@peac/protocol 0.16.3 → 0.16.5

package/dist/verify-local.mjs

@@ -238,13 +238,32 @@ function validateTypeExtensionMappingInternal(input) {
 }
 
 // src/_internal/record-core/validators/jose-hardening.ts
-var KID_MAX_LENGTH = 256;
+var KID_MAX_UTF8_BYTES = 256;
+function isAcceptableKid(kid) {
+  if (typeof kid !== "string" || kid.length === 0) return false;
+  let bytes = 0;
+  for (let i = 0; i < kid.length; i++) {
+    const c = kid.charCodeAt(i);
+    if (c < 128) bytes += 1;
+    else if (c < 2048) bytes += 2;
+    else if (c >= 55296 && c <= 56319) {
+      const next = i + 1 < kid.length ? kid.charCodeAt(i + 1) : 0;
+      if (next < 56320 || next > 57343) return false;
+      bytes += 4;
+      i++;
+    } else if (c >= 56320 && c <= 57343) {
+      return false;
+    } else bytes += 3;
+    if (bytes > KID_MAX_UTF8_BYTES) return false;
+  }
+  return true;
+}
 var ACCEPTED = { accepted: true };
 function rejected(errorCode) {
   return { accepted: false, errorCode };
 }
 function validateJoseHardeningInternal(header) {
-  if (!header.kid || typeof header.kid !== "string" || header.kid.length === 0 || header.kid.length > KID_MAX_LENGTH) {
+  if (!isAcceptableKid(header.kid)) {
     return rejected("CRYPTO_JWS_MISSING_KID");
   }
   if (header.jwk !== void 0 || header.x5c !== void 0 || header.x5u !== void 0 || header.jku !== void 0) {