@sphereon/ssi-sdk-ext.jwt-service 0.28.1-feature.esm.cjs.8 → 0.28.1-feature.oyd.cmsm.improv.16

package/dist/agent/JwtService.d.ts

@@ -0,0 +1,17 @@
+import { IAgentPlugin } from '@veramo/core';
+import { IJwtService } from '..';
+/**
+ * @public
+ */
+export declare class JwtService implements IAgentPlugin {
+    readonly schema: any;
+    readonly methods: IJwtService;
+    private jwtPrepareJws;
+    private jwtCreateJwsJsonGeneralSignature;
+    private jwtCreateJwsJsonFlattenedSignature;
+    private jwtCreateJwsCompactSignature;
+    private jwtVerifyJwsSignature;
+    private jwtEncryptJweCompactJwt;
+    private jwtDecryptJweCompactJwt;
+}
+//# sourceMappingURL=JwtService.d.ts.map

package/dist/agent/JwtService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwtService.d.ts","sourceRoot":"","sources":["../../src/agent/JwtService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAK3C,OAAO,EAUL,WAAW,EAaZ,MAAM,IAAI,CAAA;AAGX;;GAEG;AACH,qBAAa,UAAW,YAAW,YAAY;IAC7C,QAAQ,CAAC,MAAM,MAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAQ5B;YAEa,aAAa;YAIb,gCAAgC;YAIhC,kCAAkC;YAIlC,4BAA4B;YAK5B,qBAAqB;YAIrB,uBAAuB;YA8CvB,uBAAuB;CAGtC"}

package/dist/agent/JwtService.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JwtService = void 0;
+const debug_1 = __importDefault(require("debug"));
+const jose_1 = require("jose");
+const u8a = __importStar(require("uint8arrays"));
+const __1 = require("..");
+const JWE_1 = require("../functions/JWE");
+/**
+ * @public
+ */
+class JwtService {
+    constructor() {
+        this.schema = __1.schema.IJwtService;
+        this.methods = {
+            jwtPrepareJws: this.jwtPrepareJws.bind(this),
+            jwtCreateJwsJsonGeneralSignature: this.jwtCreateJwsJsonGeneralSignature.bind(this),
+            jwtCreateJwsJsonFlattenedSignature: this.jwtCreateJwsJsonFlattenedSignature.bind(this),
+            jwtCreateJwsCompactSignature: this.jwtCreateJwsCompactSignature.bind(this),
+            jwtVerifyJwsSignature: this.jwtVerifyJwsSignature.bind(this),
+            jwtEncryptJweCompactJwt: this.jwtEncryptJweCompactJwt.bind(this),
+            jwtDecryptJweCompactJwt: this.jwtDecryptJweCompactJwt.bind(this),
+        };
+    }
+    jwtPrepareJws(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield (0, __1.prepareJwsObject)(args, context);
+        });
+    }
+    jwtCreateJwsJsonGeneralSignature(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield (0, __1.createJwsJsonGeneral)(args, context);
+        });
+    }
+    jwtCreateJwsJsonFlattenedSignature(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield (0, __1.createJwsJsonFlattened)(args, context);
+        });
+    }
+    jwtCreateJwsCompactSignature(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            // We wrap it in a json object for remote REST calls
+            return { jwt: yield (0, __1.createJwsCompact)(args, context) };
+        });
+    }
+    jwtVerifyJwsSignature(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield (0, __1.verifyJws)(args, context);
+        });
+    }
+    jwtEncryptJweCompactJwt(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c, _d, _e, _f, _g;
+            const { payload, protectedHeader = { alg: args.alg, enc: args.enc }, recipientKey, issuer, expirationTime, audience } = args;
+            try {
+                (0, debug_1.default)(`JWE Encrypt: ${JSON.stringify(args, null, 2)}`);
+                const alg = (_b = (_a = (0, __1.jweAlg)(args.alg)) !== null && _a !== void 0 ? _a : (0, __1.jweAlg)(protectedHeader.alg)) !== null && _b !== void 0 ? _b : 'ECDH-ES';
+                const enc = (_d = (_c = (0, __1.jweEnc)(args.enc)) !== null && _c !== void 0 ? _c : (0, __1.jweEnc)(protectedHeader.enc)) !== null && _d !== void 0 ? _d : 'A256GCM';
+                const encJwks = recipientKey.jwks.length === 1
+                    ? [recipientKey.jwks[0]]
+                    : recipientKey.jwks.filter((jwk) => (jwk.kid && (jwk.kid === jwk.jwk.kid || jwk.kid === jwk.jwkThumbprint)) || jwk.jwk.use === 'enc');
+                if (encJwks.length === 0) {
+                    return Promise.reject(Error(`No public JWK found that can be used to encrypt against`));
+                }
+                const jwkInfo = encJwks[0];
+                if (encJwks.length > 0) {
+                    __1.JwtLogger.warning(`More than one JWK with 'enc' usage found. Selected the first one as no 'kid' was provided`, encJwks);
+                }
+                if (((_e = jwkInfo.jwk.kty) === null || _e === void 0 ? void 0 : _e.startsWith('EC')) !== true || !alg.startsWith('ECDH')) {
+                    return Promise.reject(Error(`Currently only ECDH-ES is supported for encryption. JWK alg ${jwkInfo.jwk.kty}, header alg ${alg}`)); // TODO: Probably we support way more already
+                }
+                const apuVal = (_f = protectedHeader.apu) !== null && _f !== void 0 ? _f : args.apu;
+                const apu = apuVal ? u8a.fromString(apuVal, 'base64url') : undefined;
+                const apvVal = (_g = protectedHeader.apv) !== null && _g !== void 0 ? _g : args.apv;
+                const apv = apvVal ? u8a.fromString(apvVal, 'base64url') : undefined;
+                const pubKey = yield (0, jose_1.importJWK)(jwkInfo.jwk);
+                const encrypter = new JWE_1.CompactJwtEncrypter({
+                    enc,
+                    alg,
+                    keyManagementParams: { apu, apv },
+                    key: pubKey,
+                    issuer,
+                    expirationTime,
+                    audience,
+                });
+                const jwe = yield encrypter.encryptCompactJWT(payload, {});
+                return { jwt: jwe };
+            }
+            catch (error) {
+                console.error(`Error encrypting JWE: ${error.message}`, error);
+                throw error;
+            }
+        });
+    }
+    jwtDecryptJweCompactJwt(args, context) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return { jwt: 'FIXME' };
+        });
+    }
+}
+exports.JwtService = JwtService;
+//# sourceMappingURL=JwtService.js.map

package/dist/agent/JwtService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwtService.js","sourceRoot":"","sources":["../../src/agent/JwtService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,kDAAyB;AACzB,+BAAgC;AAEhC,iDAAkC;AAClC,0BAuBW;AACX,0CAAsD;AAEtD;;GAEG;AACH,MAAa,UAAU;IAAvB;QACW,WAAM,GAAG,UAAM,CAAC,WAAW,CAAA;QAC3B,YAAO,GAAgB;YAC9B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,gCAAgC,EAAE,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAClF,kCAAkC,EAAE,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;YACtF,4BAA4B,EAAE,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1E,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5D,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;SACjE,CAAA;IAwEH,CAAC;IAtEe,aAAa,CAAC,IAAuB,EAAE,OAAyB;;YAC5E,OAAO,MAAM,IAAA,oBAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC9C,CAAC;KAAA;IAEa,gCAAgC,CAAC,IAAuB,EAAE,OAAyB;;YAC/F,OAAO,MAAM,IAAA,wBAAoB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAClD,CAAC;KAAA;IAEa,kCAAkC,CAAC,IAA4B,EAAE,OAAyB;;YACtG,OAAO,MAAM,IAAA,0BAAsB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACpD,CAAC;KAAA;IAEa,4BAA4B,CAAC,IAA0B,EAAE,OAAyB;;YAC9F,oDAAoD;YACpD,OAAO,EAAE,GAAG,EAAE,MAAM,IAAA,oBAAgB,EAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAA;QACvD,CAAC;KAAA;IAEa,qBAAqB,CAAC,IAAmB,EAAE,OAAyB;;YAChF,OAAO,MAAM,IAAA,aAAS,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACvC,CAAC;KAAA;IAEa,uBAAuB,CAAC,IAA8B,EAAE,OAAyB;;;YAC7F,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;YAE5H,IAAI,CAAC;gBACH,IAAA,eAAK,EAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;gBAEtD,MAAM,GAAG,GAAG,MAAA,MAAA,IAAA,UAAM,EAAC,IAAI,CAAC,GAAG,CAAC,mCAAI,IAAA,UAAM,EAAC,eAAe,CAAC,GAAG,CAAC,mCAAI,SAAS,CAAA;gBACxE,MAAM,GAAG,GAAG,MAAA,MAAA,IAAA,UAAM,EAAC,IAAI,CAAC,GAAG,CAAC,mCAAI,IAAA,UAAM,EAAC,eAAe,CAAC,GAAG,CAAC,mCAAI,SAAS,CAAA;gBACxE,MAAM,OAAO,GACX,YAAY,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBAC5B,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,CAAA;gBACzI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC,CAAA;gBACzF,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;gBAC1B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,aAAS,CAAC,OAAO,CAAC,2FAA2F,EAAE,OAAO,CAAC,CAAA;gBACzH,CAAC;gBACD,IAAI,CAAA,MAAA,OAAO,CAAC,GAAG,CAAC,GAAG,0CAAE,UAAU,CAAC,IAAI,CAAC,MAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1E,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAA,CAAC,6CAA6C;gBACjL,CAAC;gBACD,MAAM,MAAM,GAAG,MAAA,eAAe,CAAC,GAAG,mCAAI,IAAI,CAAC,GAAG,CAAA;gBAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpE,MAAM,MAAM,GAAG,MAAA,eAAe,CAAC,GAAG,mCAAI,IAAI,CAAC,GAAG,CAAA;gBAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAEpE,MAAM,MAAM,GAAG,MAAM,IAAA,gBAAS,EAAC,OAAO,CAAC,GAAG,CAAC,CAAA;gBAC3C,MAAM,SAAS,GAAG,IAAI,yBAAmB,CAAC;oBACxC,GAAG;oBACH,GAAG;oBACH,mBAAmB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;oBACjC,GAAG,EAAE,MAAM;oBACX,MAAM;oBACN,cAAc;oBACd,QAAQ;iBACT,CAAC,CAAA;gBAEF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;gBAC1D,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAA;gBAC9D,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;KAAA;IAEa,uBAAuB,CAAC,IAA8B,EAAE,OAAyB;;YAC7F,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAA;QACzB,CAAC;KAAA;CACF;AAlFD,gCAkFC"}

package/dist/functions/JWE.d.ts

@@ -0,0 +1,75 @@
+import { RandomSource } from '@stablelib/random';
+import * as jose from 'jose';
+import { JWEKeyManagementHeaderParameters, JWTDecryptOptions } from 'jose';
+import type { KeyLike } from 'jose/dist/types/types';
+import { JweAlg, JweEnc, JweHeader, JweJsonGeneral, JweProtectedHeader, JweRecipient, JweRecipientUnprotectedHeader, JwsPayload } from '../types/IJwtService';
+export interface EncryptionResult {
+    ciphertext: Uint8Array;
+    tag: Uint8Array;
+    iv: Uint8Array;
+    protectedHeader?: string;
+    recipients?: JweRecipient[];
+    cek?: Uint8Array;
+}
+export declare const generateContentEncryptionKey: ({ alg, randomSource, }: {
+    alg: JweEnc;
+    randomSource?: RandomSource;
+}) => Promise<Uint8Array>;
+export interface JwtEncrypter {
+    alg: string;
+    enc: string;
+    encrypt: (payload: JwsPayload, protectedHeader: JweProtectedHeader, aad?: Uint8Array) => Promise<EncryptionResult>;
+    encryptCek?: (cek: Uint8Array) => Promise<JweRecipient>;
+}
+export interface JweEncrypter {
+    alg: string;
+    enc: string;
+    encrypt: (payload: Uint8Array, protectedHeader: JweProtectedHeader, aad?: Uint8Array) => Promise<EncryptionResult>;
+    encryptCek?: (cek: Uint8Array) => Promise<JweRecipient>;
+}
+export interface JweDecrypter {
+    alg: string;
+    enc: string;
+    decrypt: (sealed: Uint8Array, iv: Uint8Array, aad?: Uint8Array, recipient?: JweRecipient) => Promise<Uint8Array | null>;
+}
+export declare class CompactJwtEncrypter implements JweEncrypter {
+    private _alg;
+    private _enc;
+    private _keyManagementParams;
+    private recipientKey;
+    private expirationTime;
+    private issuer;
+    private audience;
+    constructor(args: {
+        key: Uint8Array | jose.KeyLike;
+        alg?: JweAlg;
+        enc?: JweEnc;
+        keyManagementParams?: JWEKeyManagementHeaderParameters;
+        expirationTime?: number | string | Date;
+        issuer?: string;
+        audience?: string | string[];
+    });
+    get enc(): string;
+    set enc(value: JweEnc | string);
+    get alg(): string;
+    set alg(value: JweAlg | string);
+    encryptCompactJWT(payload: JwsPayload, jweProtectedHeader: JweProtectedHeader, aad?: Uint8Array | undefined): Promise<string>;
+    static decryptCompactJWT(jwt: string, key: KeyLike | Uint8Array, options?: JWTDecryptOptions): Promise<jose.JWTDecryptResult<jose.JWTPayload>>;
+    encrypt(payload: Uint8Array, jweProtectedHeader: JweProtectedHeader, aad?: Uint8Array | undefined): Promise<EncryptionResult>;
+}
+export declare function createJwe(cleartext: Uint8Array, encrypters: JweEncrypter[], protectedHeader: JweProtectedHeader, aad?: Uint8Array): Promise<JweJsonGeneral>;
+/**
+ * Merges all headers, so we get a unified header.
+ *
+ * @param protectedHeader
+ * @param unprotectedHeader
+ * @param recipientUnprotectedHeader
+ */
+export declare function jweMergeHeaders({ protectedHeader, unprotectedHeader, recipientUnprotectedHeader, }: {
+    protectedHeader?: JweProtectedHeader;
+    unprotectedHeader?: JweHeader;
+    recipientUnprotectedHeader?: JweRecipientUnprotectedHeader;
+}): JweHeader;
+export declare function decryptJwe(jwe: JweJsonGeneral, decrypter: JweDecrypter): Promise<Uint8Array>;
+export declare function toWebCryptoCiphertext(ciphertext: string, tag: string): Uint8Array;
+//# sourceMappingURL=JWE.d.ts.map

package/dist/functions/JWE.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWE.d.ts","sourceRoot":"","sources":["../../src/functions/JWE.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAElF,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,EAAE,gCAAgC,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAEpD,OAAO,EACL,MAAM,EAEN,MAAM,EAEN,SAAS,EACT,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,6BAA6B,EAC7B,UAAU,EACX,MAAM,sBAAsB,CAAA;AAE7B,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,UAAU,CAAA;IACtB,GAAG,EAAE,UAAU,CAAA;IACf,EAAE,EAAE,UAAU,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAA;IAC3B,GAAG,CAAC,EAAE,UAAU,CAAA;CACjB;AAED,eAAO,MAAM,4BAA4B,2BAGtC;IACD,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,CAAC,EAAE,YAAY,CAAA;CAC5B,KAAG,OAAO,CAAC,UAAU,CAuBrB,CAAA;AAaD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAClH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAClH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,YAAY,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;CACxH;AAyCD,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,IAAI,CAAoB;IAChC,OAAO,CAAC,oBAAoB,CAA8C;IAC1E,OAAO,CAAC,YAAY,CAA2B;IAC/C,OAAO,CAAC,cAAc,CAAA;IACtB,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAA+B;gBAEnC,IAAI,EAAE;QAChB,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC,OAAO,CAAA;QAC9B,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,mBAAmB,CAAC,EAAE,gCAAgC,CAAA;QACtD,cAAc,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;QACvC,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;KAC7B;IAcD,IAAI,GAAG,IAAI,MAAM,CAKhB;IAED,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAM7B;IAED,IAAI,GAAG,IAAI,MAAM,CAKhB;IAED,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAM7B;IAEK,iBAAiB,CAAC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;WA4C/G,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAInG,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAsBpI;AAED,wBAAsB,SAAS,CAC7B,SAAS,EAAE,UAAU,EACrB,UAAU,EAAE,YAAY,EAAE,EAC1B,eAAe,EAAE,kBAAkB,EACnC,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAkCzB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,EAC9B,eAAe,EACf,iBAAiB,EACjB,0BAA0B,GAC3B,EAAE;IACD,eAAe,CAAC,EAAE,kBAAkB,CAAA;IACpC,iBAAiB,CAAC,EAAE,SAAS,CAAA;IAC7B,0BAA0B,CAAC,EAAE,6BAA6B,CAAA;CAC3D,GAAG,SAAS,CAQZ;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CA0BlG;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAEjF"}

package/dist/functions/JWE.js

@@ -0,0 +1,280 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CompactJwtEncrypter = exports.generateContentEncryptionKey = void 0;
+exports.createJwe = createJwe;
+exports.jweMergeHeaders = jweMergeHeaders;
+exports.decryptJwe = decryptJwe;
+exports.toWebCryptoCiphertext = toWebCryptoCiphertext;
+const random_1 = require("@stablelib/random");
+const utils_1 = require("@veramo/utils");
+const jose = __importStar(require("jose"));
+const u8a = __importStar(require("uint8arrays"));
+const IJwtService_1 = require("../types/IJwtService");
+const generateContentEncryptionKey = (_a) => __awaiter(void 0, [_a], void 0, function* ({ alg, randomSource = random_1.defaultRandomSource, }) {
+    let length;
+    switch (alg) {
+        case 'A128GCM':
+            length = 16;
+            break;
+        case 'A192GCM':
+            length = 24;
+            break;
+        case 'A128CBC-HS256':
+        case 'A256GCM':
+            length = 32;
+            break;
+        case 'A192CBC-HS384':
+            length = 48;
+            break;
+        case 'A256CBC-HS512':
+            length = 64;
+            break;
+        default:
+            length = 32;
+    }
+    return (0, random_1.randomBytes)(length, randomSource);
+});
+exports.generateContentEncryptionKey = generateContentEncryptionKey;
+function jweAssertValid(jwe) {
+    if (!(jwe.protected && jwe.iv && jwe.ciphertext && jwe.tag)) {
+        throw Error('JWE is missing properties: protected, iv, ciphertext and/or tag');
+    }
+    if (jwe.recipients) {
+        jwe.recipients.map((recipient) => {
+            if (!(recipient.header && recipient.encrypted_key)) {
+                throw Error('Malformed JWE recipients; no header and encrypted key present');
+            }
+        });
+    }
+}
+function jweEncode({ ciphertext, tag, iv, protectedHeader, recipients, aad, unprotected, }) {
+    if (!recipients || recipients.length === 0) {
+        throw Error(`No recipient found`);
+    }
+    return Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (unprotected && { unprotected })), { protected: protectedHeader, iv: (0, utils_1.bytesToBase64url)(iv), ciphertext: (0, utils_1.bytesToBase64url)(ciphertext) }), (tag && { tag: (0, utils_1.bytesToBase64url)(tag) })), (aad && { aad: (0, utils_1.bytesToBase64url)(aad) })), { recipients });
+}
+class CompactJwtEncrypter {
+    constructor(args) {
+        if (args === null || args === void 0 ? void 0 : args.alg) {
+            this._alg = args.alg;
+        }
+        if (args === null || args === void 0 ? void 0 : args.enc) {
+            this._enc = args.enc;
+        }
+        this._keyManagementParams = args.keyManagementParams;
+        this.recipientKey = args.key;
+        this.expirationTime = args.expirationTime;
+        this.issuer = args.issuer;
+        this.audience = args.audience;
+    }
+    get enc() {
+        if (!this._enc) {
+            throw Error(`enc not set`);
+        }
+        return this._enc;
+    }
+    set enc(value) {
+        // @ts-ignore
+        if (!IJwtService_1.JweEncs.includes(value)) {
+            throw Error(`invalid JWE enc value ${value}`);
+        }
+        this._enc = value;
+    }
+    get alg() {
+        if (!this._alg) {
+            throw Error(`alg not set`);
+        }
+        return this._alg;
+    }
+    set alg(value) {
+        // @ts-ignore
+        if (!IJwtService_1.JweAlgs.includes(value)) {
+            throw Error(`invalid JWE alg value ${value}`);
+        }
+        this._alg = value;
+    }
+    encryptCompactJWT(payload, jweProtectedHeader, aad) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const protectedHeader = Object.assign(Object.assign({}, jweProtectedHeader), { alg: (_a = jweProtectedHeader.alg) !== null && _a !== void 0 ? _a : this._alg, enc: (_b = jweProtectedHeader.enc) !== null && _b !== void 0 ? _b : this._enc });
+            if (!protectedHeader.alg || !protectedHeader.enc) {
+                return Promise.reject(Error(`no 'alg' or 'enc' value set for the protected JWE header!`));
+            }
+            this.enc = protectedHeader.enc;
+            this.alg = protectedHeader.alg;
+            if (payload.exp) {
+                this.expirationTime = payload.exp;
+            }
+            if (payload.iss) {
+                this.issuer = payload.iss;
+            }
+            if (payload.aud) {
+                this.audience = payload.aud;
+            }
+            const encrypt = new jose.EncryptJWT(payload).setProtectedHeader(Object.assign(Object.assign({}, protectedHeader), { alg: this.alg, enc: this.enc }));
+            if (this._alg.startsWith('ECDH')) {
+                if (!this._keyManagementParams) {
+                    return Promise.reject(Error(`ECDH requires key management params`));
+                }
+                encrypt.setKeyManagementParameters(this._keyManagementParams);
+            }
+            if (this.expirationTime !== undefined) {
+                encrypt.setExpirationTime(this.expirationTime);
+            }
+            if (this.issuer) {
+                encrypt.setIssuer(this.issuer);
+            }
+            if (this.audience) {
+                encrypt.setAudience(this.audience);
+            }
+            return yield encrypt.encrypt(this.recipientKey);
+        });
+    }
+    static decryptCompactJWT(jwt, key, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield jose.jwtDecrypt(jwt, key, options);
+        });
+    }
+    encrypt(payload, jweProtectedHeader, aad) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const jwt = yield this.encryptCompactJWT(JSON.parse(u8a.toString(payload)), jweProtectedHeader, aad);
+            const [protectedHeader, encryptedKey, ivB64, payloadB64, tagB64] = jwt.split('.');
+            //[jwe.protected, jwe.encrypted_key, jwe.iv, jwe.ciphertext, jwe.tag].join('.');
+            console.log(`FIXME: TO EncryptionResult`);
+            return {
+                protectedHeader,
+                tag: (0, utils_1.base64ToBytes)(tagB64),
+                ciphertext: (0, utils_1.base64ToBytes)(payloadB64),
+                iv: (0, utils_1.base64ToBytes)(ivB64),
+                recipients: [
+                    Object.assign({}, (encryptedKey && { encrypted_key: encryptedKey })),
+                ],
+            };
+        });
+    }
+}
+exports.CompactJwtEncrypter = CompactJwtEncrypter;
+function createJwe(cleartext, encrypters, protectedHeader, aad) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b;
+        if (encrypters.length === 0) {
+            throw Error('JWE needs at least 1 encryptor');
+        }
+        if (encrypters.find((enc) => enc.alg === 'dir' || enc.alg === 'ECDH-ES')) {
+            if (encrypters.length !== 1) {
+                throw Error(`JWE can only do "dir" or "ECDH-ES" encryption with one key. ${encrypters.length} supplied`);
+            }
+            const encryptionResult = yield encrypters[0].encrypt(cleartext, protectedHeader, aad);
+            return jweEncode(Object.assign(Object.assign({}, encryptionResult), { aad }));
+        }
+        else {
+            const tmpEnc = encrypters[0].enc;
+            if (!encrypters.reduce((acc, encrypter) => acc && encrypter.enc === tmpEnc, true)) {
+                throw new Error('invalid_argument: Incompatible encrypters passed');
+            }
+            let cek = undefined;
+            let jwe = undefined;
+            for (const encrypter of encrypters) {
+                if (!cek) {
+                    const encryptionResult = yield encrypter.encrypt(cleartext, protectedHeader, aad);
+                    cek = encryptionResult.cek;
+                    jwe = jweEncode(Object.assign(Object.assign({}, encryptionResult), { aad }));
+                }
+                else {
+                    const recipient = yield ((_a = encrypter.encryptCek) === null || _a === void 0 ? void 0 : _a.call(encrypter, cek));
+                    if (recipient) {
+                        (_b = jwe === null || jwe === void 0 ? void 0 : jwe.recipients) === null || _b === void 0 ? void 0 : _b.push(recipient);
+                    }
+                }
+            }
+            if (!jwe) {
+                throw Error(`No JWE constructed`);
+            }
+            return jwe;
+        }
+    });
+}
+/**
+ * Merges all headers, so we get a unified header.
+ *
+ * @param protectedHeader
+ * @param unprotectedHeader
+ * @param recipientUnprotectedHeader
+ */
+function jweMergeHeaders({ protectedHeader, unprotectedHeader, recipientUnprotectedHeader, }) {
+    // TODO: Check that all headers/params are disjoint!
+    const header = Object.assign(Object.assign(Object.assign({}, protectedHeader), unprotectedHeader), recipientUnprotectedHeader);
+    if (!header.alg || !header.enc) {
+        throw Error(`Either 'alg' or 'enc' are missing from the headers`);
+    }
+    return header;
+}
+function decryptJwe(jwe, decrypter) {
+    return __awaiter(this, void 0, void 0, function* () {
+        jweAssertValid(jwe);
+        const protectedHeader = JSON.parse((0, utils_1.decodeBase64url)(jwe.protected));
+        if ((protectedHeader === null || protectedHeader === void 0 ? void 0 : protectedHeader.enc) !== decrypter.enc) {
+            return Promise.reject(Error(`Decrypter enc '${decrypter.enc}' does not support header enc '${protectedHeader.enc}'`));
+        }
+        else if (!jwe.tag) {
+            return Promise.reject(Error(`Decrypter enc '${decrypter.enc}' does not support header enc '${protectedHeader.enc}'`));
+        }
+        const sealed = toWebCryptoCiphertext(jwe.ciphertext, jwe.tag);
+        const aad = u8a.fromString(jwe.aad ? `${jwe.protected}.${jwe.aad}` : jwe.protected);
+        let cleartext = null;
+        if (protectedHeader.alg === 'dir' && decrypter.alg === 'dir') {
+            cleartext = yield decrypter.decrypt(sealed, (0, utils_1.base64ToBytes)(jwe.iv), aad);
+        }
+        else if (!jwe.recipients || jwe.recipients.length === 0) {
+            throw Error('missing recipients for JWE');
+        }
+        else {
+            for (let i = 0; !cleartext && i < jwe.recipients.length; i++) {
+                const recipient = jwe.recipients[i];
+                recipient.header = Object.assign(Object.assign({}, recipient.header), protectedHeader);
+                if (recipient.header.alg === decrypter.alg) {
+                    cleartext = yield decrypter.decrypt(sealed, (0, utils_1.base64ToBytes)(jwe.iv), aad, recipient);
+                }
+            }
+        }
+        if (cleartext === null)
+            throw new Error('failure: Failed to decrypt');
+        return cleartext;
+    });
+}
+function toWebCryptoCiphertext(ciphertext, tag) {
+    return u8a.concat([(0, utils_1.base64ToBytes)(ciphertext), (0, utils_1.base64ToBytes)(tag)]);
+}
+//# sourceMappingURL=JWE.js.map

package/dist/functions/JWE.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWE.js","sourceRoot":"","sources":["../../src/functions/JWE.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsQA,8BAuCC;AASD,0CAgBC;AAED,gCA0BC;AAED,sDAEC;AAtWD,8CAAkF;AAClF,yCAAgF;AAChF,2CAA4B;AAG5B,iDAAkC;AAClC,sDAW6B;AAWtB,MAAM,4BAA4B,GAAG,KAMpB,EAAE,4CANyB,EACjD,GAAG,EACH,YAAY,GAAG,4BAAmB,GAInC;IACC,IAAI,MAAc,CAAA;IAClB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,MAAM,GAAG,EAAE,CAAA;YACX,MAAK;QACP,KAAK,SAAS;YACZ,MAAM,GAAG,EAAE,CAAA;YACX,MAAK;QACP,KAAK,eAAe,CAAC;QACrB,KAAK,SAAS;YACZ,MAAM,GAAG,EAAE,CAAA;YACX,MAAK;QACP,KAAK,eAAe;YAClB,MAAM,GAAG,EAAE,CAAA;YACX,MAAK;QACP,KAAK,eAAe;YAClB,MAAM,GAAG,EAAE,CAAA;YACX,MAAK;QACP;YACE,MAAM,GAAG,EAAE,CAAA;IACf,CAAC;IACD,OAAO,IAAA,oBAAW,EAAC,MAAM,EAAE,YAAY,CAAC,CAAA;AAC1C,CAAC,CAAA,CAAA;AA7BY,QAAA,4BAA4B,gCA6BxC;AAiCD,SAAS,cAAc,CAAC,GAAmB;IACzC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAuB,EAAE,EAAE;YAC7C,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,CAAC,+DAA+D,CAAC,CAAA;YAC9E,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,EACjB,UAAU,EACV,GAAG,EACH,EAAE,EACF,eAAe,EACf,UAAU,EACV,GAAG,EACH,WAAW,GAIZ;IACC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,0EACF,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,CAAC,KACnC,SAAS,EAAU,eAAe,EAClC,EAAE,EAAE,IAAA,wBAAgB,EAAC,EAAE,CAAC,EACxB,UAAU,EAAE,IAAA,wBAAgB,EAAC,UAAU,CAAC,KACrC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,IAAA,wBAAgB,EAAC,GAAG,CAAC,EAAE,CAAC,GACvC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,IAAA,wBAAgB,EAAC,GAAG,CAAC,EAAE,CAAC,KAC1C,UAAU,GACc,CAAA;AAC5B,CAAC;AAED,MAAa,mBAAmB;IAS9B,YAAY,IAQX;QACC,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAA;QACtB,CAAC;QACD,IAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAA;QACtB,CAAC;QACD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACpD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAA;QAC5B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC/B,CAAC;IAED,IAAI,GAAG;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAED,IAAI,GAAG,CAAC,KAAsB;QAC5B,aAAa;QACb,IAAI,CAAC,qBAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,KAAe,CAAA;IAC7B,CAAC;IAED,IAAI,GAAG;QACL,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,KAAK,CAAC,aAAa,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAA;IAClB,CAAC;IAED,IAAI,GAAG,CAAC,KAAsB;QAC5B,aAAa;QACb,IAAI,CAAC,qBAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,KAAe,CAAA;IAC7B,CAAC;IAEK,iBAAiB,CAAC,OAAmB,EAAE,kBAAsC,EAAE,GAA4B;;;YAC/G,MAAM,eAAe,mCAChB,kBAAkB,KACrB,GAAG,EAAE,MAAA,kBAAkB,CAAC,GAAG,mCAAI,IAAI,CAAC,IAAI,EACxC,GAAG,EAAE,MAAA,kBAAkB,CAAC,GAAG,mCAAI,IAAI,CAAC,IAAI,GACzC,CAAA;YACD,IAAI,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC,CAAA;YAC3F,CAAC;YACD,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,GAAG,CAAA;YAC9B,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC,GAAG,CAAA;YAC9B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAA;YACnC,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAA;YAC3B,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAA;YAC7B,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,kBAAkB,iCAC1D,eAAe,KAClB,GAAG,EAAE,IAAI,CAAC,GAAG,EACb,GAAG,EAAE,IAAI,CAAC,GAAG,IACb,CAAA;YACF,IAAI,IAAI,CAAC,IAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAA;gBACrE,CAAC;gBACD,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,oBAAqB,CAAC,CAAA;YAChE,CAAC;YACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;YAChD,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAChC,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACpC,CAAC;YACD,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QACjD,CAAC;KAAA;IAEM,MAAM,CAAO,iBAAiB,CAAC,GAAW,EAAE,GAAyB,EAAE,OAA2B;;YACvG,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QACjD,CAAC;KAAA;IAEK,OAAO,CAAC,OAAmB,EAAE,kBAAsC,EAAE,GAA4B;;YACrG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAA;YACpG,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACjF,gFAAgF;YAChF,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;YAEzC,OAAO;gBACL,eAAe;gBACf,GAAG,EAAE,IAAA,qBAAa,EAAC,MAAM,CAAC;gBAC1B,UAAU,EAAE,IAAA,qBAAa,EAAC,UAAU,CAAC;gBACrC,EAAE,EAAE,IAAA,qBAAa,EAAC,KAAK,CAAC;gBACxB,UAAU,EAAE;sCAIL,CAAC,YAAY,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;iBAEvD;aACF,CAAA;QACH,CAAC;KAAA;CAGF;AAnID,kDAmIC;AAED,SAAsB,SAAS,CAC7B,SAAqB,EACrB,UAA0B,EAC1B,eAAmC,EACnC,GAAgB;;;QAEhB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;YACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,+DAA+D,UAAU,CAAC,MAAM,WAAW,CAAC,CAAA;YAC1G,CAAC;YACD,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,CAAA;YACrF,OAAO,SAAS,iCAAM,gBAAgB,KAAE,GAAG,IAAG,CAAA;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;YAChC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,SAAS,CAAC,GAAG,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAClF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;YACrE,CAAC;YACD,IAAI,GAAG,GAA2B,SAAS,CAAA;YAC3C,IAAI,GAAG,GAA+B,SAAS,CAAA;YAC/C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,gBAAgB,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,EAAE,GAAG,CAAC,CAAA;oBACjF,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAA;oBAC1B,GAAG,GAAG,SAAS,iCAAM,gBAAgB,KAAE,GAAG,IAAG,CAAA;gBAC/C,CAAC;qBAAM,CAAC;oBACN,MAAM,SAAS,GAAG,MAAM,CAAA,MAAA,SAAS,CAAC,UAAU,0DAAG,GAAG,CAAC,CAAA,CAAA;oBACnD,IAAI,SAAS,EAAE,CAAC;wBACd,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,UAAU,0CAAE,IAAI,CAAC,SAAS,CAAC,CAAA;oBAClC,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAA;YACnC,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;IACH,CAAC;CAAA;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,EAC9B,eAAe,EACf,iBAAiB,EACjB,0BAA0B,GAK3B;IACC,oDAAoD;IACpD,MAAM,MAAM,iDAAQ,eAAe,GAAK,iBAAiB,GAAK,0BAA0B,CAAE,CAAA;IAE1F,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,MAAmB,CAAA;AAC5B,CAAC;AAED,SAAsB,UAAU,CAAC,GAAmB,EAAE,SAAuB;;QAC3E,cAAc,CAAC,GAAG,CAAC,CAAA;QACnB,MAAM,eAAe,GAAuB,IAAI,CAAC,KAAK,CAAC,IAAA,uBAAe,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAA;QACtF,IAAI,CAAA,eAAe,aAAf,eAAe,uBAAf,eAAe,CAAE,GAAG,MAAK,SAAS,CAAC,GAAG,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,CAAC,GAAG,kCAAkC,eAAe,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;QACvH,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,SAAS,CAAC,GAAG,kCAAkC,eAAe,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;QACvH,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnF,IAAI,SAAS,GAAG,IAAI,CAAA;QACpB,IAAI,eAAe,CAAC,GAAG,KAAK,KAAK,IAAI,SAAS,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YAC7D,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAA,qBAAa,EAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;QACzE,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC3C,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,IAAI,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7D,MAAM,SAAS,GAAiB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;gBACjD,SAAS,CAAC,MAAM,GAAG,gCAAK,SAAS,CAAC,MAAM,GAAK,eAAe,CAAmC,CAAA;gBAC/F,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;oBAC3C,SAAS,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAA,qBAAa,EAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACrE,OAAO,SAAS,CAAA;IAClB,CAAC;CAAA;AAED,SAAgB,qBAAqB,CAAC,UAAkB,EAAE,GAAW;IACnE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,IAAA,qBAAa,EAAC,UAAU,CAAC,EAAE,IAAA,qBAAa,EAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AACpE,CAAC"}

package/dist/functions/index.d.ts

@@ -0,0 +1,35 @@
+import { ExternalIdentifierDidOpts, ExternalIdentifierX5cOpts, IIdentifierResolution, ManagedIdentifierResult } from '@sphereon/ssi-sdk-ext.identifier-resolution';
+import { JWK } from '@sphereon/ssi-types';
+import { IAgentContext } from '@veramo/core';
+import { CreateJwsCompactArgs, CreateJwsFlattenedArgs, CreateJwsJsonArgs, IJwsValidationResult, IRequiredContext, Jws, JwsCompact, JwsHeader, JwsIdentifierMode, JwsJsonFlattened, JwsJsonGeneral, JwsJsonGeneralWithIdentifiers, PreparedJwsObject, VerifyJwsArgs } from '../types/IJwtService';
+export declare const prepareJwsObject: (args: CreateJwsJsonArgs, context: IRequiredContext) => Promise<PreparedJwsObject>;
+export declare const createJwsCompact: (args: CreateJwsCompactArgs, context: IRequiredContext) => Promise<JwsCompact>;
+export declare const createJwsJsonFlattened: (args: CreateJwsFlattenedArgs, context: IRequiredContext) => Promise<JwsJsonFlattened>;
+export declare const createJwsJsonGeneral: (args: CreateJwsJsonArgs, context: IRequiredContext) => Promise<JwsJsonGeneral>;
+/**
+ * Updates the JWT header to include x5c, kid, jwk objects using the supplied issuer identifier that will be used to sign. If not present will automatically make the header objects available
+ * @param mode The type of header to check or include
+ * @param identifier The identifier of the signer. This identifier will be used later to sign
+ * @param header The JWT header
+ * @param noIdentifierInHeader
+ * @param context
+ */
+export declare const checkAndUpdateJwsHeader: ({ mode, identifier, header, noIdentifierInHeader, }: {
+    mode?: JwsIdentifierMode;
+    identifier: ManagedIdentifierResult;
+    noIdentifierInHeader?: boolean;
+    header: JwsHeader;
+}, context: IRequiredContext) => Promise<undefined>;
+export declare const verifyJws: (args: VerifyJwsArgs, context: IAgentContext<IIdentifierResolution>) => Promise<IJwsValidationResult>;
+export declare const toJwsJsonGeneral: ({ jws }: {
+    jws: Jws;
+}, context: IAgentContext<any>) => Promise<JwsJsonGeneral>;
+export declare const toJwsJsonGeneralWithIdentifiers: (args: {
+    jws: Jws;
+    jwk?: JWK;
+    opts?: {
+        x5c?: Omit<ExternalIdentifierX5cOpts, "identifier">;
+        did?: Omit<ExternalIdentifierDidOpts, "identifier">;
+    };
+}, context: IAgentContext<IIdentifierResolution>) => Promise<JwsJsonGeneralWithIdentifiers>;
+//# sourceMappingURL=index.d.ts.map

package/dist/functions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/functions/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EAIrB,uBAAuB,EAExB,MAAM,6CAA6C,CAAA;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAG5C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAKhB,GAAG,EACH,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,EACd,6BAA6B,EAI7B,iBAAiB,EACjB,aAAa,EACd,MAAM,sBAAsB,CAAA;AAQ7B,eAAO,MAAM,gBAAgB,SAAgB,iBAAiB,WAAW,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAoCpH,CAAA;AAED,eAAO,MAAM,gBAAgB,SAAgB,oBAAoB,WAAW,gBAAgB,KAAG,OAAO,CAAC,UAAU,CAGhH,CAAA;AAED,eAAO,MAAM,sBAAsB,SAAgB,sBAAsB,WAAW,gBAAgB,KAAG,OAAO,CAAC,gBAAgB,CAS9H,CAAA;AAED,eAAO,MAAM,oBAAoB,SAAgB,iBAAiB,WAAW,gBAAgB,KAAG,OAAO,CAAC,cAAc,CA4BrH,CAAA;AAED;;;;;;;GAOG;AAEH,eAAO,MAAM,uBAAuB,wDAM/B;IACD,IAAI,CAAC,EAAE,iBAAiB,CAAA;IACxB,UAAU,EAAE,uBAAuB,CAAA;IACnC,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,MAAM,EAAE,SAAS,CAAA;CAClB,WACQ,gBAAgB,uBAqB1B,CAAA;AAoID,eAAO,MAAM,SAAS,SAAgB,aAAa,WAAW,aAAa,CAAC,qBAAqB,CAAC,KAAG,OAAO,CAAC,oBAAoB,CAgDhI,CAAA;AAED,eAAO,MAAM,gBAAgB,YAAmB;IAAE,GAAG,EAAE,GAAG,CAAA;CAAE,WAAW,aAAa,CAAC,GAAG,CAAC,KAAG,OAAO,CAAC,cAAc,CAyBjH,CAAA;AAsDD,eAAO,MAAM,+BAA+B,SACpC;IACJ,GAAG,EAAE,GAAG,CAAA;IACR,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAA;KAAE,CAAA;CACpH,WACQ,aAAa,CAAC,qBAAqB,CAAC,KAC5C,OAAO,CAAC,6BAA6B,CAiBvC,CAAA"}