@schemavaults/jwt 0.6.16 → 0.6.21

package/dist/JwksAccessProofToken/createJwksAccessProofToken.d.ts

@@ -0,0 +1,7 @@
+import { type ApiServerId } from "@schemavaults/app-definitions";
+export interface ICreateJwksAccessProofToken {
+    api_server_id: ApiServerId;
+    private_key: CryptoKey;
+}
+export declare function createJwksAccessProofToken({ api_server_id, private_key, }: ICreateJwksAccessProofToken): Promise<string>;
+export default createJwksAccessProofToken;

package/dist/JwksAccessProofToken/createJwksAccessProofToken.js

@@ -0,0 +1,25 @@
+import { sign_verify_alg } from "../jwt";
+import { apiServerIdSchema, SCHEMAVAULTS_AUTH_APP_DEFINITION, SCHEMAVAULTS_AUTH_SERVER, } from "@schemavaults/app-definitions";
+import { SignJWT } from "jose";
+export async function createJwksAccessProofToken({ api_server_id, private_key, }) {
+    if (!apiServerIdSchema.safeParse(api_server_id)) {
+        throw new TypeError("Invalid API server ID!");
+    }
+    if (api_server_id === SCHEMAVAULTS_AUTH_SERVER.api_server_id) {
+        throw new Error(`'${SCHEMAVAULTS_AUTH_SERVER.api_server_id}' does not use JWKS access proof tokens`);
+    }
+    const token_builder = new SignJWT({
+        api_server_id,
+    })
+        .setSubject(api_server_id)
+        .setIssuer(api_server_id)
+        .setAudience(SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id)
+        .setNotBefore(new Date(Date.now() - 1))
+        .setExpirationTime("2 min")
+        .setProtectedHeader({
+        alg: sign_verify_alg,
+    });
+    return await token_builder.sign(private_key);
+}
+export default createJwksAccessProofToken;
+//# sourceMappingURL=createJwksAccessProofToken.js.map

package/dist/JwksAccessProofToken/createJwksAccessProofToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createJwksAccessProofToken.js","sourceRoot":"","sources":["../../src/JwksAccessProofToken/createJwksAccessProofToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAEL,iBAAiB,EACjB,gCAAgC,EAChC,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAO/B,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAC/C,aAAa,EACb,WAAW,GACiB;IAC5B,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,aAAa,KAAK,wBAAwB,CAAC,aAAa,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,IAAI,wBAAwB,CAAC,aAAa,yCAAyC,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC;QAChC,aAAa;KACd,CAAC;SACC,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,aAAa,CAAC;SACxB,WAAW,CAAC,gCAAgC,CAAC,MAAM,CAAC;SACpD,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;SACtC,iBAAiB,CAAC,OAAO,CAAC;SAC1B,kBAAkB,CAAC;QAClB,GAAG,EAAE,eAAe;KACrB,CAAC,CAAC;IAEL,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,eAAe,0BAA0B,CAAC"}

package/dist/JwksAccessProofToken/index.d.ts

@@ -0,0 +1,2 @@
+export { verifyJwksAccessProofToken } from "./verifyJwksAccessProofToken";
+export { createJwksAccessProofToken } from "./createJwksAccessProofToken";

package/dist/JwksAccessProofToken/index.js

@@ -0,0 +1,3 @@
+export { verifyJwksAccessProofToken } from "./verifyJwksAccessProofToken";
+export { createJwksAccessProofToken } from "./createJwksAccessProofToken";
+//# sourceMappingURL=index.js.map

package/dist/JwksAccessProofToken/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/JwksAccessProofToken/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/JwksAccessProofToken/verifyJwksAccessProofToken.d.ts

@@ -0,0 +1,8 @@
+import { type ApiServerId } from "@schemavaults/app-definitions";
+export interface IVerifyJwksAccessProofToken {
+    token: string;
+    api_server_id: ApiServerId;
+    public_key: CryptoKey;
+}
+export declare function verifyJwksAccessProofToken({ token, api_server_id, public_key, }: IVerifyJwksAccessProofToken): Promise<boolean>;
+export default verifyJwksAccessProofToken;

package/dist/JwksAccessProofToken/verifyJwksAccessProofToken.js

@@ -0,0 +1,33 @@
+import { apiServerIdSchema, SCHEMAVAULTS_AUTH_APP_DEFINITION, SCHEMAVAULTS_AUTH_SERVER, } from "@schemavaults/app-definitions";
+import { jwtVerify } from "jose";
+import signVerifyAlg, { sign_verify_alg } from "../jwt/sign_verify_alg";
+export async function verifyJwksAccessProofToken({ token, api_server_id, public_key, }) {
+    if (typeof token !== "string") {
+        throw new TypeError("Expected token to verify to be a string!");
+    }
+    if (!apiServerIdSchema.safeParse(api_server_id)) {
+        throw new TypeError("Invalid API server ID!");
+    }
+    if (api_server_id === SCHEMAVAULTS_AUTH_SERVER.api_server_id) {
+        throw new Error(`'${SCHEMAVAULTS_AUTH_SERVER.api_server_id}' does not use JWKS access proof tokens`);
+    }
+    const payload = await jwtVerify(token, public_key, {
+        audience: SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id,
+        issuer: api_server_id,
+        subject: api_server_id,
+        algorithms: [signVerifyAlg],
+    });
+    if (payload.payload.aud !== SCHEMAVAULTS_AUTH_APP_DEFINITION.app_id) {
+        return false;
+    }
+    if (payload.payload.sub !== api_server_id ||
+        payload.payload.iss !== api_server_id) {
+        return false;
+    }
+    if (payload.protectedHeader.alg !== sign_verify_alg) {
+        return false;
+    }
+    return true;
+}
+export default verifyJwksAccessProofToken;
+//# sourceMappingURL=verifyJwksAccessProofToken.js.map

package/dist/JwksAccessProofToken/verifyJwksAccessProofToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyJwksAccessProofToken.js","sourceRoot":"","sources":["../../src/JwksAccessProofToken/verifyJwksAccessProofToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EACjB,gCAAgC,EAChC,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,aAAa,EAAE,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAQvE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAC/C,KAAK,EACL,aAAa,EACb,UAAU,GACkB;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,aAAa,KAAK,wBAAwB,CAAC,aAAa,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,IAAI,wBAAwB,CAAC,aAAa,yCAAyC,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE;QACjD,QAAQ,EAAE,gCAAgC,CAAC,MAAM;QACjD,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,CAAC,aAAa,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,gCAAgC,CAAC,MAAM,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IACE,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,aAAa;QACrC,OAAO,CAAC,OAAO,CAAC,GAAG,KAAK,aAAa,EACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,eAAe,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,eAAe,0BAA0B,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,3 @@
-export * from './jwt';
-export type * from './jwt';
+export * from "./jwt";
+export type * from "./jwt";
+export { createJwksAccessProofToken, verifyJwksAccessProofToken, } from "./JwksAccessProofToken";

package/dist/index.js

@@ -1,3 +1,4 @@
 // @schemavaults/jwt - index.ts
-export * from './jwt';
+export * from "./jwt";
+export { createJwksAccessProofToken, verifyJwksAccessProofToken, } from "./JwksAccessProofToken";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,cAAc,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,cAAc,OAAO,CAAC;AAGtB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC"}

package/dist/jwt/index.d.ts

@@ -2,12 +2,12 @@ export { decodeJWT } from "./decode";
 export { getExpiryTime, getExpiryDurationString } from "./expiry";
 export { JWT_Factory } from "./jwt-factory";
 export type { CustomJWTPayload } from "./payload_data";
-export { JWT_Keys, generateNewJwtKeySet, generateJwtSigningKeyPair, generateJwtContentEncryptionKeyPair, to_public_jwks, importAsymmetricJWK, jsonSerializedJwtKeySchema, PEMFormat, } from "./jwt_keys";
+export { JWT_Keys, generateNewJwtKeySet, generateJwtSigningKeyPair, generateJwtContentEncryptionKeyPair, to_public_jwks, importAsymmetricJWK, jsonSerializedJwtKeySchema, PEMFormat, ContentEncryptionKeyPairFactory, SigningKeyPairFactory, } from "./jwt_keys";
 export type * from "./jwt_keys";
 export { getKeysetIdFromToken } from "./get_keyset_id_from_token";
 export { default as getAudienceFromToken } from "./get_audience_from_token";
 export { refreshTokenExpiry, accessTokenExpiry } from "./expiry";
-export { jwtVerify, importSPKI, SignJWT } from "jose";
+export { jwtVerify, importSPKI, SignJWT, importPKCS8 } from "jose";
 export type { JWTPayload, JWTVerifyResult } from "jose";
 export { sign_verify_alg } from "./sign_verify_alg";
 export { encrypt_decrypt_alg } from "./encrypt_decrypt_alg";

package/dist/jwt/index.js

@@ -2,12 +2,12 @@
 export { decodeJWT } from "./decode";
 export { getExpiryTime, getExpiryDurationString } from "./expiry";
 export { JWT_Factory } from "./jwt-factory";
-export { JWT_Keys, generateNewJwtKeySet, generateJwtSigningKeyPair, generateJwtContentEncryptionKeyPair, to_public_jwks, importAsymmetricJWK, jsonSerializedJwtKeySchema, PEMFormat, } from "./jwt_keys";
+export { JWT_Keys, generateNewJwtKeySet, generateJwtSigningKeyPair, generateJwtContentEncryptionKeyPair, to_public_jwks, importAsymmetricJWK, jsonSerializedJwtKeySchema, PEMFormat, ContentEncryptionKeyPairFactory, SigningKeyPairFactory, } from "./jwt_keys";
 export { getKeysetIdFromToken } from "./get_keyset_id_from_token";
 export { default as getAudienceFromToken } from "./get_audience_from_token";
 export { refreshTokenExpiry, accessTokenExpiry } from "./expiry";
 // Re-export jose functions for JWKS access key verification
-export { jwtVerify, importSPKI, SignJWT } from "jose";
+export { jwtVerify, importSPKI, SignJWT, importPKCS8 } from "jose";
 // Algorithms used
 export { sign_verify_alg } from "./sign_verify_alg";
 export { encrypt_decrypt_alg } from "./encrypt_decrypt_alg";

package/dist/jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jwt/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAI5C,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,yBAAyB,EACzB,mCAAmC,EACnC,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAC1B,SAAS,GACV,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEjE,4DAA4D;AAC5D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAGtD,kBAAkB;AAClB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jwt/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAI5C,OAAO,EACL,QAAQ,EACR,oBAAoB,EACpB,yBAAyB,EACzB,mCAAmC,EACnC,cAAc,EACd,mBAAmB,EACnB,0BAA0B,EAC1B,SAAS,EACT,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,OAAO,IAAI,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEjE,4DAA4D;AAC5D,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAGnE,kBAAkB;AAClB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/jwt/jwt_keys/AbstractBaseKeyPairFactory.js

@@ -1,5 +1,4 @@
-import { base64url } from "jose";
-import { PEMFormat } from "./pem-format";
+import PEMFormat from "./pem-format";
 export class AbstractBaseKeyPairFactory {
     debug;
     constructor(options = {}) {
@@ -14,8 +13,8 @@ export class AbstractBaseKeyPairFactory {
                 return [privateKey, publicKey];
             case "base64url":
                 return [
-                    base64url.encode(privateKey),
-                    base64url.encode(publicKey),
+                    PEMFormat.parsePem(privateKey, "PRIVATE").toBase64Url(),
+                    PEMFormat.parsePem(publicKey, "PUBLIC").toBase64Url(),
                 ];
             default:
                 throw new Error("Received invalid 'export_method' to generate key pair with!");

package/dist/jwt/jwt_keys/AbstractBaseKeyPairFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"AbstractBaseKeyPairFactory.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/AbstractBaseKeyPairFactory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAOzC,MAAM,OAAgB,0BAA0B;IAC3B,KAAK,CAAU;IAElC,YAAmB,UAAqC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,CAAC;IAES,MAAM,CAAC,WAAW,CAAC,GAAgB,EAAE,QAA8B;QAC3E,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAES,MAAM,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,SAAS,CAAmD,EAAE,aAAkC;QAC1I,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,CAAC,UAAU,EAAE,SAAS,CAG5B,CAAC;YACJ,KAAK,WAAW;gBACd,OAAO;oBACL,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;oBAC5B,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;iBACiB,CAAC;YACjD;gBACE,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;QACN,CAAC;IACH,CAAC;CAGF;AAED,eAAe,0BAA0B,CAAC"}
+{"version":3,"file":"AbstractBaseKeyPairFactory.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/AbstractBaseKeyPairFactory.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,cAAc,CAAC;AAMrC,MAAM,OAAgB,0BAA0B;IAC3B,KAAK,CAAU;IAElC,YAAmB,UAAqC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,CAAC;IAES,MAAM,CAAC,WAAW,CAC1B,GAAgB,EAChB,QAA8B;QAE9B,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAES,MAAM,CAAC,aAAa,CAC5B,CAAC,UAAU,EAAE,SAAS,CAAmD,EACzE,aAAkC;QAElC,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,KAAK;gBACR,OAAO,CAAC,UAAU,EAAE,SAAS,CAG5B,CAAC;YACJ,KAAK,WAAW;gBACd,OAAO;oBACL,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,WAAW,EAAE;oBACvD,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE;iBACT,CAAC;YACjD;gBACE,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;QACN,CAAC;IACH,CAAC;CAKF;AAED,eAAe,0BAA0B,CAAC"}

package/dist/jwt/jwt_keys/index.d.ts

@@ -1,13 +1,12 @@
 export { JWT_Keys, JWT_Keys as default } from "./jwt_keys";
-export type { I_JWT_Keys } from './I_JWT_Keys';
-export { jsonSerializedJwtKeySchema } from './JsonSerializedJwtKey';
-export type { JsonSerializedJwtKey } from './JsonSerializedJwtKey';
-export { ContentEncryptionKeyPairFactory } from './ContentEncryptionKeyPairFactory';
+export type { I_JWT_Keys } from "./I_JWT_Keys";
+export { jsonSerializedJwtKeySchema } from "./JsonSerializedJwtKey";
+export type { JsonSerializedJwtKey } from "./JsonSerializedJwtKey";
+export { ContentEncryptionKeyPairFactory } from "./ContentEncryptionKeyPairFactory";
 export { SigningKeyPairFactory } from "./SigningKeyPairFactory";
-export { generateNewJwtKeySet, generateJwtContentEncryptionKeyPair, generateJwtSigningKeyPair } from './generate_new_jwt_keyset';
-import { to_public_jwks } from './to_public_jwks';
-export { to_public_jwks };
-export type { JWK } from './JWK';
-export type { JWKS } from './JWKS';
+export { generateNewJwtKeySet, generateJwtContentEncryptionKeyPair, generateJwtSigningKeyPair, } from "./generate_new_jwt_keyset";
+export { to_public_jwks } from "./to_public_jwks";
+export type { JWK } from "./JWK";
+export type { JWKS } from "./JWKS";
 export { importAsymmetricJWK } from "./importAsymmetricJWK";
-export { PEMFormat } from './pem-format';
+export { PEMFormat } from "./pem-format";

package/dist/jwt/jwt_keys/index.js

@@ -1,12 +1,11 @@
 // jwt_keys/index.ts
 // JWT_Keys contains a set of keys used for JWT encryption and signing
 export { JWT_Keys, JWT_Keys as default } from "./jwt_keys";
-export { jsonSerializedJwtKeySchema } from './JsonSerializedJwtKey';
-export { ContentEncryptionKeyPairFactory } from './ContentEncryptionKeyPairFactory';
+export { jsonSerializedJwtKeySchema } from "./JsonSerializedJwtKey";
+export { ContentEncryptionKeyPairFactory } from "./ContentEncryptionKeyPairFactory";
 export { SigningKeyPairFactory } from "./SigningKeyPairFactory";
-export { generateNewJwtKeySet, generateJwtContentEncryptionKeyPair, generateJwtSigningKeyPair } from './generate_new_jwt_keyset';
-import { to_public_jwks } from './to_public_jwks';
-export { to_public_jwks };
+export { generateNewJwtKeySet, generateJwtContentEncryptionKeyPair, generateJwtSigningKeyPair, } from "./generate_new_jwt_keyset";
+export { to_public_jwks } from "./to_public_jwks";
 export { importAsymmetricJWK } from "./importAsymmetricJWK";
-export { PEMFormat } from './pem-format';
+export { PEMFormat } from "./pem-format";
 //# sourceMappingURL=index.js.map

package/dist/jwt/jwt_keys/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/index.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,sEAAsE;AAEtE,OAAO,EAAE,QAAQ,EAAE,QAAQ,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EACL,oBAAoB,EACpB,mCAAmC,EACnC,yBAAyB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,CAAC;AAI1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/index.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,sEAAsE;AAEtE,OAAO,EAAE,QAAQ,EAAE,QAAQ,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAG3D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,+BAA+B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EACL,oBAAoB,EACpB,mCAAmC,EACnC,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIlD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC"}

package/dist/jwt/jwt_keys/pem-format.d.ts

@@ -6,6 +6,8 @@
  * @see PEMFormat.isPemFormat()
  */
 export declare class PEMFormat {
+    private readonly _pem;
+    private readonly _key_type;
     private constructor();
     private static arrayBufferToBase64;
     private static addNewLines;
@@ -13,5 +15,10 @@ export declare class PEMFormat {
     private static getPemSuffix;
     static toPemFormat(key: ArrayBuffer, key_type: "PUBLIC" | "PRIVATE"): string;
     static isPemFormat(key: string, key_type: "PUBLIC" | "PRIVATE"): boolean;
+    static parsePem(pem: string, key_type: "PUBLIC" | "PRIVATE"): PEMFormat;
+    get value(): string;
+    get key_type(): "PUBLIC" | "PRIVATE";
+    toBase64Url(): string;
+    static fromBase64Url(base64url_encoded_pem_key: string, key_type: "PUBLIC" | "PRIVATE"): PEMFormat;
 }
 export default PEMFormat;

package/dist/jwt/jwt_keys/pem-format.js

@@ -1,3 +1,5 @@
+import isValidBase64UrlEncoding from "../../utils/isValidBase64UrlEncoding";
+import { base64url } from "jose";
 /**
  * @name PEMFormat
  * @class
@@ -6,7 +8,21 @@
  * @see PEMFormat.isPemFormat()
  */
 export class PEMFormat {
-    constructor() { }
+    _pem;
+    _key_type;
+    constructor(pem, key_type) {
+        if (typeof pem !== "string") {
+            throw new TypeError("Expected 'pem' key to be a string!");
+        }
+        if (key_type !== "PUBLIC" && key_type !== "PRIVATE") {
+            throw new TypeError("Expected 'key_type' to be 'PUBLIC' or 'PRIVATE'");
+        }
+        if (!PEMFormat.isPemFormat(pem, key_type)) {
+            throw new TypeError("Key does not appear to be in valid PEM format!");
+        }
+        this._pem = pem;
+        this._key_type = key_type;
+    }
     static arrayBufferToBase64(arrayBuffer) {
         let byteArray = new Uint8Array(arrayBuffer);
         let byteString = "";
@@ -64,6 +80,37 @@ export class PEMFormat {
         }
         return true;
     }
+    static parsePem(pem, key_type) {
+        if (key_type !== "PUBLIC" && key_type !== "PRIVATE") {
+            throw new TypeError("Expected 'key_type' to be 'PUBLIC' or 'PRIVATE'");
+        }
+        return new PEMFormat(pem, key_type);
+    }
+    get value() {
+        return this._pem;
+    }
+    get key_type() {
+        return this._key_type;
+    }
+    toBase64Url() {
+        return base64url.encode(this._pem);
+    }
+    static fromBase64Url(base64url_encoded_pem_key, key_type) {
+        if (typeof base64url_encoded_pem_key !== "string") {
+            throw new TypeError("Expected 'base64url_encoded_pem_key' key to be a string!");
+        }
+        else if (!isValidBase64UrlEncoding(base64url_encoded_pem_key)) {
+            throw new TypeError("'base64url_encoded_pem_key' does not appear to be base64url-encoded!");
+        }
+        if (key_type !== "PUBLIC" && key_type !== "PRIVATE") {
+            throw new TypeError("Expected 'key_type' to be 'PUBLIC' or 'PRIVATE'");
+        }
+        const decoded = base64url.decode(base64url_encoded_pem_key).toString();
+        if (typeof decoded !== "string") {
+            throw new TypeError("Expected 'decoded' key to be a string!");
+        }
+        return new PEMFormat(decoded, key_type);
+    }
 }
 export default PEMFormat;
 //# sourceMappingURL=pem-format.js.map

package/dist/jwt/jwt_keys/pem-format.js.map

@@ -1 +1 @@
-{"version":3,"file":"pem-format.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/pem-format.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IACpB,gBAAuB,CAAC;IAEhB,MAAM,CAAC,mBAAmB,CAAC,WAAwB;QACzD,IAAI,SAAS,GAAe,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,UAAU,GAAW,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,UAAU,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,SAAiB;QAC1C,IAAI,WAAW,GAAW,EAAE,CAAC;QAC7B,IAAI,eAAe,GAAW,SAAS,CAAC;QACxC,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,WAAW,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;YACvD,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,QAA8B;QACxD,OAAO,cAAc,QAAQ,WAAqC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,QAA8B;QACxD,OAAO,YAAY,QAAQ,WAAqC,CAAC;IACnE,CAAC;IAEM,MAAM,CAAC,WAAW,CAAC,GAAgB,EAAE,QAA8B;QACxE,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,cAAc,GAAW,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,aAAa,GAAW,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAEpE,MAAM,GAAG,GACP,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI;YACvC,aAAa;YACb,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAExC,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,WAAW,CACvB,GAAW,EACX,QAA8B;QAE9B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,MAAM,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,uBAAuB,GAAG,GAAG;aAChC,KAAK,CAAC,IAAI,CAAC;aACX,KAAK,CAAC,CAAC,IAAI,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,eAAe,SAAS,CAAC"}
+{"version":3,"file":"pem-format.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/pem-format.ts"],"names":[],"mappings":"AAAA,OAAO,wBAAwB,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IACH,IAAI,CAAS;IACb,SAAS,CAAuB;IAEjD,YAAoB,GAAW,EAAE,QAA8B;QAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAEO,MAAM,CAAC,mBAAmB,CAAC,WAAwB;QACzD,IAAI,SAAS,GAAe,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,UAAU,GAAW,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,UAAU,IAAI,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAEO,MAAM,CAAC,WAAW,CAAC,SAAiB;QAC1C,IAAI,WAAW,GAAW,EAAE,CAAC;QAC7B,IAAI,eAAe,GAAW,SAAS,CAAC;QACxC,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,WAAW,IAAI,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;YACvD,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,QAA8B;QACxD,OAAO,cAAc,QAAQ,WAAqC,CAAC;IACrE,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,QAA8B;QACxD,OAAO,YAAY,QAAQ,WAAqC,CAAC;IACnE,CAAC;IAEM,MAAM,CAAC,WAAW,CAAC,GAAgB,EAAE,QAA8B;QACxE,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,cAAc,GAAW,SAAS,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,aAAa,GAAW,SAAS,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QAEpE,MAAM,GAAG,GACP,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI;YACvC,aAAa;YACb,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAExC,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,MAAM,CAAC,WAAW,CACvB,GAAW,EACX,QAA8B;QAE9B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,MAAM,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,uBAAuB,GAAG,GAAG;aAChC,KAAK,CAAC,IAAI,CAAC;aACX,KAAK,CAAC,CAAC,IAAI,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM,CAAC,QAAQ,CACpB,GAAW,EACX,QAA8B;QAE9B,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEM,WAAW;QAChB,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAEM,MAAM,CAAC,aAAa,CACzB,yBAAiC,EACjC,QAA8B;QAE9B,IAAI,OAAO,yBAAyB,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,SAAS,CACjB,0DAA0D,CAC3D,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,wBAAwB,CAAC,yBAAyB,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,SAAS,CACjB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,eAAe,SAAS,CAAC"}

package/dist/jwt/jwt_keys/to_public_jwks.js

@@ -31,8 +31,12 @@ export async function to_public_jwks(active_keysets) {
             continue;
         }
     }
+    const keys = output_jwks;
+    if (keys.length === 0) {
+        console.warn("[to_public_jwks] Output 'keys' array is empty!");
+    }
     return {
-        keys: output_jwks,
+        keys,
     };
 }
 export default to_public_jwks;

package/dist/jwt/jwt_keys/to_public_jwks.js.map

@@ -1 +1 @@
-{"version":3,"file":"to_public_jwks.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/to_public_jwks.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAY,MAAM,MAAM,CAAC;AAC3C,OAAO,kBAAkB,MAAM,sBAAsB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,cAAkD;IAElD,MAAM,OAAO,GAA0B,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAClE,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAErB,MAAM,WAAW,GAAU,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAW,MAAM,CAAC,SAAS,CAAC;QAE3C,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9D,8CAA8C;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GACf,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAe,GAAG,CAAC,QAAQ,CAAC;YAC1C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAC7D,SAAS,CAAC,yDAAyD;YACrE,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,0CAA0C,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,kBAAkB,GAAc,MAAM,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC;YAEtE,MAAM,GAAG,GAAW,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAE5C,MAAM,GAAG,GAAQ,MAAM,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC;gBACf,GAAG,GAAG;gBACN,GAAG,EAAE,GAAG,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE;gBACnC,GAAG;aACJ,CAAC,CAAC;YACH,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;KAClB,CAAC;AACJ,CAAC;AAED,eAAe,cAAc,CAAC"}
+{"version":3,"file":"to_public_jwks.js","sourceRoot":"","sources":["../../../src/jwt/jwt_keys/to_public_jwks.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAY,MAAM,MAAM,CAAC;AAC3C,OAAO,kBAAkB,MAAM,sBAAsB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,cAAkD;IAElD,MAAM,OAAO,GAA0B,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAClE,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IAErB,MAAM,WAAW,GAAU,EAAE,CAAC;IAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAW,MAAM,CAAC,SAAS,CAAC;QAE3C,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9D,8CAA8C;YAC9C,SAAS;QACX,CAAC;QAED,MAAM,WAAW,GACf,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAe,GAAG,CAAC,QAAQ,CAAC;YAC1C,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAC7D,SAAS,CAAC,yDAAyD;YACrE,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,WAAW,SAAS,0CAA0C,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,kBAAkB,GAAc,MAAM,MAAM,CAAC,GAAG,QAAQ,MAAM,CAAC,CAAC;YAEtE,MAAM,GAAG,GAAW,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAE5C,MAAM,GAAG,GAAQ,MAAM,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACrD,WAAW,CAAC,IAAI,CAAC;gBACf,GAAG,GAAG;gBACN,GAAG,EAAE,GAAG,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE;gBACnC,GAAG;aACJ,CAAC,CAAC;YACH,SAAS;QACX,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAmB,WAAW,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,IAAI;KACL,CAAC;AACJ,CAAC;AAED,eAAe,cAAc,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@schemavaults/jwt",
   "description": "Utility functions for authentication and authorization for use from the auth server or a resource server",
-  "version": "0.6.16",
+  "version": "0.6.21",
   "license": "UNLICENSED",
   "private": false,
   "repository": {
@@ -16,8 +16,8 @@
   "dependencies": {
     "zod": "3.23.8",
     "jose": "6.1.3",
-    "@schemavaults/auth-common": "0.7.29",
-    "@schemavaults/app-definitions": "0.6.11"
+    "@schemavaults/auth-common": "0.8.1",
+    "@schemavaults/app-definitions": "0.6.12"
   },
   "scripts": {
     "build": "tsc --project tsconfig.json && tsc-alias --project tsconfig.json",
@@ -26,7 +26,8 @@
     "cleanup:delete-tests-dir": "rm -rf ./dist/tests",
     "cleanup": "bun run cleanup:delete-tests-dir && bun run cleanup:compiled-tests-output",
     "postbuild": "bun run cleanup",
-    "lint": "eslint src --ext .ts,.tsx"
+    "lint": "eslint src --ext .ts,.tsx",
+    "typecheck": "tsc --project tsconfig.json --noEmit"
   },
   "devDependencies": {
     "typescript": "5.9.3",