@pagopa/io-react-native-jwt 1.3.0 → 1.5.0

package/lib/typescript/module/src/jwt/sign.d.ts

@@ -0,0 +1,61 @@
+import type { JWSHeaderParameters, JWTDecodeResult } from '../types';
+import { ProduceJWT } from './produce';
+import type { CryptoContext } from '../utils/crypto';
+/**
+ * The SignJWT class is used to build and sign Compact JWS formatted JSON Web Tokens.
+ *
+ * @example Usage with a given signature
+ *
+ * ```js
+ * const crypto: Crypto = { any implementation fo Crypto interface }
+ *
+ * const jwt = new SignJWT(crypto)
+ *   .setPayload({ 'urn:example:claim': true })
+ *   .setProtectedHeader({ typ })
+ *   .setIssuedAt()
+ *   .setIssuer('urn:example:issuer')
+ *   .setAudience('urn:example:audience')
+ *   .setExpirationTime('2h')
+ *
+ * jwt.data()
+ * await jwt.sign()
+ * ```
+ */
+export declare class SignJWT extends ProduceJWT {
+    private _protectedHeader;
+    private crypto;
+    /**
+     * @param crypto An implementation of the crypto interface. @see utils/crypto for more.
+     */
+    constructor(crypto: CryptoContext);
+    /**
+     * Sets the JWS Protected Header on the SignJWT object.
+     * Any invocation overrides what's been already put in the header.
+     * Value for "alg" are ignored, as it will be inferred by the key used by the cryptographic context.
+     *
+     * @param protectedHeader JWS Protected Header.
+     */
+    setProtectedHeader(protectedHeader: Omit<JWSHeaderParameters, 'alg'>): this;
+    /**
+     * Return a JWT without signature (`header.payload`).
+     *
+     */
+    private unsigned;
+    private getSelectedSigningAlgorithm;
+    /**
+     * Return a signed JWT.
+     *
+     */
+    sign(): Promise<string>;
+    /**
+     * Plain data of the produced JWT
+     */
+    data(): JWTDecodeResult;
+    /**
+     * Decodes a signed JWT
+     *
+     * @param jwt JWT to sign that needs to be decoded.
+     */
+    static decode(jwt: string): JWTDecodeResult;
+}
+//# sourceMappingURL=sign.d.ts.map

package/lib/typescript/module/src/jwt/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jwt/sign.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AASvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,qBAAa,OAAQ,SAAQ,UAAU;IACrC,OAAO,CAAC,gBAAgB,CAAwC;IAChE,OAAO,CAAC,MAAM,CAAgB;IAE9B;;OAEG;gBACS,MAAM,EAAE,aAAa;IAKjC;;;;;;OAMG;IACH,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC;IAKpE;;;OAGG;YACW,QAAQ;YASR,2BAA2B;IAUzC;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAa7B;;OAEG;IACH,IAAI,IAAI,eAAe;IAIvB;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;CAkC5C"}

package/lib/typescript/module/src/jwt/unsecured.d.ts

@@ -0,0 +1,64 @@
+import type { JWTClaimVerificationOptions, JWTPayload, JWTUnsecuredHeaderParameters } from '../types';
+import { ProduceJWT } from './produce';
+export interface UnsecuredResult {
+    payload: JWTPayload;
+    header: JWTUnsecuredHeaderParameters;
+}
+/**
+ * The UnsecuredJWT class is a utility for dealing with `{ "alg": "none" }` Unsecured JWTs.
+ *
+ * @example Encoding
+ *
+ * ```js
+ * const unsecuredJwt = new UnsecuredJWT({ 'urn:example:claim': true })
+ *   .setIssuedAt()
+ *   .setIssuer('urn:example:issuer')
+ *   .setAudience('urn:example:audience')
+ *   .setExpirationTime('2h')
+ *   .encode()
+ *
+ * console.log(unsecuredJwt)
+ * ```
+ *
+ * @example Decoding
+ *
+ * ```js
+ * const payload = UnsecuredJWT.decode(jwt, {
+ *   issuer: 'urn:example:issuer',
+ *   audience: 'urn:example:audience',
+ * })
+ *
+ * console.log(payload)
+ * ```
+ *  * @example JWT content ToSign
+ *
+ * ```js
+ * const jwtToSign = new UnsecuredJWT({ 'urn:example:claim': true })
+ *   .setIssuedAt()
+ *   .setIssuer('urn:example:issuer')
+ *   .setAudience('urn:example:audience')
+ *   .setExpirationTime('2h')
+ *   .toSign()
+ *
+ * console.log(jwtToSign)
+ * ```
+ */
+export declare class UnsecuredJWT extends ProduceJWT {
+    /** Encodes the Unsecured JWT. */
+    encode(): string;
+    /**
+     * Decodes an unsecured JWT.
+     *
+     * @param jwt Unsecured JWT to decode the payload of.
+     * @param options JWT Claims Set validation options.
+     */
+    static decode(jwt: string, options?: JWTClaimVerificationOptions): UnsecuredResult;
+    /**
+     * Decodes an unsecured JWT payload.
+     *
+     * @param jwt Unsecured JWT payload to decode.
+     * @param options JWT Claims Set validation options.
+     */
+    static decodePayload(jwt: string, options?: JWTClaimVerificationOptions): JWTPayload;
+}
+//# sourceMappingURL=unsecured.d.ts.map

package/lib/typescript/module/src/jwt/unsecured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unsecured.d.ts","sourceRoot":"","sources":["../../../../../src/jwt/unsecured.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,2BAA2B,EAC3B,UAAU,EACV,4BAA4B,EAC7B,MAAM,UAAU,CAAC;AAIlB,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGvC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,4BAA4B,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,qBAAa,YAAa,SAAQ,UAAU;IAC1C,iCAAiC;IACjC,MAAM,IAAI,MAAM;IAOhB;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,2BAA2B,GACpC,eAAe;IA6BlB;;;;;OAKG;IACH,MAAM,CAAC,aAAa,CAClB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,2BAA2B,GACpC,UAAU;CAed"}

package/lib/typescript/module/src/types.d.ts

@@ -0,0 +1,475 @@
+import { z } from 'zod';
+import type { SupportedAlgorithm } from './algorithms';
+export interface JWTDecodeResult {
+    /** JWT Claims Set. */
+    payload: JWTPayload;
+    /** JWS Protected Header. */
+    protectedHeader: JWSHeaderParameters;
+}
+export interface JoseHeaderParameters {
+    /** "kid" (Key ID) Header Parameter. */
+    kid?: string;
+    /** "x5t" (X.509 Certificate SHA-1 Thumbprint) Header Parameter. */
+    x5t?: string;
+    /** "x5c" (X.509 Certificate Chain) Header Parameter. */
+    x5c?: string[];
+    /** "x5u" (X.509 URL) Header Parameter. */
+    x5u?: string;
+    /** "jku" (JWK Set URL) Header Parameter. */
+    jku?: string;
+    /** "jwk" (JSON Web Key) Header Parameter. */
+    jwk?: Pick<JWK, 'kty' | 'crv' | 'x' | 'y' | 'e' | 'n'>;
+    /** "typ" (Type) Header Parameter. */
+    typ?: string;
+    /** "cty" (Content Type) Header Parameter. */
+    cty?: string;
+}
+/** Recognized JWS Header Parameters, any other Header Members may also be present. */
+export interface JWSHeaderParameters extends JoseHeaderParameters {
+    /** JWS "alg" (Algorithm) Header Parameter. */
+    alg?: SupportedAlgorithm;
+    /**
+     * This JWS Extension Header Parameter modifies the JWS Payload representation and the JWS Signing
+     * Input computation as per {@link https://www.rfc-editor.org/rfc/rfc7797 RFC7797}.
+     */
+    b64?: boolean;
+    /** JWS "crit" (Critical) Header Parameter. */
+    crit?: string[];
+    /** Any other JWS Header member. */
+    [propName: string]: unknown;
+}
+/** JOSE Header for an unsecued JWT */
+export interface JWTUnsecuredHeaderParameters extends JoseHeaderParameters {
+    alg?: 'none';
+}
+/** Recognized JWE Header Parameters, any other Header members may also be present. */
+export interface JWEHeaderParameters extends JoseHeaderParameters {
+    /** JWE "alg" (Algorithm) Header Parameter. */
+    alg?: 'RSA-OAEP-256' | 'RSA-OAEP' | 'ECDH-ES';
+    /** JWE "enc" (Encryption Algorithm) Header Parameter. */
+    enc?: 'A256CBC-HS512' | 'A128CBC-HS256' | 'A128CBC-HS256';
+    /** Any other JWE Header member. */
+    [propName: string]: unknown;
+}
+/** Recognized JWT Claims Set members, any other members may also be present. */
+export interface JWTPayload {
+    /**
+     * JWT Issuer
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.1 RFC7519#section-4.1.1}
+     */
+    iss?: string;
+    /**
+     * JWT Subject
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.2 RFC7519#section-4.1.2}
+     */
+    sub?: string;
+    /**
+     * JWT Audience
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.3 RFC7519#section-4.1.3}
+     */
+    aud?: string | string[];
+    /**
+     * JWT ID
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 RFC7519#section-4.1.7}
+     */
+    jti?: string;
+    /**
+     * JWT Not Before
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.5 RFC7519#section-4.1.5}
+     */
+    nbf?: number;
+    /**
+     * JWT Expiration Time
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.4 RFC7519#section-4.1.4}
+     */
+    exp?: number;
+    /**
+     * JWT Issued At
+     *
+     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
+     */
+    iat?: number;
+    /** Any other JWT Claim Set member. */
+    [propName: string]: unknown;
+}
+/** JWT Claims Set verification options. */
+export interface JWTClaimVerificationOptions {
+    /** Expected JWT "aud" (Audience) Claim value(s). */
+    audience?: string | string[];
+    /**
+     * Expected clock tolerance
+     *
+     * - In seconds when number (e.g. 5)
+     * - Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
+     */
+    clockTolerance?: string | number;
+    /** Expected JWT "iss" (Issuer) Claim value(s). */
+    issuer?: string | string[];
+    /**
+     * Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.
+     *
+     * - In seconds when number (e.g. 5)
+     * - Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
+     */
+    maxTokenAge?: string | number;
+    /** Expected JWT "sub" (Subject) Claim value. */
+    subject?: string;
+    /** Expected JWT "typ" (Type) Header Parameter value. */
+    typ?: string;
+    /** Date to use when comparing NumericDate claims, defaults to `new Date()`. */
+    currentDate?: Date;
+    /**
+     * Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if
+     * the {@link JWTClaimVerificationOptions.issuer issuer option} is set, then "iss" must be present;
+     * if the {@link JWTClaimVerificationOptions.audience audience option} is set, then "aud" must be
+     * present; if the {@link JWTClaimVerificationOptions.subject subject option} is set, then "sub"
+     * must be present; if the {@link JWTClaimVerificationOptions.maxTokenAge maxTokenAge option} is
+     * set, then "iat" must be present.
+     */
+    requiredClaims?: string[];
+}
+export type JWK = z.infer<typeof JWK>;
+export declare const JWK: z.ZodObject<{
+    alg: z.ZodOptional<z.ZodString>;
+    crv: z.ZodOptional<z.ZodString>;
+    d: z.ZodOptional<z.ZodString>;
+    dp: z.ZodOptional<z.ZodString>;
+    dq: z.ZodOptional<z.ZodString>;
+    e: z.ZodOptional<z.ZodString>;
+    /** JWK "ext" (Extractable) Parameter. */
+    ext: z.ZodOptional<z.ZodBoolean>;
+    k: z.ZodOptional<z.ZodString>;
+    /** JWK "key_ops" (Key Operations) Parameter. */
+    key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** JWK "kid" (Key ID) Parameter. */
+    kid: z.ZodOptional<z.ZodString>;
+    /** JWK "kty" (Key Type) Parameter.
+     * This attribute is required to discriminate the
+     * type of EC/RSA algorithm */
+    kty: z.ZodString;
+    n: z.ZodOptional<z.ZodString>;
+    oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        d: z.ZodOptional<z.ZodString>;
+        r: z.ZodOptional<z.ZodString>;
+        t: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        d?: string | undefined;
+        r?: string | undefined;
+        t?: string | undefined;
+    }, {
+        d?: string | undefined;
+        r?: string | undefined;
+        t?: string | undefined;
+    }>, "many">>;
+    p: z.ZodOptional<z.ZodString>;
+    q: z.ZodOptional<z.ZodString>;
+    qi: z.ZodOptional<z.ZodString>;
+    /** JWK "use" (Public Key Use) Parameter. */
+    use: z.ZodOptional<z.ZodString>;
+    x: z.ZodOptional<z.ZodString>;
+    y: z.ZodOptional<z.ZodString>;
+    /** JWK "x5c" (X.509 Certificate Chain) Parameter. */
+    x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter. */
+    x5t: z.ZodOptional<z.ZodString>;
+    /** "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter. */
+    'x5t#S256': z.ZodOptional<z.ZodString>;
+    /** JWK "x5u" (X.509 URL) Parameter. */
+    x5u: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    kty: string;
+    alg?: string | undefined;
+    crv?: string | undefined;
+    d?: string | undefined;
+    dp?: string | undefined;
+    dq?: string | undefined;
+    e?: string | undefined;
+    ext?: boolean | undefined;
+    k?: string | undefined;
+    key_ops?: string[] | undefined;
+    kid?: string | undefined;
+    n?: string | undefined;
+    oth?: {
+        d?: string | undefined;
+        r?: string | undefined;
+        t?: string | undefined;
+    }[] | undefined;
+    p?: string | undefined;
+    q?: string | undefined;
+    qi?: string | undefined;
+    use?: string | undefined;
+    x?: string | undefined;
+    y?: string | undefined;
+    x5c?: string[] | undefined;
+    x5t?: string | undefined;
+    'x5t#S256'?: string | undefined;
+    x5u?: string | undefined;
+}, {
+    kty: string;
+    alg?: string | undefined;
+    crv?: string | undefined;
+    d?: string | undefined;
+    dp?: string | undefined;
+    dq?: string | undefined;
+    e?: string | undefined;
+    ext?: boolean | undefined;
+    k?: string | undefined;
+    key_ops?: string[] | undefined;
+    kid?: string | undefined;
+    n?: string | undefined;
+    oth?: {
+        d?: string | undefined;
+        r?: string | undefined;
+        t?: string | undefined;
+    }[] | undefined;
+    p?: string | undefined;
+    q?: string | undefined;
+    qi?: string | undefined;
+    use?: string | undefined;
+    x?: string | undefined;
+    y?: string | undefined;
+    x5c?: string[] | undefined;
+    x5t?: string | undefined;
+    'x5t#S256'?: string | undefined;
+    x5u?: string | undefined;
+}>;
+export type WithJWKS = z.infer<typeof WithJWKS>;
+export declare const WithJWKS: z.ZodObject<{
+    jwks: z.ZodObject<{
+        keys: z.ZodArray<z.ZodObject<{
+            alg: z.ZodOptional<z.ZodString>;
+            crv: z.ZodOptional<z.ZodString>;
+            d: z.ZodOptional<z.ZodString>;
+            dp: z.ZodOptional<z.ZodString>;
+            dq: z.ZodOptional<z.ZodString>;
+            e: z.ZodOptional<z.ZodString>;
+            /** JWK "ext" (Extractable) Parameter. */
+            ext: z.ZodOptional<z.ZodBoolean>;
+            k: z.ZodOptional<z.ZodString>;
+            /** JWK "key_ops" (Key Operations) Parameter. */
+            key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            /** JWK "kid" (Key ID) Parameter. */
+            kid: z.ZodOptional<z.ZodString>;
+            /** JWK "kty" (Key Type) Parameter.
+             * This attribute is required to discriminate the
+             * type of EC/RSA algorithm */
+            kty: z.ZodString;
+            n: z.ZodOptional<z.ZodString>;
+            oth: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                d: z.ZodOptional<z.ZodString>;
+                r: z.ZodOptional<z.ZodString>;
+                t: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }, {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }>, "many">>;
+            p: z.ZodOptional<z.ZodString>;
+            q: z.ZodOptional<z.ZodString>;
+            qi: z.ZodOptional<z.ZodString>;
+            /** JWK "use" (Public Key Use) Parameter. */
+            use: z.ZodOptional<z.ZodString>;
+            x: z.ZodOptional<z.ZodString>;
+            y: z.ZodOptional<z.ZodString>;
+            /** JWK "x5c" (X.509 Certificate Chain) Parameter. */
+            x5c: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter. */
+            x5t: z.ZodOptional<z.ZodString>;
+            /** "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter. */
+            'x5t#S256': z.ZodOptional<z.ZodString>;
+            /** JWK "x5u" (X.509 URL) Parameter. */
+            x5u: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            kty: string;
+            alg?: string | undefined;
+            crv?: string | undefined;
+            d?: string | undefined;
+            dp?: string | undefined;
+            dq?: string | undefined;
+            e?: string | undefined;
+            ext?: boolean | undefined;
+            k?: string | undefined;
+            key_ops?: string[] | undefined;
+            kid?: string | undefined;
+            n?: string | undefined;
+            oth?: {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }[] | undefined;
+            p?: string | undefined;
+            q?: string | undefined;
+            qi?: string | undefined;
+            use?: string | undefined;
+            x?: string | undefined;
+            y?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            'x5t#S256'?: string | undefined;
+            x5u?: string | undefined;
+        }, {
+            kty: string;
+            alg?: string | undefined;
+            crv?: string | undefined;
+            d?: string | undefined;
+            dp?: string | undefined;
+            dq?: string | undefined;
+            e?: string | undefined;
+            ext?: boolean | undefined;
+            k?: string | undefined;
+            key_ops?: string[] | undefined;
+            kid?: string | undefined;
+            n?: string | undefined;
+            oth?: {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }[] | undefined;
+            p?: string | undefined;
+            q?: string | undefined;
+            qi?: string | undefined;
+            use?: string | undefined;
+            x?: string | undefined;
+            y?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            'x5t#S256'?: string | undefined;
+            x5u?: string | undefined;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        keys: {
+            kty: string;
+            alg?: string | undefined;
+            crv?: string | undefined;
+            d?: string | undefined;
+            dp?: string | undefined;
+            dq?: string | undefined;
+            e?: string | undefined;
+            ext?: boolean | undefined;
+            k?: string | undefined;
+            key_ops?: string[] | undefined;
+            kid?: string | undefined;
+            n?: string | undefined;
+            oth?: {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }[] | undefined;
+            p?: string | undefined;
+            q?: string | undefined;
+            qi?: string | undefined;
+            use?: string | undefined;
+            x?: string | undefined;
+            y?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            'x5t#S256'?: string | undefined;
+            x5u?: string | undefined;
+        }[];
+    }, {
+        keys: {
+            kty: string;
+            alg?: string | undefined;
+            crv?: string | undefined;
+            d?: string | undefined;
+            dp?: string | undefined;
+            dq?: string | undefined;
+            e?: string | undefined;
+            ext?: boolean | undefined;
+            k?: string | undefined;
+            key_ops?: string[] | undefined;
+            kid?: string | undefined;
+            n?: string | undefined;
+            oth?: {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }[] | undefined;
+            p?: string | undefined;
+            q?: string | undefined;
+            qi?: string | undefined;
+            use?: string | undefined;
+            x?: string | undefined;
+            y?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            'x5t#S256'?: string | undefined;
+            x5u?: string | undefined;
+        }[];
+    }>;
+}, "strip", z.ZodTypeAny, {
+    jwks: {
+        keys: {
+            kty: string;
+            alg?: string | undefined;
+            crv?: string | undefined;
+            d?: string | undefined;
+            dp?: string | undefined;
+            dq?: string | undefined;
+            e?: string | undefined;
+            ext?: boolean | undefined;
+            k?: string | undefined;
+            key_ops?: string[] | undefined;
+            kid?: string | undefined;
+            n?: string | undefined;
+            oth?: {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }[] | undefined;
+            p?: string | undefined;
+            q?: string | undefined;
+            qi?: string | undefined;
+            use?: string | undefined;
+            x?: string | undefined;
+            y?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            'x5t#S256'?: string | undefined;
+            x5u?: string | undefined;
+        }[];
+    };
+}, {
+    jwks: {
+        keys: {
+            kty: string;
+            alg?: string | undefined;
+            crv?: string | undefined;
+            d?: string | undefined;
+            dp?: string | undefined;
+            dq?: string | undefined;
+            e?: string | undefined;
+            ext?: boolean | undefined;
+            k?: string | undefined;
+            key_ops?: string[] | undefined;
+            kid?: string | undefined;
+            n?: string | undefined;
+            oth?: {
+                d?: string | undefined;
+                r?: string | undefined;
+                t?: string | undefined;
+            }[] | undefined;
+            p?: string | undefined;
+            q?: string | undefined;
+            qi?: string | undefined;
+            use?: string | undefined;
+            x?: string | undefined;
+            y?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            'x5t#S256'?: string | undefined;
+            x5u?: string | undefined;
+        }[];
+    };
+}>;
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/module/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,sBAAsB;IACtB,OAAO,EAAE,UAAU,CAAC;IAEpB,4BAA4B;IAC5B,eAAe,EAAE,mBAAmB,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IAEf,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,6CAA6C;IAC7C,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAEvD,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,8CAA8C;IAC9C,GAAG,CAAC,EAAE,kBAAkB,CAAC;IAEzB;;;OAGG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;IAEd,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,mCAAmC;IACnC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,sCAAsC;AACtC,MAAM,WAAW,4BAA6B,SAAQ,oBAAoB;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,sFAAsF;AACtF,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,8CAA8C;IAC9C,GAAG,CAAC,EAAE,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;IAE9C,yDAAyD;IACzD,GAAG,CAAC,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;IAE1D,mCAAmC;IACnC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,gFAAgF;AAChF,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,sCAAsC;IACtC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,2CAA2C;AAC3C,MAAM,WAAW,2BAA2B;IAC1C,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEjC,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE3B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAE9B,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,+EAA+E;IAC/E,WAAW,CAAC,EAAE,IAAI,CAAC;IAEnB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;AACtC,eAAO,MAAM,GAAG;;;;;;;IAOd,yCAAyC;;;IAGzC,gDAAgD;;IAEhD,oCAAoC;;IAEpC;;kCAE8B;;;;;;;;;;;;;;;;;;;IAe9B,4CAA4C;;;;IAI5C,qDAAqD;;IAErD,gEAAgE;;IAEhE,mEAAmE;;IAEnE,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvC,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAChD,eAAO,MAAM,QAAQ;;;;;;;;;YAvCnB,yCAAyC;;;YAGzC,gDAAgD;;YAEhD,oCAAoC;;YAEpC;;0CAE8B;;;;;;;;;;;;;;;;;;;YAe9B,4CAA4C;;;;YAI5C,qDAAqD;;YAErD,gEAAgE;;YAEhE,mEAAmE;;YAEnE,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASvC,CAAC"}

package/lib/typescript/module/src/utils/asn1.d.ts

@@ -0,0 +1,3 @@
+import { type SupportedAlgorithm } from '../algorithms';
+export declare const derToJose: (asn1Signature: string, alg: SupportedAlgorithm) => Promise<string>;
+//# sourceMappingURL=asn1.d.ts.map

package/lib/typescript/module/src/utils/asn1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asn1.d.ts","sourceRoot":"","sources":["../../../../../src/utils/asn1.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AAoBvB,eAAO,MAAM,SAAS,kBACL,MAAM,OAChB,kBAAkB,KACtB,OAAO,CAAC,MAAM,CAehB,CAAC"}

package/lib/typescript/module/src/utils/base64.d.ts

@@ -0,0 +1,5 @@
+export declare function encodeBase64(value: string): string;
+export declare function decodeBase64(value: string): string;
+export declare function removePadding(encoded: string): string;
+export declare function addPadding(encoded: string): string;
+//# sourceMappingURL=base64.d.ts.map

package/lib/typescript/module/src/utils/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../../../../src/utils/base64.ts"],"names":[],"mappings":"AAeA,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAYlD"}

package/lib/typescript/module/src/utils/crypto.d.ts

@@ -0,0 +1,25 @@
+import type { JWK } from '../types';
+/**
+ * The interface of a cryptographic context to be used to sign tokens.
+ * Implementations are assumed to be initialized on a single, already-existing key pair.
+ *
+ * The generation and persistence of the key pair is delegated to the implementation.
+ */
+export interface CryptoContext {
+    /**
+     * Retrieves the public key to be used in this context.
+     * MUST be the same key at every invocation.
+     * @returns The public key to be used
+     * @throws If no keys are found
+     */
+    getPublicKey: () => Promise<JWK>;
+    /**
+     * Produce a cryptographic signature for a given value.
+     * The signature MUST be produced using the private key paired with the public retrieved by getPublicKey()
+     * @param value The value to be signed
+     * @returns The signature
+     * @throws If no keys are found
+     */
+    getSignature: (value: string) => Promise<string>;
+}
+//# sourceMappingURL=crypto.d.ts.map

package/lib/typescript/module/src/utils/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../../../src/utils/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,YAAY,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAClD"}