@pagopa/io-react-native-jwt 0.4.1

package/lib/commonjs/sign.js

@@ -0,0 +1,159 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SignJWT = void 0;
+var _errors = require("./utils/errors");
+var _produce = require("./produce");
+var _base = require("./utils/base64");
+var _algorithms = require("./algorithms");
+var _asn = require("./utils/asn1");
+/**
+ * The SignJWT class is used to build and sign Compact JWS formatted JSON Web Tokens.
+ *
+ * @example Usage with a given signature
+ *
+ * ```js
+ * const alg = 'RS256'
+ * const signature = 'Axy0....'
+ *
+ * const jwt = new SignJWT({ 'urn:example:claim': true })
+ *   .setProtectedHeader({ alg })
+ *   .setIssuedAt()
+ *   .setIssuer('urn:example:issuer')
+ *   .setAudience('urn:example:audience')
+ *   .setExpirationTime('2h')
+ *   .sign(signature)
+ *
+ * console.log(jwt)
+ * ```
+ */
+class SignJWT extends _produce.ProduceJWT {
+  /**
+   * Sets the JWS Protected Header on the SignJWT object.
+   *
+   * @param protectedHeader JWS Protected Header. Must contain an "alg" (JWS Algorithm) property.
+   */
+  setProtectedHeader(protectedHeader) {
+    if (protectedHeader.alg && (0, _algorithms.isAlgSupported)(protectedHeader.alg)) {
+      this._protectedHeader = protectedHeader;
+      return this;
+    }
+    throw new _errors.JOSENotSupported('Unsupported "alg" value');
+  }
+
+  /**
+   * Return a JWT without signature (`header.payload`) to sign.
+   *
+   */
+  toSign() {
+    if (!this._protectedHeader || !this._protectedHeader.alg) {
+      throw new _errors.JWSInvalid('Missing signature algorithm. Specify the `alg` field');
+    }
+    const protectedHeader = (0, _base.encodeBase64)(JSON.stringify(this._protectedHeader));
+    const payload = (0, _base.encodeBase64)(JSON.stringify(this._payload));
+    if (payload && protectedHeader) {
+      return `${protectedHeader}.${payload}`;
+    } else {
+      throw new _errors.JWSInvalid();
+    }
+  }
+
+  /**
+   * Append signature to unsigned JWT.
+   * For an ECDSA signature it is required that this is in ASN.1/DER encoded format.
+   * The same format used by the TEE. Conversion to JWS is handled automatically.
+   *
+   * @param jwtWithoutSignature
+   * @param signature
+   */
+  static async appendSignature(jwtWithoutSignature, signature) {
+    if (typeof jwtWithoutSignature !== 'string' || typeof signature !== 'string') {
+      throw new _errors.JWTInvalid('JWS must be a string');
+    }
+    if (signature === '') throw new _errors.JWSInvalid('Invalid signature');
+    const jwtDecoded = SignJWT.decodeJwtWithoutSignature(jwtWithoutSignature);
+    const alg = jwtDecoded.header.alg;
+    try {
+      const encodedJws = await (0, _asn.derToJose)(signature, alg);
+      return `${jwtWithoutSignature}.${encodedJws}`;
+    } catch {
+      const encodedJws = (0, _base.removePadding)(signature);
+      return `${jwtWithoutSignature}.${encodedJws}`;
+    }
+  }
+
+  /**
+   * Decodes a JWT without signature
+   *
+   * @param jwtWithoutSignature JWT to sign that needs to be decoded.
+   */
+  static decodeJwtWithoutSignature(jwtWithoutSignature) {
+    if (typeof jwtWithoutSignature !== 'string') {
+      throw new _errors.JWTInvalid('JWT must be a string');
+    }
+    const {
+      0: encodedHeader,
+      1: encodedPayload,
+      length
+    } = jwtWithoutSignature.split('.');
+    let header;
+    try {
+      let decoded = (0, _base.decodeBase64)(encodedHeader);
+      header = JSON.parse(decoded);
+      if (!header.alg || !(0, _algorithms.isAlgSupported)(header.alg)) {
+        throw new _errors.JOSENotSupported('Unsupported "alg" value');
+      }
+    } catch {
+      throw new _errors.JWTInvalid('Unable to decode JWT header');
+    }
+    if (length !== 2 || encodedPayload === '') {
+      throw new _errors.JWTInvalid('Invalid JWT to sign');
+    }
+    let decodedPayload = (0, _base.decodeBase64)(encodedPayload);
+    const payload = JSON.parse(decodedPayload);
+    return {
+      payload,
+      header
+    };
+  }
+
+  /**
+   * Decodes a JWT without signature
+   *
+   * @param jwtWithoutSignature JWT to sign that needs to be decoded.
+   */
+  static decode(jwt) {
+    if (typeof jwt !== 'string') {
+      throw new _errors.JWTInvalid('JWT must be a string');
+    }
+    const {
+      0: encodedHeader,
+      1: encodedPayload,
+      2: signature,
+      length
+    } = jwt.split('.');
+    let protectedHeader;
+    try {
+      let decoded = (0, _base.decodeBase64)(encodedHeader);
+      protectedHeader = JSON.parse(decoded);
+      if (!protectedHeader.alg || !(0, _algorithms.isAlgSupported)(protectedHeader.alg)) {
+        throw new _errors.JOSENotSupported('Unsupported "alg" value');
+      }
+    } catch {
+      throw new _errors.JWTInvalid('Unable to decode JWT header');
+    }
+    if (length !== 3 || encodedPayload === '' || signature === '') {
+      throw new _errors.JWTInvalid('Invalid JWT');
+    }
+    let decodedPayload = (0, _base.decodeBase64)(encodedPayload);
+    const payload = JSON.parse(decodedPayload);
+    return {
+      payload,
+      protectedHeader
+    };
+  }
+}
+exports.SignJWT = SignJWT;
+//# sourceMappingURL=sign.js.map

package/lib/commonjs/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_produce","_base","_algorithms","_asn","SignJWT","ProduceJWT","setProtectedHeader","protectedHeader","alg","isAlgSupported","_protectedHeader","JOSENotSupported","toSign","JWSInvalid","encodeBase64","JSON","stringify","payload","_payload","appendSignature","jwtWithoutSignature","signature","JWTInvalid","jwtDecoded","decodeJwtWithoutSignature","header","encodedJws","derToJose","removePadding","encodedHeader","encodedPayload","length","split","decoded","decodeBase64","parse","decodedPayload","decode","jwt","exports"],"sourceRoot":"../../src","sources":["sign.ts"],"mappings":";;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AAMA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,WAAA,GAAAH,OAAA;AAEA,IAAAI,IAAA,GAAAJ,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMK,OAAO,SAASC,mBAAU,CAAC;EAGtC;AACF;AACA;AACA;AACA;EACEC,kBAAkBA,CAACC,eAA2C,EAAE;IAC9D,IAAIA,eAAe,CAACC,GAAG,IAAI,IAAAC,0BAAc,EAACF,eAAe,CAACC,GAAG,CAAC,EAAE;MAC9D,IAAI,CAACE,gBAAgB,GAAGH,eAAe;MACvC,OAAO,IAAI;IACb;IACA,MAAM,IAAII,wBAAgB,CAAC,yBAAyB,CAAC;EACvD;;EAEA;AACF;AACA;AACA;EACEC,MAAMA,CAAA,EAAW;IACf,IAAI,CAAC,IAAI,CAACF,gBAAgB,IAAI,CAAC,IAAI,CAACA,gBAAgB,CAACF,GAAG,EAAE;MACxD,MAAM,IAAIK,kBAAU,CAClB,sDACF,CAAC;IACH;IACA,MAAMN,eAAe,GAAG,IAAAO,kBAAY,EAACC,IAAI,CAACC,SAAS,CAAC,IAAI,CAACN,gBAAgB,CAAC,CAAC;IAC3E,MAAMO,OAAO,GAAG,IAAAH,kBAAY,EAACC,IAAI,CAACC,SAAS,CAAC,IAAI,CAACE,QAAQ,CAAC,CAAC;IAC3D,IAAID,OAAO,IAAIV,eAAe,EAAE;MAC9B,OAAQ,GAAEA,eAAgB,IAAGU,OAAQ,EAAC;IACxC,CAAC,MAAM;MACL,MAAM,IAAIJ,kBAAU,CAAC,CAAC;IACxB;EACF;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,aAAaM,eAAeA,CAC1BC,mBAA2B,EAC3BC,SAAiB,EACA;IACjB,IACE,OAAOD,mBAAmB,KAAK,QAAQ,IACvC,OAAOC,SAAS,KAAK,QAAQ,EAC7B;MACA,MAAM,IAAIC,kBAAU,CAAC,sBAAsB,CAAC;IAC9C;IACA,IAAID,SAAS,KAAK,EAAE,EAAE,MAAM,IAAIR,kBAAU,CAAC,mBAAmB,CAAC;IAE/D,MAAMU,UAAU,GAAGnB,OAAO,CAACoB,yBAAyB,CAACJ,mBAAmB,CAAC;IACzE,MAAMZ,GAAG,GAAGe,UAAU,CAACE,MAAM,CAACjB,GAAG;IACjC,IAAI;MACF,MAAMkB,UAAU,GAAG,MAAM,IAAAC,cAAS,EAACN,SAAS,EAAEb,GAAG,CAAC;MAClD,OAAQ,GAAEY,mBAAoB,IAAGM,UAAW,EAAC;IAC/C,CAAC,CAAC,MAAM;MACN,MAAMA,UAAU,GAAG,IAAAE,mBAAa,EAACP,SAAS,CAAC;MAC3C,OAAQ,GAAED,mBAAoB,IAAGM,UAAW,EAAC;IAC/C;EACF;;EAEA;AACF;AACA;AACA;AACA;EACE,OAAOF,yBAAyBA,CAACJ,mBAA2B,EAG1D;IACA,IAAI,OAAOA,mBAAmB,KAAK,QAAQ,EAAE;MAC3C,MAAM,IAAIE,kBAAU,CAAC,sBAAsB,CAAC;IAC9C;IACA,MAAM;MACJ,CAAC,EAAEO,aAAa;MAChB,CAAC,EAAEC,cAAc;MACjBC;IACF,CAAC,GAAGX,mBAAmB,CAACY,KAAK,CAAC,GAAG,CAAC;IAElC,IAAIP,MAAkC;IACtC,IAAI;MACF,IAAIQ,OAAO,GAAG,IAAAC,kBAAY,EAACL,aAAc,CAAC;MAC1CJ,MAAM,GAAGV,IAAI,CAACoB,KAAK,CAACF,OAAO,CAAC;MAC5B,IAAI,CAACR,MAAM,CAACjB,GAAG,IAAI,CAAC,IAAAC,0BAAc,EAACgB,MAAM,CAACjB,GAAG,CAAC,EAAE;QAC9C,MAAM,IAAIG,wBAAgB,CAAC,yBAAyB,CAAC;MACvD;IACF,CAAC,CAAC,MAAM;MACN,MAAM,IAAIW,kBAAU,CAAC,6BAA6B,CAAC;IACrD;IAEA,IAAIS,MAAM,KAAK,CAAC,IAAID,cAAc,KAAK,EAAE,EAAE;MACzC,MAAM,IAAIR,kBAAU,CAAC,qBAAqB,CAAC;IAC7C;IAEA,IAAIc,cAAc,GAAG,IAAAF,kBAAY,EAACJ,cAAe,CAAC;IAClD,MAAMb,OAAO,GAAGF,IAAI,CAACoB,KAAK,CAACC,cAAc,CAAC;IAE1C,OAAO;MACLnB,OAAO;MACPQ;IACF,CAAC;EACH;;EAEA;AACF;AACA;AACA;AACA;EACE,OAAOY,MAAMA,CAACC,GAAW,EAAmB;IAC1C,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE;MAC3B,MAAM,IAAIhB,kBAAU,CAAC,sBAAsB,CAAC;IAC9C;IACA,MAAM;MACJ,CAAC,EAAEO,aAAa;MAChB,CAAC,EAAEC,cAAc;MACjB,CAAC,EAAET,SAAS;MACZU;IACF,CAAC,GAAGO,GAAG,CAACN,KAAK,CAAC,GAAG,CAAC;IAElB,IAAIzB,eAA2C;IAC/C,IAAI;MACF,IAAI0B,OAAO,GAAG,IAAAC,kBAAY,EAACL,aAAc,CAAC;MAC1CtB,eAAe,GAAGQ,IAAI,CAACoB,KAAK,CAACF,OAAO,CAAC;MACrC,IAAI,CAAC1B,eAAe,CAACC,GAAG,IAAI,CAAC,IAAAC,0BAAc,EAACF,eAAe,CAACC,GAAG,CAAC,EAAE;QAChE,MAAM,IAAIG,wBAAgB,CAAC,yBAAyB,CAAC;MACvD;IACF,CAAC,CAAC,MAAM;MACN,MAAM,IAAIW,kBAAU,CAAC,6BAA6B,CAAC;IACrD;IAEA,IAAIS,MAAM,KAAK,CAAC,IAAID,cAAc,KAAK,EAAE,IAAIT,SAAS,KAAK,EAAE,EAAE;MAC7D,MAAM,IAAIC,kBAAU,CAAC,aAAa,CAAC;IACrC;IAEA,IAAIc,cAAc,GAAG,IAAAF,kBAAY,EAACJ,cAAe,CAAC;IAClD,MAAMb,OAAO,GAAGF,IAAI,CAACoB,KAAK,CAACC,cAAc,CAAC;IAE1C,OAAO;MACLnB,OAAO;MACPV;IACF,CAAC;EACH;AACF;AAACgC,OAAA,CAAAnC,OAAA,GAAAA,OAAA"}

package/lib/commonjs/types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=types.js.map

package/lib/commonjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../src","sources":["types.ts"],"mappings":""}

package/lib/commonjs/unsecured.js

@@ -0,0 +1,118 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.UnsecuredJWT = void 0;
+var _errors = require("./utils/errors");
+var _jwt_claims_set = _interopRequireDefault(require("./jwt_claims_set"));
+var _produce = require("./produce");
+var _base = require("./utils/base64");
+function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
+/**
+ * The UnsecuredJWT class is a utility for dealing with `{ "alg": "none" }` Unsecured JWTs.
+ *
+ * @example Encoding
+ *
+ * ```js
+ * const unsecuredJwt = new UnsecuredJWT({ 'urn:example:claim': true })
+ *   .setIssuedAt()
+ *   .setIssuer('urn:example:issuer')
+ *   .setAudience('urn:example:audience')
+ *   .setExpirationTime('2h')
+ *   .encode()
+ *
+ * console.log(unsecuredJwt)
+ * ```
+ *
+ * @example Decoding
+ *
+ * ```js
+ * const payload = UnsecuredJWT.decode(jwt, {
+ *   issuer: 'urn:example:issuer',
+ *   audience: 'urn:example:audience',
+ * })
+ *
+ * console.log(payload)
+ * ```
+ *  * @example JWT content ToSign
+ *
+ * ```js
+ * const jwtToSign = new UnsecuredJWT({ 'urn:example:claim': true })
+ *   .setIssuedAt()
+ *   .setIssuer('urn:example:issuer')
+ *   .setAudience('urn:example:audience')
+ *   .setExpirationTime('2h')
+ *   .toSign()
+ *
+ * console.log(jwtToSign)
+ * ```
+ */
+class UnsecuredJWT extends _produce.ProduceJWT {
+  /** Encodes the Unsecured JWT. */
+  encode() {
+    const header = (0, _base.encodeBase64)(JSON.stringify({
+      alg: 'none'
+    }));
+    const payload = (0, _base.encodeBase64)(JSON.stringify(this._payload));
+    return `${header}.${payload}.`;
+  }
+
+  /**
+   * Decodes an unsecured JWT.
+   *
+   * @param jwt Unsecured JWT to decode the payload of.
+   * @param options JWT Claims Set validation options.
+   */
+  static decode(jwt, options) {
+    if (typeof jwt !== 'string') {
+      throw new _errors.JWTInvalid('Unsecured JWT must be a string');
+    }
+    const {
+      0: encodedHeader,
+      1: encodedPayload,
+      2: signature,
+      length
+    } = jwt.split('.');
+    if (length !== 3 || signature !== '' || !encodedPayload) {
+      throw new _errors.JWTInvalid('Invalid Unsecured JWT');
+    }
+    let header;
+    try {
+      let decoded = (0, _base.decodeBase64)(encodedHeader);
+      header = JSON.parse(decoded);
+      if (header.alg !== 'none') throw new Error();
+    } catch {
+      throw new _errors.JWTInvalid('Invalid Unsecured JWT');
+    }
+    let payload = UnsecuredJWT.decodePayload(encodedPayload, options);
+    return {
+      payload,
+      header
+    };
+  }
+
+  /**
+   * Decodes an unsecured JWT payload.
+   *
+   * @param jwt Unsecured JWT payload to decode.
+   * @param options JWT Claims Set validation options.
+   */
+  static decodePayload(jwt, options) {
+    if (typeof jwt !== 'string') {
+      throw new _errors.JWTInvalid('Unsecured JWT must be a string');
+    }
+    const {
+      0: encodedPayload,
+      length
+    } = jwt.split('.');
+    if (length !== 1 || encodedPayload === '') {
+      throw new _errors.JWTInvalid('Invalid Unsecured JWT');
+    }
+    let decodedPayload = (0, _base.decodeBase64)(encodedPayload);
+    const payload = (0, _jwt_claims_set.default)({}, JSON.parse(decodedPayload), options);
+    return payload;
+  }
+}
+exports.UnsecuredJWT = UnsecuredJWT;
+//# sourceMappingURL=unsecured.js.map

package/lib/commonjs/unsecured.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_jwt_claims_set","_interopRequireDefault","_produce","_base","obj","__esModule","default","UnsecuredJWT","ProduceJWT","encode","header","encodeBase64","JSON","stringify","alg","payload","_payload","decode","jwt","options","JWTInvalid","encodedHeader","encodedPayload","signature","length","split","decoded","decodeBase64","parse","Error","decodePayload","decodedPayload","jwtPayload","exports"],"sourceRoot":"../../src","sources":["unsecured.ts"],"mappings":";;;;;;AAMA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,eAAA,GAAAC,sBAAA,CAAAF,OAAA;AACA,IAAAG,QAAA,GAAAH,OAAA;AACA,IAAAI,KAAA,GAAAJ,OAAA;AAA4D,SAAAE,uBAAAG,GAAA,WAAAA,GAAA,IAAAA,GAAA,CAAAC,UAAA,GAAAD,GAAA,KAAAE,OAAA,EAAAF,GAAA;AAO5D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMG,YAAY,SAASC,mBAAU,CAAC;EAC3C;EACAC,MAAMA,CAAA,EAAW;IACf,MAAMC,MAAM,GAAG,IAAAC,kBAAY,EAACC,IAAI,CAACC,SAAS,CAAC;MAAEC,GAAG,EAAE;IAAO,CAAC,CAAC,CAAC;IAC5D,MAAMC,OAAO,GAAG,IAAAJ,kBAAY,EAACC,IAAI,CAACC,SAAS,CAAC,IAAI,CAACG,QAAQ,CAAC,CAAC;IAE3D,OAAQ,GAAEN,MAAO,IAAGK,OAAQ,GAAE;EAChC;;EAEA;AACF;AACA;AACA;AACA;AACA;EACE,OAAOE,MAAMA,CACXC,GAAW,EACXC,OAAqC,EACpB;IACjB,IAAI,OAAOD,GAAG,KAAK,QAAQ,EAAE;MAC3B,MAAM,IAAIE,kBAAU,CAAC,gCAAgC,CAAC;IACxD;IACA,MAAM;MACJ,CAAC,EAAEC,aAAa;MAChB,CAAC,EAAEC,cAAc;MACjB,CAAC,EAAEC,SAAS;MACZC;IACF,CAAC,GAAGN,GAAG,CAACO,KAAK,CAAC,GAAG,CAAC;IAElB,IAAID,MAAM,KAAK,CAAC,IAAID,SAAS,KAAK,EAAE,IAAI,CAACD,cAAc,EAAE;MACvD,MAAM,IAAIF,kBAAU,CAAC,uBAAuB,CAAC;IAC/C;IAEA,IAAIV,MAA2B;IAC/B,IAAI;MACF,IAAIgB,OAAO,GAAG,IAAAC,kBAAY,EAACN,aAAc,CAAC;MAC1CX,MAAM,GAAGE,IAAI,CAACgB,KAAK,CAACF,OAAO,CAAC;MAC5B,IAAIhB,MAAM,CAACI,GAAG,KAAK,MAAM,EAAE,MAAM,IAAIe,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,MAAM;MACN,MAAM,IAAIT,kBAAU,CAAC,uBAAuB,CAAC;IAC/C;IAEA,IAAIL,OAAO,GAAGR,YAAY,CAACuB,aAAa,CAACR,cAAc,EAAEH,OAAO,CAAC;IAEjE,OAAO;MAAEJ,OAAO;MAAEL;IAAO,CAAC;EAC5B;;EAEA;AACF;AACA;AACA;AACA;AACA;EACE,OAAOoB,aAAaA,CAClBZ,GAAW,EACXC,OAAqC,EACzB;IACZ,IAAI,OAAOD,GAAG,KAAK,QAAQ,EAAE;MAC3B,MAAM,IAAIE,kBAAU,CAAC,gCAAgC,CAAC;IACxD;IACA,MAAM;MAAE,CAAC,EAAEE,cAAc;MAAEE;IAAO,CAAC,GAAGN,GAAG,CAACO,KAAK,CAAC,GAAG,CAAC;IAEpD,IAAID,MAAM,KAAK,CAAC,IAAIF,cAAc,KAAK,EAAE,EAAE;MACzC,MAAM,IAAIF,kBAAU,CAAC,uBAAuB,CAAC;IAC/C;IAEA,IAAIW,cAAc,GAAG,IAAAJ,kBAAY,EAACL,cAAe,CAAC;IAClD,MAAMP,OAAO,GAAG,IAAAiB,uBAAU,EAAC,CAAC,CAAC,EAAEpB,IAAI,CAACgB,KAAK,CAACG,cAAc,CAAC,EAAEZ,OAAO,CAAC;IAEnE,OAAOJ,OAAO;EAChB;AACF;AAACkB,OAAA,CAAA1B,YAAA,GAAAA,YAAA"}

package/lib/commonjs/utils/asn1.js

@@ -0,0 +1,37 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.derToJose = void 0;
+var _algorithms = require("../algorithms");
+var _proxy = require("./proxy");
+var _base = require("./base64");
+var _errors = require("./errors");
+/*
+ * Transcodes the JCA ASN.1/DER-encoded signature into the concatenated R + S format expected by ECDSA JWS.
+ * Returns a base64 url encoded String.
+ *
+ * @example Usage with an ASN.1/DER-encoded
+ *
+ * ```js
+ * const asn1Signature = 'Yw1xTT....'
+ * const plainSignature = await derToJose(asn1Signature, "ECDSA256")
+ *
+ * ```
+ *
+ * @param asn1Signature ASN.1/DER-encoded signature
+ * @param alg Algorithm used to sign
+ */
+const derToJose = async (asn1Signature, alg) => {
+  const kty = (0, _algorithms.getKtyFromAlg)(alg);
+  if (kty === 'EC') {
+    const unpackedJws = await _proxy.IoReactNativeJwt.unpackBerEncodedASN1(asn1Signature, (0, _algorithms.getCoordinateOctetLength)(alg));
+    const encodedJws = (0, _base.removePadding)(unpackedJws);
+    return encodedJws;
+  } else {
+    throw new _errors.JOSENotSupported('Unsupported "alg" value');
+  }
+};
+exports.derToJose = derToJose;
+//# sourceMappingURL=asn1.js.map

package/lib/commonjs/utils/asn1.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_algorithms","require","_proxy","_base","_errors","derToJose","asn1Signature","alg","kty","getKtyFromAlg","unpackedJws","IoReactNativeJwt","unpackBerEncodedASN1","getCoordinateOctetLength","encodedJws","removePadding","JOSENotSupported","exports"],"sourceRoot":"../../../src","sources":["utils/asn1.ts"],"mappings":";;;;;;AAAA,IAAAA,WAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AACA,IAAAE,KAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMI,SAAS,GAAG,MAAAA,CACvBC,aAAqB,EACrBC,GAAW,KACS;EACpB,MAAMC,GAAG,GAAG,IAAAC,yBAAa,EAACF,GAAG,CAAC;EAC9B,IAAIC,GAAG,KAAK,IAAI,EAAE;IAChB,MAAME,WAAW,GAAG,MAAMC,uBAAgB,CAACC,oBAAoB,CAC7DN,aAAa,EACb,IAAAO,oCAAwB,EAACN,GAAG,CAC9B,CAAC;IACD,MAAMO,UAAU,GAAG,IAAAC,mBAAa,EAACL,WAAW,CAAC;IAC7C,OAAOI,UAAU;EACnB,CAAC,MAAM;IACL,MAAM,IAAIE,wBAAgB,CAAC,yBAAyB,CAAC;EACvD;AACF,CAAC;AAACC,OAAA,CAAAZ,SAAA,GAAAA,SAAA"}

package/lib/commonjs/utils/base64.js

@@ -0,0 +1,43 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.decodeBase64 = decodeBase64;
+exports.encodeBase64 = encodeBase64;
+exports.removePadding = removePadding;
+var _abab = require("abab");
+var _errors = require("./errors");
+/*
+ * In Base64 encoding, the length of an output-encoded String
+ * must be a multiple of four. If necessary, the encoder adds
+ * one or two padding characters (=) at the end of the output
+ * as needed in order to meet this requirement.
+ *
+ * JWTs make use of the base64url encoding as defined in RFC 4648.
+ * As allowed by Section 3.2 of the RFC, this specification mandates
+ * that base64url encoding when used with JWTs MUST NOT use padding.
+ * The reason for this restriction is that the padding character
+ * ('=') is not URL safe.
+ */
+function encodeBase64(value) {
+  let encoded = (0, _abab.btoa)(value);
+  if (encoded) {
+    return removePadding(encoded);
+  } else {
+    throw new _errors.JOSEError('Unable to encode string to base64');
+  }
+}
+function decodeBase64(value) {
+  let decoded = (0, _abab.atob)(value);
+  if (decoded) {
+    return decoded;
+  } else {
+    throw new _errors.JOSEError('Unable to decode base64 string');
+  }
+}
+function removePadding(encoded) {
+  // eslint-disable-next-line no-div-regex
+  return encoded.replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+}
+//# sourceMappingURL=base64.js.map

package/lib/commonjs/utils/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_abab","require","_errors","encodeBase64","value","encoded","btoa","removePadding","JOSEError","decodeBase64","decoded","atob","replace"],"sourceRoot":"../../../src","sources":["utils/base64.ts"],"mappings":";;;;;;;;AAAA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASE,YAAYA,CAACC,KAAa,EAAU;EAClD,IAAIC,OAAO,GAAG,IAAAC,UAAI,EAACF,KAAK,CAAC;EACzB,IAAIC,OAAO,EAAE;IACX,OAAOE,aAAa,CAACF,OAAO,CAAC;EAC/B,CAAC,MAAM;IACL,MAAM,IAAIG,iBAAS,CAAC,mCAAmC,CAAC;EAC1D;AACF;AAEO,SAASC,YAAYA,CAACL,KAAa,EAAU;EAClD,IAAIM,OAAO,GAAG,IAAAC,UAAI,EAACP,KAAK,CAAC;EACzB,IAAIM,OAAO,EAAE;IACX,OAAOA,OAAO;EAChB,CAAC,MAAM;IACL,MAAM,IAAIF,iBAAS,CAAC,gCAAgC,CAAC;EACvD;AACF;AAEO,SAASD,aAAaA,CAACF,OAAe,EAAU;EACrD;EACA,OAAOA,OAAO,CAACO,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAACA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;AAC1E"}

package/lib/commonjs/utils/errors.js

@@ -0,0 +1,214 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.JWTInvalid = exports.JWTExpired = exports.JWTClaimValidationFailed = exports.JWSSignatureVerificationFailed = exports.JWSInvalid = exports.JOSENotSupported = exports.JOSEError = exports.JOSEAlgNotAllowed = void 0;
+/**
+ * A generic Error that all other JOSE specific Error subclasses extend.
+ *
+ * @example Checking thrown error is a JOSE one
+ *
+ * ```js
+ * if (err instanceof errors.JOSEError) {
+ *   // ...
+ * }
+ * ```
+ */
+class JOSEError extends Error {
+  /** A unique error code for the particular error subclass. */
+  static get code() {
+    return 'ERR_JOSE_GENERIC';
+  }
+
+  /** A unique error code for the particular error subclass. */
+  code = 'ERR_JOSE_GENERIC';
+  constructor(message) {
+    var _Error$captureStackTr;
+    super(message);
+    this.name = this.constructor.name;
+    // @ts-ignore
+    (_Error$captureStackTr = Error.captureStackTrace) === null || _Error$captureStackTr === void 0 ? void 0 : _Error$captureStackTr.call(Error, this, this.constructor);
+  }
+}
+exports.JOSEError = JOSEError;
+class JWTClaimValidationFailed extends JOSEError {
+  static get code() {
+    return 'ERR_JWT_CLAIM_VALIDATION_FAILED';
+  }
+  code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';
+
+  /** The Claim for which the validation failed. */
+
+  /** Reason code for the validation failure. */
+
+  constructor(message) {
+    let claim = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 'unspecified';
+    let reason = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'unspecified';
+    super(message);
+    this.claim = claim;
+    this.reason = reason;
+  }
+}
+
+/**
+ * An error subclass thrown when a JWT is expired.
+ *
+ * @example Checking thrown error is this one using a stable error code
+ *
+ * ```js
+ * if (err.code === 'ERR_JWT_EXPIRED') {
+ *   // ...
+ * }
+ * ```
+ *
+ * @example Checking thrown error is this one using `instanceof`
+ *
+ * ```js
+ * if (err instanceof errors.JWTExpired) {
+ *   // ...
+ * }
+ * ```
+ */
+exports.JWTClaimValidationFailed = JWTClaimValidationFailed;
+class JWTExpired extends JOSEError {
+  static get code() {
+    return 'ERR_JWT_EXPIRED';
+  }
+  code = 'ERR_JWT_EXPIRED';
+
+  /** The Claim for which the validation failed. */
+
+  /** Reason code for the validation failure. */
+
+  constructor(message) {
+    let claim = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : 'unspecified';
+    let reason = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : 'unspecified';
+    super(message);
+    this.claim = claim;
+    this.reason = reason;
+  }
+}
+
+/**
+ * An error subclass thrown when a JOSE Algorithm is not allowed per developer preference.
+ *
+ * @example Checking thrown error is this one using a stable error code
+ *
+ * ```js
+ * if (err.code === 'ERR_JOSE_ALG_NOT_ALLOWED') {
+ *   // ...
+ * }
+ * ```
+ *
+ * @example Checking thrown error is this one using `instanceof`
+ *
+ * ```js
+ * if (err instanceof errors.JOSEAlgNotAllowed) {
+ *   // ...
+ * }
+ * ```
+ */
+exports.JWTExpired = JWTExpired;
+class JOSEAlgNotAllowed extends JOSEError {
+  static get code() {
+    return 'ERR_JOSE_ALG_NOT_ALLOWED';
+  }
+  code = 'ERR_JOSE_ALG_NOT_ALLOWED';
+}
+
+/**
+ * An error subclass thrown when a particular feature or algorithm is not supported by this
+ * implementation or JOSE in general.
+ *
+ * @example Checking thrown error is this one using a stable error code
+ *
+ * ```js
+ * if (err.code === 'ERR_JOSE_NOT_SUPPORTED') {
+ *   // ...
+ * }
+ * ```
+ *
+ * @example Checking thrown error is this one using `instanceof`
+ *
+ * ```js
+ * if (err instanceof errors.JOSENotSupported) {
+ *   // ...
+ * }
+ * ```
+ */
+exports.JOSEAlgNotAllowed = JOSEAlgNotAllowed;
+class JOSENotSupported extends JOSEError {
+  static get code() {
+    return 'ERR_JOSE_NOT_SUPPORTED';
+  }
+  code = 'ERR_JOSE_NOT_SUPPORTED';
+}
+
+/**
+ * An error subclass thrown when a JWT is invalid.
+ *
+ * @example Checking thrown error is this one using a stable error code
+ *
+ * ```js
+ * if (err.code === 'ERR_JWT_INVALID') {
+ *   // ...
+ * }
+ * ```
+ *
+ * @example Checking thrown error is this one using `instanceof`
+ *
+ * ```js
+ * if (err instanceof errors.JWTInvalid) {
+ *   // ...
+ * }
+ * ```
+ */
+exports.JOSENotSupported = JOSENotSupported;
+class JWTInvalid extends JOSEError {
+  static get code() {
+    return 'ERR_JWT_INVALID';
+  }
+  code = 'ERR_JWT_INVALID';
+}
+
+/**
+ * An error subclass thrown when a JWT signature (JWS) is invalid.
+ */
+exports.JWTInvalid = JWTInvalid;
+class JWSInvalid extends JOSEError {
+  static get code() {
+    return 'ERR_JWS_INVALID';
+  }
+  code = 'ERR_JWS_INVALID';
+}
+
+/**
+ * An error subclass thrown when JWS signature verification fails.
+ *
+ * @example Checking thrown error is this one using a stable error code
+ *
+ * ```js
+ * if (err.code === 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED') {
+ *   // ...
+ * }
+ * ```
+ *
+ * @example Checking thrown error is this one using `instanceof`
+ *
+ * ```js
+ * if (err instanceof errors.JWSSignatureVerificationFailed) {
+ *   // ...
+ * }
+ * ```
+ */
+exports.JWSInvalid = JWSInvalid;
+class JWSSignatureVerificationFailed extends JOSEError {
+  static get code() {
+    return 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
+  }
+  code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
+  message = 'signature verification failed';
+}
+exports.JWSSignatureVerificationFailed = JWSSignatureVerificationFailed;
+//# sourceMappingURL=errors.js.map

package/lib/commonjs/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["JOSEError","Error","code","constructor","message","_Error$captureStackTr","name","captureStackTrace","call","exports","JWTClaimValidationFailed","claim","arguments","length","undefined","reason","JWTExpired","JOSEAlgNotAllowed","JOSENotSupported","JWTInvalid","JWSInvalid","JWSSignatureVerificationFailed"],"sourceRoot":"../../../src","sources":["utils/errors.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMA,SAAS,SAASC,KAAK,CAAC;EACnC;EACA,WAAWC,IAAIA,CAAA,EAAW;IACxB,OAAO,kBAAkB;EAC3B;;EAEA;EACAA,IAAI,GAAW,kBAAkB;EAEjCC,WAAWA,CAACC,OAAgB,EAAE;IAAA,IAAAC,qBAAA;IAC5B,KAAK,CAACD,OAAO,CAAC;IACd,IAAI,CAACE,IAAI,GAAG,IAAI,CAACH,WAAW,CAACG,IAAI;IACjC;IACA,CAAAD,qBAAA,GAAAJ,KAAK,CAACM,iBAAiB,cAAAF,qBAAA,uBAAvBA,qBAAA,CAAAG,IAAA,CAAAP,KAAK,EAAqB,IAAI,EAAE,IAAI,CAACE,WAAW,CAAC;EACnD;AACF;AAACM,OAAA,CAAAT,SAAA,GAAAA,SAAA;AACM,MAAMU,wBAAwB,SAASV,SAAS,CAAC;EACtD,WAAWE,IAAIA,CAAA,EAAsC;IACnD,OAAO,iCAAiC;EAC1C;EAEAA,IAAI,GAAG,iCAAiC;;EAExC;;EAGA;;EAGAC,WAAWA,CAACC,OAAe,EAAiD;IAAA,IAA/CO,KAAK,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,aAAa;IAAA,IAAEG,MAAM,GAAAH,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,aAAa;IACxE,KAAK,CAACR,OAAO,CAAC;IACd,IAAI,CAACO,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACI,MAAM,GAAGA,MAAM;EACtB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAlBAN,OAAA,CAAAC,wBAAA,GAAAA,wBAAA;AAmBO,MAAMM,UAAU,SAAShB,SAAS,CAAqC;EAC5E,WAAWE,IAAIA,CAAA,EAAsB;IACnC,OAAO,iBAAiB;EAC1B;EAEAA,IAAI,GAAG,iBAAiB;;EAExB;;EAGA;;EAGAC,WAAWA,CAACC,OAAe,EAAiD;IAAA,IAA/CO,KAAK,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,aAAa;IAAA,IAAEG,MAAM,GAAAH,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,aAAa;IACxE,KAAK,CAACR,OAAO,CAAC;IACd,IAAI,CAACO,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACI,MAAM,GAAGA,MAAM;EACtB;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAlBAN,OAAA,CAAAO,UAAA,GAAAA,UAAA;AAmBO,MAAMC,iBAAiB,SAASjB,SAAS,CAAC;EAC/C,WAAWE,IAAIA,CAAA,EAA+B;IAC5C,OAAO,0BAA0B;EACnC;EAEAA,IAAI,GAAG,0BAA0B;AACnC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAnBAO,OAAA,CAAAQ,iBAAA,GAAAA,iBAAA;AAoBO,MAAMC,gBAAgB,SAASlB,SAAS,CAAC;EAC9C,WAAWE,IAAIA,CAAA,EAA6B;IAC1C,OAAO,wBAAwB;EACjC;EAEAA,IAAI,GAAG,wBAAwB;AACjC;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAlBAO,OAAA,CAAAS,gBAAA,GAAAA,gBAAA;AAmBO,MAAMC,UAAU,SAASnB,SAAS,CAAC;EACxC,WAAWE,IAAIA,CAAA,EAAsB;IACnC,OAAO,iBAAiB;EAC1B;EAEAA,IAAI,GAAG,iBAAiB;AAC1B;;AAEA;AACA;AACA;AAFAO,OAAA,CAAAU,UAAA,GAAAA,UAAA;AAGO,MAAMC,UAAU,SAASpB,SAAS,CAAC;EACxC,WAAWE,IAAIA,CAAA,EAAsB;IACnC,OAAO,iBAAiB;EAC1B;EACAA,IAAI,GAAG,iBAAiB;AAC1B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AAlBAO,OAAA,CAAAW,UAAA,GAAAA,UAAA;AAmBO,MAAMC,8BAA8B,SAASrB,SAAS,CAAC;EAC5D,WAAWE,IAAIA,CAAA,EAA4C;IACzD,OAAO,uCAAuC;EAChD;EAEAA,IAAI,GAAG,uCAAuC;EAE9CE,OAAO,GAAG,+BAA+B;AAC3C;AAACK,OAAA,CAAAY,8BAAA,GAAAA,8BAAA"}

package/lib/commonjs/utils/is_object.js

@@ -0,0 +1,23 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.default = isObject;
+function isObjectLike(value) {
+  return typeof value === 'object' && value !== null;
+}
+function isObject(input) {
+  if (!isObjectLike(input) || Object.prototype.toString.call(input) !== '[object Object]') {
+    return false;
+  }
+  if (Object.getPrototypeOf(input) === null) {
+    return true;
+  }
+  let proto = input;
+  while (Object.getPrototypeOf(proto) !== null) {
+    proto = Object.getPrototypeOf(proto);
+  }
+  return Object.getPrototypeOf(input) === proto;
+}
+//# sourceMappingURL=is_object.js.map

package/lib/commonjs/utils/is_object.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isObjectLike","value","isObject","input","Object","prototype","toString","call","getPrototypeOf","proto"],"sourceRoot":"../../../src","sources":["utils/is_object.ts"],"mappings":";;;;;;AAAA,SAASA,YAAYA,CAACC,KAAc,EAAE;EACpC,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI;AACpD;AAEe,SAASC,QAAQA,CAAaC,KAAc,EAAc;EACvE,IACE,CAACH,YAAY,CAACG,KAAK,CAAC,IACpBC,MAAM,CAACC,SAAS,CAACC,QAAQ,CAACC,IAAI,CAACJ,KAAK,CAAC,KAAK,iBAAiB,EAC3D;IACA,OAAO,KAAK;EACd;EACA,IAAIC,MAAM,CAACI,cAAc,CAACL,KAAK,CAAC,KAAK,IAAI,EAAE;IACzC,OAAO,IAAI;EACb;EACA,IAAIM,KAAK,GAAGN,KAAK;EACjB,OAAOC,MAAM,CAACI,cAAc,CAACC,KAAK,CAAC,KAAK,IAAI,EAAE;IAC5CA,KAAK,GAAGL,MAAM,CAACI,cAAc,CAACC,KAAK,CAAC;EACtC;EACA,OAAOL,MAAM,CAACI,cAAc,CAACL,KAAK,CAAC,KAAKM,KAAK;AAC/C"}

package/lib/commonjs/utils/proxy.js

@@ -0,0 +1,17 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.IoReactNativeJwt = void 0;
+var _reactNative = require("react-native");
+const IoReactNativeJwt = _reactNative.NativeModules.IoReactNativeJwt ? _reactNative.NativeModules.IoReactNativeJwt : new Proxy({
+  //this is a fake implementation to allow local deviceless testing
+  unpackBerEncodedASN1: (a, _b) => a
+}, {
+  get: function (target, prop) {
+    return Reflect.get(target, prop);
+  }
+});
+exports.IoReactNativeJwt = IoReactNativeJwt;
+//# sourceMappingURL=proxy.js.map

package/lib/commonjs/utils/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","IoReactNativeJwt","NativeModules","Proxy","unpackBerEncodedASN1","a","_b","get","target","prop","Reflect","exports"],"sourceRoot":"../../../src","sources":["utils/proxy.ts"],"mappings":";;;;;;AAAA,IAAAA,YAAA,GAAAC,OAAA;AAEO,MAAMC,gBAAgB,GAAGC,0BAAa,CAACD,gBAAgB,GAC1DC,0BAAa,CAACD,gBAAgB,GAC9B,IAAIE,KAAK,CACP;EACE;EACAC,oBAAoB,EAAEA,CAACC,CAAS,EAAEC,EAAU,KAAKD;AACnD,CAAC,EACD;EACEE,GAAG,EAAE,SAAAA,CAAUC,MAAM,EAAEC,IAAI,EAAE;IAC3B,OAAOC,OAAO,CAACH,GAAG,CAACC,MAAM,EAAEC,IAAI,CAAC;EAClC;AACF,CACF,CAAC;AAACE,OAAA,CAAAV,gBAAA,GAAAA,gBAAA"}