@orangecheck/me-client 0.32.4 → 0.34.0

package/dist/index.mjs

@@ -267,8 +267,8 @@ async function hmacSha256Hex(secret, message) {
     false,
     ["sign"]
   );
-  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(message));
-  return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+  const sig2 = await crypto.subtle.sign("HMAC", key, enc.encode(message));
+  return Array.from(new Uint8Array(sig2)).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 async function signBody(secret, serializedBody) {
   const t = Math.floor(Date.now() / 1e3);
@@ -678,46 +678,27 @@ var config = {
 // node_modules/jose/dist/webapi/lib/buffer_utils.js
 new TextEncoder();
 var decoder = new TextDecoder();
-
-// node_modules/jose/dist/webapi/lib/base64.js
-function decodeBase64(encoded) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(encoded);
-  }
-  const binary = atob(encoded);
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) {
+new TextDecoder("utf-8", { fatal: true });
+function decodeBase64(encoded, url = false) {
+  if (Uint8Array.fromBase64)
+    return Uint8Array.fromBase64(encoded, { alphabet: url ? "base64url" : "base64" });
+  if (url) {
+    if (encoded.includes("+") || encoded.includes("/"))
+      throw new TypeError("Invalid base64url");
+    encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
+  }
+  const binary = atob(encoded), bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++)
     bytes[i] = binary.charCodeAt(i);
-  }
   return bytes;
 }
 
-// node_modules/jose/dist/webapi/util/base64url.js
-function decode(input) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(typeof input === "string" ? input : decoder.decode(input), {
-      alphabet: "base64url"
-    });
-  }
-  let encoded = input;
-  if (encoded instanceof Uint8Array) {
-    encoded = decoder.decode(encoded);
-  }
-  encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
-  try {
-    return decodeBase64(encoded);
-  } catch {
-    throw new TypeError("The input to be decoded is not correctly encoded.");
-  }
-}
-
 // node_modules/jose/dist/webapi/util/errors.js
 var JOSEError = class extends Error {
   constructor(message, options) {
     super(message, options);
     __publicField(this, "code", "ERR_JOSE_GENERIC");
-    this.name = this.constructor.name;
-    Error.captureStackTrace?.(this, this.constructor);
+    this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
   }
 };
 __publicField(JOSEError, "code", "ERR_JOSE_GENERIC");
@@ -732,166 +713,258 @@ var _a, _b;
 var JWKSMultipleMatchingKeys = class extends (_b = JOSEError, _a = Symbol.asyncIterator, _b) {
   constructor(message = "multiple matching keys found in the JSON Web Key Set", options) {
     super(message, options);
-    __publicField(this, _a);
+    __publicField(this, _a, async function* () {
+    });
     __publicField(this, "code", "ERR_JWKS_MULTIPLE_MATCHING_KEYS");
   }
 };
 __publicField(JWKSMultipleMatchingKeys, "code", "ERR_JWKS_MULTIPLE_MATCHING_KEYS");
 
-// node_modules/jose/dist/webapi/lib/type_checks.js
-var isObjectLike = (value) => typeof value === "object" && value !== null;
+// node_modules/jose/dist/webapi/util/base64url.js
+var invalid = "The input to be decoded is not correctly encoded.";
+function decode(input) {
+  try {
+    return decodeBase64(typeof input == "string" ? input : decoder.decode(input), true);
+  } catch (cause) {
+    throw new TypeError(invalid, { cause });
+  }
+}
+
+// node_modules/jose/dist/webapi/lib/validate.js
 function isObject(input) {
-  if (!isObjectLike(input) || Object.prototype.toString.call(input) !== "[object Object]") {
+  if (typeof input != "object" || input === null || Object.prototype.toString.call(input) !== "[object Object]")
     return false;
-  }
-  if (Object.getPrototypeOf(input) === null) {
-    return true;
-  }
-  let proto = input;
-  while (Object.getPrototypeOf(proto) !== null) {
-    proto = Object.getPrototypeOf(proto);
-  }
-  return Object.getPrototypeOf(input) === proto;
+  const prototype = Object.getPrototypeOf(input);
+  return prototype === null || Object.getPrototypeOf(prototype) === null;
 }
 
-// node_modules/jose/dist/webapi/lib/jwk_to_key.js
-var unsupportedAlg = 'Invalid or unsupported JWK "alg" (Algorithm) Parameter value';
-function subtleMapping(jwk) {
-  let algorithm;
-  let keyUsages;
-  switch (jwk.kty) {
-    case "AKP": {
-      switch (jwk.alg) {
-        case "ML-DSA-44":
-        case "ML-DSA-65":
-        case "ML-DSA-87":
-          algorithm = { name: jwk.alg };
-          keyUsages = jwk.priv ? ["sign"] : ["verify"];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "RSA": {
-      switch (jwk.alg) {
-        case "PS256":
-        case "PS384":
-        case "PS512":
-          algorithm = { name: "RSA-PSS", hash: `SHA-${jwk.alg.slice(-3)}` };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "RS256":
-        case "RS384":
-        case "RS512":
-          algorithm = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${jwk.alg.slice(-3)}` };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "RSA-OAEP":
-        case "RSA-OAEP-256":
-        case "RSA-OAEP-384":
-        case "RSA-OAEP-512":
-          algorithm = {
-            name: "RSA-OAEP",
-            hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`
-          };
-          keyUsages = jwk.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "EC": {
-      switch (jwk.alg) {
-        case "ES256":
-        case "ES384":
-        case "ES512":
-          algorithm = {
-            name: "ECDSA",
-            namedCurve: { ES256: "P-256", ES384: "P-384", ES512: "P-521" }[jwk.alg]
-          };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          algorithm = { name: "ECDH", namedCurve: jwk.crv };
-          keyUsages = jwk.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "OKP": {
-      switch (jwk.alg) {
-        case "Ed25519":
-        case "EdDSA":
-          algorithm = { name: "Ed25519" };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          algorithm = { name: jwk.crv };
-          keyUsages = jwk.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    default:
-      throw new JOSENotSupported('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
-  }
-  return { algorithm, keyUsages };
+// node_modules/jose/dist/webapi/lib/key.js
+function snapshotJwk(jwk) {
+  return { __proto__: null, ...jwk };
 }
-async function jwkToKey(jwk) {
-  if (!jwk.alg) {
-    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
-  }
-  const { algorithm, keyUsages } = subtleMapping(jwk);
-  const keyData = { ...jwk };
-  if (keyData.kty !== "AKP") {
-    delete keyData.alg;
-  }
-  delete keyData.use;
-  return crypto.subtle.importKey("jwk", keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);
+function normalizeJwk(jwk) {
+  const normalized = snapshotJwk(jwk);
+  if (normalized.ext !== void 0 && typeof normalized.ext != "boolean")
+    throw new TypeError('"ext" (Extractable) Parameter must be a boolean');
+  if (normalized.key_ops !== void 0) {
+    const value = normalized.key_ops, keyOps = Array.isArray(value) ? [...value] : void 0;
+    if (!keyOps || keyOps.some((operation) => typeof operation != "string") || new Set(keyOps).size !== keyOps.length)
+      throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');
+    normalized.key_ops = keyOps;
+  }
+  return normalized;
+}
+async function jwkToKey(entry, jwk, extractable) {
+  if (!entry.kty.includes(jwk.kty))
+    throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+  const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle, isPrivate = !!(jwk.d || jwk.priv), keyData = { ...jwk, ext: jwk.ext };
+  return keyData.kty !== "AKP" && delete keyData.alg, delete keyData.use, crypto.subtle.importKey("jwk", keyData, algorithm, keyData.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
+}
+
+// node_modules/jose/dist/webapi/lib/key_descriptor.js
+function table(entries) {
+  const out = { __proto__: null };
+  for (const alg in entries)
+    out[alg] = { ...entries[alg], alg };
+  return out;
+}
+
+// node_modules/jose/dist/webapi/lib/jwe_algorithms.js
+var wrap = [
+  ["encrypt", "wrapKey"],
+  ["decrypt", "unwrapKey"]
+];
+var derive = [[], ["deriveBits"]];
+var none = [[], []];
+function rsaes(bits) {
+  return {
+    kty: ["RSA"],
+    mode: "key-encryption",
+    subtle: { name: "RSA-OAEP", hash: `SHA-${bits}` },
+    usages: wrap,
+    ops: ["wrapKey", "unwrapKey"]
+  };
+}
+function ecdh(mode) {
+  return {
+    kty: ["EC", "OKP"],
+    mode,
+    subtle: { name: "ECDH" },
+    resolve: ({ kty, crv, asymmetricKeyType }) => {
+      if (crv === "X25519" || asymmetricKeyType === "x25519")
+        return { name: "X25519" };
+      if (kty === "OKP")
+        throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      return { name: "ECDH", namedCurve: crv };
+    },
+    usages: derive,
+    ops: [void 0, "deriveBits"]
+  };
+}
+function aeskw(bits, gcm = false) {
+  return {
+    kty: ["oct"],
+    mode: "key-wrapping",
+    secret: true,
+    subtle: { name: gcm ? "AES-GCM" : "AES-KW", length: bits },
+    usages: none,
+    ops: gcm ? ["encrypt", "decrypt"] : ["wrapKey", "unwrapKey"]
+  };
+}
+function pbes2() {
+  return {
+    kty: ["oct"],
+    mode: "key-wrapping",
+    secret: true,
+    subtle: { name: "PBKDF2" },
+    usages: none,
+    ops: ["deriveBits", "deriveBits"]
+  };
+}
+var JWE = table({
+  dir: {
+    kty: ["oct"],
+    mode: "direct-encryption",
+    secret: true,
+    subtle: { name: "AES-GCM" },
+    usages: none,
+    ops: ["encrypt", "decrypt"]
+  },
+  "RSA-OAEP": rsaes(1),
+  "RSA-OAEP-256": rsaes(256),
+  "RSA-OAEP-384": rsaes(384),
+  "RSA-OAEP-512": rsaes(512),
+  "ECDH-ES": ecdh("direct-key-agreement"),
+  "ECDH-ES+A128KW": ecdh("key-agreement-with-key-wrapping"),
+  "ECDH-ES+A192KW": ecdh("key-agreement-with-key-wrapping"),
+  "ECDH-ES+A256KW": ecdh("key-agreement-with-key-wrapping"),
+  A128KW: aeskw(128),
+  A192KW: aeskw(192),
+  A256KW: aeskw(256),
+  A128GCMKW: aeskw(128, true),
+  A192GCMKW: aeskw(192, true),
+  A256GCMKW: aeskw(256, true),
+  "PBES2-HS256+A128KW": pbes2(),
+  "PBES2-HS384+A192KW": pbes2(),
+  "PBES2-HS512+A256KW": pbes2()
+});
+var contentOps = ["encrypt", "decrypt"];
+function contentEncryption(bits, cbc = false) {
+  return {
+    kty: ["oct"],
+    secret: true,
+    subtle: { name: cbc ? "AES-CBC" : "AES-GCM", length: bits },
+    usages: none,
+    ops: contentOps,
+    cekBits: bits,
+    ivBits: cbc ? 128 : 96,
+    cbc
+  };
+}
+table({
+  A128GCM: contentEncryption(128),
+  A192GCM: contentEncryption(192),
+  A256GCM: contentEncryption(256),
+  "A128CBC-HS256": contentEncryption(256, true),
+  "A192CBC-HS384": contentEncryption(384, true),
+  "A256CBC-HS512": contentEncryption(512, true)
+});
+
+// node_modules/jose/dist/webapi/lib/jws_algorithms.js
+var sig = [["verify"], ["sign"]];
+function hmac(bits) {
+  const subtle = { name: "HMAC", hash: `SHA-${bits}` };
+  return { kty: ["oct"], secret: true, subtle, signing: subtle, usages: sig };
+}
+function rsa(bits, saltLength) {
+  const subtle = { name: saltLength ? "RSA-PSS" : "RSASSA-PKCS1-v1_5", hash: `SHA-${bits}` };
+  return {
+    kty: ["RSA"],
+    subtle,
+    signing: saltLength ? { ...subtle, saltLength } : subtle,
+    usages: sig,
+    minRsaBits: 2048
+  };
+}
+function ecdsa(crv, bits) {
+  return {
+    kty: ["EC"],
+    crv,
+    subtle: { name: "ECDSA", namedCurve: crv },
+    signing: { name: "ECDSA", hash: `SHA-${bits}` },
+    usages: sig
+  };
+}
+function eddsa() {
+  const subtle = { name: "Ed25519" };
+  return {
+    kty: ["OKP"],
+    crv: "Ed25519",
+    subtle,
+    signing: subtle,
+    usages: sig
+  };
+}
+function mldsa(parameterSet) {
+  const subtle = { name: `ML-DSA-${parameterSet}` };
+  return {
+    kty: ["AKP"],
+    subtle,
+    signing: subtle,
+    usages: sig
+  };
+}
+var JWS = table({
+  HS256: hmac(256),
+  HS384: hmac(384),
+  HS512: hmac(512),
+  RS256: rsa(256),
+  RS384: rsa(384),
+  RS512: rsa(512),
+  PS256: rsa(256, 32),
+  PS384: rsa(384, 48),
+  PS512: rsa(512, 64),
+  ES256: ecdsa("P-256", 256),
+  ES384: ecdsa("P-384", 384),
+  ES512: ecdsa("P-521", 512),
+  EdDSA: eddsa(),
+  Ed25519: eddsa(),
+  "ML-DSA-44": mldsa(44),
+  "ML-DSA-65": mldsa(65),
+  "ML-DSA-87": mldsa(87)
+});
+
+// node_modules/jose/dist/webapi/lib/key_algorithm.js
+function unsupportedAlg(source = 'JWK "alg" (Algorithm) Parameter') {
+  throw new JOSENotSupported(`Invalid or unsupported ${source} value`);
+}
+function keyAlgorithm(alg, source) {
+  return (typeof alg == "string" ? JWS[alg] ?? JWE[alg] : void 0) ?? unsupportedAlg(source);
 }
 
 // node_modules/jose/dist/webapi/key/import.js
 async function importJWK(jwk, alg, options) {
-  if (!isObject(jwk)) {
+  if (!isObject(jwk))
     throw new TypeError("JWK must be an object");
-  }
-  let ext;
-  ext ?? (ext = jwk.ext);
-  switch (jwk.kty) {
+  const normalized = normalizeJwk(jwk), { alg: jwkAlg } = normalized;
+  if (normalized.kty !== "oct" && !alg)
+    ;
+  switch (normalized.kty) {
     case "oct":
-      if (typeof jwk.k !== "string" || !jwk.k) {
+      if (typeof normalized.k != "string")
         throw new TypeError('missing "k" (Key Value) Parameter value');
-      }
-      return decode(jwk.k);
-    case "RSA":
-      if ("oth" in jwk && jwk.oth !== void 0) {
-        throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-      }
-      return jwkToKey({ ...jwk, alg, ext });
+      return decode(normalized.k);
     case "AKP": {
-      if (typeof jwk.alg !== "string" || !jwk.alg) {
+      if (typeof jwkAlg != "string" || !jwkAlg)
         throw new TypeError('missing "alg" (Algorithm) Parameter value');
-      }
-      if (alg !== jwk.alg) {
+      if (alg !== jwkAlg)
         throw new TypeError("JWK alg and alg option value mismatch");
-      }
-      return jwkToKey({ ...jwk, ext });
+      return jwkToKey(keyAlgorithm(alg), normalized);
     }
+    case "RSA":
     case "EC":
     case "OKP":
-      return jwkToKey({ ...jwk, alg, ext });
+      return jwkToKey(keyAlgorithm(alg), normalized);
     default:
       throw new JOSENotSupported('Unsupported "kty" (Key Type) Parameter value');
   }
@@ -901,9 +974,12 @@ async function importJWK(jwk, alg, options) {
 var DEFAULT_ISSUER = "https://me.ochk.io";
 var JWKS_PATH = "/api/dev-jwks";
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 6 * 60 * 60 * 1e3;
+var FORCED_REFRESH_MIN_INTERVAL_MS = 6e4;
 var jwksCache = /* @__PURE__ */ new Map();
 var inflight = /* @__PURE__ */ new Map();
-async function fetchJwks(issuer, ttlMs) {
+var lastForcedRefresh = /* @__PURE__ */ new Map();
+async function fetchJwks(issuer, ttlMs, maxStaleMs = DEFAULT_MAX_STALE_MS) {
   const cached = jwksCache.get(issuer);
   if (cached && Date.now() - cached.fetchedAt < ttlMs) return cached;
   const existing = inflight.get(issuer);
@@ -930,7 +1006,7 @@ async function fetchJwks(issuer, ttlMs) {
       return entry;
     } catch (err) {
       const stale = jwksCache.get(issuer);
-      if (stale) return stale;
+      if (stale && Date.now() - stale.fetchedAt < maxStaleMs) return stale;
       throw err;
     }
   })().finally(() => {
@@ -960,14 +1036,14 @@ function toArrayBuffer(view) {
   new Uint8Array(buf).set(view);
   return buf;
 }
-async function verifyEd25519(key, sig, msg) {
+async function verifyEd25519(key, sig2, msg) {
   const subtle = typeof globalThis.crypto !== "undefined" && globalThis.crypto.subtle ? globalThis.crypto.subtle : null;
   if (!subtle) return false;
   try {
     return await subtle.verify(
       "Ed25519",
       key,
-      toArrayBuffer(sig),
+      toArrayBuffer(sig2),
       toArrayBuffer(msg)
     );
   } catch {
@@ -977,8 +1053,8 @@ async function verifyEd25519(key, sig, msg) {
 async function verify2(rawBody, sigHex, kid, options = {}) {
   if (!sigHex) return { ok: false, reason: "missing signature" };
   if (!kid) return { ok: false, reason: "missing kid" };
-  const sig = hexToBytes(sigHex);
-  if (!sig) return { ok: false, reason: "malformed signature (expected hex)" };
+  const sig2 = hexToBytes(sigHex);
+  if (!sig2) return { ok: false, reason: "malformed signature (expected hex)" };
   const msg = toBytes(rawBody);
   let key;
   if (options.jwk) {
@@ -993,12 +1069,13 @@ async function verify2(rawBody, sigHex, kid, options = {}) {
   } else {
     const issuer = options.issuer ?? DEFAULT_ISSUER;
     const ttl = options.jwksCacheTtlMs ?? DEFAULT_TTL_MS;
+    const maxStale = options.jwksMaxStaleMs ?? DEFAULT_MAX_STALE_MS;
     try {
-      let entry = await fetchJwks(issuer, ttl);
+      let entry = await fetchJwks(issuer, ttl, maxStale);
       key = entry.keys[kid];
-      if (!key) {
-        jwksCache.delete(issuer);
-        entry = await fetchJwks(issuer, ttl);
+      if (!key && Date.now() - (lastForcedRefresh.get(issuer) ?? 0) >= FORCED_REFRESH_MIN_INTERVAL_MS) {
+        lastForcedRefresh.set(issuer, Date.now());
+        entry = await fetchJwks(issuer, 0, maxStale);
         key = entry.keys[kid];
       }
     } catch (err) {
@@ -1006,7 +1083,7 @@ async function verify2(rawBody, sigHex, kid, options = {}) {
     }
     if (!key) return { ok: false, reason: `kid ${kid} not in JWKS` };
   }
-  const ok = await verifyEd25519(key, sig, msg);
+  const ok = await verifyEd25519(key, sig2, msg);
   return ok ? { ok: true } : { ok: false, reason: "signature does not match" };
 }
 async function fetchJwksForce(issuer = DEFAULT_ISSUER) {
@@ -1140,10 +1217,13 @@ var family = { scopes };
 // src/identity.ts
 var DEFAULT_ISSUER2 = "https://me.ochk.io";
 var DEFAULT_TTL_MS2 = 60 * 60 * 1e3;
+var DEFAULT_MAX_STALE_MS2 = 6 * 60 * 60 * 1e3;
+var FORCED_REFRESH_MIN_INTERVAL_MS2 = 6e4;
 var ENVELOPE_JWKS_PATH = "/.well-known/oc-envelope-jwks.json";
 var jwksCache2 = /* @__PURE__ */ new Map();
 var inflight2 = /* @__PURE__ */ new Map();
-async function fetchEnvelopeJwks(issuer, ttlMs) {
+var lastForcedRefresh2 = /* @__PURE__ */ new Map();
+async function fetchEnvelopeJwks(issuer, ttlMs, maxStaleMs = DEFAULT_MAX_STALE_MS2) {
   const cached = jwksCache2.get(issuer);
   if (cached && Date.now() - cached.fetchedAt < ttlMs) return cached;
   const existing = inflight2.get(issuer);
@@ -1170,7 +1250,7 @@ async function fetchEnvelopeJwks(issuer, ttlMs) {
       return entry;
     } catch (err) {
       const stale = jwksCache2.get(issuer);
-      if (stale) return stale;
+      if (stale && Date.now() - stale.fetchedAt < maxStaleMs) return stale;
       throw err;
     }
   })().finally(() => {
@@ -1219,14 +1299,14 @@ function toArrayBuffer2(view) {
   new Uint8Array(buf).set(view);
   return buf;
 }
-async function verifyEd255192(key, sig, msg) {
+async function verifyEd255192(key, sig2, msg) {
   const subtle = typeof globalThis.crypto !== "undefined" && globalThis.crypto.subtle ? globalThis.crypto.subtle : null;
   if (!subtle) return false;
   try {
     return await subtle.verify(
       "Ed25519",
       key,
-      toArrayBuffer2(sig),
+      toArrayBuffer2(sig2),
       toArrayBuffer2(msg)
     );
   } catch {
@@ -1336,12 +1416,13 @@ async function verifyActivityAttestation(bundle, options = {}) {
   } else {
     const issuer = options.issuer ?? DEFAULT_ISSUER2;
     const ttl = options.jwksCacheTtlMs ?? DEFAULT_TTL_MS2;
+    const maxStale = options.jwksMaxStaleMs ?? DEFAULT_MAX_STALE_MS2;
     try {
-      let entry = await fetchEnvelopeJwks(issuer, ttl);
+      let entry = await fetchEnvelopeJwks(issuer, ttl, maxStale);
       key = entry.keys[bundle.kid] ?? null;
-      if (!key) {
-        jwksCache2.delete(issuer);
-        entry = await fetchEnvelopeJwks(issuer, ttl);
+      if (!key && Date.now() - (lastForcedRefresh2.get(issuer) ?? 0) >= FORCED_REFRESH_MIN_INTERVAL_MS2) {
+        lastForcedRefresh2.set(issuer, Date.now());
+        entry = await fetchEnvelopeJwks(issuer, 0, maxStale);
         key = entry.keys[bundle.kid] ?? null;
       }
       checks.push({