@orangecheck/me-client 0.32.4 → 0.34.0

package/dist/server.js

@@ -9,46 +9,27 @@ var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "sy
 // node_modules/jose/dist/webapi/lib/buffer_utils.js
 new TextEncoder();
 var decoder = new TextDecoder();
-
-// node_modules/jose/dist/webapi/lib/base64.js
-function decodeBase64(encoded) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(encoded);
+new TextDecoder("utf-8", { fatal: true });
+function decodeBase64(encoded, url = false) {
+  if (Uint8Array.fromBase64)
+    return Uint8Array.fromBase64(encoded, { alphabet: url ? "base64url" : "base64" });
+  if (url) {
+    if (encoded.includes("+") || encoded.includes("/"))
+      throw new TypeError("Invalid base64url");
+    encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
   }
-  const binary = atob(encoded);
-  const bytes = new Uint8Array(binary.length);
-  for (let i = 0; i < binary.length; i++) {
+  const binary = atob(encoded), bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++)
     bytes[i] = binary.charCodeAt(i);
-  }
   return bytes;
 }
 
-// node_modules/jose/dist/webapi/util/base64url.js
-function decode(input) {
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(typeof input === "string" ? input : decoder.decode(input), {
-      alphabet: "base64url"
-    });
-  }
-  let encoded = input;
-  if (encoded instanceof Uint8Array) {
-    encoded = decoder.decode(encoded);
-  }
-  encoded = encoded.replace(/-/g, "+").replace(/_/g, "/");
-  try {
-    return decodeBase64(encoded);
-  } catch {
-    throw new TypeError("The input to be decoded is not correctly encoded.");
-  }
-}
-
 // node_modules/jose/dist/webapi/util/errors.js
 var JOSEError = class extends Error {
   constructor(message, options) {
     super(message, options);
     __publicField(this, "code", "ERR_JOSE_GENERIC");
-    this.name = this.constructor.name;
-    Error.captureStackTrace?.(this, this.constructor);
+    this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
   }
 };
 __publicField(JOSEError, "code", "ERR_JOSE_GENERIC");
@@ -63,166 +44,258 @@ var _a, _b;
 var JWKSMultipleMatchingKeys = class extends (_b = JOSEError, _a = Symbol.asyncIterator, _b) {
   constructor(message = "multiple matching keys found in the JSON Web Key Set", options) {
     super(message, options);
-    __publicField(this, _a);
+    __publicField(this, _a, async function* () {
+    });
     __publicField(this, "code", "ERR_JWKS_MULTIPLE_MATCHING_KEYS");
   }
 };
 __publicField(JWKSMultipleMatchingKeys, "code", "ERR_JWKS_MULTIPLE_MATCHING_KEYS");
 
-// node_modules/jose/dist/webapi/lib/type_checks.js
-var isObjectLike = (value) => typeof value === "object" && value !== null;
+// node_modules/jose/dist/webapi/util/base64url.js
+var invalid = "The input to be decoded is not correctly encoded.";
+function decode(input) {
+  try {
+    return decodeBase64(typeof input == "string" ? input : decoder.decode(input), true);
+  } catch (cause) {
+    throw new TypeError(invalid, { cause });
+  }
+}
+
+// node_modules/jose/dist/webapi/lib/validate.js
 function isObject(input) {
-  if (!isObjectLike(input) || Object.prototype.toString.call(input) !== "[object Object]") {
+  if (typeof input != "object" || input === null || Object.prototype.toString.call(input) !== "[object Object]")
     return false;
-  }
-  if (Object.getPrototypeOf(input) === null) {
-    return true;
-  }
-  let proto = input;
-  while (Object.getPrototypeOf(proto) !== null) {
-    proto = Object.getPrototypeOf(proto);
-  }
-  return Object.getPrototypeOf(input) === proto;
+  const prototype = Object.getPrototypeOf(input);
+  return prototype === null || Object.getPrototypeOf(prototype) === null;
 }
 
-// node_modules/jose/dist/webapi/lib/jwk_to_key.js
-var unsupportedAlg = 'Invalid or unsupported JWK "alg" (Algorithm) Parameter value';
-function subtleMapping(jwk) {
-  let algorithm;
-  let keyUsages;
-  switch (jwk.kty) {
-    case "AKP": {
-      switch (jwk.alg) {
-        case "ML-DSA-44":
-        case "ML-DSA-65":
-        case "ML-DSA-87":
-          algorithm = { name: jwk.alg };
-          keyUsages = jwk.priv ? ["sign"] : ["verify"];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "RSA": {
-      switch (jwk.alg) {
-        case "PS256":
-        case "PS384":
-        case "PS512":
-          algorithm = { name: "RSA-PSS", hash: `SHA-${jwk.alg.slice(-3)}` };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "RS256":
-        case "RS384":
-        case "RS512":
-          algorithm = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${jwk.alg.slice(-3)}` };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "RSA-OAEP":
-        case "RSA-OAEP-256":
-        case "RSA-OAEP-384":
-        case "RSA-OAEP-512":
-          algorithm = {
-            name: "RSA-OAEP",
-            hash: `SHA-${parseInt(jwk.alg.slice(-3), 10) || 1}`
-          };
-          keyUsages = jwk.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "EC": {
-      switch (jwk.alg) {
-        case "ES256":
-        case "ES384":
-        case "ES512":
-          algorithm = {
-            name: "ECDSA",
-            namedCurve: { ES256: "P-256", ES384: "P-384", ES512: "P-521" }[jwk.alg]
-          };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          algorithm = { name: "ECDH", namedCurve: jwk.crv };
-          keyUsages = jwk.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    case "OKP": {
-      switch (jwk.alg) {
-        case "Ed25519":
-        case "EdDSA":
-          algorithm = { name: "Ed25519" };
-          keyUsages = jwk.d ? ["sign"] : ["verify"];
-          break;
-        case "ECDH-ES":
-        case "ECDH-ES+A128KW":
-        case "ECDH-ES+A192KW":
-        case "ECDH-ES+A256KW":
-          algorithm = { name: jwk.crv };
-          keyUsages = jwk.d ? ["deriveBits"] : [];
-          break;
-        default:
-          throw new JOSENotSupported(unsupportedAlg);
-      }
-      break;
-    }
-    default:
-      throw new JOSENotSupported('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
-  }
-  return { algorithm, keyUsages };
+// node_modules/jose/dist/webapi/lib/key.js
+function snapshotJwk(jwk) {
+  return { __proto__: null, ...jwk };
 }
-async function jwkToKey(jwk) {
-  if (!jwk.alg) {
-    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
+function normalizeJwk(jwk) {
+  const normalized = snapshotJwk(jwk);
+  if (normalized.ext !== void 0 && typeof normalized.ext != "boolean")
+    throw new TypeError('"ext" (Extractable) Parameter must be a boolean');
+  if (normalized.key_ops !== void 0) {
+    const value = normalized.key_ops, keyOps = Array.isArray(value) ? [...value] : void 0;
+    if (!keyOps || keyOps.some((operation) => typeof operation != "string") || new Set(keyOps).size !== keyOps.length)
+      throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');
+    normalized.key_ops = keyOps;
   }
-  const { algorithm, keyUsages } = subtleMapping(jwk);
-  const keyData = { ...jwk };
-  if (keyData.kty !== "AKP") {
-    delete keyData.alg;
-  }
-  delete keyData.use;
-  return crypto.subtle.importKey("jwk", keyData, algorithm, jwk.ext ?? (jwk.d || jwk.priv ? false : true), jwk.key_ops ?? keyUsages);
+  return normalized;
+}
+async function jwkToKey(entry, jwk, extractable) {
+  if (!entry.kty.includes(jwk.kty))
+    throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+  const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle, isPrivate = !!(jwk.d || jwk.priv), keyData = { ...jwk, ext: jwk.ext };
+  return keyData.kty !== "AKP" && delete keyData.alg, delete keyData.use, crypto.subtle.importKey("jwk", keyData, algorithm, keyData.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
+}
+
+// node_modules/jose/dist/webapi/lib/key_descriptor.js
+function table(entries) {
+  const out = { __proto__: null };
+  for (const alg in entries)
+    out[alg] = { ...entries[alg], alg };
+  return out;
+}
+
+// node_modules/jose/dist/webapi/lib/jwe_algorithms.js
+var wrap = [
+  ["encrypt", "wrapKey"],
+  ["decrypt", "unwrapKey"]
+];
+var derive = [[], ["deriveBits"]];
+var none = [[], []];
+function rsaes(bits) {
+  return {
+    kty: ["RSA"],
+    mode: "key-encryption",
+    subtle: { name: "RSA-OAEP", hash: `SHA-${bits}` },
+    usages: wrap,
+    ops: ["wrapKey", "unwrapKey"]
+  };
+}
+function ecdh(mode) {
+  return {
+    kty: ["EC", "OKP"],
+    mode,
+    subtle: { name: "ECDH" },
+    resolve: ({ kty, crv, asymmetricKeyType }) => {
+      if (crv === "X25519" || asymmetricKeyType === "x25519")
+        return { name: "X25519" };
+      if (kty === "OKP")
+        throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      return { name: "ECDH", namedCurve: crv };
+    },
+    usages: derive,
+    ops: [void 0, "deriveBits"]
+  };
+}
+function aeskw(bits, gcm = false) {
+  return {
+    kty: ["oct"],
+    mode: "key-wrapping",
+    secret: true,
+    subtle: { name: gcm ? "AES-GCM" : "AES-KW", length: bits },
+    usages: none,
+    ops: gcm ? ["encrypt", "decrypt"] : ["wrapKey", "unwrapKey"]
+  };
+}
+function pbes2() {
+  return {
+    kty: ["oct"],
+    mode: "key-wrapping",
+    secret: true,
+    subtle: { name: "PBKDF2" },
+    usages: none,
+    ops: ["deriveBits", "deriveBits"]
+  };
+}
+var JWE = table({
+  dir: {
+    kty: ["oct"],
+    mode: "direct-encryption",
+    secret: true,
+    subtle: { name: "AES-GCM" },
+    usages: none,
+    ops: ["encrypt", "decrypt"]
+  },
+  "RSA-OAEP": rsaes(1),
+  "RSA-OAEP-256": rsaes(256),
+  "RSA-OAEP-384": rsaes(384),
+  "RSA-OAEP-512": rsaes(512),
+  "ECDH-ES": ecdh("direct-key-agreement"),
+  "ECDH-ES+A128KW": ecdh("key-agreement-with-key-wrapping"),
+  "ECDH-ES+A192KW": ecdh("key-agreement-with-key-wrapping"),
+  "ECDH-ES+A256KW": ecdh("key-agreement-with-key-wrapping"),
+  A128KW: aeskw(128),
+  A192KW: aeskw(192),
+  A256KW: aeskw(256),
+  A128GCMKW: aeskw(128, true),
+  A192GCMKW: aeskw(192, true),
+  A256GCMKW: aeskw(256, true),
+  "PBES2-HS256+A128KW": pbes2(),
+  "PBES2-HS384+A192KW": pbes2(),
+  "PBES2-HS512+A256KW": pbes2()
+});
+var contentOps = ["encrypt", "decrypt"];
+function contentEncryption(bits, cbc = false) {
+  return {
+    kty: ["oct"],
+    secret: true,
+    subtle: { name: cbc ? "AES-CBC" : "AES-GCM", length: bits },
+    usages: none,
+    ops: contentOps,
+    cekBits: bits,
+    ivBits: cbc ? 128 : 96,
+    cbc
+  };
+}
+table({
+  A128GCM: contentEncryption(128),
+  A192GCM: contentEncryption(192),
+  A256GCM: contentEncryption(256),
+  "A128CBC-HS256": contentEncryption(256, true),
+  "A192CBC-HS384": contentEncryption(384, true),
+  "A256CBC-HS512": contentEncryption(512, true)
+});
+
+// node_modules/jose/dist/webapi/lib/jws_algorithms.js
+var sig = [["verify"], ["sign"]];
+function hmac(bits) {
+  const subtle = { name: "HMAC", hash: `SHA-${bits}` };
+  return { kty: ["oct"], secret: true, subtle, signing: subtle, usages: sig };
+}
+function rsa(bits, saltLength) {
+  const subtle = { name: saltLength ? "RSA-PSS" : "RSASSA-PKCS1-v1_5", hash: `SHA-${bits}` };
+  return {
+    kty: ["RSA"],
+    subtle,
+    signing: saltLength ? { ...subtle, saltLength } : subtle,
+    usages: sig,
+    minRsaBits: 2048
+  };
+}
+function ecdsa(crv, bits) {
+  return {
+    kty: ["EC"],
+    crv,
+    subtle: { name: "ECDSA", namedCurve: crv },
+    signing: { name: "ECDSA", hash: `SHA-${bits}` },
+    usages: sig
+  };
+}
+function eddsa() {
+  const subtle = { name: "Ed25519" };
+  return {
+    kty: ["OKP"],
+    crv: "Ed25519",
+    subtle,
+    signing: subtle,
+    usages: sig
+  };
+}
+function mldsa(parameterSet) {
+  const subtle = { name: `ML-DSA-${parameterSet}` };
+  return {
+    kty: ["AKP"],
+    subtle,
+    signing: subtle,
+    usages: sig
+  };
+}
+var JWS = table({
+  HS256: hmac(256),
+  HS384: hmac(384),
+  HS512: hmac(512),
+  RS256: rsa(256),
+  RS384: rsa(384),
+  RS512: rsa(512),
+  PS256: rsa(256, 32),
+  PS384: rsa(384, 48),
+  PS512: rsa(512, 64),
+  ES256: ecdsa("P-256", 256),
+  ES384: ecdsa("P-384", 384),
+  ES512: ecdsa("P-521", 512),
+  EdDSA: eddsa(),
+  Ed25519: eddsa(),
+  "ML-DSA-44": mldsa(44),
+  "ML-DSA-65": mldsa(65),
+  "ML-DSA-87": mldsa(87)
+});
+
+// node_modules/jose/dist/webapi/lib/key_algorithm.js
+function unsupportedAlg(source = 'JWK "alg" (Algorithm) Parameter') {
+  throw new JOSENotSupported(`Invalid or unsupported ${source} value`);
+}
+function keyAlgorithm(alg, source) {
+  return (typeof alg == "string" ? JWS[alg] ?? JWE[alg] : void 0) ?? unsupportedAlg(source);
 }
 
 // node_modules/jose/dist/webapi/key/import.js
 async function importJWK(jwk, alg, options) {
-  if (!isObject(jwk)) {
+  if (!isObject(jwk))
     throw new TypeError("JWK must be an object");
-  }
-  let ext;
-  ext ?? (ext = jwk.ext);
-  switch (jwk.kty) {
+  const normalized = normalizeJwk(jwk), { alg: jwkAlg } = normalized;
+  if (normalized.kty !== "oct" && !alg)
+    ;
+  switch (normalized.kty) {
     case "oct":
-      if (typeof jwk.k !== "string" || !jwk.k) {
+      if (typeof normalized.k != "string")
         throw new TypeError('missing "k" (Key Value) Parameter value');
-      }
-      return decode(jwk.k);
-    case "RSA":
-      if ("oth" in jwk && jwk.oth !== void 0) {
-        throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-      }
-      return jwkToKey({ ...jwk, alg, ext });
+      return decode(normalized.k);
     case "AKP": {
-      if (typeof jwk.alg !== "string" || !jwk.alg) {
+      if (typeof jwkAlg != "string" || !jwkAlg)
         throw new TypeError('missing "alg" (Algorithm) Parameter value');
-      }
-      if (alg !== jwk.alg) {
+      if (alg !== jwkAlg)
         throw new TypeError("JWK alg and alg option value mismatch");
-      }
-      return jwkToKey({ ...jwk, ext });
+      return jwkToKey(keyAlgorithm(alg), normalized);
     }
+    case "RSA":
     case "EC":
     case "OKP":
-      return jwkToKey({ ...jwk, alg, ext });
+      return jwkToKey(keyAlgorithm(alg), normalized);
     default:
       throw new JOSENotSupported('Unsupported "kty" (Key Type) Parameter value');
   }
@@ -231,10 +304,13 @@ async function importJWK(jwk, alg, options) {
 // src/identity.ts
 var DEFAULT_ISSUER = "https://me.ochk.io";
 var DEFAULT_TTL_MS = 60 * 60 * 1e3;
+var DEFAULT_MAX_STALE_MS = 6 * 60 * 60 * 1e3;
+var FORCED_REFRESH_MIN_INTERVAL_MS = 6e4;
 var ENVELOPE_JWKS_PATH = "/.well-known/oc-envelope-jwks.json";
 var jwksCache = /* @__PURE__ */ new Map();
 var inflight = /* @__PURE__ */ new Map();
-async function fetchEnvelopeJwks(issuer, ttlMs) {
+var lastForcedRefresh = /* @__PURE__ */ new Map();
+async function fetchEnvelopeJwks(issuer, ttlMs, maxStaleMs = DEFAULT_MAX_STALE_MS) {
   const cached = jwksCache.get(issuer);
   if (cached && Date.now() - cached.fetchedAt < ttlMs) return cached;
   const existing = inflight.get(issuer);
@@ -261,7 +337,7 @@ async function fetchEnvelopeJwks(issuer, ttlMs) {
       return entry;
     } catch (err) {
       const stale = jwksCache.get(issuer);
-      if (stale) return stale;
+      if (stale && Date.now() - stale.fetchedAt < maxStaleMs) return stale;
       throw err;
     }
   })().finally(() => {
@@ -310,14 +386,14 @@ function toArrayBuffer(view) {
   new Uint8Array(buf).set(view);
   return buf;
 }
-async function verifyEd25519(key, sig, msg) {
+async function verifyEd25519(key, sig2, msg) {
   const subtle = typeof globalThis.crypto !== "undefined" && globalThis.crypto.subtle ? globalThis.crypto.subtle : null;
   if (!subtle) return false;
   try {
     return await subtle.verify(
       "Ed25519",
       key,
-      toArrayBuffer(sig),
+      toArrayBuffer(sig2),
       toArrayBuffer(msg)
     );
   } catch {
@@ -427,12 +503,13 @@ async function verifyActivityAttestation(bundle, options = {}) {
   } else {
     const issuer = options.issuer ?? DEFAULT_ISSUER;
     const ttl = options.jwksCacheTtlMs ?? DEFAULT_TTL_MS;
+    const maxStale = options.jwksMaxStaleMs ?? DEFAULT_MAX_STALE_MS;
     try {
-      let entry = await fetchEnvelopeJwks(issuer, ttl);
+      let entry = await fetchEnvelopeJwks(issuer, ttl, maxStale);
       key = entry.keys[bundle.kid] ?? null;
-      if (!key) {
-        jwksCache.delete(issuer);
-        entry = await fetchEnvelopeJwks(issuer, ttl);
+      if (!key && Date.now() - (lastForcedRefresh.get(issuer) ?? 0) >= FORCED_REFRESH_MIN_INTERVAL_MS) {
+        lastForcedRefresh.set(issuer, Date.now());
+        entry = await fetchEnvelopeJwks(issuer, 0, maxStale);
         key = entry.keys[bundle.kid] ?? null;
       }
       checks.push({
@@ -493,9 +570,40 @@ var identity = {
 };
 
 // src/server.ts
+var sessionChecks = /* @__PURE__ */ new Map();
+var warnedUnchecked = false;
+function revocationFor(options) {
+  if (options.revocation === false) return null;
+  if (options.revocation) return options.revocation;
+  const key = options.projectKey ?? "";
+  if (!sessionChecks.has(key)) {
+    sessionChecks.set(
+      key,
+      authCore.integratorRevocationCheck(options.projectKey ? { projectKey: options.projectKey } : {})
+    );
+  }
+  const check = sessionChecks.get(key);
+  const production = typeof process !== "undefined" && process.env?.NODE_ENV === "production";
+  if (!check && !warnedUnchecked && production) {
+    warnedUnchecked = true;
+    console.warn(
+      "[@orangecheck/me-client] sessions are checked by signature only, so one the person ended everywhere stays valid here until it expires. Set OC_PROJECT_KEY and OC_SIGNING_SECRET to refuse it."
+    );
+  }
+  return check;
+}
+function _resetSessionChecksForTests() {
+  sessionChecks.clear();
+  warnedUnchecked = false;
+}
 async function getOcSession(headers, options = {}) {
   const session = await authCore.getOcSession(headers, options);
-  if (!session && options.audience === void 0) warnIfAudienceMissing(headers);
+  if (!session) {
+    if (options.audience === void 0) warnIfAudienceMissing(headers);
+    return null;
+  }
+  const check = revocationFor(options);
+  if (check && await check.refuses(session, options.method)) return null;
   return session;
 }
 var warnedAudience = false;
@@ -609,7 +717,7 @@ function withOcAuth(handler, options = {}) {
         cookie: typeof req.headers.cookie === "string" ? req.headers.cookie : null,
         authorization: typeof req.headers.authorization === "string" ? req.headers.authorization : null
       },
-      options
+      { ...options, method: req.method }
     );
     const withSession = req;
     withSession.ocSession = session;
@@ -628,7 +736,7 @@ function ocAuthExpress(options = {}) {
           cookie: typeof req.headers.cookie === "string" ? req.headers.cookie : null,
           authorization: typeof req.headers.authorization === "string" ? req.headers.authorization : null
         },
-        options
+        { ...options, method: req.method }
       );
       req.ocSession = session;
       const refused = await refusal(session, options);
@@ -646,7 +754,10 @@ function ocAuthHono(options = {}) {
   return async (c, next) => {
     c.header("Cache-Control", "no-store, private");
     c.header("Vary", "Cookie, Authorization");
-    const session = await getOcSession(c.req.raw.headers, options);
+    const session = await getOcSession(c.req.raw.headers, {
+      ...options,
+      method: c.req.raw.method
+    });
     c.set("ocSession", session);
     const refused = await refusal(session, options);
     if (refused) return c.json(refused.body, refused.status);
@@ -667,6 +778,7 @@ Object.defineProperty(exports, "verifyOcToken", {
   get: function () { return authCore.verifyOcToken; }
 });
 exports.BACK_ACCOUNT_URL = BACK_ACCOUNT_URL;
+exports._resetSessionChecksForTests = _resetSessionChecksForTests;
 exports.getOcSession = getOcSession;
 exports.identity = identity;
 exports.ocAuthExpress = ocAuthExpress;