@suveren/gateway 0.7.4 → 0.8.0

package/node_modules/jose/dist/webapi/lib/jwe_encrypt.js

@@ -1,110 +1,108 @@
-import { encode as b64u } from '../util/base64url.js';
-import { encrypt } from './content_encryption.js';
-import { encryptKeyManagement } from './key_management.js';
-import { JOSENotSupported, JWEInvalid } from '../util/errors.js';
-import { isDisjoint } from './type_checks.js';
-import { concat, encode } from './buffer_utils.js';
-import { validateCrit, JWE_RECOGNIZED } from './options.js';
-import { prepareKey } from './key.js';
-import { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';
-import { compress } from './deflate.js';
-export function checkEncryptHeaders(input) {
-    const [, protectedHeader, unprotectedHeader, sharedUnprotectedHeader, , , , , crit] = input;
-    if (!isDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader)) {
-        throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');
-    }
-    const joseHeader = {
-        ...protectedHeader,
-        ...unprotectedHeader,
-        ...sharedUnprotectedHeader,
-    };
-    validateCrit(JWEInvalid, JWE_RECOGNIZED, crit, protectedHeader, joseHeader);
-    if (joseHeader.zip !== undefined && joseHeader.zip !== 'DEF') {
-        throw new JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');
-    }
-    if (joseHeader.zip !== undefined && !protectedHeader?.zip) {
-        throw new JWEInvalid('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');
-    }
-    const { alg, enc } = joseHeader;
-    if (typeof alg !== 'string' || !alg) {
-        throw new JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');
-    }
-    if (typeof enc !== 'string' || !enc) {
-        throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
-    }
-    return [joseHeader, alg, enc, jweEncryption(enc)];
+import { encode as b64u } from "../util/base64url.js";
+import { checkCekLength, encrypt, generateCek } from "./content_encryption.js";
+import { encryptKeyManagement } from "./key_management.js";
+import { JWEInvalid } from "../util/errors.js";
+import { assertUint8Array, isDisjoint, isObject } from "./type_checks.js";
+import { concat, encode } from "./buffer_utils.js";
+import { serializeJoseHeader, validateCrit, validateCritDuplicates, JWE_RECOGNIZED } from "./options.js";
+import { prepareKey } from "./key.js";
+import { JWE, invalidJWEKeyManagementMode, isJWECEKTransport, jweAlgorithm, jweEncryption } from "./jwe_algorithms.js";
+import { compress, validateZip } from "./deflate.js";
+import { unprotected } from "./helpers.js";
+function checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader) {
+  if (!isDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader))
+    throw new JWEInvalid("JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint");
 }
-export async function encryptJWE(input, checked, key) {
-    const [joseHeader, alg, , encEntry] = checked;
-    const [inputPlaintext, inputProtectedHeader, inputUnprotectedHeader, sharedUnprotectedHeader, aad, providedCek, inputIv, keyManagementParameters, , unprotectedParameters,] = input;
-    let protectedHeader = inputProtectedHeader;
-    let unprotectedHeader = inputUnprotectedHeader;
-    if (providedCek && (alg === 'dir' || alg === 'ECDH-ES')) {
-        throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
-    }
-    const algEntry = jweAlgorithm(alg);
-    const k = await prepareKey(alg === 'dir' ? encEntry : algEntry, key, 'encrypt');
-    const [cek, encryptedKey, parameters] = await encryptKeyManagement(alg, encEntry, k, providedCek, keyManagementParameters);
-    if (parameters) {
-        if (unprotectedParameters) {
-            unprotectedHeader = unprotectedHeader ? { ...unprotectedHeader, ...parameters } : parameters;
-        }
-        else {
-            protectedHeader = protectedHeader ? { ...protectedHeader, ...parameters } : parameters;
-        }
-    }
-    let protectedHeaderS;
-    let protectedHeaderB;
-    if (protectedHeader) {
-        protectedHeaderS = b64u(JSON.stringify(protectedHeader));
-        protectedHeaderB = encode(protectedHeaderS);
-    }
-    else {
-        protectedHeaderS = '';
-        protectedHeaderB = new Uint8Array();
-    }
-    let additionalData;
-    let aadMember;
-    if (aad?.byteLength) {
-        aadMember = b64u(aad);
-        additionalData = concat(protectedHeaderB, encode('.'), encode(aadMember));
-    }
-    else {
-        additionalData = protectedHeaderB;
-    }
-    let plaintext = inputPlaintext;
-    if (joseHeader.zip === 'DEF') {
-        plaintext = await compress(plaintext).catch((cause) => {
-            throw new JWEInvalid('Failed to compress plaintext', { cause });
-        });
-    }
-    const { ciphertext, tag, iv } = await encrypt(encEntry, plaintext, cek, inputIv, additionalData);
-    const jwe = {
-        ciphertext: b64u(ciphertext),
-    };
-    if (iv) {
-        jwe.iv = b64u(iv);
-    }
-    if (tag) {
-        jwe.tag = b64u(tag);
-    }
-    if (encryptedKey) {
-        jwe.encrypted_key = b64u(encryptedKey);
-    }
-    if (aadMember) {
-        jwe.aad = aadMember;
-    }
-    if (protectedHeader) {
-        jwe.protected = protectedHeaderS;
-    }
-    if (sharedUnprotectedHeader) {
-        jwe.unprotected = sharedUnprotectedHeader;
-    }
-    if (unprotectedHeader) {
-        jwe.header = unprotectedHeader;
-    }
-    return jwe;
+function checkEncryptHeaders(input) {
+  let [, protectedHeader, unprotectedHeader, sharedUnprotectedHeader, aad, cek, iv, keyManagementParameters, crit] = input;
+  if (aad !== void 0 && assertUint8Array(aad, "JWE Additional Authenticated Data"), cek !== void 0 && assertUint8Array(cek, "JWE Content Encryption Key"), iv !== void 0 && assertUint8Array(iv, "JWE Initialization Vector"), protectedHeader !== void 0 && (protectedHeader = serializeJoseHeader(JWEInvalid, protectedHeader)[0], input[1] = protectedHeader), unprotectedHeader !== void 0 && (unprotectedHeader = serializeJoseHeader(JWEInvalid, unprotectedHeader)[0], input[2] = unprotectedHeader), sharedUnprotectedHeader !== void 0 && (sharedUnprotectedHeader = serializeJoseHeader(JWEInvalid, sharedUnprotectedHeader)[0], input[3] = sharedUnprotectedHeader), keyManagementParameters !== void 0 && !isObject(keyManagementParameters))
+    throw new TypeError("JWE Key Management Parameters must be an object");
+  checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader);
+  const joseHeader = {
+    ...protectedHeader,
+    ...unprotectedHeader,
+    ...sharedUnprotectedHeader
+  };
+  validateCritDuplicates(JWEInvalid, protectedHeader), validateCrit(JWEInvalid, JWE_RECOGNIZED, crit, protectedHeader, joseHeader), validateZip(joseHeader, protectedHeader);
+  const { alg, enc } = joseHeader;
+  if (typeof alg != "string" || !alg)
+    throw new JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');
+  if (JWE[alg]?.mode === "integrated-encryption") {
+    if (enc !== void 0)
+      throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter must not be present for integrated encryption');
+    if (cek !== void 0)
+      throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+    if (iv !== void 0)
+      throw new TypeError(`setInitializationVector cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+    return [joseHeader, alg, void 0, void 0];
+  }
+  if (typeof enc != "string" || !enc)
+    throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
+  return [joseHeader, alg, enc, jweEncryption(enc)];
+}
+function checkProducedEncryptedKey(encryptedKey) {
+  if (!(encryptedKey instanceof Uint8Array) || !encryptedKey.byteLength)
+    throw new TypeError("JWE key management algorithm did not produce an Encrypted Key");
+}
+async function transportCek(algEntry, encEntry, key, providedCek, joseHeader, providedParameters) {
+  const preparedKey = await prepareKey(algEntry, key, "encrypt"), cek = providedCek ?? generateCek(encEntry);
+  checkCekLength(cek, encEntry.cekBits);
+  const [, encryptedKey, parameters] = await encryptKeyManagement(algEntry, encEntry, preparedKey, joseHeader, cek, providedParameters);
+  return checkProducedEncryptedKey(encryptedKey), [cek, encryptedKey, parameters];
+}
+async function encryptJWE(input, checked, key, resolvedAlgEntry) {
+  const [joseHeader, alg, , encEntry] = checked, [inputPlaintext, inputProtectedHeader, inputUnprotectedHeader, sharedUnprotectedHeader, aad, providedCek, inputIv, keyManagementParameters, , unprotectedParameters] = input;
+  let protectedHeader = inputProtectedHeader, unprotectedHeader = inputUnprotectedHeader;
+  const algEntry = resolvedAlgEntry ?? jweAlgorithm(alg);
+  if (providedCek !== void 0 && !isJWECEKTransport(algEntry))
+    throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+  let encryptedKey, parameters, cek, integratedKey;
+  const mode = algEntry.mode;
+  switch (mode) {
+    case "direct-encryption":
+      cek = await prepareKey(encEntry, key, "encrypt");
+      break;
+    case "direct-key-agreement": {
+      const preparedKey = await prepareKey(algEntry, key, "encrypt");
+      [cek, , parameters] = await encryptKeyManagement(algEntry, encEntry, preparedKey, joseHeader, void 0, keyManagementParameters);
+      break;
+    }
+    case "key-wrapping":
+    case "key-encryption":
+    case "key-agreement-with-key-wrapping":
+      [cek, encryptedKey, parameters] = await transportCek(algEntry, encEntry, key, providedCek, joseHeader, keyManagementParameters);
+      break;
+    case "integrated-encryption":
+      integratedKey = await prepareKey(algEntry, key, "encrypt");
+      break;
+    default:
+      invalidJWEKeyManagementMode(mode);
+  }
+  parameters && (unprotectedParameters ? unprotectedHeader = unprotectedHeader ? { ...unprotectedHeader, ...parameters } : parameters : protectedHeader = protectedHeader ? { ...protectedHeader, ...parameters } : parameters, checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader));
+  let protectedHeaderS, protectedHeaderB;
+  protectedHeader ? (protectedHeaderS = b64u(JSON.stringify(protectedHeader)), protectedHeaderB = encode(protectedHeaderS)) : (protectedHeaderS = "", protectedHeaderB = new Uint8Array());
+  let additionalData, aadMember;
+  aad?.byteLength ? (aadMember = b64u(aad), additionalData = concat(protectedHeaderB, encode("."), encode(aadMember))) : additionalData = protectedHeaderB;
+  let plaintext = inputPlaintext;
+  joseHeader.zip === "DEF" && (plaintext = await compress(plaintext).catch((cause) => {
+    throw new JWEInvalid("Failed to compress plaintext", { cause });
+  }));
+  let ciphertext, tag, iv;
+  algEntry.mode === "integrated-encryption" ? [encryptedKey, ciphertext] = await algEntry.encrypt(integratedKey, plaintext, additionalData, protectedHeader, joseHeader, keyManagementParameters) : { ciphertext, tag, iv } = await encrypt(encEntry, plaintext, cek, inputIv, additionalData);
+  const jwe = {
+    ciphertext: b64u(ciphertext)
+  };
+  return iv && (jwe.iv = b64u(iv)), tag && (jwe.tag = b64u(tag)), encryptedKey?.byteLength && (jwe.encrypted_key = b64u(encryptedKey)), aadMember && (jwe.aad = aadMember), protectedHeader && (jwe.protected = protectedHeaderS), sharedUnprotectedHeader && (jwe.unprotected = sharedUnprotectedHeader), unprotectedHeader && (jwe.header = unprotectedHeader), jwe;
 }
-export async function createJWE(input, key) {
-    return encryptJWE(input, checkEncryptHeaders(input), key);
+async function createJWE(input, key, options) {
+  if (!input[1] && !input[2] && !input[3])
+    throw new JWEInvalid("either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()");
+  return options !== void 0 && (input[8] = options?.crit, input[9] = options ? unprotected in options : !1), encryptJWE(input, checkEncryptHeaders(input), key);
 }
+export {
+  checkDisjoint,
+  checkEncryptHeaders,
+  createJWE,
+  encryptJWE,
+  transportCek
+};

package/node_modules/jose/dist/webapi/lib/jwk_metadata.js

@@ -0,0 +1,19 @@
+function snapshotJwk(jwk) {
+  return { __proto__: null, ...jwk };
+}
+function normalizeJwk(jwk) {
+  const normalized = snapshotJwk(jwk);
+  if (normalized.ext !== void 0 && typeof normalized.ext != "boolean")
+    throw new TypeError('"ext" (Extractable) Parameter must be a boolean');
+  if (normalized.key_ops !== void 0) {
+    const value = normalized.key_ops, keyOps = Array.isArray(value) ? [...value] : void 0;
+    if (!keyOps || keyOps.some((operation) => typeof operation != "string") || new Set(keyOps).size !== keyOps.length)
+      throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');
+    normalized.key_ops = keyOps;
+  }
+  return normalized;
+}
+export {
+  normalizeJwk,
+  snapshotJwk
+};

package/node_modules/jose/dist/webapi/lib/jwk_to_key.js

@@ -1,17 +1,10 @@
-import { JOSENotSupported } from '../util/errors.js';
-export async function jwkToKey(entry, jwk) {
-    if (jwk.kty === 'RSA' && 'oth' in jwk && jwk.oth !== undefined) {
-        throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-    }
-    if (!entry.kty.includes(jwk.kty)) {
-        throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-    }
-    const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle;
-    const isPrivate = !!(jwk.d || jwk.priv);
-    const keyData = { ...jwk };
-    if (keyData.kty !== 'AKP') {
-        delete keyData.alg;
-    }
-    delete keyData.use;
-    return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
+import { JOSENotSupported } from "../util/errors.js";
+async function jwkToKey(entry, jwk) {
+  if (!entry.kty.includes(jwk.kty))
+    throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+  const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle, isPrivate = !!(jwk.d || jwk.priv), keyData = { ...jwk };
+  return keyData.kty !== "AKP" && delete keyData.alg, delete keyData.use, crypto.subtle.importKey("jwk", keyData, algorithm, jwk.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
 }
+export {
+  jwkToKey
+};

package/node_modules/jose/dist/webapi/lib/jws_algorithms.js

@@ -1,73 +1,74 @@
-import { JOSENotSupported } from '../util/errors.js';
-import { table } from './key_descriptor.js';
-const sig = [['verify'], ['sign']];
+import { JOSENotSupported } from "../util/errors.js";
+import { table } from "./key_descriptor.js";
+const sig = [["verify"], ["sign"]];
 function hmac(bits) {
-    const subtle = { name: 'HMAC', hash: `SHA-${bits}` };
-    return { kty: ['oct'], secret: true, subtle, signing: subtle, usages: sig };
+  const subtle = { name: "HMAC", hash: `SHA-${bits}` };
+  return { kty: ["oct"], secret: !0, subtle, signing: subtle, usages: sig };
 }
 function rsa(bits, saltLength) {
-    const name = saltLength ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5';
-    const subtle = { name, hash: `SHA-${bits}` };
-    return {
-        kty: ['RSA'],
-        subtle,
-        signing: saltLength ? { ...subtle, saltLength } : subtle,
-        usages: sig,
-        minRsaBits: 2048,
-    };
+  const subtle = { name: saltLength ? "RSA-PSS" : "RSASSA-PKCS1-v1_5", hash: `SHA-${bits}` };
+  return {
+    kty: ["RSA"],
+    subtle,
+    signing: saltLength ? { ...subtle, saltLength } : subtle,
+    usages: sig,
+    minRsaBits: 2048
+  };
 }
 function ecdsa(crv, bits) {
-    return {
-        kty: ['EC'],
-        crv,
-        subtle: { name: 'ECDSA', namedCurve: crv },
-        signing: { name: 'ECDSA', hash: `SHA-${bits}` },
-        usages: sig,
-    };
+  return {
+    kty: ["EC"],
+    crv,
+    subtle: { name: "ECDSA", namedCurve: crv },
+    signing: { name: "ECDSA", hash: `SHA-${bits}` },
+    usages: sig
+  };
 }
 function eddsa() {
-    const subtle = { name: 'Ed25519' };
-    return {
-        kty: ['OKP'],
-        crv: 'Ed25519',
-        subtle,
-        signing: subtle,
-        usages: sig,
-    };
+  const subtle = { name: "Ed25519" };
+  return {
+    kty: ["OKP"],
+    crv: "Ed25519",
+    subtle,
+    signing: subtle,
+    usages: sig
+  };
 }
 function mldsa(bits) {
-    const name = `ML-DSA-${bits}`;
-    const subtle = { name };
-    return {
-        kty: ['AKP'],
-        subtle,
-        signing: subtle,
-        usages: sig,
-    };
+  const subtle = { name: `ML-DSA-${bits}` };
+  return {
+    kty: ["AKP"],
+    subtle,
+    signing: subtle,
+    usages: sig
+  };
 }
-export const JWS = table({
-    HS256: hmac(256),
-    HS384: hmac(384),
-    HS512: hmac(512),
-    RS256: rsa(256),
-    RS384: rsa(384),
-    RS512: rsa(512),
-    PS256: rsa(256, 32),
-    PS384: rsa(384, 48),
-    PS512: rsa(512, 64),
-    ES256: ecdsa('P-256', 256),
-    ES384: ecdsa('P-384', 384),
-    ES512: ecdsa('P-521', 512),
-    EdDSA: eddsa(),
-    Ed25519: eddsa(),
-    'ML-DSA-44': mldsa(44),
-    'ML-DSA-65': mldsa(65),
-    'ML-DSA-87': mldsa(87),
+const JWS = table({
+  HS256: hmac(256),
+  HS384: hmac(384),
+  HS512: hmac(512),
+  RS256: rsa(256),
+  RS384: rsa(384),
+  RS512: rsa(512),
+  PS256: rsa(256, 32),
+  PS384: rsa(384, 48),
+  PS512: rsa(512, 64),
+  ES256: ecdsa("P-256", 256),
+  ES384: ecdsa("P-384", 384),
+  ES512: ecdsa("P-521", 512),
+  EdDSA: eddsa(),
+  Ed25519: eddsa(),
+  "ML-DSA-44": mldsa(44),
+  "ML-DSA-65": mldsa(65),
+  "ML-DSA-87": mldsa(87)
 });
-export function jwsAlgorithm(alg) {
-    const entry = typeof alg === 'string' ? JWS[alg] : undefined;
-    if (!entry) {
-        throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);
-    }
-    return entry;
+function jwsAlgorithm(alg) {
+  const entry = typeof alg == "string" ? JWS[alg] : void 0;
+  if (!entry)
+    throw new JOSENotSupported(`alg ${alg} is not supported either by JOSE or your javascript runtime`);
+  return entry;
 }
+export {
+  JWS,
+  jwsAlgorithm
+};

package/node_modules/jose/dist/webapi/lib/jws_sign.js

@@ -1,74 +1,60 @@
-import { encode as b64u } from '../util/base64url.js';
-import { sign } from './signing.js';
-import { jwsAlgorithm } from './jws_algorithms.js';
-import { isDisjoint } from './type_checks.js';
-import { JWSInvalid } from '../util/errors.js';
-import { concat, encode } from './buffer_utils.js';
-import { validateCrit, validateCritDuplicates, JWS_RECOGNIZED } from './options.js';
-import { prepareKey } from './key.js';
-export function unencodedPayload(protectedHeader) {
-    return (protectedHeader?.b64 === false &&
-        Array.isArray(protectedHeader.crit) &&
-        protectedHeader.crit.includes('b64'));
+import { encode as b64u } from "../util/base64url.js";
+import { sign } from "./signing.js";
+import { jwsAlgorithm } from "./jws_algorithms.js";
+import { isDisjoint } from "./type_checks.js";
+import { JWSInvalid } from "../util/errors.js";
+import { concat, encode } from "./buffer_utils.js";
+import { serializeJoseHeader, validateB64, validateCrit, validateCritDuplicates, JWS_RECOGNIZED } from "./options.js";
+import { prepareKey } from "./key.js";
+function serializeProtectedHeader(protectedHeader) {
+  if (protectedHeader === void 0)
+    return [void 0, ""];
+  const normalized = serializeJoseHeader(JWSInvalid, protectedHeader);
+  return [normalized[0], b64u(normalized[1])];
 }
-export async function createSignature(input, key) {
-    const { protectedHeader, unprotectedHeader } = input;
-    if (!protectedHeader && !unprotectedHeader) {
-        throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');
-    }
-    if (!isDisjoint(protectedHeader, unprotectedHeader)) {
-        throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');
-    }
-    const joseHeader = { ...protectedHeader, ...unprotectedHeader };
-    validateCritDuplicates(JWSInvalid, protectedHeader);
-    const extensions = validateCrit(JWSInvalid, JWS_RECOGNIZED, input.crit, protectedHeader, joseHeader);
-    let b64 = true;
-    if (extensions.includes('b64')) {
-        b64 = protectedHeader.b64;
-        if (typeof b64 !== 'boolean') {
-            throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
-        }
-    }
-    const { alg } = joseHeader;
-    if (typeof alg !== 'string' || !alg) {
-        throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-    }
-    const entry = jwsAlgorithm(alg);
-    let payloadS;
-    let payloadB;
-    if (b64) {
-        const encoded = (input.encoded ??= []);
-        encoded[0] ??= b64u(input.payload);
-        encoded[1] ??= encode(encoded[0]);
-        payloadS = encoded[0];
-        payloadB = encoded[1];
-    }
-    else {
-        payloadB = input.payload;
-        payloadS = '';
-    }
-    let protectedHeaderString;
-    let protectedHeaderBytes;
-    if (protectedHeader) {
-        protectedHeaderString = b64u(JSON.stringify(protectedHeader));
-        protectedHeaderBytes = encode(protectedHeaderString);
-    }
-    else {
-        protectedHeaderString = '';
-        protectedHeaderBytes = new Uint8Array();
-    }
-    const data = concat(protectedHeaderBytes, encode('.'), payloadB);
-    const k = await prepareKey(entry, key, 'sign');
-    const signature = await sign(entry, k, data);
-    const jws = {
-        signature: b64u(signature),
-        payload: payloadS,
-    };
-    if (protectedHeader) {
-        jws.protected = protectedHeaderString;
-    }
-    if (unprotectedHeader) {
-        jws.header = unprotectedHeader;
-    }
-    return jws;
+function validateSignatureHeader(protectedHeader, joseHeader, crit) {
+  return validateCritDuplicates(JWSInvalid, protectedHeader), validateB64(protectedHeader, validateCrit(JWSInvalid, JWS_RECOGNIZED, crit, protectedHeader, joseHeader));
 }
+function signatureAlgorithm(joseHeader) {
+  const alg = joseHeader.alg;
+  if (typeof alg != "string" || !alg)
+    throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+  return jwsAlgorithm(alg);
+}
+async function signSignature(protectedHeader, payload, entry, key) {
+  const data = concat(encode(protectedHeader), encode("."), payload), k = await prepareKey(entry, key, "sign");
+  return b64u(await sign(entry, k, data));
+}
+async function createSignature(input, key, assertB64) {
+  let { protectedHeader, unprotectedHeader } = input, protectedHeaderString;
+  if ([protectedHeader, protectedHeaderString] = serializeProtectedHeader(protectedHeader), unprotectedHeader !== void 0 && (unprotectedHeader = serializeJoseHeader(JWSInvalid, unprotectedHeader)[0]), !protectedHeader && !unprotectedHeader)
+    throw new JWSInvalid("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
+  if (!isDisjoint(protectedHeader, unprotectedHeader))
+    throw new JWSInvalid("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+  const joseHeader = { ...protectedHeader, ...unprotectedHeader }, b64 = validateSignatureHeader(protectedHeader, joseHeader, input.crit);
+  assertB64?.(b64);
+  const entry = signatureAlgorithm(joseHeader);
+  let payloadS, payloadB;
+  if (b64) {
+    const encoded = input.encoded ??= [];
+    encoded[0] ??= b64u(input.payload), encoded[1] ??= encode(encoded[0]), payloadS = encoded[0], payloadB = encoded[1];
+  } else
+    payloadB = input.payload, payloadS = "";
+  const jws = {
+    signature: await signSignature(protectedHeaderString, payloadB, entry, key),
+    payload: payloadS
+  };
+  return protectedHeader && (jws.protected = protectedHeaderString), unprotectedHeader && (jws.header = unprotectedHeader), [jws, b64];
+}
+async function createCompactSignature(payload, inputProtectedHeader, inputCrit, key, rejectUnencoded) {
+  const [protectedHeader, protectedHeaderString] = serializeProtectedHeader(inputProtectedHeader);
+  if (!protectedHeader)
+    throw new JWSInvalid("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
+  validateSignatureHeader(protectedHeader, protectedHeader, inputCrit) || rejectUnencoded();
+  const entry = signatureAlgorithm(protectedHeader), encodedPayload = b64u(payload), signature = await signSignature(protectedHeaderString, encode(encodedPayload), entry, key);
+  return `${protectedHeaderString}.${encodedPayload}.${signature}`;
+}
+export {
+  createCompactSignature,
+  createSignature
+};