@rockcarver/frodo-lib 4.10.0-1 → 4.11.0-1

package/types/ops/InternalRoleOps.d.ts

@@ -0,0 +1,232 @@
+import { type IdObjectSkeletonInterface } from '../api/ApiTypes';
+import { State } from '../shared/State';
+import { type ExportMetaData } from './OpsTypes';
+export type InternalRole = {
+    /**
+     * Create an empty internal role export template
+     * @returns {InternalRoleExportInterface} an empty internal role export template
+     */
+    createInternalRoleExportTemplate(): InternalRoleExportInterface;
+    /**
+     * Create internal role
+     * @param {InternalRoleSkeleton} roleData internal role data
+     * @returns {Promise<InternalRoleSkeleton>} a promise that resolves to an internal role object
+     */
+    createInternalRole(roleData: InternalRoleSkeleton): Promise<InternalRoleSkeleton>;
+    /**
+     * Read internal role
+     * @param {string} roleId internal role uuid
+     * @returns {Promise<InternalRoleSkeleton>} a promise that resolves to an internal role object
+     */
+    readInternalRole(roleId: string): Promise<InternalRoleSkeleton>;
+    /**
+     * Read internal role by name
+     * @param {string} roleName internal role name
+     * @returns {Promise<InternalRoleSkeleton>} a promise that resolves to an internal role object
+     */
+    readInternalRoleByName(roleName: string): Promise<InternalRoleSkeleton>;
+    /**
+     * Read all internal roles. Results are sorted aphabetically.
+     * @returns {Promise<InternalRoleSkeleton[]>} a promise that resolves to an array of internal role objects
+     */
+    readInternalRoles(): Promise<InternalRoleSkeleton[]>;
+    /**
+     * Update internal role
+     * @param {string} roleId internal role uuid
+     * @param {InternalRoleSkeleton} roleData internal role data
+     * @returns {Promise<InternalRoleSkeleton>} a promise that resolves to an internal role object
+     */
+    updateInternalRole(roleId: string, roleData: InternalRoleSkeleton): Promise<InternalRoleSkeleton>;
+    /**
+     * Delete internal role
+     * @param {string} roleId internal role uuid
+     * @returns {Promise<InternalRoleSkeleton>} a promise that resolves to an internal role object
+     */
+    deleteInternalRole(roleId: string): Promise<InternalRoleSkeleton>;
+    /**
+     * Delete internal role by name
+     * @param {string} roleName internal role name
+     * @returns {Promise<InternalRoleSkeleton>} a promise that resolves to an internal role object
+     */
+    deleteInternalRoleByName(roleName: string): Promise<InternalRoleSkeleton>;
+    /**
+     * Delete all internal roles
+     * @returns {Promise<InternalRoleSkeleton[]>} a promise that resolves to an array of internal role objects
+     */
+    deleteInternalRoles(): Promise<InternalRoleSkeleton[]>;
+    /**
+     * Query internal roles
+     * @param {string} filter CREST search filter
+     * @param {string[]} fields array of fields to return
+     */
+    queryInternalRoles(filter: string, fields?: string[]): Promise<InternalRoleSkeleton[]>;
+    /**
+     * Export internal role. The response can be saved to file as is.
+     * @param {string} roleId internal role uuid
+     * @returns {Promise<InternalRoleExportInterface} Promise resolving to an InternalRoleExportInterface object.
+     */
+    exportInternalRole(roleId: string): Promise<InternalRoleExportInterface>;
+    /**
+     * Export internal role by name. The response can be saved to file as is.
+     * @param {string} roleName internal role name
+     * @returns {Promise<InternalRoleExportInterface} Promise resolving to an InternalRoleExportInterface object.
+     */
+    exportInternalRoleByName(roleName: string): Promise<InternalRoleExportInterface>;
+    /**
+     * Export all internal roles. The response can be saved to file as is.
+     * @returns {Promise<InternalRoleExportInterface>} Promise resolving to an InternalRoleExportInterface object.
+     */
+    exportInternalRoles(): Promise<InternalRoleExportInterface>;
+    /**
+     * Import internal role. The import data is usually read from an internal role export file.
+     * @param {string} roleId internal role uuid
+     * @param {InternalRoleExportInterface} importData internal role import data.
+     * @returns {Promise<InternalRoleSkeleton>} Promise resolving to an internal role object.
+     */
+    importInternalRole(roleId: string, importData: InternalRoleExportInterface): Promise<InternalRoleSkeleton>;
+    /**
+     * Import internal role by name. The import data is usually read from an internal role export file.
+     * @param {string} roleName internal role name
+     * @param {InternalRoleExportInterface} importData internal role import data.
+     * @returns {Promise<InternalRoleSkeleton>} Promise resolving to an internal role object.
+     */
+    importInternalRoleByName(roleName: string, importData: InternalRoleExportInterface): Promise<InternalRoleSkeleton>;
+    /**
+     * Import first internal role. The import data is usually read from an internal role export file.
+     * @param {InternalRoleExportInterface} importData internal role import data.
+     */
+    importFirstInternalRole(importData: InternalRoleExportInterface): Promise<InternalRoleSkeleton[]>;
+    /**
+     * Import internal roles. The import data is usually read from an internal role export file.
+     * @param {InternalRoleExportInterface} importData internal role import data.
+     */
+    importInternalRoles(importData: InternalRoleExportInterface): Promise<InternalRoleSkeleton[]>;
+};
+declare const _default: (state: State) => InternalRole;
+export default _default;
+export type InternalRoleSkeleton = IdObjectSkeletonInterface & {
+    condition: string;
+    description: string;
+    name: string;
+    privileges: {
+        accessFlags: {
+            attribute: string;
+            readOnly: boolean;
+        }[];
+        actions: string[];
+        filter: string;
+        name: string;
+        path: string;
+        permissions: string[];
+    }[];
+    temporalConstraints: {
+        duration: string;
+    }[];
+};
+/**
+ * Export format for internal roles
+ */
+export interface InternalRoleExportInterface {
+    /**
+     * Metadata
+     */
+    meta?: ExportMetaData;
+    /**
+     * Internal roles
+     */
+    internalRole: Record<string, InternalRoleSkeleton>;
+}
+export declare function createInternalRoleExportTemplate({ state, }: {
+    state: State;
+}): InternalRoleExportInterface;
+export declare function createInternalRole({ roleData, state, }: {
+    roleData: InternalRoleSkeleton;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+export declare function readInternalRole({ roleId, fields, state, }: {
+    roleId: string;
+    fields?: string[];
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+export declare function readInternalRoleByName({ roleName, fields, state, }: {
+    roleName: string;
+    fields?: string[];
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+export declare function readInternalRoles({ fields, state, }: {
+    fields?: string[];
+    state: State;
+}): Promise<InternalRoleSkeleton[]>;
+export declare function updateInternalRole({ roleId, roleData, state, }: {
+    roleId: string;
+    roleData: InternalRoleSkeleton;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+export declare function deleteInternalRole({ roleId, state, }: {
+    roleId: string;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+export declare function deleteInternalRoleByName({ roleName, state, }: {
+    roleName: string;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+export declare function deleteInternalRoles({ state, }: {
+    state: State;
+}): Promise<InternalRoleSkeleton[]>;
+export declare function queryInternalRoles({ filter, fields, state, }: {
+    filter: string;
+    fields?: string[];
+    state: State;
+}): Promise<InternalRoleSkeleton[]>;
+export declare function exportInternalRole({ roleId, state, }: {
+    roleId: string;
+    state: State;
+}): Promise<InternalRoleExportInterface>;
+export declare function exportInternalRoleByName({ roleName, state, }: {
+    roleName: string;
+    state: State;
+}): Promise<InternalRoleExportInterface>;
+export declare function exportInternalRoles({ state, }: {
+    state: State;
+}): Promise<InternalRoleExportInterface>;
+/**
+ * Import internal role
+ * @param {string} clientId client id
+ * @param {InternalRoleExportInterface} importData import data
+ * @returns {Promise<InternalRoleSkeleton>} a promise resolving to an oauth2 client
+ */
+export declare function importInternalRole({ roleId, importData, state, }: {
+    roleId: string;
+    importData: InternalRoleExportInterface;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+/**
+ * Import internal role
+ * @param {string} clientId client id
+ * @param {InternalRoleExportInterface} importData import data
+ * @returns {Promise<InternalRoleSkeleton>} a promise resolving to an oauth2 client
+ */
+export declare function importInternalRoleByName({ roleName: roleName, importData, state, }: {
+    roleName: string;
+    importData: InternalRoleExportInterface;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+/**
+ * Import first internal role
+ * @param {InternalRoleExportInterface} importData import data
+ * @returns {Promise<InternalRoleSkeleton[]>} a promise resolving to an array of oauth2 clients
+ */
+export declare function importFirstInternalRole({ importData, state, }: {
+    importData: InternalRoleExportInterface;
+    state: State;
+}): Promise<InternalRoleSkeleton>;
+/**
+ * Import internal roles
+ * @param {InternalRoleExportInterface} importData import data
+ * @returns {Promise<InternalRoleSkeleton[]>} a promise resolving to an array of oauth2 clients
+ */
+export declare function importInternalRoles({ importData, state, }: {
+    importData: InternalRoleExportInterface;
+    state: State;
+}): Promise<InternalRoleSkeleton[]>;
+//# sourceMappingURL=InternalRoleOps.d.ts.map

package/types/ops/InternalRoleOps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InternalRoleOps.d.ts","sourceRoot":"","sources":["../../src/ops/InternalRoleOps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AASjE,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AASxC,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAYjD,MAAM,MAAM,YAAY,GAAG;IACzB;;;OAGG;IACH,gCAAgC,IAAI,2BAA2B,CAAC;IAChE;;;;OAIG;IACH,kBAAkB,CAChB,QAAQ,EAAE,oBAAoB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAChE;;;;OAIG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE;;;OAGG;IACH,iBAAiB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACrD;;;;;OAKG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,oBAAoB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClE;;;;OAIG;IACH,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACvD;;;;OAIG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EAAE,GAChB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACnC;;;;OAIG;IACH,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACzE;;;;OAIG;IACH,wBAAwB,CACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC;;;OAGG;IACH,mBAAmB,IAAI,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAC5D;;;;;OAKG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC;;;;;OAKG;IACH,wBAAwB,CACtB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC;;;OAGG;IACH,uBAAuB,CACrB,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACnC;;;OAGG;IACH,mBAAmB,CACjB,UAAU,EAAE,2BAA2B,GACtC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;CACpC,CAAC;yBAEc,OAAO,KAAK,KAAG,YAAY;AAA3C,wBAkGE;AAEF,MAAM,MAAM,oBAAoB,GAAG,yBAAyB,GAAG;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE;QACV,WAAW,EAAE;YACX,SAAS,EAAE,MAAM,CAAC;YAClB,QAAQ,EAAE,OAAO,CAAC;SACnB,EAAE,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,EAAE,CAAC;KACvB,EAAE,CAAC;IACJ,mBAAmB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7C,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;CACpD;AAED,wBAAgB,gCAAgC,CAAC,EAC/C,KAAK,GACN,EAAE;IACD,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,2BAA2B,CAK9B;AAED,wBAAsB,kBAAkB,CAAC,EACvC,QAAQ,EACR,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkBhC;AAED,wBAAsB,gBAAgB,CAAC,EACrC,MAAM,EACN,MAAsB,EACtB,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAYhC;AAED,wBAAsB,sBAAsB,CAAC,EAC3C,QAAQ,EACR,MAAsB,EACtB,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkBhC;AAED,wBAAsB,iBAAiB,CAAC,EACtC,MAAsB,EACtB,KAAK,GACN,EAAE;IACD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAWlC;AAED,wBAAsB,kBAAkB,CAAC,EACvC,MAAM,EACN,QAAQ,EACR,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoBhC;AAED,wBAAsB,kBAAkB,CAAC,EACvC,MAAM,EACN,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAgBhC;AAED,wBAAsB,wBAAwB,CAAC,EAC7C,QAAQ,EACR,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAuBhC;AAED,wBAAsB,mBAAmB,CAAC,EACxC,KAAK,GACN,EAAE;IACD,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA0ClC;AAED,wBAAsB,kBAAkB,CAAC,EACvC,MAAM,EACN,MAAsB,EACtB,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAelC;AAED,wBAAsB,kBAAkB,CAAC,EACvC,MAAM,EACN,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAcvC;AAED,wBAAsB,wBAAwB,CAAC,EAC7C,QAAQ,EACR,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAoBvC;AAED,wBAAsB,mBAAmB,CAAC,EACxC,KAAK,GACN,EAAE;IACD,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAoDvC;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,MAAM,EACN,UAAU,EACV,KAAK,GACN,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,2BAA2B,CAAC;IACxC,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsChC;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,QAAQ,EAAE,QAAQ,EAClB,UAAU,EACV,KAAK,GACN,EAAE;IACD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,2BAA2B,CAAC;IACxC,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsChC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,UAAU,EACV,KAAK,GACN,EAAE;IACD,UAAU,EAAE,2BAA2B,CAAC;IACxC,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAqChC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,UAAU,EACV,KAAK,GACN,EAAE;IACD,UAAU,EAAE,2BAA2B,CAAC;IACxC,KAAK,EAAE,KAAK,CAAC;CACd,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+BlC"}

package/types/ops/JoseOps.d.ts

@@ -0,0 +1,87 @@
+import { State } from '../shared/State';
+export type Jose = {
+    createJwkRsa(): Promise<JwkRsa>;
+    getJwkRsaPublic(jwkJson: JwkRsa): Promise<JwkRsaPublic>;
+    createJwks(...keys: JwkInterface[]): JwksInterface;
+    createSignedJwtToken(payload: string | object, jwkJson: JwkRsa): Promise<any>;
+    verifySignedJwtToken(jwt: string, jwkJson: JwkRsaPublic): Promise<any>;
+    /**
+     * Verifies a JWT's signature against an arbitrary JWKS document (e.g. a
+     * third-party OIDC provider's published key set) and returns its decoded
+     * payload. Pure signature verification only — issuer, audience, and
+     * expiry are the caller's responsibility.
+     */
+    verifyJwtAgainstJwks(jwt: string, jwks: ExternalJwksDocument): Promise<Record<string, unknown>>;
+};
+declare const _default: (_state: State) => {
+    createJwkRsa(): Promise<JwkRsa>;
+    getJwkRsaPublic(jwkJson: JwkRsa): Promise<JwkRsaPublic>;
+    createJwks(...keys: JwkInterface[]): JwksInterface;
+    createSignedJwtToken(payload: string | object, jwkJson: JwkRsa): Promise<string>;
+    verifySignedJwtToken(jwt: string, jwkJson: JwkRsaPublic): Promise<{
+        payload: Buffer<ArrayBuffer>;
+        key: CryptoKey | Uint8Array<ArrayBufferLike>;
+        header: import("jose").JWTHeaderParameters;
+    }>;
+    verifyJwtAgainstJwks(jwt: string, jwks: ExternalJwksDocument): Promise<Record<string, unknown>>;
+};
+export default _default;
+export interface JwkInterface {
+    kty: string;
+    use?: string;
+    key_ops?: string[];
+    alg: string;
+    kid?: string;
+    x5u?: string;
+    x5c?: string;
+    x5t?: string;
+    'x5t#S256'?: string;
+}
+export type JwkRsa = JwkInterface & {
+    d: string;
+    dp: string;
+    dq: string;
+    e: string;
+    n: string;
+    p: string;
+    q: string;
+    qi: string;
+};
+export type JwkRsaPublic = JwkInterface & {
+    e: string;
+    n: string;
+};
+export interface JwksInterface {
+    keys: JwkInterface[];
+}
+/**
+ * A JWKS document as published by an arbitrary third-party OIDC provider,
+ * consumed (not created) by frodo — deliberately looser than
+ * {@link JwksInterface}/{@link JwkInterface}, which model keys frodo itself
+ * creates and can guarantee the shape of (e.g. always carrying `alg`).
+ * A real external IDP's JWKS entries commonly omit fields like `alg`
+ * while still being perfectly valid, verifiable keys.
+ */
+export interface ExternalJwksDocument {
+    keys: Record<string, unknown>[];
+}
+export declare function createJwkRsa(): Promise<JwkRsa>;
+export declare function getJwkRsaPublic(jwkJson: JwkRsa): Promise<JwkRsaPublic>;
+export declare function createJwks(...keys: JwkInterface[]): JwksInterface;
+export declare function createSignedJwtToken(payload: string | object, jwkJson: JwkRsa | CryptoKey | Uint8Array, header?: object): Promise<string>;
+export declare function verifySignedJwtToken(jwt: string, jwkJson: JwkRsaPublic): Promise<{
+    payload: Buffer<ArrayBuffer>;
+    key: CryptoKey | Uint8Array<ArrayBufferLike>;
+    header: import("jose").JWTHeaderParameters;
+}>;
+/**
+ * Verifies a JWT's signature against an arbitrary JWKS document (e.g. a
+ * third-party OIDC provider's published key set — the keystore selects the
+ * right key by the token's own `kid` header) and returns its decoded payload.
+ * Pure signature verification only — issuer, audience, and expiry are the
+ * caller's responsibility.
+ * @throws if the signature does not verify against any key in the JWKS,
+ * or the payload is not valid JSON.
+ */
+export declare function verifyJwtAgainstJwks(jwt: string, jwks: ExternalJwksDocument): Promise<Record<string, unknown>>;
+//# sourceMappingURL=JoseOps.d.ts.map

package/types/ops/JoseOps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JoseOps.d.ts","sourceRoot":"","sources":["../../src/ops/JoseOps.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC,MAAM,MAAM,IAAI,GAAG;IACjB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,UAAU,CAAC,GAAG,IAAI,EAAE,YAAY,EAAE,GAAG,aAAa,CAAC;IACnD,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9E,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACvE;;;;;OAKG;IACH,oBAAoB,CAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrC,CAAC;yBAGc,QAAQ,KAAK;oBAEH,OAAO,CAAC,MAAM,CAAC;6BAIN,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;wBAIzC,YAAY,EAAE,GAAG,aAAa;kCAId,MAAM,GAAG,MAAM,WAAW,MAAM;8BAIpC,MAAM,WAAW,YAAY;;;;;8BAKtD,MAAM,QACL,oBAAoB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;AAzBvC,wBA6BE;AAEF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,MAAM,GAAG,YAAY,GAAG;IAClC,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG;IACxC,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACjC;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAcpD;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAsB5E;AAED,wBAAgB,UAAU,CAAC,GAAG,IAAI,EAAE,YAAY,EAAE,GAAG,aAAa,CAIjE;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,GAAG,MAAM,EAGxB,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,EACxC,MAAM,GAAE,MAAW,mBAsBpB;AAED,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY;;;;GAc5E;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAGlC"}