export { HttpMethod, InvalidFetchResponseError, Oid4vcTsConfig, getGlobalConfig, setGlobalConfig } from '@openid4vc/utils';
5
5
 
@@ -25,7 +25,18 @@ declare enum Oauth2ErrorCodes {
25
25
  UnsupportedCredentialFormat = "unsupported_credential_format",
26
26
  InvalidProof = "invalid_proof",
27
27
  InvalidNonce = "invalid_nonce",
28
- InvalidEncryptionParameters = "invalid_encryption_parameters"
28
+ InvalidEncryptionParameters = "invalid_encryption_parameters",
29
+ InvalidRequestUri = "invalid_request_uri",
30
+ InvalidRequestObject = "invalid_request_object",
31
+ RequestNotSupported = "request_not_supported",
32
+ RequestUriNotSupported = "request_uri_not_supported",
33
+ VpFormatsNotSupported = "vp_formats_not_supported",
34
+ AccessDenied = "access_denied",
35
+ InvalidPresentationDefinitionUri = "invalid_presentation_definition_uri",
36
+ InvalidPresentationDefinitionReference = "invalid_presentation_definition_reference",
37
+ InvalidRequestUriMethod = "invalid_request_uri_method",
38
+ InvalidTransactionData = "invalid_transaction_data",
39
+ WalletUnavailable = "wallet_unavailable"
29
40
  }
30
41
  declare const zOauth2ErrorResponse: z__default.ZodObject<{
31
42
  error: z__default.ZodUnion<[z__default.ZodNativeEnum<typeof Oauth2ErrorCodes>, z__default.ZodString]>;
@@ -308,7 +319,7 @@ declare const zJwk: z__default.ZodObject<{
308
319
  q: z__default.ZodOptional<z__default.ZodString>;
309
320
  qi: z__default.ZodOptional<z__default.ZodString>;
310
321
  use: z__default.ZodOptional<z__default.ZodString>;
311
- x5c: z__default.ZodOptional<z__default.ZodString>;
322
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
312
323
  x5t: z__default.ZodOptional<z__default.ZodString>;
313
324
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
314
325
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -344,7 +355,7 @@ declare const zJwk: z__default.ZodObject<{
344
355
  q: z__default.ZodOptional<z__default.ZodString>;
345
356
  qi: z__default.ZodOptional<z__default.ZodString>;
346
357
  use: z__default.ZodOptional<z__default.ZodString>;
347
- x5c: z__default.ZodOptional<z__default.ZodString>;
358
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
348
359
  x5t: z__default.ZodOptional<z__default.ZodString>;
349
360
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
350
361
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -380,7 +391,7 @@ declare const zJwk: z__default.ZodObject<{
380
391
  q: z__default.ZodOptional<z__default.ZodString>;
381
392
  qi: z__default.ZodOptional<z__default.ZodString>;
382
393
  use: z__default.ZodOptional<z__default.ZodString>;
383
- x5c: z__default.ZodOptional<z__default.ZodString>;
394
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
384
395
  x5t: z__default.ZodOptional<z__default.ZodString>;
385
396
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
386
397
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -419,7 +430,7 @@ declare const zJwkSet: z__default.ZodObject<{
419
430
  q: z__default.ZodOptional<z__default.ZodString>;
420
431
  qi: z__default.ZodOptional<z__default.ZodString>;
421
432
  use: z__default.ZodOptional<z__default.ZodString>;
422
- x5c: z__default.ZodOptional<z__default.ZodString>;
433
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
423
434
  x5t: z__default.ZodOptional<z__default.ZodString>;
424
435
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
425
436
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -455,7 +466,7 @@ declare const zJwkSet: z__default.ZodObject<{
455
466
  q: z__default.ZodOptional<z__default.ZodString>;
456
467
  qi: z__default.ZodOptional<z__default.ZodString>;
457
468
  use: z__default.ZodOptional<z__default.ZodString>;
458
- x5c: z__default.ZodOptional<z__default.ZodString>;
469
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
459
470
  x5t: z__default.ZodOptional<z__default.ZodString>;
460
471
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
461
472
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -491,7 +502,7 @@ declare const zJwkSet: z__default.ZodObject<{
491
502
  q: z__default.ZodOptional<z__default.ZodString>;
492
503
  qi: z__default.ZodOptional<z__default.ZodString>;
493
504
  use: z__default.ZodOptional<z__default.ZodString>;
494
- x5c: z__default.ZodOptional<z__default.ZodString>;
505
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
495
506
  x5t: z__default.ZodOptional<z__default.ZodString>;
496
507
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
497
508
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -529,7 +540,7 @@ declare const zJwkSet: z__default.ZodObject<{
529
540
  q: z__default.ZodOptional<z__default.ZodString>;
530
541
  qi: z__default.ZodOptional<z__default.ZodString>;
531
542
  use: z__default.ZodOptional<z__default.ZodString>;
532
- x5c: z__default.ZodOptional<z__default.ZodString>;
543
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
533
544
  x5t: z__default.ZodOptional<z__default.ZodString>;
534
545
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
535
546
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -565,7 +576,7 @@ declare const zJwkSet: z__default.ZodObject<{
565
576
  q: z__default.ZodOptional<z__default.ZodString>;
566
577
  qi: z__default.ZodOptional<z__default.ZodString>;
567
578
  use: z__default.ZodOptional<z__default.ZodString>;
568
- x5c: z__default.ZodOptional<z__default.ZodString>;
579
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
569
580
  x5t: z__default.ZodOptional<z__default.ZodString>;
570
581
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
571
582
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -601,7 +612,7 @@ declare const zJwkSet: z__default.ZodObject<{
601
612
  q: z__default.ZodOptional<z__default.ZodString>;
602
613
  qi: z__default.ZodOptional<z__default.ZodString>;
603
614
  use: z__default.ZodOptional<z__default.ZodString>;
604
- x5c: z__default.ZodOptional<z__default.ZodString>;
615
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
605
616
  x5t: z__default.ZodOptional<z__default.ZodString>;
606
617
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
607
618
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -639,7 +650,7 @@ declare const zJwkSet: z__default.ZodObject<{
639
650
  q: z__default.ZodOptional<z__default.ZodString>;
640
651
  qi: z__default.ZodOptional<z__default.ZodString>;
641
652
  use: z__default.ZodOptional<z__default.ZodString>;
642
- x5c: z__default.ZodOptional<z__default.ZodString>;
653
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
643
654
  x5t: z__default.ZodOptional<z__default.ZodString>;
644
655
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
645
656
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -675,7 +686,7 @@ declare const zJwkSet: z__default.ZodObject<{
675
686
  q: z__default.ZodOptional<z__default.ZodString>;
676
687
  qi: z__default.ZodOptional<z__default.ZodString>;
677
688
  use: z__default.ZodOptional<z__default.ZodString>;
678
- x5c: z__default.ZodOptional<z__default.ZodString>;
689
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
679
690
  x5t: z__default.ZodOptional<z__default.ZodString>;
680
691
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
681
692
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -711,7 +722,7 @@ declare const zJwkSet: z__default.ZodObject<{
711
722
  q: z__default.ZodOptional<z__default.ZodString>;
712
723
  qi: z__default.ZodOptional<z__default.ZodString>;
713
724
  use: z__default.ZodOptional<z__default.ZodString>;
714
- x5c: z__default.ZodOptional<z__default.ZodString>;
725
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
715
726
  x5t: z__default.ZodOptional<z__default.ZodString>;
716
727
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
717
728
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -748,6 +759,11 @@ type JwtSigner = JwtSignerDid | JwtSignerJwk | JwtSignerX5c | JwtSignerTrustChai
748
759
  type JwtSignerWithJwk = JwtSigner & {
749
760
  publicJwk: Jwk;
750
761
  };
762
+ type JweEncryptor = JwtSignerJwk & {
763
+ enc: string;
764
+ apu?: string;
765
+ apv?: string;
766
+ };
751
767
  declare const zCompactJwt: z__default.ZodString;
752
768
  declare const zJwtPayload: z__default.ZodObject<{
753
769
  iss: z__default.ZodOptional<z__default.ZodString>;
@@ -790,7 +806,7 @@ declare const zJwtPayload: z__default.ZodObject<{
790
806
  q: z__default.ZodOptional<z__default.ZodString>;
791
807
  qi: z__default.ZodOptional<z__default.ZodString>;
792
808
  use: z__default.ZodOptional<z__default.ZodString>;
793
- x5c: z__default.ZodOptional<z__default.ZodString>;
809
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
794
810
  x5t: z__default.ZodOptional<z__default.ZodString>;
795
811
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
796
812
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -826,7 +842,7 @@ declare const zJwtPayload: z__default.ZodObject<{
826
842
  q: z__default.ZodOptional<z__default.ZodString>;
827
843
  qi: z__default.ZodOptional<z__default.ZodString>;
828
844
  use: z__default.ZodOptional<z__default.ZodString>;
829
- x5c: z__default.ZodOptional<z__default.ZodString>;
845
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
830
846
  x5t: z__default.ZodOptional<z__default.ZodString>;
831
847
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
832
848
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -862,7 +878,7 @@ declare const zJwtPayload: z__default.ZodObject<{
862
878
  q: z__default.ZodOptional<z__default.ZodString>;
863
879
  qi: z__default.ZodOptional<z__default.ZodString>;
864
880
  use: z__default.ZodOptional<z__default.ZodString>;
865
- x5c: z__default.ZodOptional<z__default.ZodString>;
881
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
866
882
  x5t: z__default.ZodOptional<z__default.ZodString>;
867
883
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
868
884
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -901,7 +917,7 @@ declare const zJwtPayload: z__default.ZodObject<{
901
917
  q: z__default.ZodOptional<z__default.ZodString>;
902
918
  qi: z__default.ZodOptional<z__default.ZodString>;
903
919
  use: z__default.ZodOptional<z__default.ZodString>;
904
- x5c: z__default.ZodOptional<z__default.ZodString>;
920
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
905
921
  x5t: z__default.ZodOptional<z__default.ZodString>;
906
922
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
907
923
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -937,7 +953,7 @@ declare const zJwtPayload: z__default.ZodObject<{
937
953
  q: z__default.ZodOptional<z__default.ZodString>;
938
954
  qi: z__default.ZodOptional<z__default.ZodString>;
939
955
  use: z__default.ZodOptional<z__default.ZodString>;
940
- x5c: z__default.ZodOptional<z__default.ZodString>;
956
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
941
957
  x5t: z__default.ZodOptional<z__default.ZodString>;
942
958
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
943
959
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -973,7 +989,7 @@ declare const zJwtPayload: z__default.ZodObject<{
973
989
  q: z__default.ZodOptional<z__default.ZodString>;
974
990
  qi: z__default.ZodOptional<z__default.ZodString>;
975
991
  use: z__default.ZodOptional<z__default.ZodString>;
976
- x5c: z__default.ZodOptional<z__default.ZodString>;
992
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
977
993
  x5t: z__default.ZodOptional<z__default.ZodString>;
978
994
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
979
995
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1012,7 +1028,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1012
1028
  q: z__default.ZodOptional<z__default.ZodString>;
1013
1029
  qi: z__default.ZodOptional<z__default.ZodString>;
1014
1030
  use: z__default.ZodOptional<z__default.ZodString>;
1015
- x5c: z__default.ZodOptional<z__default.ZodString>;
1031
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1016
1032
  x5t: z__default.ZodOptional<z__default.ZodString>;
1017
1033
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1018
1034
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1048,7 +1064,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1048
1064
  q: z__default.ZodOptional<z__default.ZodString>;
1049
1065
  qi: z__default.ZodOptional<z__default.ZodString>;
1050
1066
  use: z__default.ZodOptional<z__default.ZodString>;
1051
- x5c: z__default.ZodOptional<z__default.ZodString>;
1067
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1052
1068
  x5t: z__default.ZodOptional<z__default.ZodString>;
1053
1069
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1054
1070
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1084,7 +1100,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1084
1100
  q: z__default.ZodOptional<z__default.ZodString>;
1085
1101
  qi: z__default.ZodOptional<z__default.ZodString>;
1086
1102
  use: z__default.ZodOptional<z__default.ZodString>;
1087
- x5c: z__default.ZodOptional<z__default.ZodString>;
1103
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1088
1104
  x5t: z__default.ZodOptional<z__default.ZodString>;
1089
1105
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1090
1106
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1133,7 +1149,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1133
1149
  q: z__default.ZodOptional<z__default.ZodString>;
1134
1150
  qi: z__default.ZodOptional<z__default.ZodString>;
1135
1151
  use: z__default.ZodOptional<z__default.ZodString>;
1136
- x5c: z__default.ZodOptional<z__default.ZodString>;
1152
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1137
1153
  x5t: z__default.ZodOptional<z__default.ZodString>;
1138
1154
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1139
1155
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1169,7 +1185,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1169
1185
  q: z__default.ZodOptional<z__default.ZodString>;
1170
1186
  qi: z__default.ZodOptional<z__default.ZodString>;
1171
1187
  use: z__default.ZodOptional<z__default.ZodString>;
1172
- x5c: z__default.ZodOptional<z__default.ZodString>;
1188
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1173
1189
  x5t: z__default.ZodOptional<z__default.ZodString>;
1174
1190
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1175
1191
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1205,7 +1221,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1205
1221
  q: z__default.ZodOptional<z__default.ZodString>;
1206
1222
  qi: z__default.ZodOptional<z__default.ZodString>;
1207
1223
  use: z__default.ZodOptional<z__default.ZodString>;
1208
- x5c: z__default.ZodOptional<z__default.ZodString>;
1224
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1209
1225
  x5t: z__default.ZodOptional<z__default.ZodString>;
1210
1226
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1211
1227
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1244,7 +1260,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1244
1260
  q: z__default.ZodOptional<z__default.ZodString>;
1245
1261
  qi: z__default.ZodOptional<z__default.ZodString>;
1246
1262
  use: z__default.ZodOptional<z__default.ZodString>;
1247
- x5c: z__default.ZodOptional<z__default.ZodString>;
1263
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1248
1264
  x5t: z__default.ZodOptional<z__default.ZodString>;
1249
1265
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1250
1266
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1280,7 +1296,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1280
1296
  q: z__default.ZodOptional<z__default.ZodString>;
1281
1297
  qi: z__default.ZodOptional<z__default.ZodString>;
1282
1298
  use: z__default.ZodOptional<z__default.ZodString>;
1283
- x5c: z__default.ZodOptional<z__default.ZodString>;
1299
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1284
1300
  x5t: z__default.ZodOptional<z__default.ZodString>;
1285
1301
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1286
1302
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1316,7 +1332,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1316
1332
  q: z__default.ZodOptional<z__default.ZodString>;
1317
1333
  qi: z__default.ZodOptional<z__default.ZodString>;
1318
1334
  use: z__default.ZodOptional<z__default.ZodString>;
1319
- x5c: z__default.ZodOptional<z__default.ZodString>;
1335
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1320
1336
  x5t: z__default.ZodOptional<z__default.ZodString>;
1321
1337
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1322
1338
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1355,7 +1371,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1355
1371
  q: z__default.ZodOptional<z__default.ZodString>;
1356
1372
  qi: z__default.ZodOptional<z__default.ZodString>;
1357
1373
  use: z__default.ZodOptional<z__default.ZodString>;
1358
- x5c: z__default.ZodOptional<z__default.ZodString>;
1374
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1359
1375
  x5t: z__default.ZodOptional<z__default.ZodString>;
1360
1376
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1361
1377
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1391,7 +1407,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1391
1407
  q: z__default.ZodOptional<z__default.ZodString>;
1392
1408
  qi: z__default.ZodOptional<z__default.ZodString>;
1393
1409
  use: z__default.ZodOptional<z__default.ZodString>;
1394
- x5c: z__default.ZodOptional<z__default.ZodString>;
1410
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1395
1411
  x5t: z__default.ZodOptional<z__default.ZodString>;
1396
1412
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1397
1413
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1427,7 +1443,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1427
1443
  q: z__default.ZodOptional<z__default.ZodString>;
1428
1444
  qi: z__default.ZodOptional<z__default.ZodString>;
1429
1445
  use: z__default.ZodOptional<z__default.ZodString>;
1430
- x5c: z__default.ZodOptional<z__default.ZodString>;
1446
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1431
1447
  x5t: z__default.ZodOptional<z__default.ZodString>;
1432
1448
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1433
1449
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1476,7 +1492,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1476
1492
  q: z__default.ZodOptional<z__default.ZodString>;
1477
1493
  qi: z__default.ZodOptional<z__default.ZodString>;
1478
1494
  use: z__default.ZodOptional<z__default.ZodString>;
1479
- x5c: z__default.ZodOptional<z__default.ZodString>;
1495
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1480
1496
  x5t: z__default.ZodOptional<z__default.ZodString>;
1481
1497
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1482
1498
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1512,7 +1528,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1512
1528
  q: z__default.ZodOptional<z__default.ZodString>;
1513
1529
  qi: z__default.ZodOptional<z__default.ZodString>;
1514
1530
  use: z__default.ZodOptional<z__default.ZodString>;
1515
- x5c: z__default.ZodOptional<z__default.ZodString>;
1531
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1516
1532
  x5t: z__default.ZodOptional<z__default.ZodString>;
1517
1533
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1518
1534
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1548,7 +1564,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1548
1564
  q: z__default.ZodOptional<z__default.ZodString>;
1549
1565
  qi: z__default.ZodOptional<z__default.ZodString>;
1550
1566
  use: z__default.ZodOptional<z__default.ZodString>;
1551
- x5c: z__default.ZodOptional<z__default.ZodString>;
1567
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1552
1568
  x5t: z__default.ZodOptional<z__default.ZodString>;
1553
1569
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1554
1570
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1587,7 +1603,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1587
1603
  q: z__default.ZodOptional<z__default.ZodString>;
1588
1604
  qi: z__default.ZodOptional<z__default.ZodString>;
1589
1605
  use: z__default.ZodOptional<z__default.ZodString>;
1590
- x5c: z__default.ZodOptional<z__default.ZodString>;
1606
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1591
1607
  x5t: z__default.ZodOptional<z__default.ZodString>;
1592
1608
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1593
1609
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1623,7 +1639,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1623
1639
  q: z__default.ZodOptional<z__default.ZodString>;
1624
1640
  qi: z__default.ZodOptional<z__default.ZodString>;
1625
1641
  use: z__default.ZodOptional<z__default.ZodString>;
1626
- x5c: z__default.ZodOptional<z__default.ZodString>;
1642
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1627
1643
  x5t: z__default.ZodOptional<z__default.ZodString>;
1628
1644
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1629
1645
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1659,7 +1675,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1659
1675
  q: z__default.ZodOptional<z__default.ZodString>;
1660
1676
  qi: z__default.ZodOptional<z__default.ZodString>;
1661
1677
  use: z__default.ZodOptional<z__default.ZodString>;
1662
- x5c: z__default.ZodOptional<z__default.ZodString>;
1678
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1663
1679
  x5t: z__default.ZodOptional<z__default.ZodString>;
1664
1680
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1665
1681
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1698,7 +1714,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1698
1714
  q: z__default.ZodOptional<z__default.ZodString>;
1699
1715
  qi: z__default.ZodOptional<z__default.ZodString>;
1700
1716
  use: z__default.ZodOptional<z__default.ZodString>;
1701
- x5c: z__default.ZodOptional<z__default.ZodString>;
1717
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1702
1718
  x5t: z__default.ZodOptional<z__default.ZodString>;
1703
1719
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1704
1720
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1734,7 +1750,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1734
1750
  q: z__default.ZodOptional<z__default.ZodString>;
1735
1751
  qi: z__default.ZodOptional<z__default.ZodString>;
1736
1752
  use: z__default.ZodOptional<z__default.ZodString>;
1737
- x5c: z__default.ZodOptional<z__default.ZodString>;
1753
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1738
1754
  x5t: z__default.ZodOptional<z__default.ZodString>;
1739
1755
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1740
1756
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1770,7 +1786,7 @@ declare const zJwtPayload: z__default.ZodObject<{
1770
1786
  q: z__default.ZodOptional<z__default.ZodString>;
1771
1787
  qi: z__default.ZodOptional<z__default.ZodString>;
1772
1788
  use: z__default.ZodOptional<z__default.ZodString>;
1773
- x5c: z__default.ZodOptional<z__default.ZodString>;
1789
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1774
1790
  x5t: z__default.ZodOptional<z__default.ZodString>;
1775
1791
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1776
1792
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1816,7 +1832,7 @@ declare const zJwtHeader: z__default.ZodObject<{
1816
1832
  q: z__default.ZodOptional<z__default.ZodString>;
1817
1833
  qi: z__default.ZodOptional<z__default.ZodString>;
1818
1834
  use: z__default.ZodOptional<z__default.ZodString>;
1819
- x5c: z__default.ZodOptional<z__default.ZodString>;
1835
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1820
1836
  x5t: z__default.ZodOptional<z__default.ZodString>;
1821
1837
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1822
1838
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1852,7 +1868,7 @@ declare const zJwtHeader: z__default.ZodObject<{
1852
1868
  q: z__default.ZodOptional<z__default.ZodString>;
1853
1869
  qi: z__default.ZodOptional<z__default.ZodString>;
1854
1870
  use: z__default.ZodOptional<z__default.ZodString>;
1855
- x5c: z__default.ZodOptional<z__default.ZodString>;
1871
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1856
1872
  x5t: z__default.ZodOptional<z__default.ZodString>;
1857
1873
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1858
1874
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1888,7 +1904,7 @@ declare const zJwtHeader: z__default.ZodObject<{
1888
1904
  q: z__default.ZodOptional<z__default.ZodString>;
1889
1905
  qi: z__default.ZodOptional<z__default.ZodString>;
1890
1906
  use: z__default.ZodOptional<z__default.ZodString>;
1891
- x5c: z__default.ZodOptional<z__default.ZodString>;
1907
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1892
1908
  x5t: z__default.ZodOptional<z__default.ZodString>;
1893
1909
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1894
1910
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1931,7 +1947,7 @@ declare const zJwtHeader: z__default.ZodObject<{
1931
1947
  q: z__default.ZodOptional<z__default.ZodString>;
1932
1948
  qi: z__default.ZodOptional<z__default.ZodString>;
1933
1949
  use: z__default.ZodOptional<z__default.ZodString>;
1934
- x5c: z__default.ZodOptional<z__default.ZodString>;
1950
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1935
1951
  x5t: z__default.ZodOptional<z__default.ZodString>;
1936
1952
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1937
1953
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -1967,7 +1983,7 @@ declare const zJwtHeader: z__default.ZodObject<{
1967
1983
  q: z__default.ZodOptional<z__default.ZodString>;
1968
1984
  qi: z__default.ZodOptional<z__default.ZodString>;
1969
1985
  use: z__default.ZodOptional<z__default.ZodString>;
1970
- x5c: z__default.ZodOptional<z__default.ZodString>;
1986
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
1971
1987
  x5t: z__default.ZodOptional<z__default.ZodString>;
1972
1988
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
1973
1989
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2003,7 +2019,7 @@ declare const zJwtHeader: z__default.ZodObject<{
2003
2019
  q: z__default.ZodOptional<z__default.ZodString>;
2004
2020
  qi: z__default.ZodOptional<z__default.ZodString>;
2005
2021
  use: z__default.ZodOptional<z__default.ZodString>;
2006
- x5c: z__default.ZodOptional<z__default.ZodString>;
2022
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2007
2023
  x5t: z__default.ZodOptional<z__default.ZodString>;
2008
2024
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2009
2025
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2046,7 +2062,7 @@ declare const zJwtHeader: z__default.ZodObject<{
2046
2062
  q: z__default.ZodOptional<z__default.ZodString>;
2047
2063
  qi: z__default.ZodOptional<z__default.ZodString>;
2048
2064
  use: z__default.ZodOptional<z__default.ZodString>;
2049
- x5c: z__default.ZodOptional<z__default.ZodString>;
2065
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2050
2066
  x5t: z__default.ZodOptional<z__default.ZodString>;
2051
2067
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2052
2068
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2082,7 +2098,7 @@ declare const zJwtHeader: z__default.ZodObject<{
2082
2098
  q: z__default.ZodOptional<z__default.ZodString>;
2083
2099
  qi: z__default.ZodOptional<z__default.ZodString>;
2084
2100
  use: z__default.ZodOptional<z__default.ZodString>;
2085
- x5c: z__default.ZodOptional<z__default.ZodString>;
2101
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2086
2102
  x5t: z__default.ZodOptional<z__default.ZodString>;
2087
2103
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2088
2104
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2118,7 +2134,7 @@ declare const zJwtHeader: z__default.ZodObject<{
2118
2134
  q: z__default.ZodOptional<z__default.ZodString>;
2119
2135
  qi: z__default.ZodOptional<z__default.ZodString>;
2120
2136
  use: z__default.ZodOptional<z__default.ZodString>;
2121
- x5c: z__default.ZodOptional<z__default.ZodString>;
2137
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2122
2138
  x5t: z__default.ZodOptional<z__default.ZodString>;
2123
2139
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2124
2140
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2157,8 +2173,24 @@ type VerifyJwtCallback = (jwtSigner: JwtSigner, jwt: {
2157
2173
  verified: false;
2158
2174
  signerJwk?: Jwk;
2159
2175
  }>;
2176
+ interface DecryptJweCallbackOptions {
2177
+ jwk: Jwk;
2178
+ }
2179
+ type DecryptJweCallback = (jwe: string, options?: DecryptJweCallbackOptions) => OrPromise<{
2180
+ decrypted: true;
2181
+ decryptionJwk: Jwk;
2182
+ payload: string;
2183
+ } | {
2184
+ decrypted: false;
2185
+ decryptionJwk?: Jwk;
2186
+ payload?: string;
2187
+ }>;
2188
+ type EncryptJweCallback = (jweEncryptor: JweEncryptor, data: string) => OrPromise<{
2189
+ encryptionJwk: Jwk;
2190
+ jwe: string;
2191
+ }>;
2160
2192
  /**
2161
- * Callback context provides the callbacks that are required for the oid4vc library
2193
+ * Callback context provides the callbacks that are required for the openid4vc library
2162
2194
  */
2163
2195
  interface CallbackContext {
2164
2196
  /**
@@ -2173,6 +2205,14 @@ interface CallbackContext {
2173
2205
  * Sign jwt callback for signing of Json Web Tokens
2174
2206
  */
2175
2207
  signJwt: SignJwtCallback;
2208
+ /**
2209
+ * Decrypt jwe callback for decrypting of Json Web Encryptions
2210
+ */
2211
+ decryptJwe: DecryptJweCallback;
2212
+ /**
2213
+ * Encrypt jwt callback for encrypting of Json Web Encryptions
2214
+ */
2215
+ encryptJwe: EncryptJweCallback;
2176
2216
  /**
2177
2217
  * Verify jwt callback for verification of Json Web Tokens
2178
2218
  */
@@ -2196,6 +2236,13 @@ interface CallbackContext {
2196
2236
  * scenarios where multiple authorization servers are supported.
2197
2237
  */
2198
2238
  clientAuthentication: ClientAuthenticationCallback;
2239
+ /**
2240
+ * Get the DNS names and URI names from a X.509 certificate
2241
+ */
2242
+ getX509CertificateMetadata?: (certificate: string) => {
2243
+ sanDnsNames: string[];
2244
+ sanUriNames: string[];
2245
+ };
2199
2246
  }
2200
2247
 
2201
2248
  interface CalculateJwkThumbprintOptions {
@@ -2264,7 +2311,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2264
2311
  q: z__default.ZodOptional<z__default.ZodString>;
2265
2312
  qi: z__default.ZodOptional<z__default.ZodString>;
2266
2313
  use: z__default.ZodOptional<z__default.ZodString>;
2267
- x5c: z__default.ZodOptional<z__default.ZodString>;
2314
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2268
2315
  x5t: z__default.ZodOptional<z__default.ZodString>;
2269
2316
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2270
2317
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2300,7 +2347,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2300
2347
  q: z__default.ZodOptional<z__default.ZodString>;
2301
2348
  qi: z__default.ZodOptional<z__default.ZodString>;
2302
2349
  use: z__default.ZodOptional<z__default.ZodString>;
2303
- x5c: z__default.ZodOptional<z__default.ZodString>;
2350
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2304
2351
  x5t: z__default.ZodOptional<z__default.ZodString>;
2305
2352
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2306
2353
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2336,7 +2383,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2336
2383
  q: z__default.ZodOptional<z__default.ZodString>;
2337
2384
  qi: z__default.ZodOptional<z__default.ZodString>;
2338
2385
  use: z__default.ZodOptional<z__default.ZodString>;
2339
- x5c: z__default.ZodOptional<z__default.ZodString>;
2386
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2340
2387
  x5t: z__default.ZodOptional<z__default.ZodString>;
2341
2388
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2342
2389
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2375,7 +2422,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2375
2422
  q: z__default.ZodOptional<z__default.ZodString>;
2376
2423
  qi: z__default.ZodOptional<z__default.ZodString>;
2377
2424
  use: z__default.ZodOptional<z__default.ZodString>;
2378
- x5c: z__default.ZodOptional<z__default.ZodString>;
2425
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2379
2426
  x5t: z__default.ZodOptional<z__default.ZodString>;
2380
2427
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2381
2428
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2411,7 +2458,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2411
2458
  q: z__default.ZodOptional<z__default.ZodString>;
2412
2459
  qi: z__default.ZodOptional<z__default.ZodString>;
2413
2460
  use: z__default.ZodOptional<z__default.ZodString>;
2414
- x5c: z__default.ZodOptional<z__default.ZodString>;
2461
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2415
2462
  x5t: z__default.ZodOptional<z__default.ZodString>;
2416
2463
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2417
2464
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2447,7 +2494,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2447
2494
  q: z__default.ZodOptional<z__default.ZodString>;
2448
2495
  qi: z__default.ZodOptional<z__default.ZodString>;
2449
2496
  use: z__default.ZodOptional<z__default.ZodString>;
2450
- x5c: z__default.ZodOptional<z__default.ZodString>;
2497
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2451
2498
  x5t: z__default.ZodOptional<z__default.ZodString>;
2452
2499
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2453
2500
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2486,7 +2533,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2486
2533
  q: z__default.ZodOptional<z__default.ZodString>;
2487
2534
  qi: z__default.ZodOptional<z__default.ZodString>;
2488
2535
  use: z__default.ZodOptional<z__default.ZodString>;
2489
- x5c: z__default.ZodOptional<z__default.ZodString>;
2536
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2490
2537
  x5t: z__default.ZodOptional<z__default.ZodString>;
2491
2538
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2492
2539
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2522,7 +2569,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2522
2569
  q: z__default.ZodOptional<z__default.ZodString>;
2523
2570
  qi: z__default.ZodOptional<z__default.ZodString>;
2524
2571
  use: z__default.ZodOptional<z__default.ZodString>;
2525
- x5c: z__default.ZodOptional<z__default.ZodString>;
2572
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2526
2573
  x5t: z__default.ZodOptional<z__default.ZodString>;
2527
2574
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2528
2575
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2558,7 +2605,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2558
2605
  q: z__default.ZodOptional<z__default.ZodString>;
2559
2606
  qi: z__default.ZodOptional<z__default.ZodString>;
2560
2607
  use: z__default.ZodOptional<z__default.ZodString>;
2561
- x5c: z__default.ZodOptional<z__default.ZodString>;
2608
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2562
2609
  x5t: z__default.ZodOptional<z__default.ZodString>;
2563
2610
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2564
2611
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2610,7 +2657,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2610
2657
  q: z__default.ZodOptional<z__default.ZodString>;
2611
2658
  qi: z__default.ZodOptional<z__default.ZodString>;
2612
2659
  use: z__default.ZodOptional<z__default.ZodString>;
2613
- x5c: z__default.ZodOptional<z__default.ZodString>;
2660
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2614
2661
  x5t: z__default.ZodOptional<z__default.ZodString>;
2615
2662
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2616
2663
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2646,7 +2693,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2646
2693
  q: z__default.ZodOptional<z__default.ZodString>;
2647
2694
  qi: z__default.ZodOptional<z__default.ZodString>;
2648
2695
  use: z__default.ZodOptional<z__default.ZodString>;
2649
- x5c: z__default.ZodOptional<z__default.ZodString>;
2696
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2650
2697
  x5t: z__default.ZodOptional<z__default.ZodString>;
2651
2698
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2652
2699
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2682,7 +2729,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2682
2729
  q: z__default.ZodOptional<z__default.ZodString>;
2683
2730
  qi: z__default.ZodOptional<z__default.ZodString>;
2684
2731
  use: z__default.ZodOptional<z__default.ZodString>;
2685
- x5c: z__default.ZodOptional<z__default.ZodString>;
2732
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2686
2733
  x5t: z__default.ZodOptional<z__default.ZodString>;
2687
2734
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2688
2735
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2721,7 +2768,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2721
2768
  q: z__default.ZodOptional<z__default.ZodString>;
2722
2769
  qi: z__default.ZodOptional<z__default.ZodString>;
2723
2770
  use: z__default.ZodOptional<z__default.ZodString>;
2724
- x5c: z__default.ZodOptional<z__default.ZodString>;
2771
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2725
2772
  x5t: z__default.ZodOptional<z__default.ZodString>;
2726
2773
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2727
2774
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2757,7 +2804,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2757
2804
  q: z__default.ZodOptional<z__default.ZodString>;
2758
2805
  qi: z__default.ZodOptional<z__default.ZodString>;
2759
2806
  use: z__default.ZodOptional<z__default.ZodString>;
2760
- x5c: z__default.ZodOptional<z__default.ZodString>;
2807
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2761
2808
  x5t: z__default.ZodOptional<z__default.ZodString>;
2762
2809
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2763
2810
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2793,7 +2840,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2793
2840
  q: z__default.ZodOptional<z__default.ZodString>;
2794
2841
  qi: z__default.ZodOptional<z__default.ZodString>;
2795
2842
  use: z__default.ZodOptional<z__default.ZodString>;
2796
- x5c: z__default.ZodOptional<z__default.ZodString>;
2843
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2797
2844
  x5t: z__default.ZodOptional<z__default.ZodString>;
2798
2845
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2799
2846
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2832,7 +2879,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2832
2879
  q: z__default.ZodOptional<z__default.ZodString>;
2833
2880
  qi: z__default.ZodOptional<z__default.ZodString>;
2834
2881
  use: z__default.ZodOptional<z__default.ZodString>;
2835
- x5c: z__default.ZodOptional<z__default.ZodString>;
2882
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2836
2883
  x5t: z__default.ZodOptional<z__default.ZodString>;
2837
2884
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2838
2885
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2868,7 +2915,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2868
2915
  q: z__default.ZodOptional<z__default.ZodString>;
2869
2916
  qi: z__default.ZodOptional<z__default.ZodString>;
2870
2917
  use: z__default.ZodOptional<z__default.ZodString>;
2871
- x5c: z__default.ZodOptional<z__default.ZodString>;
2918
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2872
2919
  x5t: z__default.ZodOptional<z__default.ZodString>;
2873
2920
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2874
2921
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2904,7 +2951,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2904
2951
  q: z__default.ZodOptional<z__default.ZodString>;
2905
2952
  qi: z__default.ZodOptional<z__default.ZodString>;
2906
2953
  use: z__default.ZodOptional<z__default.ZodString>;
2907
- x5c: z__default.ZodOptional<z__default.ZodString>;
2954
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2908
2955
  x5t: z__default.ZodOptional<z__default.ZodString>;
2909
2956
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2910
2957
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2956,7 +3003,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2956
3003
  q: z__default.ZodOptional<z__default.ZodString>;
2957
3004
  qi: z__default.ZodOptional<z__default.ZodString>;
2958
3005
  use: z__default.ZodOptional<z__default.ZodString>;
2959
- x5c: z__default.ZodOptional<z__default.ZodString>;
3006
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2960
3007
  x5t: z__default.ZodOptional<z__default.ZodString>;
2961
3008
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2962
3009
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -2992,7 +3039,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
2992
3039
  q: z__default.ZodOptional<z__default.ZodString>;
2993
3040
  qi: z__default.ZodOptional<z__default.ZodString>;
2994
3041
  use: z__default.ZodOptional<z__default.ZodString>;
2995
- x5c: z__default.ZodOptional<z__default.ZodString>;
3042
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
2996
3043
  x5t: z__default.ZodOptional<z__default.ZodString>;
2997
3044
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
2998
3045
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3028,7 +3075,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3028
3075
  q: z__default.ZodOptional<z__default.ZodString>;
3029
3076
  qi: z__default.ZodOptional<z__default.ZodString>;
3030
3077
  use: z__default.ZodOptional<z__default.ZodString>;
3031
- x5c: z__default.ZodOptional<z__default.ZodString>;
3078
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3032
3079
  x5t: z__default.ZodOptional<z__default.ZodString>;
3033
3080
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3034
3081
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3067,7 +3114,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3067
3114
  q: z__default.ZodOptional<z__default.ZodString>;
3068
3115
  qi: z__default.ZodOptional<z__default.ZodString>;
3069
3116
  use: z__default.ZodOptional<z__default.ZodString>;
3070
- x5c: z__default.ZodOptional<z__default.ZodString>;
3117
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3071
3118
  x5t: z__default.ZodOptional<z__default.ZodString>;
3072
3119
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3073
3120
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3103,7 +3150,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3103
3150
  q: z__default.ZodOptional<z__default.ZodString>;
3104
3151
  qi: z__default.ZodOptional<z__default.ZodString>;
3105
3152
  use: z__default.ZodOptional<z__default.ZodString>;
3106
- x5c: z__default.ZodOptional<z__default.ZodString>;
3153
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3107
3154
  x5t: z__default.ZodOptional<z__default.ZodString>;
3108
3155
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3109
3156
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3139,7 +3186,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3139
3186
  q: z__default.ZodOptional<z__default.ZodString>;
3140
3187
  qi: z__default.ZodOptional<z__default.ZodString>;
3141
3188
  use: z__default.ZodOptional<z__default.ZodString>;
3142
- x5c: z__default.ZodOptional<z__default.ZodString>;
3189
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3143
3190
  x5t: z__default.ZodOptional<z__default.ZodString>;
3144
3191
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3145
3192
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3178,7 +3225,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3178
3225
  q: z__default.ZodOptional<z__default.ZodString>;
3179
3226
  qi: z__default.ZodOptional<z__default.ZodString>;
3180
3227
  use: z__default.ZodOptional<z__default.ZodString>;
3181
- x5c: z__default.ZodOptional<z__default.ZodString>;
3228
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3182
3229
  x5t: z__default.ZodOptional<z__default.ZodString>;
3183
3230
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3184
3231
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3214,7 +3261,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3214
3261
  q: z__default.ZodOptional<z__default.ZodString>;
3215
3262
  qi: z__default.ZodOptional<z__default.ZodString>;
3216
3263
  use: z__default.ZodOptional<z__default.ZodString>;
3217
- x5c: z__default.ZodOptional<z__default.ZodString>;
3264
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3218
3265
  x5t: z__default.ZodOptional<z__default.ZodString>;
3219
3266
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3220
3267
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3250,7 +3297,7 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3250
3297
  q: z__default.ZodOptional<z__default.ZodString>;
3251
3298
  qi: z__default.ZodOptional<z__default.ZodString>;
3252
3299
  use: z__default.ZodOptional<z__default.ZodString>;
3253
- x5c: z__default.ZodOptional<z__default.ZodString>;
3300
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3254
3301
  x5t: z__default.ZodOptional<z__default.ZodString>;
3255
3302
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3256
3303
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3261,71 +3308,6 @@ declare const zAccessTokenProfileJwtPayload: z__default.ZodObject<{
3261
3308
  }, z__default.ZodTypeAny, "passthrough">>;
3262
3309
  type AccessTokenProfileJwtPayload = z__default.infer<typeof zAccessTokenProfileJwtPayload>;
3263
3310
 
3264
- interface VerifyJwtOptions {
3265
- /**
3266
- * Compact jwt
3267
- */
3268
- compact: string;
3269
- /**
3270
- * Header of the jwt
3271
- */
3272
- header: JwtHeader;
3273
- /**
3274
- * Payload of the jwt.
3275
- */
3276
- payload: JwtPayload;
3277
- /**
3278
- * If not provided current time will be used.
3279
- *
3280
- * @default new Date()
3281
- */
3282
- now?: Date;
3283
- /**
3284
- * Whether to skip time based validation of `nbf` and `exp`.
3285
- * @default false
3286
- */
3287
- skipTimeBasedValidation?: boolean;
3288
- /**
3289
- * Callback to verify jwt signature
3290
- */
3291
- verifyJwtCallback: VerifyJwtCallback;
3292
- /**
3293
- * Signer of the jwt
3294
- */
3295
- signer: JwtSigner;
3296
- /**
3297
- * Custom error message
3298
- */
3299
- errorMessage?: string;
3300
- /**
3301
- * Allowed skew time in seconds for validity of token. Used for `exp` and `nbf`
3302
- * verification.
3303
- *
3304
- * @default 0
3305
- */
3306
- allowedSkewInSeconds?: number;
3307
- /**
3308
- * Expected value for the 'aud' claim
3309
- */
3310
- expectedAudience?: string;
3311
- /**
3312
- * Expected value for the 'iss' claim
3313
- */
3314
- expectedIssuer?: string;
3315
- /**
3316
- * Expected value for the 'nonce' claim
3317
- */
3318
- expectedNonce?: string;
3319
- /**
3320
- * Expected value for the 'sub' claim
3321
- */
3322
- expectedSubject?: string;
3323
- }
3324
- interface VerifyJwtReturn {
3325
- signer: JwtSignerWithJwk;
3326
- }
3327
- declare function verifyJwt(options: VerifyJwtOptions): Promise<VerifyJwtReturn>;
3328
-
3329
3311
  interface DecodeJwtOptions<HeaderSchema extends BaseSchema | undefined, PayloadSchema extends BaseSchema | undefined> {
3330
3312
  /**
3331
3313
  * The comapct encoded jwt
@@ -3343,8 +3325,8 @@ interface DecodeJwtOptions<HeaderSchema extends BaseSchema | undefined, PayloadS
3343
3325
  payloadSchema?: PayloadSchema;
3344
3326
  }
3345
3327
  type DecodeJwtResult<HeaderSchema extends BaseSchema | undefined = undefined, PayloadSchema extends BaseSchema | undefined = undefined> = {
3346
- header: InferSchemaOutput<HeaderSchema, typeof zJwtHeader>;
3347
- payload: InferSchemaOutput<PayloadSchema, typeof zJwtPayload>;
3328
+ header: InferSchemaOrDefaultOutput<HeaderSchema, typeof zJwtHeader>;
3329
+ payload: InferSchemaOrDefaultOutput<PayloadSchema, typeof zJwtPayload>;
3348
3330
  signature: string;
3349
3331
  };
3350
3332
  declare function decodeJwt<HeaderSchema extends BaseSchema | undefined = undefined, PayloadSchema extends BaseSchema | undefined = undefined>(options: DecodeJwtOptions<HeaderSchema, PayloadSchema>): DecodeJwtResult<HeaderSchema, PayloadSchema>;
@@ -3394,7 +3376,7 @@ declare function jwtHeaderFromJwtSigner(signer: JwtSigner): {
3394
3376
  q: z__default.ZodOptional<z__default.ZodString>;
3395
3377
  qi: z__default.ZodOptional<z__default.ZodString>;
3396
3378
  use: z__default.ZodOptional<z__default.ZodString>;
3397
- x5c: z__default.ZodOptional<z__default.ZodString>;
3379
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3398
3380
  x5t: z__default.ZodOptional<z__default.ZodString>;
3399
3381
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3400
3382
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3417,24 +3399,9 @@ declare function jwtHeaderFromJwtSigner(signer: JwtSigner): {
3417
3399
  };
3418
3400
  declare function jwtSignerFromJwt({ header, payload }: Pick<DecodeJwtResult, 'header' | 'payload'>): JwtSigner;
3419
3401
  type IsSchemaProvided<T> = T extends undefined ? false : true;
3420
- type InferSchemaOutput<ProvidedSchema extends BaseSchema | undefined, DefaultSchema extends BaseSchema> = IsSchemaProvided<ProvidedSchema> extends true ? ProvidedSchema extends BaseSchema ? z__default.infer<ProvidedSchema> : never : z__default.infer<DefaultSchema>;
3421
-
3422
- interface RequestLike {
3423
- headers: FetchHeaders;
3424
- method: HttpMethod;
3425
- url: string;
3426
- }
3402
+ type InferSchemaOrDefaultOutput<ProvidedSchema extends BaseSchema | undefined, DefaultSchema extends BaseSchema> = IsSchemaProvided<ProvidedSchema> extends true ? ProvidedSchema extends BaseSchema ? z__default.infer<ProvidedSchema> : never : z__default.infer<DefaultSchema>;
3427
3403
 
3428
- interface RequestDpopOptions {
3429
- /**
3430
- * Dpop nonce to use for constructing the dpop jwt
3431
- */
3432
- nonce?: string;
3433
- /**
3434
- * The signer of the dpop jwt
3435
- */
3436
- signer: JwtSignerJwk;
3437
- }
3404
+ declare const zCompactJwe: z$1.ZodString;
3438
3405
 
3439
3406
  declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3440
3407
  iss: z__default.ZodString;
@@ -3473,7 +3440,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3473
3440
  q: z__default.ZodOptional<z__default.ZodString>;
3474
3441
  qi: z__default.ZodOptional<z__default.ZodString>;
3475
3442
  use: z__default.ZodOptional<z__default.ZodString>;
3476
- x5c: z__default.ZodOptional<z__default.ZodString>;
3443
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3477
3444
  x5t: z__default.ZodOptional<z__default.ZodString>;
3478
3445
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3479
3446
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3509,7 +3476,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3509
3476
  q: z__default.ZodOptional<z__default.ZodString>;
3510
3477
  qi: z__default.ZodOptional<z__default.ZodString>;
3511
3478
  use: z__default.ZodOptional<z__default.ZodString>;
3512
- x5c: z__default.ZodOptional<z__default.ZodString>;
3479
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3513
3480
  x5t: z__default.ZodOptional<z__default.ZodString>;
3514
3481
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3515
3482
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3545,7 +3512,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3545
3512
  q: z__default.ZodOptional<z__default.ZodString>;
3546
3513
  qi: z__default.ZodOptional<z__default.ZodString>;
3547
3514
  use: z__default.ZodOptional<z__default.ZodString>;
3548
- x5c: z__default.ZodOptional<z__default.ZodString>;
3515
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3549
3516
  x5t: z__default.ZodOptional<z__default.ZodString>;
3550
3517
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3551
3518
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3585,7 +3552,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3585
3552
  q: z__default.ZodOptional<z__default.ZodString>;
3586
3553
  qi: z__default.ZodOptional<z__default.ZodString>;
3587
3554
  use: z__default.ZodOptional<z__default.ZodString>;
3588
- x5c: z__default.ZodOptional<z__default.ZodString>;
3555
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3589
3556
  x5t: z__default.ZodOptional<z__default.ZodString>;
3590
3557
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3591
3558
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3621,7 +3588,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3621
3588
  q: z__default.ZodOptional<z__default.ZodString>;
3622
3589
  qi: z__default.ZodOptional<z__default.ZodString>;
3623
3590
  use: z__default.ZodOptional<z__default.ZodString>;
3624
- x5c: z__default.ZodOptional<z__default.ZodString>;
3591
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3625
3592
  x5t: z__default.ZodOptional<z__default.ZodString>;
3626
3593
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3627
3594
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3657,7 +3624,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3657
3624
  q: z__default.ZodOptional<z__default.ZodString>;
3658
3625
  qi: z__default.ZodOptional<z__default.ZodString>;
3659
3626
  use: z__default.ZodOptional<z__default.ZodString>;
3660
- x5c: z__default.ZodOptional<z__default.ZodString>;
3627
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3661
3628
  x5t: z__default.ZodOptional<z__default.ZodString>;
3662
3629
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3663
3630
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3697,7 +3664,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3697
3664
  q: z__default.ZodOptional<z__default.ZodString>;
3698
3665
  qi: z__default.ZodOptional<z__default.ZodString>;
3699
3666
  use: z__default.ZodOptional<z__default.ZodString>;
3700
- x5c: z__default.ZodOptional<z__default.ZodString>;
3667
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3701
3668
  x5t: z__default.ZodOptional<z__default.ZodString>;
3702
3669
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3703
3670
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3733,7 +3700,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3733
3700
  q: z__default.ZodOptional<z__default.ZodString>;
3734
3701
  qi: z__default.ZodOptional<z__default.ZodString>;
3735
3702
  use: z__default.ZodOptional<z__default.ZodString>;
3736
- x5c: z__default.ZodOptional<z__default.ZodString>;
3703
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3737
3704
  x5t: z__default.ZodOptional<z__default.ZodString>;
3738
3705
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3739
3706
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3769,7 +3736,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3769
3736
  q: z__default.ZodOptional<z__default.ZodString>;
3770
3737
  qi: z__default.ZodOptional<z__default.ZodString>;
3771
3738
  use: z__default.ZodOptional<z__default.ZodString>;
3772
- x5c: z__default.ZodOptional<z__default.ZodString>;
3739
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3773
3740
  x5t: z__default.ZodOptional<z__default.ZodString>;
3774
3741
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3775
3742
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3821,7 +3788,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3821
3788
  q: z__default.ZodOptional<z__default.ZodString>;
3822
3789
  qi: z__default.ZodOptional<z__default.ZodString>;
3823
3790
  use: z__default.ZodOptional<z__default.ZodString>;
3824
- x5c: z__default.ZodOptional<z__default.ZodString>;
3791
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3825
3792
  x5t: z__default.ZodOptional<z__default.ZodString>;
3826
3793
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3827
3794
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3857,7 +3824,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3857
3824
  q: z__default.ZodOptional<z__default.ZodString>;
3858
3825
  qi: z__default.ZodOptional<z__default.ZodString>;
3859
3826
  use: z__default.ZodOptional<z__default.ZodString>;
3860
- x5c: z__default.ZodOptional<z__default.ZodString>;
3827
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3861
3828
  x5t: z__default.ZodOptional<z__default.ZodString>;
3862
3829
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3863
3830
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3893,7 +3860,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3893
3860
  q: z__default.ZodOptional<z__default.ZodString>;
3894
3861
  qi: z__default.ZodOptional<z__default.ZodString>;
3895
3862
  use: z__default.ZodOptional<z__default.ZodString>;
3896
- x5c: z__default.ZodOptional<z__default.ZodString>;
3863
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3897
3864
  x5t: z__default.ZodOptional<z__default.ZodString>;
3898
3865
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3899
3866
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3933,7 +3900,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3933
3900
  q: z__default.ZodOptional<z__default.ZodString>;
3934
3901
  qi: z__default.ZodOptional<z__default.ZodString>;
3935
3902
  use: z__default.ZodOptional<z__default.ZodString>;
3936
- x5c: z__default.ZodOptional<z__default.ZodString>;
3903
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3937
3904
  x5t: z__default.ZodOptional<z__default.ZodString>;
3938
3905
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3939
3906
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -3969,7 +3936,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
3969
3936
  q: z__default.ZodOptional<z__default.ZodString>;
3970
3937
  qi: z__default.ZodOptional<z__default.ZodString>;
3971
3938
  use: z__default.ZodOptional<z__default.ZodString>;
3972
- x5c: z__default.ZodOptional<z__default.ZodString>;
3939
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
3973
3940
  x5t: z__default.ZodOptional<z__default.ZodString>;
3974
3941
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
3975
3942
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4005,7 +3972,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4005
3972
  q: z__default.ZodOptional<z__default.ZodString>;
4006
3973
  qi: z__default.ZodOptional<z__default.ZodString>;
4007
3974
  use: z__default.ZodOptional<z__default.ZodString>;
4008
- x5c: z__default.ZodOptional<z__default.ZodString>;
3975
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4009
3976
  x5t: z__default.ZodOptional<z__default.ZodString>;
4010
3977
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4011
3978
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4045,7 +4012,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4045
4012
  q: z__default.ZodOptional<z__default.ZodString>;
4046
4013
  qi: z__default.ZodOptional<z__default.ZodString>;
4047
4014
  use: z__default.ZodOptional<z__default.ZodString>;
4048
- x5c: z__default.ZodOptional<z__default.ZodString>;
4015
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4049
4016
  x5t: z__default.ZodOptional<z__default.ZodString>;
4050
4017
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4051
4018
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4081,7 +4048,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4081
4048
  q: z__default.ZodOptional<z__default.ZodString>;
4082
4049
  qi: z__default.ZodOptional<z__default.ZodString>;
4083
4050
  use: z__default.ZodOptional<z__default.ZodString>;
4084
- x5c: z__default.ZodOptional<z__default.ZodString>;
4051
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4085
4052
  x5t: z__default.ZodOptional<z__default.ZodString>;
4086
4053
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4087
4054
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4117,7 +4084,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4117
4084
  q: z__default.ZodOptional<z__default.ZodString>;
4118
4085
  qi: z__default.ZodOptional<z__default.ZodString>;
4119
4086
  use: z__default.ZodOptional<z__default.ZodString>;
4120
- x5c: z__default.ZodOptional<z__default.ZodString>;
4087
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4121
4088
  x5t: z__default.ZodOptional<z__default.ZodString>;
4122
4089
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4123
4090
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4169,7 +4136,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4169
4136
  q: z__default.ZodOptional<z__default.ZodString>;
4170
4137
  qi: z__default.ZodOptional<z__default.ZodString>;
4171
4138
  use: z__default.ZodOptional<z__default.ZodString>;
4172
- x5c: z__default.ZodOptional<z__default.ZodString>;
4139
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4173
4140
  x5t: z__default.ZodOptional<z__default.ZodString>;
4174
4141
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4175
4142
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4205,7 +4172,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4205
4172
  q: z__default.ZodOptional<z__default.ZodString>;
4206
4173
  qi: z__default.ZodOptional<z__default.ZodString>;
4207
4174
  use: z__default.ZodOptional<z__default.ZodString>;
4208
- x5c: z__default.ZodOptional<z__default.ZodString>;
4175
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4209
4176
  x5t: z__default.ZodOptional<z__default.ZodString>;
4210
4177
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4211
4178
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4241,7 +4208,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4241
4208
  q: z__default.ZodOptional<z__default.ZodString>;
4242
4209
  qi: z__default.ZodOptional<z__default.ZodString>;
4243
4210
  use: z__default.ZodOptional<z__default.ZodString>;
4244
- x5c: z__default.ZodOptional<z__default.ZodString>;
4211
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4245
4212
  x5t: z__default.ZodOptional<z__default.ZodString>;
4246
4213
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4247
4214
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4281,7 +4248,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4281
4248
  q: z__default.ZodOptional<z__default.ZodString>;
4282
4249
  qi: z__default.ZodOptional<z__default.ZodString>;
4283
4250
  use: z__default.ZodOptional<z__default.ZodString>;
4284
- x5c: z__default.ZodOptional<z__default.ZodString>;
4251
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4285
4252
  x5t: z__default.ZodOptional<z__default.ZodString>;
4286
4253
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4287
4254
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4317,7 +4284,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4317
4284
  q: z__default.ZodOptional<z__default.ZodString>;
4318
4285
  qi: z__default.ZodOptional<z__default.ZodString>;
4319
4286
  use: z__default.ZodOptional<z__default.ZodString>;
4320
- x5c: z__default.ZodOptional<z__default.ZodString>;
4287
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4321
4288
  x5t: z__default.ZodOptional<z__default.ZodString>;
4322
4289
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4323
4290
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4353,7 +4320,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4353
4320
  q: z__default.ZodOptional<z__default.ZodString>;
4354
4321
  qi: z__default.ZodOptional<z__default.ZodString>;
4355
4322
  use: z__default.ZodOptional<z__default.ZodString>;
4356
- x5c: z__default.ZodOptional<z__default.ZodString>;
4323
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4357
4324
  x5t: z__default.ZodOptional<z__default.ZodString>;
4358
4325
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4359
4326
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4393,7 +4360,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4393
4360
  q: z__default.ZodOptional<z__default.ZodString>;
4394
4361
  qi: z__default.ZodOptional<z__default.ZodString>;
4395
4362
  use: z__default.ZodOptional<z__default.ZodString>;
4396
- x5c: z__default.ZodOptional<z__default.ZodString>;
4363
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4397
4364
  x5t: z__default.ZodOptional<z__default.ZodString>;
4398
4365
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4399
4366
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4429,7 +4396,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4429
4396
  q: z__default.ZodOptional<z__default.ZodString>;
4430
4397
  qi: z__default.ZodOptional<z__default.ZodString>;
4431
4398
  use: z__default.ZodOptional<z__default.ZodString>;
4432
- x5c: z__default.ZodOptional<z__default.ZodString>;
4399
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4433
4400
  x5t: z__default.ZodOptional<z__default.ZodString>;
4434
4401
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4435
4402
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4465,7 +4432,7 @@ declare const zClientAttestationJwtPayload: z__default.ZodObject<{
4465
4432
  q: z__default.ZodOptional<z__default.ZodString>;
4466
4433
  qi: z__default.ZodOptional<z__default.ZodString>;
4467
4434
  use: z__default.ZodOptional<z__default.ZodString>;
4468
- x5c: z__default.ZodOptional<z__default.ZodString>;
4435
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4469
4436
  x5t: z__default.ZodOptional<z__default.ZodString>;
4470
4437
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4471
4438
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4518,7 +4485,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4518
4485
  q: z__default.ZodOptional<z__default.ZodString>;
4519
4486
  qi: z__default.ZodOptional<z__default.ZodString>;
4520
4487
  use: z__default.ZodOptional<z__default.ZodString>;
4521
- x5c: z__default.ZodOptional<z__default.ZodString>;
4488
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4522
4489
  x5t: z__default.ZodOptional<z__default.ZodString>;
4523
4490
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4524
4491
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4554,7 +4521,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4554
4521
  q: z__default.ZodOptional<z__default.ZodString>;
4555
4522
  qi: z__default.ZodOptional<z__default.ZodString>;
4556
4523
  use: z__default.ZodOptional<z__default.ZodString>;
4557
- x5c: z__default.ZodOptional<z__default.ZodString>;
4524
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4558
4525
  x5t: z__default.ZodOptional<z__default.ZodString>;
4559
4526
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4560
4527
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4590,7 +4557,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4590
4557
  q: z__default.ZodOptional<z__default.ZodString>;
4591
4558
  qi: z__default.ZodOptional<z__default.ZodString>;
4592
4559
  use: z__default.ZodOptional<z__default.ZodString>;
4593
- x5c: z__default.ZodOptional<z__default.ZodString>;
4560
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4594
4561
  x5t: z__default.ZodOptional<z__default.ZodString>;
4595
4562
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4596
4563
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4633,7 +4600,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4633
4600
  q: z__default.ZodOptional<z__default.ZodString>;
4634
4601
  qi: z__default.ZodOptional<z__default.ZodString>;
4635
4602
  use: z__default.ZodOptional<z__default.ZodString>;
4636
- x5c: z__default.ZodOptional<z__default.ZodString>;
4603
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4637
4604
  x5t: z__default.ZodOptional<z__default.ZodString>;
4638
4605
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4639
4606
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4669,7 +4636,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4669
4636
  q: z__default.ZodOptional<z__default.ZodString>;
4670
4637
  qi: z__default.ZodOptional<z__default.ZodString>;
4671
4638
  use: z__default.ZodOptional<z__default.ZodString>;
4672
- x5c: z__default.ZodOptional<z__default.ZodString>;
4639
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4673
4640
  x5t: z__default.ZodOptional<z__default.ZodString>;
4674
4641
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4675
4642
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4705,7 +4672,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4705
4672
  q: z__default.ZodOptional<z__default.ZodString>;
4706
4673
  qi: z__default.ZodOptional<z__default.ZodString>;
4707
4674
  use: z__default.ZodOptional<z__default.ZodString>;
4708
- x5c: z__default.ZodOptional<z__default.ZodString>;
4675
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4709
4676
  x5t: z__default.ZodOptional<z__default.ZodString>;
4710
4677
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4711
4678
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4748,7 +4715,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4748
4715
  q: z__default.ZodOptional<z__default.ZodString>;
4749
4716
  qi: z__default.ZodOptional<z__default.ZodString>;
4750
4717
  use: z__default.ZodOptional<z__default.ZodString>;
4751
- x5c: z__default.ZodOptional<z__default.ZodString>;
4718
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4752
4719
  x5t: z__default.ZodOptional<z__default.ZodString>;
4753
4720
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4754
4721
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4784,7 +4751,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4784
4751
  q: z__default.ZodOptional<z__default.ZodString>;
4785
4752
  qi: z__default.ZodOptional<z__default.ZodString>;
4786
4753
  use: z__default.ZodOptional<z__default.ZodString>;
4787
- x5c: z__default.ZodOptional<z__default.ZodString>;
4754
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4788
4755
  x5t: z__default.ZodOptional<z__default.ZodString>;
4789
4756
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4790
4757
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4820,7 +4787,7 @@ declare const zClientAttestationJwtHeader: z__default.ZodObject<{
4820
4787
  q: z__default.ZodOptional<z__default.ZodString>;
4821
4788
  qi: z__default.ZodOptional<z__default.ZodString>;
4822
4789
  use: z__default.ZodOptional<z__default.ZodString>;
4823
- x5c: z__default.ZodOptional<z__default.ZodString>;
4790
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4824
4791
  x5t: z__default.ZodOptional<z__default.ZodString>;
4825
4792
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4826
4793
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4870,7 +4837,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
4870
4837
  q: z__default.ZodOptional<z__default.ZodString>;
4871
4838
  qi: z__default.ZodOptional<z__default.ZodString>;
4872
4839
  use: z__default.ZodOptional<z__default.ZodString>;
4873
- x5c: z__default.ZodOptional<z__default.ZodString>;
4840
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4874
4841
  x5t: z__default.ZodOptional<z__default.ZodString>;
4875
4842
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4876
4843
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4906,7 +4873,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
4906
4873
  q: z__default.ZodOptional<z__default.ZodString>;
4907
4874
  qi: z__default.ZodOptional<z__default.ZodString>;
4908
4875
  use: z__default.ZodOptional<z__default.ZodString>;
4909
- x5c: z__default.ZodOptional<z__default.ZodString>;
4876
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4910
4877
  x5t: z__default.ZodOptional<z__default.ZodString>;
4911
4878
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4912
4879
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4942,7 +4909,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
4942
4909
  q: z__default.ZodOptional<z__default.ZodString>;
4943
4910
  qi: z__default.ZodOptional<z__default.ZodString>;
4944
4911
  use: z__default.ZodOptional<z__default.ZodString>;
4945
- x5c: z__default.ZodOptional<z__default.ZodString>;
4912
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4946
4913
  x5t: z__default.ZodOptional<z__default.ZodString>;
4947
4914
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4948
4915
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -4981,7 +4948,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
4981
4948
  q: z__default.ZodOptional<z__default.ZodString>;
4982
4949
  qi: z__default.ZodOptional<z__default.ZodString>;
4983
4950
  use: z__default.ZodOptional<z__default.ZodString>;
4984
- x5c: z__default.ZodOptional<z__default.ZodString>;
4951
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
4985
4952
  x5t: z__default.ZodOptional<z__default.ZodString>;
4986
4953
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
4987
4954
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5017,7 +4984,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5017
4984
  q: z__default.ZodOptional<z__default.ZodString>;
5018
4985
  qi: z__default.ZodOptional<z__default.ZodString>;
5019
4986
  use: z__default.ZodOptional<z__default.ZodString>;
5020
- x5c: z__default.ZodOptional<z__default.ZodString>;
4987
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5021
4988
  x5t: z__default.ZodOptional<z__default.ZodString>;
5022
4989
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5023
4990
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5053,7 +5020,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5053
5020
  q: z__default.ZodOptional<z__default.ZodString>;
5054
5021
  qi: z__default.ZodOptional<z__default.ZodString>;
5055
5022
  use: z__default.ZodOptional<z__default.ZodString>;
5056
- x5c: z__default.ZodOptional<z__default.ZodString>;
5023
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5057
5024
  x5t: z__default.ZodOptional<z__default.ZodString>;
5058
5025
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5059
5026
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5092,7 +5059,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5092
5059
  q: z__default.ZodOptional<z__default.ZodString>;
5093
5060
  qi: z__default.ZodOptional<z__default.ZodString>;
5094
5061
  use: z__default.ZodOptional<z__default.ZodString>;
5095
- x5c: z__default.ZodOptional<z__default.ZodString>;
5062
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5096
5063
  x5t: z__default.ZodOptional<z__default.ZodString>;
5097
5064
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5098
5065
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5128,7 +5095,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5128
5095
  q: z__default.ZodOptional<z__default.ZodString>;
5129
5096
  qi: z__default.ZodOptional<z__default.ZodString>;
5130
5097
  use: z__default.ZodOptional<z__default.ZodString>;
5131
- x5c: z__default.ZodOptional<z__default.ZodString>;
5098
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5132
5099
  x5t: z__default.ZodOptional<z__default.ZodString>;
5133
5100
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5134
5101
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5164,7 +5131,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5164
5131
  q: z__default.ZodOptional<z__default.ZodString>;
5165
5132
  qi: z__default.ZodOptional<z__default.ZodString>;
5166
5133
  use: z__default.ZodOptional<z__default.ZodString>;
5167
- x5c: z__default.ZodOptional<z__default.ZodString>;
5134
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5168
5135
  x5t: z__default.ZodOptional<z__default.ZodString>;
5169
5136
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5170
5137
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5213,7 +5180,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5213
5180
  q: z__default.ZodOptional<z__default.ZodString>;
5214
5181
  qi: z__default.ZodOptional<z__default.ZodString>;
5215
5182
  use: z__default.ZodOptional<z__default.ZodString>;
5216
- x5c: z__default.ZodOptional<z__default.ZodString>;
5183
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5217
5184
  x5t: z__default.ZodOptional<z__default.ZodString>;
5218
5185
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5219
5186
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5249,7 +5216,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5249
5216
  q: z__default.ZodOptional<z__default.ZodString>;
5250
5217
  qi: z__default.ZodOptional<z__default.ZodString>;
5251
5218
  use: z__default.ZodOptional<z__default.ZodString>;
5252
- x5c: z__default.ZodOptional<z__default.ZodString>;
5219
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5253
5220
  x5t: z__default.ZodOptional<z__default.ZodString>;
5254
5221
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5255
5222
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5285,7 +5252,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5285
5252
  q: z__default.ZodOptional<z__default.ZodString>;
5286
5253
  qi: z__default.ZodOptional<z__default.ZodString>;
5287
5254
  use: z__default.ZodOptional<z__default.ZodString>;
5288
- x5c: z__default.ZodOptional<z__default.ZodString>;
5255
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5289
5256
  x5t: z__default.ZodOptional<z__default.ZodString>;
5290
5257
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5291
5258
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5324,7 +5291,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5324
5291
  q: z__default.ZodOptional<z__default.ZodString>;
5325
5292
  qi: z__default.ZodOptional<z__default.ZodString>;
5326
5293
  use: z__default.ZodOptional<z__default.ZodString>;
5327
- x5c: z__default.ZodOptional<z__default.ZodString>;
5294
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5328
5295
  x5t: z__default.ZodOptional<z__default.ZodString>;
5329
5296
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5330
5297
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5360,7 +5327,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5360
5327
  q: z__default.ZodOptional<z__default.ZodString>;
5361
5328
  qi: z__default.ZodOptional<z__default.ZodString>;
5362
5329
  use: z__default.ZodOptional<z__default.ZodString>;
5363
- x5c: z__default.ZodOptional<z__default.ZodString>;
5330
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5364
5331
  x5t: z__default.ZodOptional<z__default.ZodString>;
5365
5332
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5366
5333
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5396,7 +5363,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5396
5363
  q: z__default.ZodOptional<z__default.ZodString>;
5397
5364
  qi: z__default.ZodOptional<z__default.ZodString>;
5398
5365
  use: z__default.ZodOptional<z__default.ZodString>;
5399
- x5c: z__default.ZodOptional<z__default.ZodString>;
5366
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5400
5367
  x5t: z__default.ZodOptional<z__default.ZodString>;
5401
5368
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5402
5369
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5435,7 +5402,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5435
5402
  q: z__default.ZodOptional<z__default.ZodString>;
5436
5403
  qi: z__default.ZodOptional<z__default.ZodString>;
5437
5404
  use: z__default.ZodOptional<z__default.ZodString>;
5438
- x5c: z__default.ZodOptional<z__default.ZodString>;
5405
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5439
5406
  x5t: z__default.ZodOptional<z__default.ZodString>;
5440
5407
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5441
5408
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5471,7 +5438,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5471
5438
  q: z__default.ZodOptional<z__default.ZodString>;
5472
5439
  qi: z__default.ZodOptional<z__default.ZodString>;
5473
5440
  use: z__default.ZodOptional<z__default.ZodString>;
5474
- x5c: z__default.ZodOptional<z__default.ZodString>;
5441
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5475
5442
  x5t: z__default.ZodOptional<z__default.ZodString>;
5476
5443
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5477
5444
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5507,7 +5474,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5507
5474
  q: z__default.ZodOptional<z__default.ZodString>;
5508
5475
  qi: z__default.ZodOptional<z__default.ZodString>;
5509
5476
  use: z__default.ZodOptional<z__default.ZodString>;
5510
- x5c: z__default.ZodOptional<z__default.ZodString>;
5477
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5511
5478
  x5t: z__default.ZodOptional<z__default.ZodString>;
5512
5479
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5513
5480
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5556,7 +5523,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5556
5523
  q: z__default.ZodOptional<z__default.ZodString>;
5557
5524
  qi: z__default.ZodOptional<z__default.ZodString>;
5558
5525
  use: z__default.ZodOptional<z__default.ZodString>;
5559
- x5c: z__default.ZodOptional<z__default.ZodString>;
5526
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5560
5527
  x5t: z__default.ZodOptional<z__default.ZodString>;
5561
5528
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5562
5529
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5592,7 +5559,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5592
5559
  q: z__default.ZodOptional<z__default.ZodString>;
5593
5560
  qi: z__default.ZodOptional<z__default.ZodString>;
5594
5561
  use: z__default.ZodOptional<z__default.ZodString>;
5595
- x5c: z__default.ZodOptional<z__default.ZodString>;
5562
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5596
5563
  x5t: z__default.ZodOptional<z__default.ZodString>;
5597
5564
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5598
5565
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5628,7 +5595,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5628
5595
  q: z__default.ZodOptional<z__default.ZodString>;
5629
5596
  qi: z__default.ZodOptional<z__default.ZodString>;
5630
5597
  use: z__default.ZodOptional<z__default.ZodString>;
5631
- x5c: z__default.ZodOptional<z__default.ZodString>;
5598
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5632
5599
  x5t: z__default.ZodOptional<z__default.ZodString>;
5633
5600
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5634
5601
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5667,7 +5634,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5667
5634
  q: z__default.ZodOptional<z__default.ZodString>;
5668
5635
  qi: z__default.ZodOptional<z__default.ZodString>;
5669
5636
  use: z__default.ZodOptional<z__default.ZodString>;
5670
- x5c: z__default.ZodOptional<z__default.ZodString>;
5637
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5671
5638
  x5t: z__default.ZodOptional<z__default.ZodString>;
5672
5639
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5673
5640
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5703,7 +5670,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5703
5670
  q: z__default.ZodOptional<z__default.ZodString>;
5704
5671
  qi: z__default.ZodOptional<z__default.ZodString>;
5705
5672
  use: z__default.ZodOptional<z__default.ZodString>;
5706
- x5c: z__default.ZodOptional<z__default.ZodString>;
5673
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5707
5674
  x5t: z__default.ZodOptional<z__default.ZodString>;
5708
5675
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5709
5676
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5739,7 +5706,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5739
5706
  q: z__default.ZodOptional<z__default.ZodString>;
5740
5707
  qi: z__default.ZodOptional<z__default.ZodString>;
5741
5708
  use: z__default.ZodOptional<z__default.ZodString>;
5742
- x5c: z__default.ZodOptional<z__default.ZodString>;
5709
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5743
5710
  x5t: z__default.ZodOptional<z__default.ZodString>;
5744
5711
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5745
5712
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5778,7 +5745,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5778
5745
  q: z__default.ZodOptional<z__default.ZodString>;
5779
5746
  qi: z__default.ZodOptional<z__default.ZodString>;
5780
5747
  use: z__default.ZodOptional<z__default.ZodString>;
5781
- x5c: z__default.ZodOptional<z__default.ZodString>;
5748
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5782
5749
  x5t: z__default.ZodOptional<z__default.ZodString>;
5783
5750
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5784
5751
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5814,7 +5781,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5814
5781
  q: z__default.ZodOptional<z__default.ZodString>;
5815
5782
  qi: z__default.ZodOptional<z__default.ZodString>;
5816
5783
  use: z__default.ZodOptional<z__default.ZodString>;
5817
- x5c: z__default.ZodOptional<z__default.ZodString>;
5784
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5818
5785
  x5t: z__default.ZodOptional<z__default.ZodString>;
5819
5786
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5820
5787
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5850,7 +5817,7 @@ declare const zClientAttestationPopJwtPayload: z__default.ZodObject<{
5850
5817
  q: z__default.ZodOptional<z__default.ZodString>;
5851
5818
  qi: z__default.ZodOptional<z__default.ZodString>;
5852
5819
  use: z__default.ZodOptional<z__default.ZodString>;
5853
- x5c: z__default.ZodOptional<z__default.ZodString>;
5820
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5854
5821
  x5t: z__default.ZodOptional<z__default.ZodString>;
5855
5822
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5856
5823
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5896,7 +5863,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
5896
5863
  q: z__default.ZodOptional<z__default.ZodString>;
5897
5864
  qi: z__default.ZodOptional<z__default.ZodString>;
5898
5865
  use: z__default.ZodOptional<z__default.ZodString>;
5899
- x5c: z__default.ZodOptional<z__default.ZodString>;
5866
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5900
5867
  x5t: z__default.ZodOptional<z__default.ZodString>;
5901
5868
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5902
5869
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5932,7 +5899,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
5932
5899
  q: z__default.ZodOptional<z__default.ZodString>;
5933
5900
  qi: z__default.ZodOptional<z__default.ZodString>;
5934
5901
  use: z__default.ZodOptional<z__default.ZodString>;
5935
- x5c: z__default.ZodOptional<z__default.ZodString>;
5902
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5936
5903
  x5t: z__default.ZodOptional<z__default.ZodString>;
5937
5904
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5938
5905
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -5968,7 +5935,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
5968
5935
  q: z__default.ZodOptional<z__default.ZodString>;
5969
5936
  qi: z__default.ZodOptional<z__default.ZodString>;
5970
5937
  use: z__default.ZodOptional<z__default.ZodString>;
5971
- x5c: z__default.ZodOptional<z__default.ZodString>;
5938
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
5972
5939
  x5t: z__default.ZodOptional<z__default.ZodString>;
5973
5940
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
5974
5941
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6011,7 +5978,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
6011
5978
  q: z__default.ZodOptional<z__default.ZodString>;
6012
5979
  qi: z__default.ZodOptional<z__default.ZodString>;
6013
5980
  use: z__default.ZodOptional<z__default.ZodString>;
6014
- x5c: z__default.ZodOptional<z__default.ZodString>;
5981
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6015
5982
  x5t: z__default.ZodOptional<z__default.ZodString>;
6016
5983
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6017
5984
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6047,7 +6014,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
6047
6014
  q: z__default.ZodOptional<z__default.ZodString>;
6048
6015
  qi: z__default.ZodOptional<z__default.ZodString>;
6049
6016
  use: z__default.ZodOptional<z__default.ZodString>;
6050
- x5c: z__default.ZodOptional<z__default.ZodString>;
6017
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6051
6018
  x5t: z__default.ZodOptional<z__default.ZodString>;
6052
6019
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6053
6020
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6083,7 +6050,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
6083
6050
  q: z__default.ZodOptional<z__default.ZodString>;
6084
6051
  qi: z__default.ZodOptional<z__default.ZodString>;
6085
6052
  use: z__default.ZodOptional<z__default.ZodString>;
6086
- x5c: z__default.ZodOptional<z__default.ZodString>;
6053
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6087
6054
  x5t: z__default.ZodOptional<z__default.ZodString>;
6088
6055
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6089
6056
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6126,7 +6093,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
6126
6093
  q: z__default.ZodOptional<z__default.ZodString>;
6127
6094
  qi: z__default.ZodOptional<z__default.ZodString>;
6128
6095
  use: z__default.ZodOptional<z__default.ZodString>;
6129
- x5c: z__default.ZodOptional<z__default.ZodString>;
6096
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6130
6097
  x5t: z__default.ZodOptional<z__default.ZodString>;
6131
6098
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6132
6099
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6162,7 +6129,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
6162
6129
  q: z__default.ZodOptional<z__default.ZodString>;
6163
6130
  qi: z__default.ZodOptional<z__default.ZodString>;
6164
6131
  use: z__default.ZodOptional<z__default.ZodString>;
6165
- x5c: z__default.ZodOptional<z__default.ZodString>;
6132
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6166
6133
  x5t: z__default.ZodOptional<z__default.ZodString>;
6167
6134
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6168
6135
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6198,7 +6165,7 @@ declare const zClientAttestationPopJwtHeader: z__default.ZodObject<{
6198
6165
  q: z__default.ZodOptional<z__default.ZodString>;
6199
6166
  qi: z__default.ZodOptional<z__default.ZodString>;
6200
6167
  use: z__default.ZodOptional<z__default.ZodString>;
6201
- x5c: z__default.ZodOptional<z__default.ZodString>;
6168
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6202
6169
  x5t: z__default.ZodOptional<z__default.ZodString>;
6203
6170
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6204
6171
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6236,56 +6203,22 @@ interface RequestClientAttestationOptions {
6236
6203
  includeLegacyDraft2ClientAssertion?: boolean;
6237
6204
  }
6238
6205
 
6239
- interface Oauth2ErrorOptions {
6240
- cause?: unknown;
6241
- }
6242
- declare class Oauth2Error extends Error {
6243
- readonly cause?: unknown;
6244
- constructor(message?: string, options?: Oauth2ErrorOptions);
6245
- }
6246
-
6247
- declare class Oauth2JwtVerificationError extends Oauth2Error {
6248
- constructor(message?: string, options?: Oauth2ErrorOptions);
6249
- }
6250
-
6251
- declare class Oauth2JwtParseError extends Oauth2Error {
6252
- constructor(message?: string);
6253
- }
6254
-
6255
- declare enum SupportedAuthenticationScheme {
6256
- Bearer = "Bearer",
6257
- DPoP = "DPoP"
6206
+ declare const zAlgValueNotNone: z__default.ZodEffects<z__default.ZodString, string, string>;
6207
+ interface RequestLike {
6208
+ headers: FetchHeaders;
6209
+ method: HttpMethod;
6210
+ url: string;
6258
6211
  }
6259
6212
 
6260
- interface WwwAuthenticateHeaderChallenge {
6261
- scheme: SupportedAuthenticationScheme | (string & {});
6262
- /**
6263
- * Space delimited scope value that lists scopes required
6264
- * to access this resource.
6265
- */
6266
- scope?: string;
6213
+ interface RequestDpopOptions {
6267
6214
  /**
6268
- * Error should only be undefined if no access token was provided at all
6215
+ * Dpop nonce to use for constructing the dpop jwt
6269
6216
  */
6270
- error?: Oauth2ErrorCodes | string;
6271
- error_description?: string;
6217
+ nonce?: string;
6272
6218
  /**
6273
- * Additional payload items to include in the Www-Authenticate
6274
- * header response.
6219
+ * The signer of the dpop jwt
6275
6220
  */
6276
- additionalPayload?: Record<string, string>;
6277
- }
6278
- declare class Oauth2ResourceUnauthorizedError extends Oauth2Error {
6279
- readonly wwwAuthenticateHeaders: WwwAuthenticateHeaderChallenge[];
6280
- constructor(internalMessage: string | undefined, wwwAuthenticateHeaders: WwwAuthenticateHeaderChallenge | Array<WwwAuthenticateHeaderChallenge>);
6281
- static fromHeaderValue(value: string): Oauth2ResourceUnauthorizedError;
6282
- toHeaderValue(): string;
6283
- }
6284
-
6285
- declare class Oauth2ClientErrorResponseError extends Oauth2Error {
6286
- readonly errorResponse: Oauth2ErrorResponse;
6287
- readonly response: FetchResponse;
6288
- constructor(message: string, errorResponse: Oauth2ErrorResponse, response: FetchResponse);
6221
+ signer: JwtSignerJwk;
6289
6222
  }
6290
6223
 
6291
6224
  declare const zAuthorizationChallengeRequest: z__default.ZodObject<{
@@ -6358,11 +6291,63 @@ declare const zAuthorizationChallengeErrorResponse: z__default.ZodObject<{
6358
6291
  }, z__default.ZodTypeAny, "passthrough">>;
6359
6292
  type AuthorizationChallengeErrorResponse = z__default.infer<typeof zAuthorizationChallengeErrorResponse>;
6360
6293
 
6294
+ interface Oauth2ErrorOptions {
6295
+ cause?: unknown;
6296
+ }
6297
+ declare class Oauth2Error extends Error {
6298
+ readonly cause?: unknown;
6299
+ constructor(message?: string, options?: Oauth2ErrorOptions);
6300
+ }
6301
+
6302
+ declare class Oauth2ClientErrorResponseError extends Oauth2Error {
6303
+ readonly errorResponse: Oauth2ErrorResponse;
6304
+ readonly response: FetchResponse;
6305
+ constructor(message: string, errorResponse: Oauth2ErrorResponse, response: FetchResponse);
6306
+ }
6307
+
6361
6308
  declare class Oauth2ClientAuthorizationChallengeError extends Oauth2ClientErrorResponseError {
6362
6309
  readonly errorResponse: AuthorizationChallengeErrorResponse;
6363
6310
  constructor(message: string, errorResponse: AuthorizationChallengeErrorResponse, response: FetchResponse);
6364
6311
  }
6365
6312
 
6313
+ declare class Oauth2JwtParseError extends Oauth2Error {
6314
+ constructor(message?: string);
6315
+ }
6316
+
6317
+ declare class Oauth2JwtVerificationError extends Oauth2Error {
6318
+ constructor(message?: string, options?: Oauth2ErrorOptions);
6319
+ }
6320
+
6321
+ declare enum SupportedAuthenticationScheme {
6322
+ Bearer = "Bearer",
6323
+ DPoP = "DPoP"
6324
+ }
6325
+
6326
+ interface WwwAuthenticateHeaderChallenge {
6327
+ scheme: SupportedAuthenticationScheme | (string & {});
6328
+ /**
6329
+ * Space delimited scope value that lists scopes required
6330
+ * to access this resource.
6331
+ */
6332
+ scope?: string;
6333
+ /**
6334
+ * Error should only be undefined if no access token was provided at all
6335
+ */
6336
+ error?: Oauth2ErrorCodes | string;
6337
+ error_description?: string;
6338
+ /**
6339
+ * Additional payload items to include in the Www-Authenticate
6340
+ * header response.
6341
+ */
6342
+ additionalPayload?: Record<string, string>;
6343
+ }
6344
+ declare class Oauth2ResourceUnauthorizedError extends Oauth2Error {
6345
+ readonly wwwAuthenticateHeaders: WwwAuthenticateHeaderChallenge[];
6346
+ constructor(internalMessage: string | undefined, wwwAuthenticateHeaders: WwwAuthenticateHeaderChallenge | Array<WwwAuthenticateHeaderChallenge>);
6347
+ static fromHeaderValue(value: string): Oauth2ResourceUnauthorizedError;
6348
+ toHeaderValue(): string;
6349
+ }
6350
+
6366
6351
  interface Oauth2ServerErrorResponseErrorOptions extends Oauth2ErrorOptions {
6367
6352
  internalMessage?: string;
6368
6353
  /**
@@ -6470,7 +6455,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6470
6455
  q: z__default.ZodOptional<z__default.ZodString>;
6471
6456
  qi: z__default.ZodOptional<z__default.ZodString>;
6472
6457
  use: z__default.ZodOptional<z__default.ZodString>;
6473
- x5c: z__default.ZodOptional<z__default.ZodString>;
6458
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6474
6459
  x5t: z__default.ZodOptional<z__default.ZodString>;
6475
6460
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6476
6461
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6506,7 +6491,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6506
6491
  q: z__default.ZodOptional<z__default.ZodString>;
6507
6492
  qi: z__default.ZodOptional<z__default.ZodString>;
6508
6493
  use: z__default.ZodOptional<z__default.ZodString>;
6509
- x5c: z__default.ZodOptional<z__default.ZodString>;
6494
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6510
6495
  x5t: z__default.ZodOptional<z__default.ZodString>;
6511
6496
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6512
6497
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6542,7 +6527,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6542
6527
  q: z__default.ZodOptional<z__default.ZodString>;
6543
6528
  qi: z__default.ZodOptional<z__default.ZodString>;
6544
6529
  use: z__default.ZodOptional<z__default.ZodString>;
6545
- x5c: z__default.ZodOptional<z__default.ZodString>;
6530
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6546
6531
  x5t: z__default.ZodOptional<z__default.ZodString>;
6547
6532
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6548
6533
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6581,7 +6566,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6581
6566
  q: z__default.ZodOptional<z__default.ZodString>;
6582
6567
  qi: z__default.ZodOptional<z__default.ZodString>;
6583
6568
  use: z__default.ZodOptional<z__default.ZodString>;
6584
- x5c: z__default.ZodOptional<z__default.ZodString>;
6569
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6585
6570
  x5t: z__default.ZodOptional<z__default.ZodString>;
6586
6571
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6587
6572
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6617,7 +6602,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6617
6602
  q: z__default.ZodOptional<z__default.ZodString>;
6618
6603
  qi: z__default.ZodOptional<z__default.ZodString>;
6619
6604
  use: z__default.ZodOptional<z__default.ZodString>;
6620
- x5c: z__default.ZodOptional<z__default.ZodString>;
6605
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6621
6606
  x5t: z__default.ZodOptional<z__default.ZodString>;
6622
6607
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6623
6608
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6653,7 +6638,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6653
6638
  q: z__default.ZodOptional<z__default.ZodString>;
6654
6639
  qi: z__default.ZodOptional<z__default.ZodString>;
6655
6640
  use: z__default.ZodOptional<z__default.ZodString>;
6656
- x5c: z__default.ZodOptional<z__default.ZodString>;
6641
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6657
6642
  x5t: z__default.ZodOptional<z__default.ZodString>;
6658
6643
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6659
6644
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6692,7 +6677,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6692
6677
  q: z__default.ZodOptional<z__default.ZodString>;
6693
6678
  qi: z__default.ZodOptional<z__default.ZodString>;
6694
6679
  use: z__default.ZodOptional<z__default.ZodString>;
6695
- x5c: z__default.ZodOptional<z__default.ZodString>;
6680
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6696
6681
  x5t: z__default.ZodOptional<z__default.ZodString>;
6697
6682
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6698
6683
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6728,7 +6713,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6728
6713
  q: z__default.ZodOptional<z__default.ZodString>;
6729
6714
  qi: z__default.ZodOptional<z__default.ZodString>;
6730
6715
  use: z__default.ZodOptional<z__default.ZodString>;
6731
- x5c: z__default.ZodOptional<z__default.ZodString>;
6716
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6732
6717
  x5t: z__default.ZodOptional<z__default.ZodString>;
6733
6718
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6734
6719
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6764,7 +6749,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6764
6749
  q: z__default.ZodOptional<z__default.ZodString>;
6765
6750
  qi: z__default.ZodOptional<z__default.ZodString>;
6766
6751
  use: z__default.ZodOptional<z__default.ZodString>;
6767
- x5c: z__default.ZodOptional<z__default.ZodString>;
6752
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6768
6753
  x5t: z__default.ZodOptional<z__default.ZodString>;
6769
6754
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6770
6755
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6817,7 +6802,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6817
6802
  q: z__default.ZodOptional<z__default.ZodString>;
6818
6803
  qi: z__default.ZodOptional<z__default.ZodString>;
6819
6804
  use: z__default.ZodOptional<z__default.ZodString>;
6820
- x5c: z__default.ZodOptional<z__default.ZodString>;
6805
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6821
6806
  x5t: z__default.ZodOptional<z__default.ZodString>;
6822
6807
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6823
6808
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6853,7 +6838,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6853
6838
  q: z__default.ZodOptional<z__default.ZodString>;
6854
6839
  qi: z__default.ZodOptional<z__default.ZodString>;
6855
6840
  use: z__default.ZodOptional<z__default.ZodString>;
6856
- x5c: z__default.ZodOptional<z__default.ZodString>;
6841
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6857
6842
  x5t: z__default.ZodOptional<z__default.ZodString>;
6858
6843
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6859
6844
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6889,7 +6874,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6889
6874
  q: z__default.ZodOptional<z__default.ZodString>;
6890
6875
  qi: z__default.ZodOptional<z__default.ZodString>;
6891
6876
  use: z__default.ZodOptional<z__default.ZodString>;
6892
- x5c: z__default.ZodOptional<z__default.ZodString>;
6877
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6893
6878
  x5t: z__default.ZodOptional<z__default.ZodString>;
6894
6879
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6895
6880
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6928,7 +6913,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6928
6913
  q: z__default.ZodOptional<z__default.ZodString>;
6929
6914
  qi: z__default.ZodOptional<z__default.ZodString>;
6930
6915
  use: z__default.ZodOptional<z__default.ZodString>;
6931
- x5c: z__default.ZodOptional<z__default.ZodString>;
6916
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6932
6917
  x5t: z__default.ZodOptional<z__default.ZodString>;
6933
6918
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6934
6919
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -6964,7 +6949,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
6964
6949
  q: z__default.ZodOptional<z__default.ZodString>;
6965
6950
  qi: z__default.ZodOptional<z__default.ZodString>;
6966
6951
  use: z__default.ZodOptional<z__default.ZodString>;
6967
- x5c: z__default.ZodOptional<z__default.ZodString>;
6952
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
6968
6953
  x5t: z__default.ZodOptional<z__default.ZodString>;
6969
6954
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
6970
6955
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7000,7 +6985,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7000
6985
  q: z__default.ZodOptional<z__default.ZodString>;
7001
6986
  qi: z__default.ZodOptional<z__default.ZodString>;
7002
6987
  use: z__default.ZodOptional<z__default.ZodString>;
7003
- x5c: z__default.ZodOptional<z__default.ZodString>;
6988
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7004
6989
  x5t: z__default.ZodOptional<z__default.ZodString>;
7005
6990
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7006
6991
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7039,7 +7024,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7039
7024
  q: z__default.ZodOptional<z__default.ZodString>;
7040
7025
  qi: z__default.ZodOptional<z__default.ZodString>;
7041
7026
  use: z__default.ZodOptional<z__default.ZodString>;
7042
- x5c: z__default.ZodOptional<z__default.ZodString>;
7027
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7043
7028
  x5t: z__default.ZodOptional<z__default.ZodString>;
7044
7029
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7045
7030
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7075,7 +7060,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7075
7060
  q: z__default.ZodOptional<z__default.ZodString>;
7076
7061
  qi: z__default.ZodOptional<z__default.ZodString>;
7077
7062
  use: z__default.ZodOptional<z__default.ZodString>;
7078
- x5c: z__default.ZodOptional<z__default.ZodString>;
7063
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7079
7064
  x5t: z__default.ZodOptional<z__default.ZodString>;
7080
7065
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7081
7066
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7111,7 +7096,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7111
7096
  q: z__default.ZodOptional<z__default.ZodString>;
7112
7097
  qi: z__default.ZodOptional<z__default.ZodString>;
7113
7098
  use: z__default.ZodOptional<z__default.ZodString>;
7114
- x5c: z__default.ZodOptional<z__default.ZodString>;
7099
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7115
7100
  x5t: z__default.ZodOptional<z__default.ZodString>;
7116
7101
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7117
7102
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7164,7 +7149,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7164
7149
  q: z__default.ZodOptional<z__default.ZodString>;
7165
7150
  qi: z__default.ZodOptional<z__default.ZodString>;
7166
7151
  use: z__default.ZodOptional<z__default.ZodString>;
7167
- x5c: z__default.ZodOptional<z__default.ZodString>;
7152
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7168
7153
  x5t: z__default.ZodOptional<z__default.ZodString>;
7169
7154
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7170
7155
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7200,7 +7185,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7200
7185
  q: z__default.ZodOptional<z__default.ZodString>;
7201
7186
  qi: z__default.ZodOptional<z__default.ZodString>;
7202
7187
  use: z__default.ZodOptional<z__default.ZodString>;
7203
- x5c: z__default.ZodOptional<z__default.ZodString>;
7188
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7204
7189
  x5t: z__default.ZodOptional<z__default.ZodString>;
7205
7190
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7206
7191
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7236,7 +7221,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7236
7221
  q: z__default.ZodOptional<z__default.ZodString>;
7237
7222
  qi: z__default.ZodOptional<z__default.ZodString>;
7238
7223
  use: z__default.ZodOptional<z__default.ZodString>;
7239
- x5c: z__default.ZodOptional<z__default.ZodString>;
7224
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7240
7225
  x5t: z__default.ZodOptional<z__default.ZodString>;
7241
7226
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7242
7227
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7275,7 +7260,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7275
7260
  q: z__default.ZodOptional<z__default.ZodString>;
7276
7261
  qi: z__default.ZodOptional<z__default.ZodString>;
7277
7262
  use: z__default.ZodOptional<z__default.ZodString>;
7278
- x5c: z__default.ZodOptional<z__default.ZodString>;
7263
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7279
7264
  x5t: z__default.ZodOptional<z__default.ZodString>;
7280
7265
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7281
7266
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7311,7 +7296,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7311
7296
  q: z__default.ZodOptional<z__default.ZodString>;
7312
7297
  qi: z__default.ZodOptional<z__default.ZodString>;
7313
7298
  use: z__default.ZodOptional<z__default.ZodString>;
7314
- x5c: z__default.ZodOptional<z__default.ZodString>;
7299
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7315
7300
  x5t: z__default.ZodOptional<z__default.ZodString>;
7316
7301
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7317
7302
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7347,7 +7332,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7347
7332
  q: z__default.ZodOptional<z__default.ZodString>;
7348
7333
  qi: z__default.ZodOptional<z__default.ZodString>;
7349
7334
  use: z__default.ZodOptional<z__default.ZodString>;
7350
- x5c: z__default.ZodOptional<z__default.ZodString>;
7335
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7351
7336
  x5t: z__default.ZodOptional<z__default.ZodString>;
7352
7337
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7353
7338
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7386,7 +7371,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7386
7371
  q: z__default.ZodOptional<z__default.ZodString>;
7387
7372
  qi: z__default.ZodOptional<z__default.ZodString>;
7388
7373
  use: z__default.ZodOptional<z__default.ZodString>;
7389
- x5c: z__default.ZodOptional<z__default.ZodString>;
7374
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7390
7375
  x5t: z__default.ZodOptional<z__default.ZodString>;
7391
7376
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7392
7377
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7422,7 +7407,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7422
7407
  q: z__default.ZodOptional<z__default.ZodString>;
7423
7408
  qi: z__default.ZodOptional<z__default.ZodString>;
7424
7409
  use: z__default.ZodOptional<z__default.ZodString>;
7425
- x5c: z__default.ZodOptional<z__default.ZodString>;
7410
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7426
7411
  x5t: z__default.ZodOptional<z__default.ZodString>;
7427
7412
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7428
7413
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7458,7 +7443,7 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7458
7443
  q: z__default.ZodOptional<z__default.ZodString>;
7459
7444
  qi: z__default.ZodOptional<z__default.ZodString>;
7460
7445
  use: z__default.ZodOptional<z__default.ZodString>;
7461
- x5c: z__default.ZodOptional<z__default.ZodString>;
7446
+ x5c: z__default.ZodOptional<z__default.ZodArray<z__default.ZodString, "many">>;
7462
7447
  x5t: z__default.ZodOptional<z__default.ZodString>;
7463
7448
  'x5t#S256': z__default.ZodOptional<z__default.ZodString>;
7464
7449
  x5u: z__default.ZodOptional<z__default.ZodString>;
@@ -7468,121 +7453,22 @@ declare const zTokenIntrospectionResponse: z__default.ZodObject<{
7468
7453
  }, z__default.ZodTypeAny, "passthrough">>;
7469
7454
  type TokenIntrospectionResponse = z__default.infer<typeof zTokenIntrospectionResponse>;
7470
7455
 
7471
- declare enum PkceCodeChallengeMethod {
7472
- Plain = "plain",
7473
- S256 = "S256"
7474
- }
7475
- interface CreatePkceReturn {
7476
- codeVerifier: string;
7477
- codeChallenge: string;
7478
- codeChallengeMethod: PkceCodeChallengeMethod;
7479
- }
7480
-
7481
- declare const zPreAuthorizedCodeGrantIdentifier: z__default.ZodLiteral<"urn:ietf:params:oauth:grant-type:pre-authorized_code">;
7482
- declare const preAuthorizedCodeGrantIdentifier: "urn:ietf:params:oauth:grant-type:pre-authorized_code";
7483
- type PreAuthorizedCodeGrantIdentifier = z__default.infer<typeof zPreAuthorizedCodeGrantIdentifier>;
7484
- declare const zAuthorizationCodeGrantIdentifier: z__default.ZodLiteral<"authorization_code">;
7485
- declare const authorizationCodeGrantIdentifier: "authorization_code";
7486
- type AuthorizationCodeGrantIdentifier = z__default.infer<typeof zAuthorizationCodeGrantIdentifier>;
7487
- declare const zRefreshTokenGrantIdentifier: z__default.ZodLiteral<"refresh_token">;
7488
- declare const refreshTokenGrantIdentifier: "refresh_token";
7489
- type RefreshTokenGrantIdentifier = z__default.infer<typeof zRefreshTokenGrantIdentifier>;
7490
-
7491
- interface ParsedAccessTokenPreAuthorizedCodeRequestGrant {
7492
- grantType: PreAuthorizedCodeGrantIdentifier;
7493
- preAuthorizedCode: string;
7494
- txCode?: string;
7495
- }
7496
- interface ParsedAccessTokenAuthorizationCodeRequestGrant {
7497
- grantType: AuthorizationCodeGrantIdentifier;
7498
- code: string;
7456
+ interface RetrieveAccessTokenReturn {
7457
+ accessTokenResponse: AccessTokenResponse;
7458
+ dpop?: RequestDpopOptions;
7499
7459
  }
7500
- type ParsedAccessTokenRequestGrant = ParsedAccessTokenPreAuthorizedCodeRequestGrant | ParsedAccessTokenAuthorizationCodeRequestGrant;
7501
- interface ParseAccessTokenRequestResult {
7502
- accessTokenRequest: AccessTokenRequest;
7503
- grant: ParsedAccessTokenRequestGrant;
7460
+ interface RetrieveAccessTokenBaseOptions {
7504
7461
  /**
7505
- * The dpop jwt from the access token request headers
7462
+ * Authorization server to request the access token from
7506
7463
  */
7507
- dpopJwt?: string;
7464
+ authorizationServerMetadata: AuthorizationServerMetadata;
7508
7465
  /**
7509
- * The pkce code verifier from the access token request
7466
+ * Callbacks to use for requesting access token
7510
7467
  */
7511
- pkceCodeVerifier?: string;
7512
- }
7513
- interface ParseAccessTokenRequestOptions {
7514
- request: RequestLike;
7468
+ callbacks: Pick<CallbackContext, 'fetch' | 'generateRandom' | 'hash' | 'signJwt'>;
7515
7469
  /**
7516
- * The access token request as a JSON object. Your server should decode the
7517
- * `x-www-url-form-urlencoded` body into an object (e.g. using `bodyParser.urlEncoed()` in express)
7518
- */
7519
- accessTokenRequest: Record<string, unknown>;
7520
- }
7521
-
7522
- interface VerifyAccessTokenRequestDpop {
7523
- /**
7524
- * Whether dpop is required
7525
- */
7526
- required?: boolean;
7527
- /**
7528
- * The dpop jwt from the access token request
7529
- */
7530
- jwt?: string;
7531
- /**
7532
- * Allowed dpop signing alg values. If not provided
7533
- * any alg values are allowed and it's up to the `verifyJwtCallback`
7534
- * to handle the alg.
7535
- */
7536
- allowedSigningAlgs?: string[];
7537
- }
7538
- interface VerifyAccessTokenRequestPkce {
7539
- codeVerifier?: string;
7540
- codeChallenge: string;
7541
- codeChallengeMethod: PkceCodeChallengeMethod;
7542
- }
7543
- interface VerifyAccessTokenRequestReturn {
7544
- dpopJwk?: Jwk;
7545
- }
7546
- interface VerifyPreAuthorizedCodeAccessTokenRequestOptions {
7547
- grant: ParsedAccessTokenPreAuthorizedCodeRequestGrant;
7548
- accessTokenRequest: AccessTokenRequest;
7549
- request: RequestLike;
7550
- expectedPreAuthorizedCode: string;
7551
- expectedTxCode?: string;
7552
- dpop?: VerifyAccessTokenRequestDpop;
7553
- pkce?: VerifyAccessTokenRequestPkce;
7554
- preAuthorizedCodeExpiresAt?: Date;
7555
- now?: Date;
7556
- callbacks: Pick<CallbackContext, 'hash' | 'verifyJwt'>;
7557
- }
7558
- interface VerifyAuthorizationCodeAccessTokenRequestOptions {
7559
- grant: ParsedAccessTokenAuthorizationCodeRequestGrant;
7560
- accessTokenRequest: AccessTokenRequest;
7561
- request: RequestLike;
7562
- expectedCode: string;
7563
- dpop?: VerifyAccessTokenRequestDpop;
7564
- pkce?: VerifyAccessTokenRequestPkce;
7565
- codeExpiresAt?: Date;
7566
- now?: Date;
7567
- callbacks: Pick<CallbackContext, 'hash' | 'verifyJwt'>;
7568
- }
7569
-
7570
- interface RetrieveAccessTokenReturn {
7571
- accessTokenResponse: AccessTokenResponse;
7572
- dpop?: RequestDpopOptions;
7573
- }
7574
- interface RetrieveAccessTokenBaseOptions {
7575
- /**
7576
- * Authorization server to request the access token from
7577
- */
7578
- authorizationServerMetadata: AuthorizationServerMetadata;
7579
- /**
7580
- * Callbacks to use for requesting access token
7581
- */
7582
- callbacks: Pick<CallbackContext, 'fetch' | 'generateRandom' | 'hash' | 'signJwt'>;
7583
- /**
7584
- * The resource to which access is being requested. This can help the authorization
7585
- * server in determining the resource server to handle the authorization request for
7470
+ * The resource to which access is being requested. This can help the authorization
7471
+ * server in determining the resource server to handle the authorization request for
7586
7472
  */
7587
7473
  resource?: string;
7588
7474
  /**
@@ -7639,6 +7525,105 @@ interface RetrieveRefreshTokenAccessTokenOptions extends RetrieveAccessTokenBase
7639
7525
  additionalRequestPayload?: Record<string, unknown>;
7640
7526
  }
7641
7527
 
7528
+ declare enum PkceCodeChallengeMethod {
7529
+ Plain = "plain",
7530
+ S256 = "S256"
7531
+ }
7532
+ interface CreatePkceReturn {
7533
+ codeVerifier: string;
7534
+ codeChallenge: string;
7535
+ codeChallengeMethod: PkceCodeChallengeMethod;
7536
+ }
7537
+
7538
+ declare const zPreAuthorizedCodeGrantIdentifier: z__default.ZodLiteral<"urn:ietf:params:oauth:grant-type:pre-authorized_code">;
7539
+ declare const preAuthorizedCodeGrantIdentifier: "urn:ietf:params:oauth:grant-type:pre-authorized_code";
7540
+ type PreAuthorizedCodeGrantIdentifier = z__default.infer<typeof zPreAuthorizedCodeGrantIdentifier>;
7541
+ declare const zAuthorizationCodeGrantIdentifier: z__default.ZodLiteral<"authorization_code">;
7542
+ declare const authorizationCodeGrantIdentifier: "authorization_code";
7543
+ type AuthorizationCodeGrantIdentifier = z__default.infer<typeof zAuthorizationCodeGrantIdentifier>;
7544
+ declare const zRefreshTokenGrantIdentifier: z__default.ZodLiteral<"refresh_token">;
7545
+ declare const refreshTokenGrantIdentifier: "refresh_token";
7546
+ type RefreshTokenGrantIdentifier = z__default.infer<typeof zRefreshTokenGrantIdentifier>;
7547
+
7548
+ interface ParsedAccessTokenPreAuthorizedCodeRequestGrant {
7549
+ grantType: PreAuthorizedCodeGrantIdentifier;
7550
+ preAuthorizedCode: string;
7551
+ txCode?: string;
7552
+ }
7553
+ interface ParsedAccessTokenAuthorizationCodeRequestGrant {
7554
+ grantType: AuthorizationCodeGrantIdentifier;
7555
+ code: string;
7556
+ }
7557
+ type ParsedAccessTokenRequestGrant = ParsedAccessTokenPreAuthorizedCodeRequestGrant | ParsedAccessTokenAuthorizationCodeRequestGrant;
7558
+ interface ParseAccessTokenRequestResult {
7559
+ accessTokenRequest: AccessTokenRequest;
7560
+ grant: ParsedAccessTokenRequestGrant;
7561
+ /**
7562
+ * The dpop jwt from the access token request headers
7563
+ */
7564
+ dpopJwt?: string;
7565
+ /**
7566
+ * The pkce code verifier from the access token request
7567
+ */
7568
+ pkceCodeVerifier?: string;
7569
+ }
7570
+ interface ParseAccessTokenRequestOptions {
7571
+ request: RequestLike;
7572
+ /**
7573
+ * The access token request as a JSON object. Your server should decode the
7574
+ * `x-www-url-form-urlencoded` body into an object (e.g. using `bodyParser.urlEncoed()` in express)
7575
+ */
7576
+ accessTokenRequest: Record<string, unknown>;
7577
+ }
7578
+
7579
+ interface VerifyAccessTokenRequestDpop {
7580
+ /**
7581
+ * Whether dpop is required
7582
+ */
7583
+ required?: boolean;
7584
+ /**
7585
+ * The dpop jwt from the access token request
7586
+ */
7587
+ jwt?: string;
7588
+ /**
7589
+ * Allowed dpop signing alg values. If not provided
7590
+ * any alg values are allowed and it's up to the `verifyJwtCallback`
7591
+ * to handle the alg.
7592
+ */
7593
+ allowedSigningAlgs?: string[];
7594
+ }
7595
+ interface VerifyAccessTokenRequestPkce {
7596
+ codeVerifier?: string;
7597
+ codeChallenge: string;
7598
+ codeChallengeMethod: PkceCodeChallengeMethod;
7599
+ }
7600
+ interface VerifyAccessTokenRequestReturn {
7601
+ dpopJwk?: Jwk;
7602
+ }
7603
+ interface VerifyPreAuthorizedCodeAccessTokenRequestOptions {
7604
+ grant: ParsedAccessTokenPreAuthorizedCodeRequestGrant;
7605
+ accessTokenRequest: AccessTokenRequest;
7606
+ request: RequestLike;
7607
+ expectedPreAuthorizedCode: string;
7608
+ expectedTxCode?: string;
7609
+ dpop?: VerifyAccessTokenRequestDpop;
7610
+ pkce?: VerifyAccessTokenRequestPkce;
7611
+ preAuthorizedCodeExpiresAt?: Date;
7612
+ now?: Date;
7613
+ callbacks: Pick<CallbackContext, 'hash' | 'verifyJwt'>;
7614
+ }
7615
+ interface VerifyAuthorizationCodeAccessTokenRequestOptions {
7616
+ grant: ParsedAccessTokenAuthorizationCodeRequestGrant;
7617
+ accessTokenRequest: AccessTokenRequest;
7618
+ request: RequestLike;
7619
+ expectedCode: string;
7620
+ dpop?: VerifyAccessTokenRequestDpop;
7621
+ pkce?: VerifyAccessTokenRequestPkce;
7622
+ codeExpiresAt?: Date;
7623
+ now?: Date;
7624
+ callbacks: Pick<CallbackContext, 'hash' | 'verifyJwt'>;
7625
+ }
7626
+
7642
7627
  interface CreateAuthorizationRequestUrlOptions {
7643
7628
  /**
7644
7629
  * Callback context mostly for crypto related functionality
@@ -7804,7 +7789,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
7804
7789
  q: z.ZodOptional<z.ZodString>;
7805
7790
  qi: z.ZodOptional<z.ZodString>;
7806
7791
  use: z.ZodOptional<z.ZodString>;
7807
- x5c: z.ZodOptional<z.ZodString>;
7792
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
7808
7793
  x5t: z.ZodOptional<z.ZodString>;
7809
7794
  'x5t#S256': z.ZodOptional<z.ZodString>;
7810
7795
  x5u: z.ZodOptional<z.ZodString>;
@@ -7840,7 +7825,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
7840
7825
  q: z.ZodOptional<z.ZodString>;
7841
7826
  qi: z.ZodOptional<z.ZodString>;
7842
7827
  use: z.ZodOptional<z.ZodString>;
7843
- x5c: z.ZodOptional<z.ZodString>;
7828
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
7844
7829
  x5t: z.ZodOptional<z.ZodString>;
7845
7830
  'x5t#S256': z.ZodOptional<z.ZodString>;
7846
7831
  x5u: z.ZodOptional<z.ZodString>;
@@ -7876,7 +7861,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
7876
7861
  q: z.ZodOptional<z.ZodString>;
7877
7862
  qi: z.ZodOptional<z.ZodString>;
7878
7863
  use: z.ZodOptional<z.ZodString>;
7879
- x5c: z.ZodOptional<z.ZodString>;
7864
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
7880
7865
  x5t: z.ZodOptional<z.ZodString>;
7881
7866
  'x5t#S256': z.ZodOptional<z.ZodString>;
7882
7867
  x5u: z.ZodOptional<z.ZodString>;
@@ -7915,7 +7900,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
7915
7900
  q: z.ZodOptional<z.ZodString>;
7916
7901
  qi: z.ZodOptional<z.ZodString>;
7917
7902
  use: z.ZodOptional<z.ZodString>;
7918
- x5c: z.ZodOptional<z.ZodString>;
7903
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
7919
7904
  x5t: z.ZodOptional<z.ZodString>;
7920
7905
  'x5t#S256': z.ZodOptional<z.ZodString>;
7921
7906
  x5u: z.ZodOptional<z.ZodString>;
@@ -7951,7 +7936,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
7951
7936
  q: z.ZodOptional<z.ZodString>;
7952
7937
  qi: z.ZodOptional<z.ZodString>;
7953
7938
  use: z.ZodOptional<z.ZodString>;
7954
- x5c: z.ZodOptional<z.ZodString>;
7939
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
7955
7940
  x5t: z.ZodOptional<z.ZodString>;
7956
7941
  'x5t#S256': z.ZodOptional<z.ZodString>;
7957
7942
  x5u: z.ZodOptional<z.ZodString>;
@@ -7987,7 +7972,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
7987
7972
  q: z.ZodOptional<z.ZodString>;
7988
7973
  qi: z.ZodOptional<z.ZodString>;
7989
7974
  use: z.ZodOptional<z.ZodString>;
7990
- x5c: z.ZodOptional<z.ZodString>;
7975
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
7991
7976
  x5t: z.ZodOptional<z.ZodString>;
7992
7977
  'x5t#S256': z.ZodOptional<z.ZodString>;
7993
7978
  x5u: z.ZodOptional<z.ZodString>;
@@ -8026,7 +8011,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8026
8011
  q: z.ZodOptional<z.ZodString>;
8027
8012
  qi: z.ZodOptional<z.ZodString>;
8028
8013
  use: z.ZodOptional<z.ZodString>;
8029
- x5c: z.ZodOptional<z.ZodString>;
8014
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8030
8015
  x5t: z.ZodOptional<z.ZodString>;
8031
8016
  'x5t#S256': z.ZodOptional<z.ZodString>;
8032
8017
  x5u: z.ZodOptional<z.ZodString>;
@@ -8062,7 +8047,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8062
8047
  q: z.ZodOptional<z.ZodString>;
8063
8048
  qi: z.ZodOptional<z.ZodString>;
8064
8049
  use: z.ZodOptional<z.ZodString>;
8065
- x5c: z.ZodOptional<z.ZodString>;
8050
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8066
8051
  x5t: z.ZodOptional<z.ZodString>;
8067
8052
  'x5t#S256': z.ZodOptional<z.ZodString>;
8068
8053
  x5u: z.ZodOptional<z.ZodString>;
@@ -8098,7 +8083,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8098
8083
  q: z.ZodOptional<z.ZodString>;
8099
8084
  qi: z.ZodOptional<z.ZodString>;
8100
8085
  use: z.ZodOptional<z.ZodString>;
8101
- x5c: z.ZodOptional<z.ZodString>;
8086
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8102
8087
  x5t: z.ZodOptional<z.ZodString>;
8103
8088
  'x5t#S256': z.ZodOptional<z.ZodString>;
8104
8089
  x5u: z.ZodOptional<z.ZodString>;
@@ -8152,7 +8137,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8152
8137
  q: z.ZodOptional<z.ZodString>;
8153
8138
  qi: z.ZodOptional<z.ZodString>;
8154
8139
  use: z.ZodOptional<z.ZodString>;
8155
- x5c: z.ZodOptional<z.ZodString>;
8140
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8156
8141
  x5t: z.ZodOptional<z.ZodString>;
8157
8142
  'x5t#S256': z.ZodOptional<z.ZodString>;
8158
8143
  x5u: z.ZodOptional<z.ZodString>;
@@ -8188,7 +8173,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8188
8173
  q: z.ZodOptional<z.ZodString>;
8189
8174
  qi: z.ZodOptional<z.ZodString>;
8190
8175
  use: z.ZodOptional<z.ZodString>;
8191
- x5c: z.ZodOptional<z.ZodString>;
8176
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8192
8177
  x5t: z.ZodOptional<z.ZodString>;
8193
8178
  'x5t#S256': z.ZodOptional<z.ZodString>;
8194
8179
  x5u: z.ZodOptional<z.ZodString>;
@@ -8224,7 +8209,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8224
8209
  q: z.ZodOptional<z.ZodString>;
8225
8210
  qi: z.ZodOptional<z.ZodString>;
8226
8211
  use: z.ZodOptional<z.ZodString>;
8227
- x5c: z.ZodOptional<z.ZodString>;
8212
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8228
8213
  x5t: z.ZodOptional<z.ZodString>;
8229
8214
  'x5t#S256': z.ZodOptional<z.ZodString>;
8230
8215
  x5u: z.ZodOptional<z.ZodString>;
@@ -8263,7 +8248,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8263
8248
  q: z.ZodOptional<z.ZodString>;
8264
8249
  qi: z.ZodOptional<z.ZodString>;
8265
8250
  use: z.ZodOptional<z.ZodString>;
8266
- x5c: z.ZodOptional<z.ZodString>;
8251
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8267
8252
  x5t: z.ZodOptional<z.ZodString>;
8268
8253
  'x5t#S256': z.ZodOptional<z.ZodString>;
8269
8254
  x5u: z.ZodOptional<z.ZodString>;
@@ -8299,7 +8284,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8299
8284
  q: z.ZodOptional<z.ZodString>;
8300
8285
  qi: z.ZodOptional<z.ZodString>;
8301
8286
  use: z.ZodOptional<z.ZodString>;
8302
- x5c: z.ZodOptional<z.ZodString>;
8287
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8303
8288
  x5t: z.ZodOptional<z.ZodString>;
8304
8289
  'x5t#S256': z.ZodOptional<z.ZodString>;
8305
8290
  x5u: z.ZodOptional<z.ZodString>;
@@ -8335,7 +8320,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8335
8320
  q: z.ZodOptional<z.ZodString>;
8336
8321
  qi: z.ZodOptional<z.ZodString>;
8337
8322
  use: z.ZodOptional<z.ZodString>;
8338
- x5c: z.ZodOptional<z.ZodString>;
8323
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8339
8324
  x5t: z.ZodOptional<z.ZodString>;
8340
8325
  'x5t#S256': z.ZodOptional<z.ZodString>;
8341
8326
  x5u: z.ZodOptional<z.ZodString>;
@@ -8374,7 +8359,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8374
8359
  q: z.ZodOptional<z.ZodString>;
8375
8360
  qi: z.ZodOptional<z.ZodString>;
8376
8361
  use: z.ZodOptional<z.ZodString>;
8377
- x5c: z.ZodOptional<z.ZodString>;
8362
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8378
8363
  x5t: z.ZodOptional<z.ZodString>;
8379
8364
  'x5t#S256': z.ZodOptional<z.ZodString>;
8380
8365
  x5u: z.ZodOptional<z.ZodString>;
@@ -8410,7 +8395,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8410
8395
  q: z.ZodOptional<z.ZodString>;
8411
8396
  qi: z.ZodOptional<z.ZodString>;
8412
8397
  use: z.ZodOptional<z.ZodString>;
8413
- x5c: z.ZodOptional<z.ZodString>;
8398
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8414
8399
  x5t: z.ZodOptional<z.ZodString>;
8415
8400
  'x5t#S256': z.ZodOptional<z.ZodString>;
8416
8401
  x5u: z.ZodOptional<z.ZodString>;
@@ -8446,7 +8431,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8446
8431
  q: z.ZodOptional<z.ZodString>;
8447
8432
  qi: z.ZodOptional<z.ZodString>;
8448
8433
  use: z.ZodOptional<z.ZodString>;
8449
- x5c: z.ZodOptional<z.ZodString>;
8434
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8450
8435
  x5t: z.ZodOptional<z.ZodString>;
8451
8436
  'x5t#S256': z.ZodOptional<z.ZodString>;
8452
8437
  x5u: z.ZodOptional<z.ZodString>;
@@ -8486,7 +8471,7 @@ declare function verifyResourceRequest(options: VerifyResourceRequestOptions): P
8486
8471
  q: z.ZodOptional<z.ZodString>;
8487
8472
  qi: z.ZodOptional<z.ZodString>;
8488
8473
  use: z.ZodOptional<z.ZodString>;
8489
- x5c: z.ZodOptional<z.ZodString>;
8474
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8490
8475
  x5t: z.ZodOptional<z.ZodString>;
8491
8476
  'x5t#S256': z.ZodOptional<z.ZodString>;
8492
8477
  x5u: z.ZodOptional<z.ZodString>;
@@ -8636,7 +8621,7 @@ interface Oauth2AuthorizationServerOptions {
8636
8621
  /**
8637
8622
  * Callbacks required for the oauth2 authorization server
8638
8623
  */
8639
- callbacks: CallbackContext;
8624
+ callbacks: Omit<CallbackContext, 'decryptJwe' | 'encryptJwe'>;
8640
8625
  }
8641
8626
  declare class Oauth2AuthorizationServer {
8642
8627
  private options;
@@ -8776,7 +8761,7 @@ declare class Oauth2AuthorizationServer {
8776
8761
  q: z.ZodOptional<z.ZodString>;
8777
8762
  qi: z.ZodOptional<z.ZodString>;
8778
8763
  use: z.ZodOptional<z.ZodString>;
8779
- x5c: z.ZodOptional<z.ZodString>;
8764
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8780
8765
  x5t: z.ZodOptional<z.ZodString>;
8781
8766
  'x5t#S256': z.ZodOptional<z.ZodString>;
8782
8767
  x5u: z.ZodOptional<z.ZodString>;
@@ -8812,7 +8797,7 @@ declare class Oauth2AuthorizationServer {
8812
8797
  q: z.ZodOptional<z.ZodString>;
8813
8798
  qi: z.ZodOptional<z.ZodString>;
8814
8799
  use: z.ZodOptional<z.ZodString>;
8815
- x5c: z.ZodOptional<z.ZodString>;
8800
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8816
8801
  x5t: z.ZodOptional<z.ZodString>;
8817
8802
  'x5t#S256': z.ZodOptional<z.ZodString>;
8818
8803
  x5u: z.ZodOptional<z.ZodString>;
@@ -8848,7 +8833,7 @@ declare class Oauth2AuthorizationServer {
8848
8833
  q: z.ZodOptional<z.ZodString>;
8849
8834
  qi: z.ZodOptional<z.ZodString>;
8850
8835
  use: z.ZodOptional<z.ZodString>;
8851
- x5c: z.ZodOptional<z.ZodString>;
8836
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8852
8837
  x5t: z.ZodOptional<z.ZodString>;
8853
8838
  'x5t#S256': z.ZodOptional<z.ZodString>;
8854
8839
  x5u: z.ZodOptional<z.ZodString>;
@@ -8893,7 +8878,7 @@ declare class Oauth2AuthorizationServer {
8893
8878
  q: z.ZodOptional<z.ZodString>;
8894
8879
  qi: z.ZodOptional<z.ZodString>;
8895
8880
  use: z.ZodOptional<z.ZodString>;
8896
- x5c: z.ZodOptional<z.ZodString>;
8881
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8897
8882
  x5t: z.ZodOptional<z.ZodString>;
8898
8883
  'x5t#S256': z.ZodOptional<z.ZodString>;
8899
8884
  x5u: z.ZodOptional<z.ZodString>;
@@ -8929,7 +8914,7 @@ declare class Oauth2AuthorizationServer {
8929
8914
  q: z.ZodOptional<z.ZodString>;
8930
8915
  qi: z.ZodOptional<z.ZodString>;
8931
8916
  use: z.ZodOptional<z.ZodString>;
8932
- x5c: z.ZodOptional<z.ZodString>;
8917
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8933
8918
  x5t: z.ZodOptional<z.ZodString>;
8934
8919
  'x5t#S256': z.ZodOptional<z.ZodString>;
8935
8920
  x5u: z.ZodOptional<z.ZodString>;
@@ -8965,7 +8950,7 @@ declare class Oauth2AuthorizationServer {
8965
8950
  q: z.ZodOptional<z.ZodString>;
8966
8951
  qi: z.ZodOptional<z.ZodString>;
8967
8952
  use: z.ZodOptional<z.ZodString>;
8968
- x5c: z.ZodOptional<z.ZodString>;
8953
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
8969
8954
  x5t: z.ZodOptional<z.ZodString>;
8970
8955
  'x5t#S256': z.ZodOptional<z.ZodString>;
8971
8956
  x5u: z.ZodOptional<z.ZodString>;
@@ -9005,7 +8990,7 @@ declare class Oauth2AuthorizationServer {
9005
8990
  q: z.ZodOptional<z.ZodString>;
9006
8991
  qi: z.ZodOptional<z.ZodString>;
9007
8992
  use: z.ZodOptional<z.ZodString>;
9008
- x5c: z.ZodOptional<z.ZodString>;
8993
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9009
8994
  x5t: z.ZodOptional<z.ZodString>;
9010
8995
  'x5t#S256': z.ZodOptional<z.ZodString>;
9011
8996
  x5u: z.ZodOptional<z.ZodString>;
@@ -9041,7 +9026,7 @@ declare class Oauth2AuthorizationServer {
9041
9026
  q: z.ZodOptional<z.ZodString>;
9042
9027
  qi: z.ZodOptional<z.ZodString>;
9043
9028
  use: z.ZodOptional<z.ZodString>;
9044
- x5c: z.ZodOptional<z.ZodString>;
9029
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9045
9030
  x5t: z.ZodOptional<z.ZodString>;
9046
9031
  'x5t#S256': z.ZodOptional<z.ZodString>;
9047
9032
  x5u: z.ZodOptional<z.ZodString>;
@@ -9077,7 +9062,7 @@ declare class Oauth2AuthorizationServer {
9077
9062
  q: z.ZodOptional<z.ZodString>;
9078
9063
  qi: z.ZodOptional<z.ZodString>;
9079
9064
  use: z.ZodOptional<z.ZodString>;
9080
- x5c: z.ZodOptional<z.ZodString>;
9065
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9081
9066
  x5t: z.ZodOptional<z.ZodString>;
9082
9067
  'x5t#S256': z.ZodOptional<z.ZodString>;
9083
9068
  x5u: z.ZodOptional<z.ZodString>;
@@ -9117,7 +9102,7 @@ declare class Oauth2AuthorizationServer {
9117
9102
  q: z.ZodOptional<z.ZodString>;
9118
9103
  qi: z.ZodOptional<z.ZodString>;
9119
9104
  use: z.ZodOptional<z.ZodString>;
9120
- x5c: z.ZodOptional<z.ZodString>;
9105
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9121
9106
  x5t: z.ZodOptional<z.ZodString>;
9122
9107
  'x5t#S256': z.ZodOptional<z.ZodString>;
9123
9108
  x5u: z.ZodOptional<z.ZodString>;
@@ -9153,7 +9138,7 @@ declare class Oauth2AuthorizationServer {
9153
9138
  q: z.ZodOptional<z.ZodString>;
9154
9139
  qi: z.ZodOptional<z.ZodString>;
9155
9140
  use: z.ZodOptional<z.ZodString>;
9156
- x5c: z.ZodOptional<z.ZodString>;
9141
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9157
9142
  x5t: z.ZodOptional<z.ZodString>;
9158
9143
  'x5t#S256': z.ZodOptional<z.ZodString>;
9159
9144
  x5u: z.ZodOptional<z.ZodString>;
@@ -9189,7 +9174,7 @@ declare class Oauth2AuthorizationServer {
9189
9174
  q: z.ZodOptional<z.ZodString>;
9190
9175
  qi: z.ZodOptional<z.ZodString>;
9191
9176
  use: z.ZodOptional<z.ZodString>;
9192
- x5c: z.ZodOptional<z.ZodString>;
9177
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9193
9178
  x5t: z.ZodOptional<z.ZodString>;
9194
9179
  'x5t#S256': z.ZodOptional<z.ZodString>;
9195
9180
  x5u: z.ZodOptional<z.ZodString>;
@@ -9244,7 +9229,7 @@ declare class Oauth2AuthorizationServer {
9244
9229
  q: z.ZodOptional<z.ZodString>;
9245
9230
  qi: z.ZodOptional<z.ZodString>;
9246
9231
  use: z.ZodOptional<z.ZodString>;
9247
- x5c: z.ZodOptional<z.ZodString>;
9232
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9248
9233
  x5t: z.ZodOptional<z.ZodString>;
9249
9234
  'x5t#S256': z.ZodOptional<z.ZodString>;
9250
9235
  x5u: z.ZodOptional<z.ZodString>;
@@ -9280,7 +9265,7 @@ declare class Oauth2AuthorizationServer {
9280
9265
  q: z.ZodOptional<z.ZodString>;
9281
9266
  qi: z.ZodOptional<z.ZodString>;
9282
9267
  use: z.ZodOptional<z.ZodString>;
9283
- x5c: z.ZodOptional<z.ZodString>;
9268
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9284
9269
  x5t: z.ZodOptional<z.ZodString>;
9285
9270
  'x5t#S256': z.ZodOptional<z.ZodString>;
9286
9271
  x5u: z.ZodOptional<z.ZodString>;
@@ -9316,7 +9301,7 @@ declare class Oauth2AuthorizationServer {
9316
9301
  q: z.ZodOptional<z.ZodString>;
9317
9302
  qi: z.ZodOptional<z.ZodString>;
9318
9303
  use: z.ZodOptional<z.ZodString>;
9319
- x5c: z.ZodOptional<z.ZodString>;
9304
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9320
9305
  x5t: z.ZodOptional<z.ZodString>;
9321
9306
  'x5t#S256': z.ZodOptional<z.ZodString>;
9322
9307
  x5u: z.ZodOptional<z.ZodString>;
@@ -9365,7 +9350,7 @@ declare class Oauth2AuthorizationServer {
9365
9350
  q: z.ZodOptional<z.ZodString>;
9366
9351
  qi: z.ZodOptional<z.ZodString>;
9367
9352
  use: z.ZodOptional<z.ZodString>;
9368
- x5c: z.ZodOptional<z.ZodString>;
9353
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9369
9354
  x5t: z.ZodOptional<z.ZodString>;
9370
9355
  'x5t#S256': z.ZodOptional<z.ZodString>;
9371
9356
  x5u: z.ZodOptional<z.ZodString>;
@@ -9401,7 +9386,7 @@ declare class Oauth2AuthorizationServer {
9401
9386
  q: z.ZodOptional<z.ZodString>;
9402
9387
  qi: z.ZodOptional<z.ZodString>;
9403
9388
  use: z.ZodOptional<z.ZodString>;
9404
- x5c: z.ZodOptional<z.ZodString>;
9389
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9405
9390
  x5t: z.ZodOptional<z.ZodString>;
9406
9391
  'x5t#S256': z.ZodOptional<z.ZodString>;
9407
9392
  x5u: z.ZodOptional<z.ZodString>;
@@ -9437,7 +9422,7 @@ declare class Oauth2AuthorizationServer {
9437
9422
  q: z.ZodOptional<z.ZodString>;
9438
9423
  qi: z.ZodOptional<z.ZodString>;
9439
9424
  use: z.ZodOptional<z.ZodString>;
9440
- x5c: z.ZodOptional<z.ZodString>;
9425
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9441
9426
  x5t: z.ZodOptional<z.ZodString>;
9442
9427
  'x5t#S256': z.ZodOptional<z.ZodString>;
9443
9428
  x5u: z.ZodOptional<z.ZodString>;
@@ -9476,7 +9461,7 @@ declare class Oauth2AuthorizationServer {
9476
9461
  q: z.ZodOptional<z.ZodString>;
9477
9462
  qi: z.ZodOptional<z.ZodString>;
9478
9463
  use: z.ZodOptional<z.ZodString>;
9479
- x5c: z.ZodOptional<z.ZodString>;
9464
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9480
9465
  x5t: z.ZodOptional<z.ZodString>;
9481
9466
  'x5t#S256': z.ZodOptional<z.ZodString>;
9482
9467
  x5u: z.ZodOptional<z.ZodString>;
@@ -9512,7 +9497,7 @@ declare class Oauth2AuthorizationServer {
9512
9497
  q: z.ZodOptional<z.ZodString>;
9513
9498
  qi: z.ZodOptional<z.ZodString>;
9514
9499
  use: z.ZodOptional<z.ZodString>;
9515
- x5c: z.ZodOptional<z.ZodString>;
9500
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9516
9501
  x5t: z.ZodOptional<z.ZodString>;
9517
9502
  'x5t#S256': z.ZodOptional<z.ZodString>;
9518
9503
  x5u: z.ZodOptional<z.ZodString>;
@@ -9548,7 +9533,7 @@ declare class Oauth2AuthorizationServer {
9548
9533
  q: z.ZodOptional<z.ZodString>;
9549
9534
  qi: z.ZodOptional<z.ZodString>;
9550
9535
  use: z.ZodOptional<z.ZodString>;
9551
- x5c: z.ZodOptional<z.ZodString>;
9536
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9552
9537
  x5t: z.ZodOptional<z.ZodString>;
9553
9538
  'x5t#S256': z.ZodOptional<z.ZodString>;
9554
9539
  x5u: z.ZodOptional<z.ZodString>;
@@ -9587,7 +9572,7 @@ declare class Oauth2AuthorizationServer {
9587
9572
  q: z.ZodOptional<z.ZodString>;
9588
9573
  qi: z.ZodOptional<z.ZodString>;
9589
9574
  use: z.ZodOptional<z.ZodString>;
9590
- x5c: z.ZodOptional<z.ZodString>;
9575
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9591
9576
  x5t: z.ZodOptional<z.ZodString>;
9592
9577
  'x5t#S256': z.ZodOptional<z.ZodString>;
9593
9578
  x5u: z.ZodOptional<z.ZodString>;
@@ -9623,7 +9608,7 @@ declare class Oauth2AuthorizationServer {
9623
9608
  q: z.ZodOptional<z.ZodString>;
9624
9609
  qi: z.ZodOptional<z.ZodString>;
9625
9610
  use: z.ZodOptional<z.ZodString>;
9626
- x5c: z.ZodOptional<z.ZodString>;
9611
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9627
9612
  x5t: z.ZodOptional<z.ZodString>;
9628
9613
  'x5t#S256': z.ZodOptional<z.ZodString>;
9629
9614
  x5u: z.ZodOptional<z.ZodString>;
@@ -9659,7 +9644,7 @@ declare class Oauth2AuthorizationServer {
9659
9644
  q: z.ZodOptional<z.ZodString>;
9660
9645
  qi: z.ZodOptional<z.ZodString>;
9661
9646
  use: z.ZodOptional<z.ZodString>;
9662
- x5c: z.ZodOptional<z.ZodString>;
9647
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9663
9648
  x5t: z.ZodOptional<z.ZodString>;
9664
9649
  'x5t#S256': z.ZodOptional<z.ZodString>;
9665
9650
  x5u: z.ZodOptional<z.ZodString>;
@@ -9673,37 +9658,207 @@ declare class Oauth2AuthorizationServer {
9673
9658
  }>;
9674
9659
  }
9675
9660
 
9676
- interface Oauth2ResourceServerOptions {
9661
+ interface SendAuthorizationChallengeRequestOptions {
9677
9662
  /**
9678
- * Callbacks required for the oauth2 resource server
9663
+ * Callback context
9679
9664
  */
9680
- callbacks: Pick<CallbackContext, 'verifyJwt' | 'hash' | 'clientAuthentication' | 'fetch'>;
9665
+ callbacks: Pick<CallbackContext, 'fetch' | 'hash' | 'generateRandom' | 'signJwt'>;
9666
+ /**
9667
+ * Metadata of the authorization server where to perform the authorization challenge
9668
+ */
9669
+ authorizationServerMetadata: AuthorizationServerMetadata;
9670
+ /**
9671
+ * Previously established auth session
9672
+ */
9673
+ authSession?: string;
9674
+ /**
9675
+ * The client id to use for the authorization challenge request
9676
+ */
9677
+ clientId?: string;
9678
+ /**
9679
+ * Scope to request for the authorization challenge request
9680
+ */
9681
+ scope?: string;
9682
+ /**
9683
+ * The resource to which access is being requested. This can help the authorization
9684
+ * server in determining the resource server to handle the authorization request for
9685
+ */
9686
+ resource?: string;
9687
+ /**
9688
+ * Presentation during issuance sessios if credentials were presented
9689
+ * as part of an issuance session
9690
+ */
9691
+ presentationDuringIssuanceSession?: string;
9692
+ /**
9693
+ * Additional payload to include in the authorization challenge request. Items will be encoded and sent
9694
+ * using x-www-form-urlencoded format. Nested items (JSON) will be stringified and url encoded.
9695
+ */
9696
+ additionalRequestPayload?: Record<string, unknown>;
9697
+ /**
9698
+ * Code verifier to use for pkce. If not provided a value will generated when pkce is supported
9699
+ */
9700
+ pkceCodeVerifier?: string;
9701
+ /**
9702
+ * If client attestation needs to be included in the request.
9703
+ */
9704
+ clientAttestation?: RequestClientAttestationOptions;
9705
+ /**
9706
+ * DPoP options
9707
+ */
9708
+ dpop?: RequestDpopOptions;
9681
9709
  }
9682
- declare class Oauth2ResourceServer {
9683
- private options;
9684
- constructor(options: Oauth2ResourceServerOptions);
9685
- verifyResourceRequest(options: Omit<VerifyResourceRequestOptions, 'callbacks'>): Promise<{
9686
- tokenPayload: z.objectOutputType<{
9687
- iss: z.ZodString;
9688
- exp: z.ZodNumber;
9689
- iat: z.ZodNumber;
9690
- aud: z.ZodString;
9691
- sub: z.ZodString;
9692
- client_id: z.ZodOptional<z.ZodString>;
9693
- jti: z.ZodString;
9694
- scope: z.ZodOptional<z.ZodString>;
9695
- nbf: z.ZodOptional<z.ZodNumber>;
9696
- nonce: z.ZodOptional<z.ZodString>;
9697
- cnf: z.ZodOptional<z.ZodObject<{
9698
- jwk: z.ZodOptional<z.ZodObject<{
9699
- kty: z.ZodString;
9700
- crv: z.ZodOptional<z.ZodString>;
9701
- x: z.ZodOptional<z.ZodString>;
9702
- y: z.ZodOptional<z.ZodString>;
9703
- e: z.ZodOptional<z.ZodString>;
9704
- n: z.ZodOptional<z.ZodString>;
9705
- alg: z.ZodOptional<z.ZodString>;
9706
- d: z.ZodOptional<z.ZodString>;
9710
+
9711
+ interface CreateClientAttestationJwtOptions {
9712
+ /**
9713
+ * Creation time of the JWT. If not provided the current date will be used
9714
+ */
9715
+ issuedAt?: Date;
9716
+ /**
9717
+ * Expiration time of the JWT.
9718
+ */
9719
+ expiresAt: Date;
9720
+ /**
9721
+ * Issuer of the client attestation, usually identifier of the client backend
9722
+ */
9723
+ issuer: string;
9724
+ /**
9725
+ * The client id of the client instance.
9726
+ */
9727
+ clientId: string;
9728
+ /**
9729
+ * The confirmation payload for the client, attesting the `jwk`, `key_type` and `user_authentication`
9730
+ */
9731
+ confirmation: ClientAttestationJwtPayload['cnf'];
9732
+ /**
9733
+ * Additional payload to include in the client attestation jwt payload. Will be applied after
9734
+ * any default claims that are included, so add claims with caution.
9735
+ */
9736
+ additionalPayload?: Record<string, unknown>;
9737
+ /**
9738
+ * Callback used for client attestation
9739
+ */
9740
+ callbacks: Pick<CallbackContext, 'signJwt'>;
9741
+ /**
9742
+ * The signer of the client attestation jwt.
9743
+ */
9744
+ signer: JwtSigner;
9745
+ }
9746
+
9747
+ interface Oauth2ClientOptions {
9748
+ /**
9749
+ * Callbacks required for the oauth2 client
9750
+ */
9751
+ callbacks: Omit<CallbackContext, 'verifyJwt' | 'clientAuthentication' | 'decryptJwe' | 'encryptJwe'>;
9752
+ }
9753
+ declare class Oauth2Client {
9754
+ private options;
9755
+ constructor(options: Oauth2ClientOptions);
9756
+ isDpopSupported(options: {
9757
+ authorizationServerMetadata: AuthorizationServerMetadata;
9758
+ }): {
9759
+ readonly supported: false;
9760
+ readonly dpopSigningAlgValuesSupported?: undefined;
9761
+ } | {
9762
+ readonly supported: true;
9763
+ readonly dpopSigningAlgValuesSupported: string[];
9764
+ };
9765
+ fetchAuthorizationServerMetadata(issuer: string): Promise<z.objectOutputType<{
9766
+ issuer: z.ZodEffects<z.ZodString, string, string>;
9767
+ token_endpoint: z.ZodEffects<z.ZodString, string, string>;
9768
+ token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9769
+ authorization_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
9770
+ jwks_uri: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
9771
+ code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9772
+ dpop_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9773
+ require_pushed_authorization_requests: z.ZodOptional<z.ZodBoolean>;
9774
+ pushed_authorization_request_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
9775
+ introspection_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
9776
+ introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"client_secret_jwt">, z.ZodLiteral<"private_key_jwt">, z.ZodString]>, "many">>;
9777
+ introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
9778
+ authorization_challenge_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
9779
+ pre_authorized_grant_anonymous_access_supported: z.ZodOptional<z.ZodBoolean>;
9780
+ }, z.ZodTypeAny, "passthrough"> | null>;
9781
+ /**
9782
+ * Initiate authorization.
9783
+ *
9784
+ * It will take the followings steps:
9785
+ * - if `authorization_challenge_endpoint` is defined, send an authorization challenge request
9786
+ * - if authorization challenge request returns a `redirect_to_web` error code with `request_uri`
9787
+ * then construct the authorization request url based on the `request_uri`
9788
+ * - if the `authorization_challenge_endpoint` is not defined, or authorization challenge request reuturns a `redirect_to_web` error code without `request_uri`
9789
+ * then the authorization request url will be constructed as usual (optionally using PAR).
9790
+ *
9791
+ * @throws {Oauth2ClientAuthorizationChallengeError} in case of an error response. If `error` is
9792
+ * `insufficient_authorization` possible extra steps can be taken.
9793
+ */
9794
+ initiateAuthorization(options: Omit<CreateAuthorizationRequestUrlOptions, 'callbacks'>): Promise<{
9795
+ authorizationRequestUrl: string;
9796
+ pkce: CreatePkceReturn | undefined;
9797
+ dpop: RequestDpopOptions | undefined;
9798
+ } | {
9799
+ dpop: {
9800
+ nonce: any;
9801
+ signer: JwtSignerJwk;
9802
+ } | undefined;
9803
+ authorizationRequestUrl: string;
9804
+ pkce: CreatePkceReturn | undefined;
9805
+ }>;
9806
+ sendAuthorizationChallengeRequest(options: Omit<SendAuthorizationChallengeRequestOptions, 'callbacks'>): Promise<{
9807
+ pkce: CreatePkceReturn | undefined;
9808
+ dpop: {
9809
+ nonce: any;
9810
+ signer: JwtSignerJwk;
9811
+ } | undefined;
9812
+ authorizationChallengeResponse: z.objectOutputType<{
9813
+ authorization_code: z.ZodString;
9814
+ }, z.ZodTypeAny, "passthrough">;
9815
+ }>;
9816
+ createAuthorizationRequestUrl(options: Omit<CreateAuthorizationRequestUrlOptions, 'callbacks'>): Promise<{
9817
+ authorizationRequestUrl: string;
9818
+ pkce: CreatePkceReturn | undefined;
9819
+ dpop: RequestDpopOptions | undefined;
9820
+ }>;
9821
+ retrievePreAuthorizedCodeAccessToken({ authorizationServerMetadata, preAuthorizedCode, additionalRequestPayload, txCode, dpop, resource, clientAttestation, }: Omit<RetrievePreAuthorizedCodeAccessTokenOptions, 'callbacks'>): Promise<RetrieveAccessTokenReturn>;
9822
+ retrieveAuthorizationCodeAccessToken({ authorizationServerMetadata, additionalRequestPayload, authorizationCode, pkceCodeVerifier, redirectUri, resource, dpop, clientAttestation, }: Omit<RetrieveAuthorizationCodeAccessTokenOptions, 'callbacks'>): Promise<RetrieveAccessTokenReturn>;
9823
+ retrieveRefreshTokenAccessToken({ authorizationServerMetadata, additionalRequestPayload, refreshToken, resource, dpop, clientAttestation, }: Omit<RetrieveRefreshTokenAccessTokenOptions, 'callbacks'>): Promise<RetrieveAccessTokenReturn>;
9824
+ resourceRequest(options: ResourceRequestOptions): Promise<ResourceRequestResponseOk | ResourceRequestResponseNotOk>;
9825
+ /**
9826
+ * @todo move this to another class?
9827
+ */
9828
+ createClientAttestationJwt(options: Omit<CreateClientAttestationJwtOptions, 'callbacks'>): Promise<string>;
9829
+ }
9830
+
9831
+ interface Oauth2ResourceServerOptions {
9832
+ /**
9833
+ * Callbacks required for the oauth2 resource server
9834
+ */
9835
+ callbacks: Pick<CallbackContext, 'verifyJwt' | 'hash' | 'clientAuthentication' | 'fetch'>;
9836
+ }
9837
+ declare class Oauth2ResourceServer {
9838
+ private options;
9839
+ constructor(options: Oauth2ResourceServerOptions);
9840
+ verifyResourceRequest(options: Omit<VerifyResourceRequestOptions, 'callbacks'>): Promise<{
9841
+ tokenPayload: z.objectOutputType<{
9842
+ iss: z.ZodString;
9843
+ exp: z.ZodNumber;
9844
+ iat: z.ZodNumber;
9845
+ aud: z.ZodString;
9846
+ sub: z.ZodString;
9847
+ client_id: z.ZodOptional<z.ZodString>;
9848
+ jti: z.ZodString;
9849
+ scope: z.ZodOptional<z.ZodString>;
9850
+ nbf: z.ZodOptional<z.ZodNumber>;
9851
+ nonce: z.ZodOptional<z.ZodString>;
9852
+ cnf: z.ZodOptional<z.ZodObject<{
9853
+ jwk: z.ZodOptional<z.ZodObject<{
9854
+ kty: z.ZodString;
9855
+ crv: z.ZodOptional<z.ZodString>;
9856
+ x: z.ZodOptional<z.ZodString>;
9857
+ y: z.ZodOptional<z.ZodString>;
9858
+ e: z.ZodOptional<z.ZodString>;
9859
+ n: z.ZodOptional<z.ZodString>;
9860
+ alg: z.ZodOptional<z.ZodString>;
9861
+ d: z.ZodOptional<z.ZodString>;
9707
9862
  dp: z.ZodOptional<z.ZodString>;
9708
9863
  dq: z.ZodOptional<z.ZodString>;
9709
9864
  ext: z.ZodOptional<z.ZodBoolean>;
@@ -9727,7 +9882,7 @@ declare class Oauth2ResourceServer {
9727
9882
  q: z.ZodOptional<z.ZodString>;
9728
9883
  qi: z.ZodOptional<z.ZodString>;
9729
9884
  use: z.ZodOptional<z.ZodString>;
9730
- x5c: z.ZodOptional<z.ZodString>;
9885
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9731
9886
  x5t: z.ZodOptional<z.ZodString>;
9732
9887
  'x5t#S256': z.ZodOptional<z.ZodString>;
9733
9888
  x5u: z.ZodOptional<z.ZodString>;
@@ -9763,7 +9918,7 @@ declare class Oauth2ResourceServer {
9763
9918
  q: z.ZodOptional<z.ZodString>;
9764
9919
  qi: z.ZodOptional<z.ZodString>;
9765
9920
  use: z.ZodOptional<z.ZodString>;
9766
- x5c: z.ZodOptional<z.ZodString>;
9921
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9767
9922
  x5t: z.ZodOptional<z.ZodString>;
9768
9923
  'x5t#S256': z.ZodOptional<z.ZodString>;
9769
9924
  x5u: z.ZodOptional<z.ZodString>;
@@ -9799,7 +9954,7 @@ declare class Oauth2ResourceServer {
9799
9954
  q: z.ZodOptional<z.ZodString>;
9800
9955
  qi: z.ZodOptional<z.ZodString>;
9801
9956
  use: z.ZodOptional<z.ZodString>;
9802
- x5c: z.ZodOptional<z.ZodString>;
9957
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9803
9958
  x5t: z.ZodOptional<z.ZodString>;
9804
9959
  'x5t#S256': z.ZodOptional<z.ZodString>;
9805
9960
  x5u: z.ZodOptional<z.ZodString>;
@@ -9838,7 +9993,7 @@ declare class Oauth2ResourceServer {
9838
9993
  q: z.ZodOptional<z.ZodString>;
9839
9994
  qi: z.ZodOptional<z.ZodString>;
9840
9995
  use: z.ZodOptional<z.ZodString>;
9841
- x5c: z.ZodOptional<z.ZodString>;
9996
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9842
9997
  x5t: z.ZodOptional<z.ZodString>;
9843
9998
  'x5t#S256': z.ZodOptional<z.ZodString>;
9844
9999
  x5u: z.ZodOptional<z.ZodString>;
@@ -9874,7 +10029,7 @@ declare class Oauth2ResourceServer {
9874
10029
  q: z.ZodOptional<z.ZodString>;
9875
10030
  qi: z.ZodOptional<z.ZodString>;
9876
10031
  use: z.ZodOptional<z.ZodString>;
9877
- x5c: z.ZodOptional<z.ZodString>;
10032
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9878
10033
  x5t: z.ZodOptional<z.ZodString>;
9879
10034
  'x5t#S256': z.ZodOptional<z.ZodString>;
9880
10035
  x5u: z.ZodOptional<z.ZodString>;
@@ -9910,7 +10065,7 @@ declare class Oauth2ResourceServer {
9910
10065
  q: z.ZodOptional<z.ZodString>;
9911
10066
  qi: z.ZodOptional<z.ZodString>;
9912
10067
  use: z.ZodOptional<z.ZodString>;
9913
- x5c: z.ZodOptional<z.ZodString>;
10068
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9914
10069
  x5t: z.ZodOptional<z.ZodString>;
9915
10070
  'x5t#S256': z.ZodOptional<z.ZodString>;
9916
10071
  x5u: z.ZodOptional<z.ZodString>;
@@ -9949,7 +10104,7 @@ declare class Oauth2ResourceServer {
9949
10104
  q: z.ZodOptional<z.ZodString>;
9950
10105
  qi: z.ZodOptional<z.ZodString>;
9951
10106
  use: z.ZodOptional<z.ZodString>;
9952
- x5c: z.ZodOptional<z.ZodString>;
10107
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9953
10108
  x5t: z.ZodOptional<z.ZodString>;
9954
10109
  'x5t#S256': z.ZodOptional<z.ZodString>;
9955
10110
  x5u: z.ZodOptional<z.ZodString>;
@@ -9985,7 +10140,7 @@ declare class Oauth2ResourceServer {
9985
10140
  q: z.ZodOptional<z.ZodString>;
9986
10141
  qi: z.ZodOptional<z.ZodString>;
9987
10142
  use: z.ZodOptional<z.ZodString>;
9988
- x5c: z.ZodOptional<z.ZodString>;
10143
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
9989
10144
  x5t: z.ZodOptional<z.ZodString>;
9990
10145
  'x5t#S256': z.ZodOptional<z.ZodString>;
9991
10146
  x5u: z.ZodOptional<z.ZodString>;
@@ -10021,7 +10176,7 @@ declare class Oauth2ResourceServer {
10021
10176
  q: z.ZodOptional<z.ZodString>;
10022
10177
  qi: z.ZodOptional<z.ZodString>;
10023
10178
  use: z.ZodOptional<z.ZodString>;
10024
- x5c: z.ZodOptional<z.ZodString>;
10179
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10025
10180
  x5t: z.ZodOptional<z.ZodString>;
10026
10181
  'x5t#S256': z.ZodOptional<z.ZodString>;
10027
10182
  x5u: z.ZodOptional<z.ZodString>;
@@ -10075,7 +10230,7 @@ declare class Oauth2ResourceServer {
10075
10230
  q: z.ZodOptional<z.ZodString>;
10076
10231
  qi: z.ZodOptional<z.ZodString>;
10077
10232
  use: z.ZodOptional<z.ZodString>;
10078
- x5c: z.ZodOptional<z.ZodString>;
10233
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10079
10234
  x5t: z.ZodOptional<z.ZodString>;
10080
10235
  'x5t#S256': z.ZodOptional<z.ZodString>;
10081
10236
  x5u: z.ZodOptional<z.ZodString>;
@@ -10111,7 +10266,7 @@ declare class Oauth2ResourceServer {
10111
10266
  q: z.ZodOptional<z.ZodString>;
10112
10267
  qi: z.ZodOptional<z.ZodString>;
10113
10268
  use: z.ZodOptional<z.ZodString>;
10114
- x5c: z.ZodOptional<z.ZodString>;
10269
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10115
10270
  x5t: z.ZodOptional<z.ZodString>;
10116
10271
  'x5t#S256': z.ZodOptional<z.ZodString>;
10117
10272
  x5u: z.ZodOptional<z.ZodString>;
@@ -10147,7 +10302,7 @@ declare class Oauth2ResourceServer {
10147
10302
  q: z.ZodOptional<z.ZodString>;
10148
10303
  qi: z.ZodOptional<z.ZodString>;
10149
10304
  use: z.ZodOptional<z.ZodString>;
10150
- x5c: z.ZodOptional<z.ZodString>;
10305
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10151
10306
  x5t: z.ZodOptional<z.ZodString>;
10152
10307
  'x5t#S256': z.ZodOptional<z.ZodString>;
10153
10308
  x5u: z.ZodOptional<z.ZodString>;
@@ -10186,7 +10341,7 @@ declare class Oauth2ResourceServer {
10186
10341
  q: z.ZodOptional<z.ZodString>;
10187
10342
  qi: z.ZodOptional<z.ZodString>;
10188
10343
  use: z.ZodOptional<z.ZodString>;
10189
- x5c: z.ZodOptional<z.ZodString>;
10344
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10190
10345
  x5t: z.ZodOptional<z.ZodString>;
10191
10346
  'x5t#S256': z.ZodOptional<z.ZodString>;
10192
10347
  x5u: z.ZodOptional<z.ZodString>;
@@ -10222,7 +10377,7 @@ declare class Oauth2ResourceServer {
10222
10377
  q: z.ZodOptional<z.ZodString>;
10223
10378
  qi: z.ZodOptional<z.ZodString>;
10224
10379
  use: z.ZodOptional<z.ZodString>;
10225
- x5c: z.ZodOptional<z.ZodString>;
10380
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10226
10381
  x5t: z.ZodOptional<z.ZodString>;
10227
10382
  'x5t#S256': z.ZodOptional<z.ZodString>;
10228
10383
  x5u: z.ZodOptional<z.ZodString>;
@@ -10258,7 +10413,7 @@ declare class Oauth2ResourceServer {
10258
10413
  q: z.ZodOptional<z.ZodString>;
10259
10414
  qi: z.ZodOptional<z.ZodString>;
10260
10415
  use: z.ZodOptional<z.ZodString>;
10261
- x5c: z.ZodOptional<z.ZodString>;
10416
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10262
10417
  x5t: z.ZodOptional<z.ZodString>;
10263
10418
  'x5t#S256': z.ZodOptional<z.ZodString>;
10264
10419
  x5u: z.ZodOptional<z.ZodString>;
@@ -10297,7 +10452,7 @@ declare class Oauth2ResourceServer {
10297
10452
  q: z.ZodOptional<z.ZodString>;
10298
10453
  qi: z.ZodOptional<z.ZodString>;
10299
10454
  use: z.ZodOptional<z.ZodString>;
10300
- x5c: z.ZodOptional<z.ZodString>;
10455
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10301
10456
  x5t: z.ZodOptional<z.ZodString>;
10302
10457
  'x5t#S256': z.ZodOptional<z.ZodString>;
10303
10458
  x5u: z.ZodOptional<z.ZodString>;
@@ -10333,7 +10488,7 @@ declare class Oauth2ResourceServer {
10333
10488
  q: z.ZodOptional<z.ZodString>;
10334
10489
  qi: z.ZodOptional<z.ZodString>;
10335
10490
  use: z.ZodOptional<z.ZodString>;
10336
- x5c: z.ZodOptional<z.ZodString>;
10491
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10337
10492
  x5t: z.ZodOptional<z.ZodString>;
10338
10493
  'x5t#S256': z.ZodOptional<z.ZodString>;
10339
10494
  x5u: z.ZodOptional<z.ZodString>;
@@ -10369,7 +10524,7 @@ declare class Oauth2ResourceServer {
10369
10524
  q: z.ZodOptional<z.ZodString>;
10370
10525
  qi: z.ZodOptional<z.ZodString>;
10371
10526
  use: z.ZodOptional<z.ZodString>;
10372
- x5c: z.ZodOptional<z.ZodString>;
10527
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10373
10528
  x5t: z.ZodOptional<z.ZodString>;
10374
10529
  'x5t#S256': z.ZodOptional<z.ZodString>;
10375
10530
  x5u: z.ZodOptional<z.ZodString>;
@@ -10409,7 +10564,7 @@ declare class Oauth2ResourceServer {
10409
10564
  q: z.ZodOptional<z.ZodString>;
10410
10565
  qi: z.ZodOptional<z.ZodString>;
10411
10566
  use: z.ZodOptional<z.ZodString>;
10412
- x5c: z.ZodOptional<z.ZodString>;
10567
+ x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10413
10568
  x5t: z.ZodOptional<z.ZodString>;
10414
10569
  'x5t#S256': z.ZodOptional<z.ZodString>;
10415
10570
  x5u: z.ZodOptional<z.ZodString>;
@@ -10420,174 +10575,89 @@ declare class Oauth2ResourceServer {
10420
10575
  }>;
10421
10576
  }
10422
10577
 
10423
- interface SendAuthorizationChallengeRequestOptions {
10424
- /**
10425
- * Callback context
10426
- */
10427
- callbacks: Pick<CallbackContext, 'fetch' | 'hash' | 'generateRandom' | 'signJwt'>;
10428
- /**
10429
- * Metadata of the authorization server where to perform the authorization challenge
10430
- */
10431
- authorizationServerMetadata: AuthorizationServerMetadata;
10432
- /**
10433
- * Previously established auth session
10434
- */
10435
- authSession?: string;
10436
- /**
10437
- * The client id to use for the authorization challenge request
10438
- */
10439
- clientId?: string;
10440
- /**
10441
- * Scope to request for the authorization challenge request
10442
- */
10443
- scope?: string;
10578
+ interface VerifyJwtOptions {
10444
10579
  /**
10445
- * The resource to which access is being requested. This can help the authorization
10446
- * server in determining the resource server to handle the authorization request for
10580
+ * Compact jwt
10447
10581
  */
10448
- resource?: string;
10582
+ compact: string;
10449
10583
  /**
10450
- * Presentation during issuance sessios if credentials were presented
10451
- * as part of an issuance session
10584
+ * Header of the jwt
10452
10585
  */
10453
- presentationDuringIssuanceSession?: string;
10586
+ header: JwtHeader;
10454
10587
  /**
10455
- * Additional payload to include in the authorization challenge request. Items will be encoded and sent
10456
- * using x-www-form-urlencoded format. Nested items (JSON) will be stringified and url encoded.
10588
+ * Payload of the jwt.
10457
10589
  */
10458
- additionalRequestPayload?: Record<string, unknown>;
10590
+ payload: JwtPayload;
10459
10591
  /**
10460
- * Code verifier to use for pkce. If not provided a value will generated when pkce is supported
10592
+ * If not provided current time will be used.
10593
+ *
10594
+ * @default new Date()
10461
10595
  */
10462
- pkceCodeVerifier?: string;
10596
+ now?: Date;
10463
10597
  /**
10464
- * If client attestation needs to be included in the request.
10598
+ * Whether to skip time based validation of `nbf` and `exp`.
10599
+ * @default false
10465
10600
  */
10466
- clientAttestation?: RequestClientAttestationOptions;
10601
+ skipTimeBasedValidation?: boolean;
10467
10602
  /**
10468
- * DPoP options
10603
+ * Callback to verify jwt signature
10469
10604
  */
10470
- dpop?: RequestDpopOptions;
10471
- }
10472
-
10473
- interface CreateClientAttestationJwtOptions {
10605
+ verifyJwtCallback: VerifyJwtCallback;
10474
10606
  /**
10475
- * Creation time of the JWT. If not provided the current date will be used
10607
+ * Signer of the jwt
10476
10608
  */
10477
- issuedAt?: Date;
10609
+ signer: JwtSigner;
10478
10610
  /**
10479
- * Expiration time of the JWT.
10611
+ * Custom error message
10480
10612
  */
10481
- expiresAt: Date;
10613
+ errorMessage?: string;
10482
10614
  /**
10483
- * Issuer of the client attestation, usually identifier of the client backend
10615
+ * Allowed skew time in seconds for validity of token. Used for `exp` and `nbf`
10616
+ * verification.
10617
+ *
10618
+ * @default 0
10484
10619
  */
10485
- issuer: string;
10620
+ allowedSkewInSeconds?: number;
10486
10621
  /**
10487
- * The client id of the client instance.
10622
+ * Expected value for the 'aud' claim
10488
10623
  */
10489
- clientId: string;
10624
+ expectedAudience?: string;
10490
10625
  /**
10491
- * The confirmation payload for the client, attesting the `jwk`, `key_type` and `user_authentication`
10626
+ * Expected value for the 'iss' claim
10492
10627
  */
10493
- confirmation: ClientAttestationJwtPayload['cnf'];
10628
+ expectedIssuer?: string;
10494
10629
  /**
10495
- * Additional payload to include in the client attestation jwt payload. Will be applied after
10496
- * any default claims that are included, so add claims with caution.
10630
+ * Expected value for the 'nonce' claim
10497
10631
  */
10498
- additionalPayload?: Record<string, unknown>;
10632
+ expectedNonce?: string;
10499
10633
  /**
10500
- * Callback used for client attestation
10634
+ * Expected value for the 'sub' claim
10501
10635
  */
10502
- callbacks: Pick<CallbackContext, 'signJwt'>;
10636
+ expectedSubject?: string;
10503
10637
  /**
10504
- * The signer of the client attestation jwt.
10638
+ * The claims that are required to be present in the jwt.
10505
10639
  */
10506
- signer: JwtSigner;
10640
+ requiredClaims?: string[];
10507
10641
  }
10508
-
10509
- interface Oauth2ClientOptions {
10510
- /**
10511
- * Callbacks required for the oauth2 client
10512
- */
10513
- callbacks: Omit<CallbackContext, 'verifyJwt' | 'clientAuthentication'>;
10642
+ interface VerifyJwtReturn {
10643
+ signer: JwtSignerWithJwk;
10514
10644
  }
10515
- declare class Oauth2Client {
10516
- private options;
10517
- constructor(options: Oauth2ClientOptions);
10518
- isDpopSupported(options: {
10519
- authorizationServerMetadata: AuthorizationServerMetadata;
10520
- }): {
10521
- readonly supported: false;
10522
- readonly dpopSigningAlgValuesSupported?: undefined;
10523
- } | {
10524
- readonly supported: true;
10525
- readonly dpopSigningAlgValuesSupported: string[];
10526
- };
10527
- fetchAuthorizationServerMetadata(issuer: string): Promise<z.objectOutputType<{
10528
- issuer: z.ZodEffects<z.ZodString, string, string>;
10529
- token_endpoint: z.ZodEffects<z.ZodString, string, string>;
10530
- token_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10531
- authorization_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
10532
- jwks_uri: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
10533
- code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10534
- dpop_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
10535
- require_pushed_authorization_requests: z.ZodOptional<z.ZodBoolean>;
10536
- pushed_authorization_request_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
10537
- introspection_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
10538
- introspection_endpoint_auth_methods_supported: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodLiteral<"client_secret_jwt">, z.ZodLiteral<"private_key_jwt">, z.ZodString]>, "many">>;
10539
- introspection_endpoint_auth_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
10540
- authorization_challenge_endpoint: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
10541
- pre_authorized_grant_anonymous_access_supported: z.ZodOptional<z.ZodBoolean>;
10542
- }, z.ZodTypeAny, "passthrough"> | null>;
10645
+ declare function verifyJwt(options: VerifyJwtOptions): Promise<VerifyJwtReturn>;
10646
+
10647
+ interface DecodeJwtHeaderOptions<HeaderSchema extends BaseSchema | undefined> {
10543
10648
  /**
10544
- * Initiate authorization.
10545
- *
10546
- * It will take the followings steps:
10547
- * - if `authorization_challenge_endpoint` is defined, send an authorization challenge request
10548
- * - if authorization challenge request returns a `redirect_to_web` error code with `request_uri`
10549
- * then construct the authorization request url based on the `request_uri`
10550
- * - if the `authorization_challenge_endpoint` is not defined, or authorization challenge request reuturns a `redirect_to_web` error code without `request_uri`
10551
- * then the authorization request url will be constructed as usual (optionally using PAR).
10552
- *
10553
- * @throws {Oauth2ClientAuthorizationChallengeError} in case of an error response. If `error` is
10554
- * `insufficient_authorization` possible extra steps can be taken.
10649
+ * The comapct encoded jwt
10555
10650
  */
10556
- initiateAuthorization(options: Omit<CreateAuthorizationRequestUrlOptions, 'callbacks'>): Promise<{
10557
- authorizationRequestUrl: string;
10558
- pkce: CreatePkceReturn | undefined;
10559
- dpop: RequestDpopOptions | undefined;
10560
- } | {
10561
- dpop: {
10562
- nonce: any;
10563
- signer: JwtSignerJwk;
10564
- } | undefined;
10565
- authorizationRequestUrl: string;
10566
- pkce: CreatePkceReturn | undefined;
10567
- }>;
10568
- sendAuthorizationChallengeRequest(options: Omit<SendAuthorizationChallengeRequestOptions, 'callbacks'>): Promise<{
10569
- pkce: CreatePkceReturn | undefined;
10570
- dpop: {
10571
- nonce: any;
10572
- signer: JwtSignerJwk;
10573
- } | undefined;
10574
- authorizationChallengeResponse: z.objectOutputType<{
10575
- authorization_code: z.ZodString;
10576
- }, z.ZodTypeAny, "passthrough">;
10577
- }>;
10578
- createAuthorizationRequestUrl(options: Omit<CreateAuthorizationRequestUrlOptions, 'callbacks'>): Promise<{
10579
- authorizationRequestUrl: string;
10580
- pkce: CreatePkceReturn | undefined;
10581
- dpop: RequestDpopOptions | undefined;
10582
- }>;
10583
- retrievePreAuthorizedCodeAccessToken({ authorizationServerMetadata, preAuthorizedCode, additionalRequestPayload, txCode, dpop, resource, clientAttestation, }: Omit<RetrievePreAuthorizedCodeAccessTokenOptions, 'callbacks'>): Promise<RetrieveAccessTokenReturn>;
10584
- retrieveAuthorizationCodeAccessToken({ authorizationServerMetadata, additionalRequestPayload, authorizationCode, pkceCodeVerifier, redirectUri, resource, dpop, clientAttestation, }: Omit<RetrieveAuthorizationCodeAccessTokenOptions, 'callbacks'>): Promise<RetrieveAccessTokenReturn>;
10585
- retrieveRefreshTokenAccessToken({ authorizationServerMetadata, additionalRequestPayload, refreshToken, resource, dpop, clientAttestation, }: Omit<RetrieveRefreshTokenAccessTokenOptions, 'callbacks'>): Promise<RetrieveAccessTokenReturn>;
10586
- resourceRequest(options: ResourceRequestOptions): Promise<ResourceRequestResponseOk | ResourceRequestResponseNotOk>;
10651
+ jwt: string;
10587
10652
  /**
10588
- * @todo move this to another class?
10653
+ * Schema to use for validating the header. If not provided the
10654
+ * default `vJwtHeader` schema will be used
10589
10655
  */
10590
- createClientAttestationJwt(options: Omit<CreateClientAttestationJwtOptions, 'callbacks'>): Promise<string>;
10656
+ headerSchema?: HeaderSchema;
10591
10657
  }
10658
+ type DecodeJwtHeaderResult<HeaderSchema extends BaseSchema | undefined = undefined> = {
10659
+ header: InferSchemaOrDefaultOutput<HeaderSchema, typeof zJwtHeader>;
10660
+ };
10661
+ declare function decodeJwtHeader<HeaderSchema extends BaseSchema | undefined = undefined>(options: DecodeJwtHeaderOptions<HeaderSchema>): DecodeJwtHeaderResult<HeaderSchema>;
10592
10662
 
10593
- export { type AccessTokenErrorResponse, type AccessTokenProfileJwtPayload, type AccessTokenResponse, type AuthorizationChallengeErrorResponse, type AuthorizationChallengeRequest, type AuthorizationChallengeResponse, type AuthorizationCodeGrantIdentifier, type AuthorizationServerMetadata, type CalculateJwkThumbprintOptions, type CallbackContext, type ClientAttestationJwtHeader, type ClientAttestationJwtPayload, type ClientAttestationPopJwtHeader, type ClientAttestationPopJwtPayload, type ClientAuthenticationCallback, type ClientAuthenticationCallbackOptions, type ClientAuthenticationClientSecretBasicOptions, type ClientAuthenticationClientSecretPostOptions, type ClientAuthenticationDynamicOptions, type CreateAuthorizationRequestUrlOptions, type CreatePkceReturn, type DecodeJwtOptions, type DecodeJwtResult, type GenerateRandomCallback, HashAlgorithm, type HashCallback, type Jwk, type JwkSet, type JwtSigner, type JwtSignerCustom, type JwtSignerDid, type JwtSignerJwk, type JwtSignerWithJwk, type JwtSignerX5c, Oauth2AuthorizationServer, type Oauth2AuthorizationServerOptions, Oauth2Client, Oauth2ClientAuthorizationChallengeError, Oauth2ClientErrorResponseError, type Oauth2ClientOptions, Oauth2Error, Oauth2ErrorCodes, type Oauth2ErrorOptions, type Oauth2ErrorResponse, Oauth2JwtParseError, Oauth2JwtVerificationError, Oauth2ResourceServer, type Oauth2ResourceServerOptions, Oauth2ResourceUnauthorizedError, Oauth2ServerErrorResponseError, PkceCodeChallengeMethod, type PreAuthorizedCodeGrantIdentifier, type RefreshTokenGrantIdentifier, type RequestClientAttestationOptions, type RequestDpopOptions, type ResourceRequestOptions, type ResourceRequestResponseNotOk, type ResourceRequestResponseOk, type RetrieveAuthorizationCodeAccessTokenOptions, type RetrievePreAuthorizedCodeAccessTokenOptions, type SignJwtCallback, SupportedAuthenticationScheme, type TokenIntrospectionResponse, type VerifyAccessTokenRequestReturn, type VerifyJwtCallback, type VerifyJwtOptions, type VerifyResourceRequestOptions, type WwwAuthenticateHeaderChallenge, authorizationCodeGrantIdentifier, calculateJwkThumbprint, clientAuthenticationClientSecretBasic, clientAuthenticationClientSecretPost, clientAuthenticationDynamic, clientAuthenticationNone, decodeJwt, fetchAuthorizationServerMetadata, fetchJwks, fetchWellKnownMetadata, getAuthorizationServerMetadataFromList, isJwkInSet, jwtHeaderFromJwtSigner, jwtSignerFromJwt, preAuthorizedCodeGrantIdentifier, refreshTokenGrantIdentifier, resourceRequest, verifyJwt, verifyResourceRequest, zAuthorizationCodeGrantIdentifier, zAuthorizationServerMetadata, zCompactJwt, zJwk, zJwtHeader, zJwtPayload, zOauth2ErrorResponse, zPreAuthorizedCodeGrantIdentifier, zRefreshTokenGrantIdentifier };
10663
+ export { type AccessTokenErrorResponse, type AccessTokenProfileJwtPayload, type AccessTokenResponse, type AuthorizationChallengeErrorResponse, type AuthorizationChallengeRequest, type AuthorizationChallengeResponse, type AuthorizationCodeGrantIdentifier, type AuthorizationServerMetadata, type CalculateJwkThumbprintOptions, type CallbackContext, type ClientAttestationJwtHeader, type ClientAttestationJwtPayload, type ClientAttestationPopJwtHeader, type ClientAttestationPopJwtPayload, type ClientAuthenticationCallback, type ClientAuthenticationCallbackOptions, type ClientAuthenticationClientSecretBasicOptions, type ClientAuthenticationClientSecretPostOptions, type ClientAuthenticationDynamicOptions, type CreateAuthorizationRequestUrlOptions, type CreatePkceReturn, type DecodeJwtHeaderResult, type DecodeJwtOptions, type DecodeJwtResult, type DecryptJweCallback, type DecryptJweCallbackOptions, type EncryptJweCallback, type GenerateRandomCallback, HashAlgorithm, type HashCallback, type JweEncryptor, type Jwk, type JwkSet, type JwtHeader, type JwtPayload, type JwtSigner, type JwtSignerCustom, type JwtSignerDid, type JwtSignerJwk, type JwtSignerWithJwk, type JwtSignerX5c, Oauth2AuthorizationServer, type Oauth2AuthorizationServerOptions, Oauth2Client, Oauth2ClientAuthorizationChallengeError, Oauth2ClientErrorResponseError, type Oauth2ClientOptions, Oauth2Error, Oauth2ErrorCodes, type Oauth2ErrorOptions, type Oauth2ErrorResponse, Oauth2JwtParseError, Oauth2JwtVerificationError, Oauth2ResourceServer, type Oauth2ResourceServerOptions, Oauth2ResourceUnauthorizedError, Oauth2ServerErrorResponseError, PkceCodeChallengeMethod, type PreAuthorizedCodeGrantIdentifier, type RefreshTokenGrantIdentifier, type RequestClientAttestationOptions, type RequestDpopOptions, type ResourceRequestOptions, type ResourceRequestResponseNotOk, type ResourceRequestResponseOk, type RetrieveAuthorizationCodeAccessTokenOptions, type RetrievePreAuthorizedCodeAccessTokenOptions, type SignJwtCallback, SupportedAuthenticationScheme, type TokenIntrospectionResponse, type VerifyAccessTokenRequestReturn, type VerifyJwtCallback, type VerifyResourceRequestOptions, type WwwAuthenticateHeaderChallenge, authorizationCodeGrantIdentifier, calculateJwkThumbprint, clientAuthenticationClientSecretBasic, clientAuthenticationClientSecretPost, clientAuthenticationDynamic, clientAuthenticationNone, decodeJwt, decodeJwtHeader, fetchAuthorizationServerMetadata, fetchJwks, fetchWellKnownMetadata, getAuthorizationServerMetadataFromList, isJwkInSet, jwtHeaderFromJwtSigner, jwtSignerFromJwt, preAuthorizedCodeGrantIdentifier, refreshTokenGrantIdentifier, resourceRequest, verifyJwt, verifyResourceRequest, zAlgValueNotNone, zAuthorizationCodeGrantIdentifier, zAuthorizationServerMetadata, zCompactJwe, zCompactJwt, zJwk, zJwkSet, zJwtHeader, zJwtPayload, zOauth2ErrorResponse, zPreAuthorizedCodeGrantIdentifier, zRefreshTokenGrantIdentifier };