@sd-jwt/core 0.2.1 → 2.0.2-next.26

package/build/base64url.d.ts

@@ -1,28 +0,0 @@
-/// <reference types="node" />
-import { Buffer } from 'buffer';
-export declare class Base64url {
-    /**
-     *
-     * Encode into base64url string
-     *
-     */
-    static encode(input: string | Uint8Array | Buffer): string;
-    /**
-     *
-     * Encode from JSON into a base64url string
-     *
-     */
-    static encodeFromJson(input: Record<string, unknown> | Array<unknown>): string;
-    /**
-     *
-     * Decode from base64url into JSON
-     *
-     */
-    static decodeToJson<T extends Record<string, unknown> | Array<unknown> = Record<string, unknown>>(input: string): T;
-    /**
-     *
-     * Decode from base64url into a byte array
-     *
-     */
-    static decode(input: string): Uint8Array;
-}

package/build/base64url.js

@@ -1,40 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.Base64url = void 0;
-const buffer_1 = require("buffer");
-class Base64url {
-    /**
-     *
-     * Encode into base64url string
-     *
-     */
-    static encode(input) {
-        return buffer_1.Buffer.from(input).toString('base64url');
-    }
-    /**
-     *
-     * Encode from JSON into a base64url string
-     *
-     */
-    static encodeFromJson(input) {
-        return buffer_1.Buffer.from(JSON.stringify(input)).toString('base64url');
-    }
-    /**
-     *
-     * Decode from base64url into JSON
-     *
-     */
-    static decodeToJson(input) {
-        return JSON.parse(buffer_1.Buffer.from(input, 'base64url').toString());
-    }
-    /**
-     *
-     * Decode from base64url into a byte array
-     *
-     */
-    static decode(input) {
-        return Uint8Array.from(buffer_1.Buffer.from(input, 'base64url'));
-    }
-}
-exports.Base64url = Base64url;
-//# sourceMappingURL=base64url.js.map

package/build/base64url.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base64url.js","sourceRoot":"","sources":["../src/base64url.ts"],"names":[],"mappings":";;;AAAA,mCAA+B;AAE/B,MAAa,SAAS;IAClB;;;;OAIG;IACI,MAAM,CAAC,MAAM,CAAC,KAAmC;QACpD,OAAO,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACnD,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,cAAc,CACxB,KAA+C;QAE/C,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IACnE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,YAAY,CAKxB,KAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAM,CAAA;IACtE,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,MAAM,CAAC,KAAa;QAC9B,OAAO,UAAU,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAA;IAC3D,CAAC;CACJ;AA3CD,8BA2CC"}

package/build/hasherAlgorithm.d.ts

@@ -1,70 +0,0 @@
-export declare enum HasherAlgorithm {
-    /**
-     * Sha-256: 256 bits. [RFC6920] (current)
-     */
-    Sha256 = "sha-256",
-    /**
-     * Sha-256-128: 128 bits. [RFC6920] (current)
-     */
-    Sha256_128 = "sha-256-128",
-    /**
-     * Sha-256-120: 120 bits. [RFC6920] (current)
-     */
-    Sha256_120 = "sha-256-120",
-    /**
-     * Sha-256-96: 96 bits. [RFC6920] (current)
-     */
-    Sha256_96 = "sha-256-96",
-    /**
-     * Sha-256-64: 64 bits. [RFC6920] (current)
-     */
-    Sha256_64 = "sha-256-64",
-    /**
-     * Sha-256-32: 32 bits. [RFC6920] (current)
-     */
-    Sha256_32 = "sha-256-32",
-    /**
-     * Sha-384: 384 bits. [FIPS 180-4] (current)
-     */
-    Sha384 = "sha-384",
-    /**
-     * Sha-512: 512 bits. [FIPS 180-4] (current)
-     */
-    Sha512 = "sha-512",
-    /**
-     * Sha3-224: 224 bits. [FIPS 202] (current)
-     */
-    Sha3_224 = "sha3-224",
-    /**
-     * Sha3-256: 256 bits. [FIPS 202] (current)
-     */
-    Sha3_256 = "sha3-256",
-    /**
-     * Sha3-384: 384 bits. [FIPS 202] (current)
-     */
-    Sha3_384 = "sha3-384",
-    /**
-     * Sha3-512: 512 bits. [FIPS 202] (current)
-     */
-    Sha3_512 = "sha3-512",
-    /**
-     * Blake2s-256: 256 bits. [RFC7693] (current)
-     */
-    Blake2s_256 = "blake2s-256",
-    /**
-     * Blake2b-256: 256 bits. [RFC7693] (current)
-     */
-    Blake2b_256 = "blake2b-256",
-    /**
-     * Blake2b-512: 512 bits. [RFC7693] (current)
-     */
-    Blake2b_512 = "blake2b-512",
-    /**
-     * K12-256: 256 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
-     */
-    K12_256 = "k12-256",
-    /**
-     * K12-512: 512 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
-     */
-    K12_512 = "k12-512"
-}

package/build/hasherAlgorithm.js

@@ -1,75 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HasherAlgorithm = void 0;
-var HasherAlgorithm;
-(function (HasherAlgorithm) {
-    /**
-     * Sha-256: 256 bits. [RFC6920] (current)
-     */
-    HasherAlgorithm["Sha256"] = "sha-256";
-    /**
-     * Sha-256-128: 128 bits. [RFC6920] (current)
-     */
-    HasherAlgorithm["Sha256_128"] = "sha-256-128";
-    /**
-     * Sha-256-120: 120 bits. [RFC6920] (current)
-     */
-    HasherAlgorithm["Sha256_120"] = "sha-256-120";
-    /**
-     * Sha-256-96: 96 bits. [RFC6920] (current)
-     */
-    HasherAlgorithm["Sha256_96"] = "sha-256-96";
-    /**
-     * Sha-256-64: 64 bits. [RFC6920] (current)
-     */
-    HasherAlgorithm["Sha256_64"] = "sha-256-64";
-    /**
-     * Sha-256-32: 32 bits. [RFC6920] (current)
-     */
-    HasherAlgorithm["Sha256_32"] = "sha-256-32";
-    /**
-     * Sha-384: 384 bits. [FIPS 180-4] (current)
-     */
-    HasherAlgorithm["Sha384"] = "sha-384";
-    /**
-     * Sha-512: 512 bits. [FIPS 180-4] (current)
-     */
-    HasherAlgorithm["Sha512"] = "sha-512";
-    /**
-     * Sha3-224: 224 bits. [FIPS 202] (current)
-     */
-    HasherAlgorithm["Sha3_224"] = "sha3-224";
-    /**
-     * Sha3-256: 256 bits. [FIPS 202] (current)
-     */
-    HasherAlgorithm["Sha3_256"] = "sha3-256";
-    /**
-     * Sha3-384: 384 bits. [FIPS 202] (current)
-     */
-    HasherAlgorithm["Sha3_384"] = "sha3-384";
-    /**
-     * Sha3-512: 512 bits. [FIPS 202] (current)
-     */
-    HasherAlgorithm["Sha3_512"] = "sha3-512";
-    /**
-     * Blake2s-256: 256 bits. [RFC7693] (current)
-     */
-    HasherAlgorithm["Blake2s_256"] = "blake2s-256";
-    /**
-     * Blake2b-256: 256 bits. [RFC7693] (current)
-     */
-    HasherAlgorithm["Blake2b_256"] = "blake2b-256";
-    /**
-     * Blake2b-512: 512 bits. [RFC7693] (current)
-     */
-    HasherAlgorithm["Blake2b_512"] = "blake2b-512";
-    /**
-     * K12-256: 256 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
-     */
-    HasherAlgorithm["K12_256"] = "k12-256";
-    /**
-     * K12-512: 512 bits. [draft-irtf-cfrg-kangarootwelve-06] (current)
-     */
-    HasherAlgorithm["K12_512"] = "k12-512";
-})(HasherAlgorithm || (exports.HasherAlgorithm = HasherAlgorithm = {}));
-//# sourceMappingURL=hasherAlgorithm.js.map

package/build/hasherAlgorithm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hasherAlgorithm.js","sourceRoot":"","sources":["../src/hasherAlgorithm.ts"],"names":[],"mappings":";;;AAAA,IAAY,eAqEX;AArED,WAAY,eAAe;IACvB;;OAEG;IACH,qCAAkB,CAAA;IAClB;;OAEG;IACH,6CAA0B,CAAA;IAC1B;;OAEG;IACH,6CAA0B,CAAA;IAC1B;;OAEG;IACH,2CAAwB,CAAA;IACxB;;OAEG;IACH,2CAAwB,CAAA;IACxB;;OAEG;IACH,2CAAwB,CAAA;IACxB;;OAEG;IACH,qCAAkB,CAAA;IAClB;;OAEG;IACH,qCAAkB,CAAA;IAClB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,wCAAqB,CAAA;IACrB;;OAEG;IACH,8CAA2B,CAAA;IAC3B;;OAEG;IACH,8CAA2B,CAAA;IAC3B;;OAEG;IACH,8CAA2B,CAAA;IAC3B;;OAEG;IACH,sCAAmB,CAAA;IACnB;;OAEG;IACH,sCAAmB,CAAA;AACvB,CAAC,EArEW,eAAe,+BAAf,eAAe,QAqE1B"}

package/build/index.d.ts

@@ -1,13 +0,0 @@
-export type { SdJwtOptions, SdJwtAdditionalOptions, SdJwtVerificationResult } from './sdJwt';
-export type { KeyBindingHeader, KeyBindingPayload, KeyBindingOptions, KeyBindingAdditionalOptions, KeyBindingVerificationResult } from './keyBinding';
-export type { JwtOptions, JwtAdditionalOptions, JwtVerificationResult } from './jwt';
-export type { Signer, Verifier, VerifyOptions, SaltGenerator, DisclosureItem, DisclosureFrame } from './types';
-export type { SdJwtVcVerificationResult } from './sdJwtVc';
-export { SignatureAndEncryptionAlgorithm } from './signatureAndEncryptionAlgorithm';
-export { SdJwt, Disclosure, SdJwtError } from './sdJwt';
-export { KeyBinding } from './keyBinding';
-export { Jwt, JwtError } from './jwt';
-export { SdJwtVc, SdJwtVcError } from './sdJwtVc';
-export type { Hasher, AsyncHasher, HasherAndAlgorithm } from '@sd-jwt/types';
-export { HasherAlgorithm } from '@sd-jwt/types';
-export type { PresentationFrame } from '@sd-jwt/present';

package/build/index.js

@@ -1,20 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HasherAlgorithm = exports.SdJwtVcError = exports.SdJwtVc = exports.JwtError = exports.Jwt = exports.KeyBinding = exports.SdJwtError = exports.Disclosure = exports.SdJwt = exports.SignatureAndEncryptionAlgorithm = void 0;
-var signatureAndEncryptionAlgorithm_1 = require("./signatureAndEncryptionAlgorithm");
-Object.defineProperty(exports, "SignatureAndEncryptionAlgorithm", { enumerable: true, get: function () { return signatureAndEncryptionAlgorithm_1.SignatureAndEncryptionAlgorithm; } });
-var sdJwt_1 = require("./sdJwt");
-Object.defineProperty(exports, "SdJwt", { enumerable: true, get: function () { return sdJwt_1.SdJwt; } });
-Object.defineProperty(exports, "Disclosure", { enumerable: true, get: function () { return sdJwt_1.Disclosure; } });
-Object.defineProperty(exports, "SdJwtError", { enumerable: true, get: function () { return sdJwt_1.SdJwtError; } });
-var keyBinding_1 = require("./keyBinding");
-Object.defineProperty(exports, "KeyBinding", { enumerable: true, get: function () { return keyBinding_1.KeyBinding; } });
-var jwt_1 = require("./jwt");
-Object.defineProperty(exports, "Jwt", { enumerable: true, get: function () { return jwt_1.Jwt; } });
-Object.defineProperty(exports, "JwtError", { enumerable: true, get: function () { return jwt_1.JwtError; } });
-var sdJwtVc_1 = require("./sdJwtVc");
-Object.defineProperty(exports, "SdJwtVc", { enumerable: true, get: function () { return sdJwtVc_1.SdJwtVc; } });
-Object.defineProperty(exports, "SdJwtVcError", { enumerable: true, get: function () { return sdJwtVc_1.SdJwtVcError; } });
-var types_1 = require("@sd-jwt/types");
-Object.defineProperty(exports, "HasherAlgorithm", { enumerable: true, get: function () { return types_1.HasherAlgorithm; } });
-//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AA+BA,qFAAmF;AAA1E,kJAAA,+BAA+B,OAAA;AAExC,iCAAuD;AAA9C,8FAAA,KAAK,OAAA;AAAE,mGAAA,UAAU,OAAA;AAAE,mGAAA,UAAU,OAAA;AACtC,2CAAyC;AAAhC,wGAAA,UAAU,OAAA;AACnB,6BAAqC;AAA5B,0FAAA,GAAG,OAAA;AAAE,+FAAA,QAAQ,OAAA;AACtB,qCAAiD;AAAxC,kGAAA,OAAO,OAAA;AAAE,uGAAA,YAAY,OAAA;AAI9B,uCAA+C;AAAtC,wGAAA,eAAe,OAAA"}

package/build/jwt/compact.d.ts

@@ -1,6 +0,0 @@
-export type ExpandedJwt<H extends Record<string, unknown> = Record<string, unknown>, P extends Record<string, unknown> = Record<string, unknown>> = {
-    header: H;
-    payload: P;
-    signature: Uint8Array;
-};
-export declare const jwtFromCompact: <H extends Record<string, unknown> = Record<string, unknown>, P extends Record<string, unknown> = Record<string, unknown>>(compact: string) => ExpandedJwt<H, P>;

package/build/jwt/compact.js

@@ -1,27 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.jwtFromCompact = void 0;
-const base64url_1 = require("../base64url");
-const error_1 = require("./error");
-const jwtFromCompact = (compact) => {
-    if (compact.includes('~')) {
-        throw new error_1.JwtError('compact JWT includes `~` which is only allowed in an sd-jwt. Please use sdJwtFromCompact() instead.');
-    }
-    if ((compact.match(/\./g) || []).length !== 2) {
-        throw new error_1.JwtError('compact JWT must include two periods (.)');
-    }
-    const [compactHeader, compactPayload, encodedSignature] = compact.split('.');
-    if (!encodedSignature || encodedSignature.length === 0) {
-        throw new error_1.JwtError('A signature must be provided within the context of sd-jwt');
-    }
-    const header = base64url_1.Base64url.decodeToJson(compactHeader);
-    const payload = base64url_1.Base64url.decodeToJson(compactPayload);
-    const signature = base64url_1.Base64url.decode(encodedSignature);
-    return {
-        header,
-        payload,
-        signature
-    };
-};
-exports.jwtFromCompact = jwtFromCompact;
-//# sourceMappingURL=compact.js.map

package/build/jwt/compact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"compact.js","sourceRoot":"","sources":["../../src/jwt/compact.ts"],"names":[],"mappings":";;;AAAA,4CAAwC;AACxC,mCAAkC;AAW3B,MAAM,cAAc,GAAG,CAI1B,OAAe,EACE,EAAE;IACnB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAQ,CACd,qGAAqG,CACxG,CAAA;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,gBAAQ,CAAC,0CAA0C,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE5E,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,gBAAQ,CACd,2DAA2D,CAC9D,CAAA;IACL,CAAC;IAED,MAAM,MAAM,GAAG,qBAAS,CAAC,YAAY,CAAI,aAAa,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,qBAAS,CAAC,YAAY,CAAI,cAAc,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,qBAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEpD,OAAO;QACH,MAAM;QACN,OAAO;QACP,SAAS;KACZ,CAAA;AACL,CAAC,CAAA;AAjCY,QAAA,cAAc,kBAiC1B"}

package/build/jwt/error.d.ts

@@ -1,2 +0,0 @@
-export declare class JwtError extends Error {
-}

package/build/jwt/error.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.JwtError = void 0;
-class JwtError extends Error {
-}
-exports.JwtError = JwtError;
-//# sourceMappingURL=error.js.map

package/build/jwt/error.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"error.js","sourceRoot":"","sources":["../../src/jwt/error.ts"],"names":[],"mappings":";;;AAAA,MAAa,QAAS,SAAQ,KAAK;CAAG;AAAtC,4BAAsC"}

package/build/jwt/index.d.ts

@@ -1,2 +0,0 @@
-export * from './jwt';
-export * from './error';

package/build/jwt/index.js

@@ -1,19 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./jwt"), exports);
-__exportStar(require("./error"), exports);
-//# sourceMappingURL=index.js.map

package/build/jwt/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/jwt/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wCAAqB;AACrB,0CAAuB"}

package/build/jwt/jwt.d.ts

@@ -1,208 +0,0 @@
-import { MakePropertyRequired, Signer } from '../types';
-import { Verifier } from '../types';
-type ReturnJwtWithHeaderAndPayload<H extends Record<string, unknown>, P extends Record<string, unknown>, T extends Jwt<H, P>> = MakePropertyRequired<T, 'header' | 'payload'>;
-type ReturnJwtWithHeader<H extends Record<string, unknown>, P extends Record<string, unknown>, T extends Jwt<H, P>> = MakePropertyRequired<T, 'header'>;
-type ReturnJwtWithPayload<H extends Record<string, unknown>, P extends Record<string, unknown>, T extends Jwt<H, P>> = MakePropertyRequired<T, 'payload'>;
-type ReturnJwtWithSignature<H extends Record<string, unknown>, P extends Record<string, unknown>, T extends Jwt<H, P>> = MakePropertyRequired<T, 'signature'>;
-export type JwtOptions<H extends Record<string, unknown>, P extends Record<string, unknown>> = {
-    header?: H;
-    payload?: P;
-    signature?: Uint8Array;
-};
-export type JwtAdditionalOptions<Header extends Record<string, unknown> = Record<string, unknown>> = {
-    signer?: Signer<Header>;
-};
-export type JwtVerificationResult = {
-    isValid: boolean;
-    isSignatureValid: boolean;
-    isNotBeforeValid?: boolean;
-    isExpiryTimeValid?: boolean;
-    areRequiredClaimsIncluded?: boolean;
-};
-export declare class Jwt<Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>> {
-    /**
-     *
-     * non-compact structure for a header of a JWT.
-     *
-     * Defined in: {@link https://datatracker.ietf.org/doc/html/rfc7519#section-5 | RFC 7519}
-     *
-     */
-    header?: Header;
-    /**
-     *
-     * non-compact structure for a payload of a JWT.
-     *
-     * Defined in: {@link https://datatracker.ietf.org/doc/html/rfc7519#section-4 | RFC 7519}
-     *
-     */
-    payload?: Payload;
-    /**
-     *
-     * Signature over the BASE64URL(HEADER) || '.' || BASE64URL(PAYLOAD).
-     *
-     * Defined in: {@link https://datatracker.ietf.org/doc/html/rfc7515 | RFC 7515}
-     *
-     */
-    signature?: Uint8Array;
-    /**
-     * When the JWT was initialized from it's compact variant we store the compact version, so we can use it when needing the encoded version.
-     */
-    compact?: string;
-    /**
-     *
-     * Callback that will be used when creating a signature over the JWT.
-     *
-     */
-    signer?: Signer<Header>;
-    constructor(options?: JwtOptions<Header, Payload>, additionalOptions?: JwtAdditionalOptions);
-    /**
-     *
-     * Instantiate a JWT from a compact format.
-     *
-     * Two generics may be supplied for typing on the Header and Payload. These are not enforced.
-     *
-     * Defined in: {@link https://datatracker.ietf.org/doc/html/rfc7519#section-3 | RFC 7519 }
-     *
-     */
-    static fromCompact<Header extends Record<string, unknown> = Record<string, unknown>, Payload extends Record<string, unknown> = Record<string, unknown>>(compact: string): ReturnJwtWithHeaderAndPayload<Header, Payload, Jwt<Header, Payload>>;
-    /**
-     *
-     * Replaces the current Header a new one.
-     *
-     */
-    withHeader(header: Header): ReturnJwtWithHeader<Header, Payload, this>;
-    /**
-     *
-     * Add a new claim to the Header, overriding the old one if it already is on there.
-     *
-     */
-    addHeaderClaim(item: keyof Header | string, value: Header[typeof item] | unknown): ReturnJwtWithHeader<Header, Payload, this>;
-    /**
-     *
-     * Replaces the current Payload a new one.
-     *
-     */
-    withPayload(payload: Payload): ReturnJwtWithPayload<Header, Payload, this>;
-    /**
-     *
-     * Add a new claim to the Payload, overriding the old one if it already is on there.
-     *
-     */
-    addPayloadClaim(item: keyof Payload | string, value: Payload[typeof item] | unknown): ReturnJwtWithPayload<Header, Payload, this>;
-    /**
-     *
-     * Manually append a signature to the JWT. This signature is not validated.
-     *
-     * @note Only use this if the supplying a signing callback does not fit your use case.
-     *
-     */
-    withSignature(signature: Uint8Array): ReturnJwtWithSignature<Header, Payload, this>;
-    /**
-     *
-     * Add a signing callback to the JWT that will be used for creating the signature.
-     *
-     */
-    withSigner(signer: Signer): this;
-    /**
-     *
-     * Assert that there is a Header on the JWT.
-     *
-     * @throws when the Header is not defined
-     *
-     */
-    assertHeader(): void;
-    /**
-     *
-     * Assert that there is a Payload on the JWT.
-     *
-     * @throws when the Payload is not defined
-     *
-     */
-    assertPayload(): void;
-    /**
-     *
-     * Assert that there is a Signature on the JWT.
-     *
-     * @throws when the Signature is not defined
-     *
-     */
-    assertSignature(): void;
-    /**
-     *
-     * Assert that there is a Signing callback on the JWT.
-     *
-     * @throws when the Signer is not defined
-     *
-     */
-    assertSigner(): void;
-    /**
-     *
-     * Assert that there is a specific claim, possibly with value, in the Header.
-     *
-     */
-    assertClaimInHeader(claimKey: keyof Header | string, claimValue?: Header[typeof claimKey] | unknown): void;
-    /**
-     *
-     * Assert that there is a specific claim, possibly with value, in the Payload.
-     *
-     */
-    assertClaimInPayload(claimKey: keyof Payload | string, claimValue?: Payload[typeof claimKey] | unknown): void;
-    private assertClaimInObject;
-    /**
-     *
-     * Get a claim within the payload.
-     *
-     * @throws when the payload is not defined
-     * @throws when the claim could not be found at any level
-     *
-     */
-    getClaimInPayload<T>(claimKey: keyof Payload | string): T;
-    /**
-     *
-     * Get a claim within the payload.
-     *
-     * @throws when the payload is not defined
-     * @throws when the claim could not be found at any level
-     *
-     */
-    getClaimInHeader<T>(claimKey: keyof Header | string): T;
-    private getClaimInObject;
-    /**
-     *
-     * Returns a string of what needs to be signed.
-     *
-     * Defined in: {@link https://datatracker.ietf.org/doc/html/rfc7519#section-3 | RFC 7519}
-     *
-     */
-    get signableInput(): string;
-    /**
-     *
-     * Sign the Header and Payload and append the signature to the JWT.
-     *
-     */
-    signAndAdd(): Promise<ReturnJwtWithSignature<Header, Payload, this>>;
-    private get compactHeader();
-    private get compactPayload();
-    /**
-     *
-     * Create a compact format of the JWT.
-     *
-     * This will add a signature if there is none.
-     *
-     * @throws When the signature and signer are not defined
-     *
-     */
-    toCompact(): Promise<string>;
-    /**
-     *
-     * Verify the JWT.
-     *
-     * - Check the nbf claim with `now`
-     * - Check the exp claim with `now`
-     * - Additionally validate any required claims
-     * - Additionally pass in a specific publicKeyJwk to validate the signature
-     *
-     */
-    verify(verifySignature: Verifier<Header>, requiredClaims?: Array<keyof Payload | string>, publicKeyJwk?: Record<string, unknown>): Promise<JwtVerificationResult>;
-}
-export {};