@suveren/gateway 0.7.6 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/content/integrations/mollie.json +103 -28
- package/dist/mcp-server/http.mjs +228 -118
- package/dist/ui/assets/{index-CsrM6RQr.js → index-BFnSVa9N.js} +22 -22
- package/dist/ui/index.html +1 -1
- package/node_modules/@hap/core/dist/index.d.mts +29 -6
- package/node_modules/@hap/core/dist/index.d.ts +29 -6
- package/node_modules/@hap/core/dist/index.js +54 -8
- package/node_modules/@hap/core/dist/index.mjs +53 -8
- package/node_modules/@hap/core/package.json +2 -1
- package/node_modules/@hap/core/src/frame.ts +115 -14
- package/node_modules/@hap/core/src/gatekeeper.ts +26 -0
- package/node_modules/@hap/core/src/types.ts +7 -1
- package/node_modules/@types/node/README.md +1 -1
- package/node_modules/@types/node/buffer.buffer.d.ts +5 -0
- package/node_modules/@types/node/crypto.d.ts +0 -2
- package/node_modules/@types/node/dgram.d.ts +119 -4
- package/node_modules/@types/node/ffi.d.ts +1 -1
- package/node_modules/@types/node/fs/promises.d.ts +61 -65
- package/node_modules/@types/node/fs.d.ts +86 -76
- package/node_modules/@types/node/http.d.ts +1 -1
- package/node_modules/@types/node/http2.d.ts +2 -2
- package/node_modules/@types/node/index.d.ts +1 -0
- package/node_modules/@types/node/inspector.d.ts +2 -1
- package/node_modules/@types/node/net.d.ts +108 -16
- package/node_modules/@types/node/package.json +2 -2
- package/node_modules/@types/node/quic.d.ts +37 -11
- package/node_modules/@types/node/stream/iter.d.ts +4 -4
- package/node_modules/@types/node/tls.d.ts +24 -0
- package/node_modules/@types/node/ts5.6/buffer.buffer.d.ts +5 -0
- package/node_modules/@types/node/ts5.6/index.d.ts +1 -0
- package/node_modules/@types/node/ts5.7/index.d.ts +1 -0
- package/node_modules/@types/node/tty.d.ts +4 -3
- package/node_modules/@types/node/vfs.d.ts +210 -0
- package/node_modules/@types/node/vm.d.ts +1 -1
- package/node_modules/express-rate-limit/dist/index.cjs +6 -3
- package/node_modules/express-rate-limit/dist/index.d.cts +11 -0
- package/node_modules/express-rate-limit/dist/index.d.mts +11 -0
- package/node_modules/express-rate-limit/dist/index.d.ts +11 -0
- package/node_modules/express-rate-limit/dist/index.mjs +6 -3
- package/node_modules/express-rate-limit/{license.md → license} +7 -6
- package/node_modules/express-rate-limit/package.json +5 -5
- package/node_modules/express-rate-limit/readme.md +1 -0
- package/node_modules/fast-uri/index.js +20 -5
- package/node_modules/fast-uri/lib/utils.js +8 -1
- package/node_modules/fast-uri/package.json +1 -1
- package/node_modules/fast-uri/test/component-safe-serialization.test.js +58 -0
- package/node_modules/fast-uri/test/ipv6-validation.test.js +34 -0
- package/node_modules/ip-address/README.md +92 -82
- package/node_modules/ip-address/dist/common.d.ts +20 -0
- package/node_modules/ip-address/dist/common.js +36 -0
- package/node_modules/ip-address/dist/common.js.map +1 -1
- package/node_modules/ip-address/dist/ipv4.d.ts +50 -0
- package/node_modules/ip-address/dist/ipv4.js +75 -0
- package/node_modules/ip-address/dist/ipv4.js.map +1 -1
- package/node_modules/ip-address/dist/ipv6.d.ts +79 -10
- package/node_modules/ip-address/dist/ipv6.js +120 -30
- package/node_modules/ip-address/dist/ipv6.js.map +1 -1
- package/node_modules/ip-address/dist/v4/constants.d.ts +12 -0
- package/node_modules/ip-address/dist/v4/constants.js +40 -1
- package/node_modules/ip-address/dist/v4/constants.js.map +1 -1
- package/node_modules/ip-address/dist/v6/constants.d.ts +14 -0
- package/node_modules/ip-address/dist/v6/constants.js +47 -1
- package/node_modules/ip-address/dist/v6/constants.js.map +1 -1
- package/node_modules/ip-address/package.json +1 -1
- package/node_modules/jose/dist/types/jwe/compact/decrypt.d.ts +7 -16
- package/node_modules/jose/dist/types/jwe/compact/encrypt.d.ts +6 -17
- package/node_modules/jose/dist/types/jwe/flattened/decrypt.d.ts +7 -16
- package/node_modules/jose/dist/types/jwe/flattened/encrypt.d.ts +11 -34
- package/node_modules/jose/dist/types/jwe/general/decrypt.d.ts +7 -16
- package/node_modules/jose/dist/types/jwe/general/encrypt.d.ts +15 -35
- package/node_modules/jose/dist/types/jwk/embedded.d.ts +3 -8
- package/node_modules/jose/dist/types/jwk/thumbprint.d.ts +5 -5
- package/node_modules/jose/dist/types/jwks/local.d.ts +6 -10
- package/node_modules/jose/dist/types/jwks/remote.d.ts +13 -24
- package/node_modules/jose/dist/types/jws/compact/sign.d.ts +5 -10
- package/node_modules/jose/dist/types/jws/compact/verify.d.ts +9 -18
- package/node_modules/jose/dist/types/jws/flattened/sign.d.ts +7 -16
- package/node_modules/jose/dist/types/jws/flattened/verify.d.ts +9 -18
- package/node_modules/jose/dist/types/jws/general/sign.d.ts +11 -21
- package/node_modules/jose/dist/types/jws/general/verify.d.ts +9 -18
- package/node_modules/jose/dist/types/jwt/decrypt.d.ts +10 -20
- package/node_modules/jose/dist/types/jwt/encrypt.d.ts +6 -13
- package/node_modules/jose/dist/types/jwt/sign.d.ts +5 -6
- package/node_modules/jose/dist/types/jwt/unsecured.d.ts +9 -14
- package/node_modules/jose/dist/types/jwt/verify.d.ts +9 -19
- package/node_modules/jose/dist/types/key/export.d.ts +4 -4
- package/node_modules/jose/dist/types/key/generate_key_pair.d.ts +6 -8
- package/node_modules/jose/dist/types/key/generate_secret.d.ts +4 -11
- package/node_modules/jose/dist/types/key/import.d.ts +10 -17
- package/node_modules/jose/dist/types/types.d.ts +44 -84
- package/node_modules/jose/dist/types/util/base64url.d.ts +2 -2
- package/node_modules/jose/dist/types/util/decode_jwt.d.ts +3 -10
- package/node_modules/jose/dist/types/util/decode_protected_header.d.ts +4 -4
- package/node_modules/jose/dist/types/util/errors.d.ts +26 -53
- package/node_modules/jose/dist/webapi/index.js +70 -32
- package/node_modules/jose/dist/webapi/jwe/compact/decrypt.js +7 -8
- package/node_modules/jose/dist/webapi/jwe/compact/encrypt.js +42 -48
- package/node_modules/jose/dist/webapi/jwe/flattened/decrypt.js +14 -14
- package/node_modules/jose/dist/webapi/jwe/flattened/encrypt.js +53 -64
- package/node_modules/jose/dist/webapi/jwe/general/decrypt.js +38 -49
- package/node_modules/jose/dist/webapi/jwe/general/encrypt.js +121 -169
- package/node_modules/jose/dist/webapi/jwk/embedded.js +30 -32
- package/node_modules/jose/dist/webapi/jwk/thumbprint.js +54 -70
- package/node_modules/jose/dist/webapi/jwks/local.js +47 -64
- package/node_modules/jose/dist/webapi/jwks/remote.js +88 -136
- package/node_modules/jose/dist/webapi/jws/compact/sign.js +21 -21
- package/node_modules/jose/dist/webapi/jws/compact/verify.js +7 -8
- package/node_modules/jose/dist/webapi/jws/flattened/sign.js +29 -31
- package/node_modules/jose/dist/webapi/jws/flattened/verify.js +21 -24
- package/node_modules/jose/dist/webapi/jws/general/sign.js +61 -72
- package/node_modules/jose/dist/webapi/jws/general/verify.js +45 -69
- package/node_modules/jose/dist/webapi/jwt/decrypt.js +13 -20
- package/node_modules/jose/dist/webapi/jwt/encrypt.js +57 -70
- package/node_modules/jose/dist/webapi/jwt/sign.js +17 -16
- package/node_modules/jose/dist/webapi/jwt/unsecured.js +32 -40
- package/node_modules/jose/dist/webapi/jwt/verify.js +12 -14
- package/node_modules/jose/dist/webapi/key/export.js +32 -37
- package/node_modules/jose/dist/webapi/key/generate_key_pair.js +40 -48
- package/node_modules/jose/dist/webapi/key/generate_secret.js +35 -40
- package/node_modules/jose/dist/webapi/key/import.js +52 -56
- package/node_modules/jose/dist/webapi/lib/asn1.js +130 -169
- package/node_modules/jose/dist/webapi/lib/base64.js +18 -20
- package/node_modules/jose/dist/webapi/lib/buffer_utils.js +34 -38
- package/node_modules/jose/dist/webapi/lib/content_encryption.js +79 -115
- package/node_modules/jose/dist/webapi/lib/crypto_key.js +24 -25
- package/node_modules/jose/dist/webapi/lib/deflate.js +45 -47
- package/node_modules/jose/dist/webapi/lib/helpers.js +40 -37
- package/node_modules/jose/dist/webapi/lib/invalid_key_input.js +10 -24
- package/node_modules/jose/dist/webapi/lib/is_key_like.js +17 -15
- package/node_modules/jose/dist/webapi/lib/jwe_algorithms.js +106 -93
- package/node_modules/jose/dist/webapi/lib/jwe_decrypt.js +207 -230
- package/node_modules/jose/dist/webapi/lib/jwe_encrypt.js +104 -138
- package/node_modules/jose/dist/webapi/lib/jwk_metadata.js +17 -18
- package/node_modules/jose/dist/webapi/lib/jwk_to_key.js +9 -16
- package/node_modules/jose/dist/webapi/lib/jws_algorithms.js +62 -61
- package/node_modules/jose/dist/webapi/lib/jws_sign.js +50 -75
- package/node_modules/jose/dist/webapi/lib/jws_verify.js +80 -125
- package/node_modules/jose/dist/webapi/lib/jwt_claims_set.js +123 -209
- package/node_modules/jose/dist/webapi/lib/key.js +84 -136
- package/node_modules/jose/dist/webapi/lib/key_algorithm.js +13 -8
- package/node_modules/jose/dist/webapi/lib/key_descriptor.js +8 -6
- package/node_modules/jose/dist/webapi/lib/key_management.js +200 -231
- package/node_modules/jose/dist/webapi/lib/key_options.js +7 -5
- package/node_modules/jose/dist/webapi/lib/options.js +55 -68
- package/node_modules/jose/dist/webapi/lib/signing.js +18 -22
- package/node_modules/jose/dist/webapi/lib/type_checks.js +26 -29
- package/node_modules/jose/dist/webapi/util/base64url.js +26 -35
- package/node_modules/jose/dist/webapi/util/decode_jwt.js +32 -31
- package/node_modules/jose/dist/webapi/util/decode_protected_header.js +18 -23
- package/node_modules/jose/dist/webapi/util/errors.js +94 -84
- package/node_modules/jose/package.json +17 -81
- package/package.json +2 -2
- package/profiles/calendar/0.5.profile.json +190 -0
- package/profiles/charge/0.5.profile.json +210 -0
- package/profiles/customers/0.7.profile.json +157 -0
- package/profiles/deploy/0.9.profile.json +176 -0
- package/profiles/email/0.6.profile.json +208 -0
- package/profiles/index.json +9 -1
- package/profiles/publish/0.5.profile.json +186 -0
- package/profiles/purchase/0.5.profile.json +231 -0
- package/profiles/records/0.5.profile.json +117 -0
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/v6/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,IAAI,GAAG,GAAG,CAAC;AACX,QAAA,MAAM,GAAG,CAAC,CAAC;AAExB;;;;GAIG;AACU,QAAA,MAAM,GAA0C;IAC3D,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,oBAAoB;IACvB,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,UAAU;CACN,CAAC;AAEX;;;;GAIG;AACU,QAAA,KAAK,GAA0C;IAC1D,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,2CAA2C;IAC1D,aAAa,EAAE,oCAAoC;IACnD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,mCAAmC;IAClD,aAAa,EAAE,kCAAkC;IACjD,aAAa,EAAE,yBAAyB;IACxC,aAAa,EAAE,2BAA2B;IAC1C,aAAa,EAAE,yBAAyB;IACxC,cAAc,EAAE,2BAA2B;IAC3C,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,2CAA2C;IAC5D,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,aAAa;IAC9B,UAAU,EAAE,WAAW;IACvB,WAAW,EAAE,oBAAoB;IACjC,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,eAAe;IAChC,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,mBAAmB;CAC7B,CAAC;AAEX;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;;GAIG;AACU,QAAA,cAAc,GAAG,0CAA0C,CAAC;AAEzE;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;GAIG;AACU,QAAA,cAAc,GAAG,MAAM,CAAC;AAExB,QAAA,MAAM,GAAG,oDAAoD,CAAC;AAC9D,QAAA,gBAAgB,GAAG,+CAA+C,CAAC","sourcesContent":["export const BITS = 128;\nexport const GROUPS = 8;\n\n/**\n * Represents IPv6 address scopes\n * @memberof Address6\n * @static\n */\nexport const SCOPES: { [key: number]: string | undefined } = {\n 0: 'Reserved',\n 1: 'Interface local',\n 2: 'Link local',\n 4: 'Admin local',\n 5: 'Site local',\n 8: 'Organization local',\n 14: 'Global',\n 15: 'Reserved',\n} as const;\n\n/**\n * Represents IPv6 address types\n * @memberof Address6\n * @static\n */\nexport const TYPES: { [key: string]: string | undefined } = {\n 'ff01::1/128': 'Multicast (All nodes on this interface)',\n 'ff01::2/128': 'Multicast (All routers on this interface)',\n 'ff02::1/128': 'Multicast (All nodes on this link)',\n 'ff02::2/128': 'Multicast (All routers on this link)',\n 'ff05::2/128': 'Multicast (All routers in this site)',\n 'ff02::5/128': 'Multicast (OSPFv3 AllSPF routers)',\n 'ff02::6/128': 'Multicast (OSPFv3 AllDR routers)',\n 'ff02::9/128': 'Multicast (RIP routers)',\n 'ff02::a/128': 'Multicast (EIGRP routers)',\n 'ff02::d/128': 'Multicast (PIM routers)',\n 'ff02::16/128': 'Multicast (MLDv2 reports)',\n 'ff01::fb/128': 'Multicast (mDNSv6)',\n 'ff02::fb/128': 'Multicast (mDNSv6)',\n 'ff05::fb/128': 'Multicast (mDNSv6)',\n 'ff02::1:2/128': 'Multicast (All DHCP servers and relay agents on this link)',\n 'ff05::1:2/128': 'Multicast (All DHCP servers and relay agents in this site)',\n 'ff02::1:3/128': 'Multicast (All DHCP servers on this link)',\n 'ff05::1:3/128': 'Multicast (All DHCP servers in this site)',\n '::/128': 'Unspecified',\n '::1/128': 'Loopback',\n '::ffff:0:0/96': 'IPv4-mapped',\n 'ff00::/8': 'Multicast',\n 'fe80::/10': 'Link-local unicast',\n 'fc00::/7': 'Unique local',\n '2002::/16': '6to4',\n '2001:db8::/32': 'Documentation',\n '64:ff9b::/96': 'NAT64 (well-known)',\n '64:ff9b:1::/48': 'NAT64 (local-use)',\n} as const;\n\n/**\n * A regular expression that matches bad characters in an IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_CHARACTERS = /([^0-9a-f:/%])/gi;\n\n/**\n * A regular expression that matches an incorrect IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_ADDRESS = /([0-9a-f]{5,}|:{3,}|[^:]:$|^:[^:]|\\/$)/gi;\n\n/**\n * A regular expression that matches an IPv6 subnet\n * @memberof Address6\n * @static\n */\nexport const RE_SUBNET_STRING = /\\/\\d{1,3}(?=%|$)/;\n\n/**\n * A regular expression that matches an IPv6 zone\n * @memberof Address6\n * @static\n */\nexport const RE_ZONE_STRING = /%.*$/;\n\nexport const RE_URL = /^(?:\\[([0-9a-f:.]+)\\]|([0-9a-f:.]+))(?:[/?#].*)?$/i;\nexport const RE_URL_WITH_PORT = /^\\[([0-9a-f:.]+)\\]:([0-9]{1,5})(?:[/?#].*)?$/i;\n"]}
|
|
1
|
+
{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/v6/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,IAAI,GAAG,GAAG,CAAC;AACX,QAAA,MAAM,GAAG,CAAC,CAAC;AAExB;;;;GAIG;AACU,QAAA,MAAM,GAA0C;IAC3D,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,aAAa;IAChB,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,oBAAoB;IACvB,EAAE,EAAE,QAAQ;IACZ,EAAE,EAAE,UAAU;CACN,CAAC;AAEX;;;;GAIG;AACU,QAAA,KAAK,GAA0C;IAC1D,aAAa,EAAE,yCAAyC;IACxD,aAAa,EAAE,2CAA2C;IAC1D,aAAa,EAAE,oCAAoC;IACnD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,sCAAsC;IACrD,aAAa,EAAE,mCAAmC;IAClD,aAAa,EAAE,kCAAkC;IACjD,aAAa,EAAE,yBAAyB;IACxC,aAAa,EAAE,2BAA2B;IAC1C,aAAa,EAAE,yBAAyB;IACxC,cAAc,EAAE,2BAA2B;IAC3C,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,cAAc,EAAE,oBAAoB;IACpC,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,4DAA4D;IAC7E,eAAe,EAAE,2CAA2C;IAC5D,eAAe,EAAE,2CAA2C;IAC5D,QAAQ,EAAE,aAAa;IACvB,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,aAAa;IAC9B,UAAU,EAAE,WAAW;IACvB,WAAW,EAAE,oBAAoB;IACjC,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,cAAc;IAC7B,WAAW,EAAE,MAAM;IACnB,eAAe,EAAE,eAAe;IAChC,WAAW,EAAE,eAAe;IAC5B,UAAU,EAAE,cAAc;IAC1B,WAAW,EAAE,iCAAiC;IAC9C,OAAO,EAAE,8BAA8B;IACvC,cAAc,EAAE,oBAAoB;IACpC,gBAAgB,EAAE,mBAAmB;CAC7B,CAAC;AAEX;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;;GAIG;AACU,QAAA,cAAc,GAAG,0CAA0C,CAAC;AAEzE;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD;;;;GAIG;AACU,QAAA,cAAc,GAAG,MAAM,CAAC;AAExB,QAAA,MAAM,GAAG,oDAAoD,CAAC;AAC9D,QAAA,gBAAgB,GAAG,+CAA+C,CAAC;AAEhF;;;;;;;;;;;;GAYG;AACU,QAAA,eAAe,GAA6D;IACvF,CAAC,SAAS,EAAE,kBAAkB,EAAE,KAAK,CAAC;IACtC,CAAC,QAAQ,EAAE,qBAAqB,EAAE,KAAK,CAAC;IACxC,CAAC,eAAe,EAAE,qBAAqB,EAAE,KAAK,CAAC;IAC/C,CAAC,cAAc,EAAE,qBAAqB,EAAE,IAAI,CAAC;IAC7C,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,KAAK,CAAC;IAChD,CAAC,UAAU,EAAE,4BAA4B,EAAE,KAAK,CAAC;IACjD,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,KAAK,CAAC;IAC9C,CAAC,WAAW,EAAE,2BAA2B,EAAE,KAAK,CAAC;IACjD,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC;IAC9B,CAAC,eAAe,EAAE,+BAA+B,EAAE,IAAI,CAAC;IACxD,CAAC,eAAe,EAAE,2CAA2C,EAAE,IAAI,CAAC;IACpE,CAAC,eAAe,EAAE,8CAA8C,EAAE,IAAI,CAAC;IACvE,CAAC,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC;IACtC,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC;IAC5B,CAAC,iBAAiB,EAAE,UAAU,EAAE,IAAI,CAAC;IACrC,CAAC,cAAc,EAAE,gCAAgC,EAAE,IAAI,CAAC;IACxD,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC;IAClC,CAAC,cAAc,EAAE,oDAAoD,EAAE,IAAI,CAAC;IAC5E,CAAC,eAAe,EAAE,eAAe,EAAE,KAAK,CAAC;IACzC,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC;IAC5B,CAAC,mBAAmB,EAAE,iCAAiC,EAAE,IAAI,CAAC;IAC9D,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,CAAC;IACrC,CAAC,WAAW,EAAE,6BAA6B,EAAE,KAAK,CAAC;IACnD,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC;IACnC,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,CAAC;CAC3C,CAAC","sourcesContent":["export const BITS = 128;\nexport const GROUPS = 8;\n\n/**\n * Represents IPv6 address scopes\n * @memberof Address6\n * @static\n */\nexport const SCOPES: { [key: number]: string | undefined } = {\n 0: 'Reserved',\n 1: 'Interface local',\n 2: 'Link local',\n 4: 'Admin local',\n 5: 'Site local',\n 8: 'Organization local',\n 14: 'Global',\n 15: 'Reserved',\n} as const;\n\n/**\n * Represents IPv6 address types\n * @memberof Address6\n * @static\n */\nexport const TYPES: { [key: string]: string | undefined } = {\n 'ff01::1/128': 'Multicast (All nodes on this interface)',\n 'ff01::2/128': 'Multicast (All routers on this interface)',\n 'ff02::1/128': 'Multicast (All nodes on this link)',\n 'ff02::2/128': 'Multicast (All routers on this link)',\n 'ff05::2/128': 'Multicast (All routers in this site)',\n 'ff02::5/128': 'Multicast (OSPFv3 AllSPF routers)',\n 'ff02::6/128': 'Multicast (OSPFv3 AllDR routers)',\n 'ff02::9/128': 'Multicast (RIP routers)',\n 'ff02::a/128': 'Multicast (EIGRP routers)',\n 'ff02::d/128': 'Multicast (PIM routers)',\n 'ff02::16/128': 'Multicast (MLDv2 reports)',\n 'ff01::fb/128': 'Multicast (mDNSv6)',\n 'ff02::fb/128': 'Multicast (mDNSv6)',\n 'ff05::fb/128': 'Multicast (mDNSv6)',\n 'ff02::1:2/128': 'Multicast (All DHCP servers and relay agents on this link)',\n 'ff05::1:2/128': 'Multicast (All DHCP servers and relay agents in this site)',\n 'ff02::1:3/128': 'Multicast (All DHCP servers on this link)',\n 'ff05::1:3/128': 'Multicast (All DHCP servers in this site)',\n '::/128': 'Unspecified',\n '::1/128': 'Loopback',\n '::ffff:0:0/96': 'IPv4-mapped',\n 'ff00::/8': 'Multicast',\n 'fe80::/10': 'Link-local unicast',\n 'fc00::/7': 'Unique local',\n '2001::/32': 'Teredo',\n '2001:2::/48': 'Benchmarking',\n '2002::/16': '6to4',\n '2001:db8::/32': 'Documentation',\n '3fff::/20': 'Documentation',\n '100::/64': 'Discard-only',\n 'fec0::/10': 'Site-local unicast (deprecated)',\n '::/96': 'IPv4-compatible (deprecated)',\n '64:ff9b::/96': 'NAT64 (well-known)',\n '64:ff9b:1::/48': 'NAT64 (local-use)',\n} as const;\n\n/**\n * A regular expression that matches bad characters in an IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_CHARACTERS = /([^0-9a-f:/%])/gi;\n\n/**\n * A regular expression that matches an incorrect IPv6 address\n * @memberof Address6\n * @static\n */\nexport const RE_BAD_ADDRESS = /([0-9a-f]{5,}|:{3,}|[^:]:$|^:[^:]|\\/$)/gi;\n\n/**\n * A regular expression that matches an IPv6 subnet\n * @memberof Address6\n * @static\n */\nexport const RE_SUBNET_STRING = /\\/\\d{1,3}(?=%|$)/;\n\n/**\n * A regular expression that matches an IPv6 zone\n * @memberof Address6\n * @static\n */\nexport const RE_ZONE_STRING = /%.*$/;\n\nexport const RE_URL = /^(?:\\[([0-9a-f:.]+)\\]|([0-9a-f:.]+))(?:[/?#].*)?$/i;\nexport const RE_URL_WITH_PORT = /^\\[([0-9a-f:.]+)\\]:([0-9]{1,5})(?:[/?#].*)?$/i;\n\n/**\n * The IANA IPv6 Special-Purpose Address Registry\n * (https://www.iana.org/assignments/iana-ipv6-special-registry/), one entry\n * per block: `[cidr, name, globallyReachable]`. A `null` reachability means\n * the registry says N/A or leaves the column blank; N/A blocks (Teredo, 6to4)\n * are treated as not globally reachable, since a packet to one needs a relay,\n * and blank blocks inherit the answer of the block containing them.\n *\n * `Address6.isGlobal()` answers from the most specific entry containing the\n * address, after delegating IPv4-mapped and NAT64 well-known addresses to the\n * embedded IPv4 address. `test/data/iana-corpus.json` is generated from the\n * registry's CSV and pins this table to it.\n */\nexport const SPECIAL_PURPOSE: ReadonlyArray<readonly [string, string, boolean | null]> = [\n ['::1/128', 'Loopback Address', false],\n ['::/128', 'Unspecified Address', false],\n ['::ffff:0:0/96', 'IPv4-mapped Address', false],\n ['64:ff9b::/96', 'IPv4-IPv6 Translat.', true],\n ['64:ff9b:1::/48', 'IPv4-IPv6 Translat.', false],\n ['100::/64', 'Discard-Only Address Block', false],\n ['100:0:0:1::/64', 'Dummy IPv6 Prefix', false],\n ['2001::/23', 'IETF Protocol Assignments', false],\n ['2001::/32', 'TEREDO', false],\n ['2001:1::1/128', 'Port Control Protocol Anycast', true],\n ['2001:1::2/128', 'Traversal Using Relays around NAT Anycast', true],\n ['2001:1::3/128', 'DNS-SD Service Registration Protocol Anycast', true],\n ['2001:2::/48', 'Benchmarking', false],\n ['2001:3::/32', 'AMT', true],\n ['2001:4:112::/48', 'AS112-v6', true],\n ['2001:10::/28', 'Deprecated (previously ORCHID)', null],\n ['2001:20::/28', 'ORCHIDv2', true],\n ['2001:30::/28', 'Drone Remote ID Protocol Entity Tags (DETs) Prefix', true],\n ['2001:db8::/32', 'Documentation', false],\n ['2002::/16', '6to4', false],\n ['2620:4f:8000::/48', 'Direct Delegation AS112 Service', true],\n ['3fff::/20', 'Documentation', false],\n ['5f00::/16', 'Segment Routing (SRv6) SIDs', false],\n ['fc00::/7', 'Unique-Local', false],\n ['fe80::/10', 'Link-Local Unicast', false],\n];\n"]}
|
|
@@ -1,37 +1,28 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
3
|
-
|
|
4
|
-
* verified at the time of this function call.
|
|
5
|
-
*/
|
|
6
|
-
export interface CompactDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.CompactJWEHeaderParameters, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Dynamic key resolver for Compact JWE decryption. */
|
|
3
|
+
export interface CompactDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.CompactJWEHeaderParameters, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
|
|
7
4
|
}
|
|
8
5
|
/**
|
|
9
6
|
* Decrypts a Compact JWE.
|
|
10
7
|
*
|
|
11
|
-
* @param jwe Compact JWE.
|
|
12
8
|
* @param key Private Key or Secret to decrypt the JWE with. See
|
|
13
9
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
14
|
-
* @param options JWE Decryption options.
|
|
15
10
|
*/
|
|
16
|
-
export declare function compactDecrypt(jwe: string | Uint8Array, key:
|
|
11
|
+
export declare function compactDecrypt(jwe: string | Uint8Array, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.CompactDecryptResult>;
|
|
17
12
|
/**
|
|
18
13
|
* Decrypts a Compact JWE, resolving the key dynamically. The result additionally carries the
|
|
19
|
-
* {@link
|
|
14
|
+
* {@link t.ResolvedKey.key resolved key}.
|
|
20
15
|
*
|
|
21
|
-
* @param jwe Compact JWE.
|
|
22
16
|
* @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
|
|
23
17
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
24
|
-
* @param options JWE Decryption options.
|
|
25
18
|
*/
|
|
26
|
-
export declare function compactDecrypt<KeyType extends
|
|
19
|
+
export declare function compactDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: string | Uint8Array, getKey: CompactDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.CompactDecryptResult & t.ResolvedKey<KeyType>>;
|
|
27
20
|
/**
|
|
28
21
|
* Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
|
|
29
22
|
* either a key or a key resolution function; `key` is present on the result only when a resolution
|
|
30
23
|
* function was used.
|
|
31
24
|
*
|
|
32
|
-
* @param jwe Compact JWE.
|
|
33
25
|
* @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
|
|
34
26
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
35
|
-
* @param options JWE Decryption options.
|
|
36
27
|
*/
|
|
37
|
-
export declare function compactDecrypt(jwe: string | Uint8Array, key:
|
|
28
|
+
export declare function compactDecrypt(jwe: string | Uint8Array, key: t.KeyInput | CompactDecryptGetKey, options?: t.DecryptOptions): Promise<t.CompactDecryptResult & Partial<t.ResolvedKey>>;
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Builds and encrypts Compact JWE strings. */
|
|
3
3
|
export declare class CompactEncrypt {
|
|
4
4
|
#private;
|
|
5
5
|
/**
|
|
@@ -14,8 +14,6 @@ export declare class CompactEncrypt {
|
|
|
14
14
|
*
|
|
15
15
|
* @deprecated You should not use this method. It is only really intended for test and vector
|
|
16
16
|
* validation purposes.
|
|
17
|
-
*
|
|
18
|
-
* @param cek JWE Content Encryption Key.
|
|
19
17
|
*/
|
|
20
18
|
setContentEncryptionKey(cek: Uint8Array): this;
|
|
21
19
|
/**
|
|
@@ -24,31 +22,22 @@ export declare class CompactEncrypt {
|
|
|
24
22
|
*
|
|
25
23
|
* @deprecated You should not use this method. It is only really intended for test and vector
|
|
26
24
|
* validation purposes.
|
|
27
|
-
*
|
|
28
|
-
* @param iv JWE Initialization Vector.
|
|
29
25
|
*/
|
|
30
26
|
setInitializationVector(iv: Uint8Array): this;
|
|
31
|
-
/**
|
|
32
|
-
|
|
33
|
-
*
|
|
34
|
-
* @param protectedHeader JWE Protected Header object.
|
|
35
|
-
*/
|
|
36
|
-
setProtectedHeader(protectedHeader: types.CompactJWEHeaderParameters): this;
|
|
27
|
+
/** Sets the JWE Protected Header on the CompactEncrypt object. */
|
|
28
|
+
setProtectedHeader(protectedHeader: t.CompactJWEHeaderParameters): this;
|
|
37
29
|
/**
|
|
38
30
|
* Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
|
|
39
31
|
* the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
|
|
40
32
|
* and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
|
|
41
33
|
* appropriate JOSE Header.
|
|
42
|
-
*
|
|
43
|
-
* @param parameters JWE Key Management parameters.
|
|
44
34
|
*/
|
|
45
|
-
setKeyManagementParameters(parameters:
|
|
35
|
+
setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
|
|
46
36
|
/**
|
|
47
37
|
* Encrypts and resolves the value of the Compact JWE string.
|
|
48
38
|
*
|
|
49
39
|
* @param key Public Key or Secret to encrypt the JWE with. See
|
|
50
40
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
51
|
-
* @param options JWE Encryption options.
|
|
52
41
|
*/
|
|
53
|
-
encrypt(key:
|
|
42
|
+
encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<string>;
|
|
54
43
|
}
|
|
@@ -1,37 +1,28 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
3
|
-
|
|
4
|
-
* verified at the time of this function call.
|
|
5
|
-
*/
|
|
6
|
-
export interface FlattenedDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWEHeaderParameters | undefined, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Dynamic key resolver for Flattened JWE decryption. */
|
|
3
|
+
export interface FlattenedDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWEHeaderParameters | undefined, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
|
|
7
4
|
}
|
|
8
5
|
/**
|
|
9
6
|
* Decrypts a Flattened JWE.
|
|
10
7
|
*
|
|
11
|
-
* @param jwe Flattened JWE.
|
|
12
8
|
* @param key Private Key or Secret to decrypt the JWE with. See
|
|
13
9
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
14
|
-
* @param options JWE Decryption options.
|
|
15
10
|
*/
|
|
16
|
-
export declare function flattenedDecrypt(jwe:
|
|
11
|
+
export declare function flattenedDecrypt(jwe: t.FlattenedJWE, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult>;
|
|
17
12
|
/**
|
|
18
13
|
* Decrypts a Flattened JWE, resolving the key dynamically. The result additionally carries the
|
|
19
|
-
* {@link
|
|
14
|
+
* {@link t.ResolvedKey.key resolved key}.
|
|
20
15
|
*
|
|
21
|
-
* @param jwe Flattened JWE.
|
|
22
16
|
* @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
|
|
23
17
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
24
|
-
* @param options JWE Decryption options.
|
|
25
18
|
*/
|
|
26
|
-
export declare function flattenedDecrypt<KeyType extends
|
|
19
|
+
export declare function flattenedDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: t.FlattenedJWE, getKey: FlattenedDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult & t.ResolvedKey<KeyType>>;
|
|
27
20
|
/**
|
|
28
21
|
* Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
|
|
29
22
|
* either a key or a key resolution function; `key` is present on the result only when a resolution
|
|
30
23
|
* function was used.
|
|
31
24
|
*
|
|
32
|
-
* @param jwe Flattened JWE.
|
|
33
25
|
* @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
|
|
34
26
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
35
|
-
* @param options JWE Decryption options.
|
|
36
27
|
*/
|
|
37
|
-
export declare function flattenedDecrypt(jwe:
|
|
28
|
+
export declare function flattenedDecrypt(jwe: t.FlattenedJWE, key: t.KeyInput | FlattenedDecryptGetKey, options?: t.DecryptOptions): Promise<t.FlattenedDecryptResult & Partial<t.ResolvedKey>>;
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Builds and encrypts Flattened JWE objects. */
|
|
3
3
|
export declare class FlattenedEncrypt {
|
|
4
4
|
#private;
|
|
5
5
|
/**
|
|
@@ -13,33 +13,15 @@ export declare class FlattenedEncrypt {
|
|
|
13
13
|
* the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
|
|
14
14
|
* and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
|
|
15
15
|
* appropriate JOSE Header.
|
|
16
|
-
*
|
|
17
|
-
* @param parameters JWE Key Management parameters.
|
|
18
|
-
*/
|
|
19
|
-
setKeyManagementParameters(parameters: types.JWEKeyManagementHeaderParameters): this;
|
|
20
|
-
/**
|
|
21
|
-
* Sets the JWE Protected Header on the FlattenedEncrypt object.
|
|
22
|
-
*
|
|
23
|
-
* @param protectedHeader JWE Protected Header.
|
|
24
|
-
*/
|
|
25
|
-
setProtectedHeader(protectedHeader: types.JWEHeaderParameters): this;
|
|
26
|
-
/**
|
|
27
|
-
* Sets the JWE Shared Unprotected Header on the FlattenedEncrypt object.
|
|
28
|
-
*
|
|
29
|
-
* @param sharedUnprotectedHeader JWE Shared Unprotected Header.
|
|
30
|
-
*/
|
|
31
|
-
setSharedUnprotectedHeader(sharedUnprotectedHeader: types.JWEHeaderParameters): this;
|
|
32
|
-
/**
|
|
33
|
-
* Sets the JWE Per-Recipient Unprotected Header on the FlattenedEncrypt object.
|
|
34
|
-
*
|
|
35
|
-
* @param unprotectedHeader JWE Per-Recipient Unprotected Header.
|
|
36
|
-
*/
|
|
37
|
-
setUnprotectedHeader(unprotectedHeader: types.JWEHeaderParameters): this;
|
|
38
|
-
/**
|
|
39
|
-
* Sets the Additional Authenticated Data on the FlattenedEncrypt object.
|
|
40
|
-
*
|
|
41
|
-
* @param aad Additional Authenticated Data.
|
|
42
16
|
*/
|
|
17
|
+
setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): this;
|
|
18
|
+
/** Sets the JWE Protected Header on the FlattenedEncrypt object. */
|
|
19
|
+
setProtectedHeader(protectedHeader: t.JWEHeaderParameters): this;
|
|
20
|
+
/** Sets the JWE Shared Unprotected Header on the FlattenedEncrypt object. */
|
|
21
|
+
setSharedUnprotectedHeader(sharedUnprotectedHeader: t.JWEHeaderParameters): this;
|
|
22
|
+
/** Sets the JWE Per-Recipient Unprotected Header on the FlattenedEncrypt object. */
|
|
23
|
+
setUnprotectedHeader(unprotectedHeader: t.JWEHeaderParameters): this;
|
|
24
|
+
/** Sets the Additional Authenticated Data on the FlattenedEncrypt object. */
|
|
43
25
|
setAdditionalAuthenticatedData(aad: Uint8Array): this;
|
|
44
26
|
/**
|
|
45
27
|
* Sets a content encryption key to use, by default a random suitable one is generated for the JWE
|
|
@@ -47,8 +29,6 @@ export declare class FlattenedEncrypt {
|
|
|
47
29
|
*
|
|
48
30
|
* @deprecated You should not use this method. It is only really intended for test and vector
|
|
49
31
|
* validation purposes.
|
|
50
|
-
*
|
|
51
|
-
* @param cek JWE Content Encryption Key.
|
|
52
32
|
*/
|
|
53
33
|
setContentEncryptionKey(cek: Uint8Array): this;
|
|
54
34
|
/**
|
|
@@ -57,8 +37,6 @@ export declare class FlattenedEncrypt {
|
|
|
57
37
|
*
|
|
58
38
|
* @deprecated You should not use this method. It is only really intended for test and vector
|
|
59
39
|
* validation purposes.
|
|
60
|
-
*
|
|
61
|
-
* @param iv JWE Initialization Vector.
|
|
62
40
|
*/
|
|
63
41
|
setInitializationVector(iv: Uint8Array): this;
|
|
64
42
|
/**
|
|
@@ -66,7 +44,6 @@ export declare class FlattenedEncrypt {
|
|
|
66
44
|
*
|
|
67
45
|
* @param key Public Key or Secret to encrypt the JWE with. See
|
|
68
46
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
69
|
-
* @param options JWE Encryption options.
|
|
70
47
|
*/
|
|
71
|
-
encrypt(key:
|
|
48
|
+
encrypt(key: t.KeyInput, options?: t.EncryptOptions): Promise<t.FlattenedJWE>;
|
|
72
49
|
}
|
|
@@ -1,9 +1,6 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
3
|
-
|
|
4
|
-
* verified at the time of this function call.
|
|
5
|
-
*/
|
|
6
|
-
export interface GeneralDecryptGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWEHeaderParameters | undefined, types.FlattenedJWE, KeyType | types.KeyObject | types.JWK> {
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Dynamic key resolver for General JWE decryption. */
|
|
3
|
+
export interface GeneralDecryptGetKey<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array> extends t.GetKeyFunction<t.JWEHeaderParameters | undefined, t.FlattenedJWE, KeyType | t.KeyObject | t.JWK> {
|
|
7
4
|
}
|
|
8
5
|
/**
|
|
9
6
|
* Decrypts a General JWE.
|
|
@@ -14,30 +11,24 @@ export interface GeneralDecryptGetKey<KeyType extends types.CryptoKey | Uint8Arr
|
|
|
14
11
|
* > in the General JWE are not validated, and their headers are not included in the returned result.
|
|
15
12
|
* > Recipients of a General JWE should only rely on the returned (decrypted) data.
|
|
16
13
|
*
|
|
17
|
-
* @param jwe General JWE.
|
|
18
14
|
* @param key Private Key or Secret to decrypt the JWE with. See
|
|
19
15
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
20
|
-
* @param options JWE Decryption options.
|
|
21
16
|
*/
|
|
22
|
-
export declare function generalDecrypt(jwe:
|
|
17
|
+
export declare function generalDecrypt(jwe: t.GeneralJWE, key: t.KeyInput, options?: t.DecryptOptions): Promise<t.GeneralDecryptResult>;
|
|
23
18
|
/**
|
|
24
19
|
* Decrypts a General JWE, resolving the key dynamically. The result additionally carries the
|
|
25
|
-
* {@link
|
|
20
|
+
* {@link t.ResolvedKey.key resolved key}.
|
|
26
21
|
*
|
|
27
|
-
* @param jwe General JWE.
|
|
28
22
|
* @param getKey Function resolving Private Key or Secret to decrypt the JWE with. See
|
|
29
23
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
30
|
-
* @param options JWE Decryption options.
|
|
31
24
|
*/
|
|
32
|
-
export declare function generalDecrypt<KeyType extends
|
|
25
|
+
export declare function generalDecrypt<KeyType extends t.CryptoKey | Uint8Array = t.CryptoKey | Uint8Array>(jwe: t.GeneralJWE, getKey: GeneralDecryptGetKey<KeyType>, options?: t.DecryptOptions): Promise<t.GeneralDecryptResult & t.ResolvedKey<KeyType>>;
|
|
33
26
|
/**
|
|
34
27
|
* Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
|
|
35
28
|
* either a key or a key resolution function; `key` is present on the result only when a resolution
|
|
36
29
|
* function was used.
|
|
37
30
|
*
|
|
38
|
-
* @param jwe General JWE.
|
|
39
31
|
* @param key Private Key or Secret, or a function resolving one, to decrypt the JWE with. See
|
|
40
32
|
* {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
41
|
-
* @param options JWE Decryption options.
|
|
42
33
|
*/
|
|
43
|
-
export declare function generalDecrypt(jwe:
|
|
34
|
+
export declare function generalDecrypt(jwe: t.GeneralJWE, key: t.KeyInput | GeneralDecryptGetKey, options?: t.DecryptOptions): Promise<t.GeneralDecryptResult & Partial<t.ResolvedKey>>;
|
|
@@ -1,40 +1,33 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Configures an individual recipient in a General JWE. */
|
|
3
3
|
export interface Recipient {
|
|
4
|
-
/**
|
|
5
|
-
|
|
6
|
-
*
|
|
7
|
-
* @param unprotectedHeader JWE Per-Recipient Unprotected Header.
|
|
8
|
-
*/
|
|
9
|
-
setUnprotectedHeader(unprotectedHeader: types.JWEHeaderParameters): Recipient;
|
|
4
|
+
/** Sets the JWE Per-Recipient Unprotected Header on the Recipient object. */
|
|
5
|
+
setUnprotectedHeader(unprotectedHeader: t.JWEHeaderParameters): Recipient;
|
|
10
6
|
/**
|
|
11
7
|
* Sets the JWE Key Management parameters to be used when encrypting. Use this method instead of
|
|
12
8
|
* the header setters to configure algorithm inputs such as ECDH-ES "apu" (Agreement PartyUInfo)
|
|
13
9
|
* and "apv" (Agreement PartyVInfo), or PBES2 "p2c" (PBES2 Count). The parameters are added to the
|
|
14
10
|
* appropriate JOSE Header.
|
|
15
|
-
*
|
|
16
|
-
* @param parameters JWE Key Management parameters.
|
|
17
11
|
*/
|
|
18
|
-
setKeyManagementParameters(parameters:
|
|
12
|
+
setKeyManagementParameters(parameters: t.JWEKeyManagementHeaderParameters): Recipient;
|
|
19
13
|
/**
|
|
20
14
|
* A shorthand for calling {@link GeneralEncrypt.addRecipient addRecipient()} on the enclosing
|
|
21
15
|
* {@link GeneralEncrypt} instance.
|
|
22
16
|
*
|
|
23
17
|
* @param key Public Key or Secret to encrypt the Content Encryption Key for the recipient with.
|
|
24
18
|
* See {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
25
|
-
* @param options JWE Encryption options.
|
|
26
19
|
*/
|
|
27
|
-
addRecipient(key:
|
|
20
|
+
addRecipient(key: t.KeyInput, options?: t.CritOption): Recipient;
|
|
28
21
|
/**
|
|
29
22
|
* A shorthand for calling {@link GeneralEncrypt.encrypt encrypt()} on the enclosing
|
|
30
23
|
* {@link GeneralEncrypt} instance. Takes no arguments — each recipient's key is supplied to
|
|
31
24
|
* {@link addRecipient}.
|
|
32
25
|
*/
|
|
33
|
-
encrypt(): Promise<
|
|
26
|
+
encrypt(): Promise<t.GeneralJWE>;
|
|
34
27
|
/** Returns the enclosing {@link GeneralEncrypt} instance */
|
|
35
28
|
done(): GeneralEncrypt;
|
|
36
29
|
}
|
|
37
|
-
/**
|
|
30
|
+
/** Builds and encrypts General JWE objects. */
|
|
38
31
|
export declare class GeneralEncrypt {
|
|
39
32
|
#private;
|
|
40
33
|
/**
|
|
@@ -48,27 +41,14 @@ export declare class GeneralEncrypt {
|
|
|
48
41
|
*
|
|
49
42
|
* @param key Public Key or Secret to encrypt the Content Encryption Key for the recipient with.
|
|
50
43
|
* See {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}.
|
|
51
|
-
* @param options JWE Encryption options.
|
|
52
|
-
*/
|
|
53
|
-
addRecipient(key: types.KeyInput, options?: types.CritOption): Recipient;
|
|
54
|
-
/**
|
|
55
|
-
* Sets the JWE Protected Header on the GeneralEncrypt object.
|
|
56
|
-
*
|
|
57
|
-
* @param protectedHeader JWE Protected Header object.
|
|
58
|
-
*/
|
|
59
|
-
setProtectedHeader(protectedHeader: types.JWEHeaderParameters): this;
|
|
60
|
-
/**
|
|
61
|
-
* Sets the JWE Shared Unprotected Header on the GeneralEncrypt object.
|
|
62
|
-
*
|
|
63
|
-
* @param sharedUnprotectedHeader JWE Shared Unprotected Header object.
|
|
64
|
-
*/
|
|
65
|
-
setSharedUnprotectedHeader(sharedUnprotectedHeader: types.JWEHeaderParameters): this;
|
|
66
|
-
/**
|
|
67
|
-
* Sets the Additional Authenticated Data on the GeneralEncrypt object.
|
|
68
|
-
*
|
|
69
|
-
* @param aad Additional Authenticated Data.
|
|
70
44
|
*/
|
|
45
|
+
addRecipient(key: t.KeyInput, options?: t.CritOption): Recipient;
|
|
46
|
+
/** Sets the JWE Protected Header on the GeneralEncrypt object. */
|
|
47
|
+
setProtectedHeader(protectedHeader: t.JWEHeaderParameters): this;
|
|
48
|
+
/** Sets the JWE Shared Unprotected Header on the GeneralEncrypt object. */
|
|
49
|
+
setSharedUnprotectedHeader(sharedUnprotectedHeader: t.JWEHeaderParameters): this;
|
|
50
|
+
/** Sets the Additional Authenticated Data on the GeneralEncrypt object. */
|
|
71
51
|
setAdditionalAuthenticatedData(aad: Uint8Array): this;
|
|
72
52
|
/** Encrypts and resolves the value of the General JWE object. */
|
|
73
|
-
encrypt(): Promise<
|
|
53
|
+
encrypt(): Promise<t.GeneralJWE>;
|
|
74
54
|
}
|
|
@@ -1,13 +1,8 @@
|
|
|
1
|
-
import type * as
|
|
1
|
+
import type * as t from '../types.d.ts';
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
4
|
-
* used with the JWS/JWT verify operations whenever you need to opt-in to verify signatures with a
|
|
5
|
-
* public key embedded in the token's "jwk" (JSON Web Key) Header Parameter. It is recommended to
|
|
6
|
-
* combine this with the verify function's `algorithms` option to define accepted JWS "alg"
|
|
7
|
-
* (Algorithm) Header Parameter values.
|
|
3
|
+
* Resolves a verification key from an embedded "jwk" (JSON Web Key) Header Parameter.
|
|
8
4
|
*
|
|
9
|
-
* @param protectedHeader JWS Protected Header.
|
|
10
5
|
* @param token The consumed JWS token.
|
|
11
6
|
* @returns The public key from the JWS "jwk" (JSON Web Key) Header Parameter.
|
|
12
7
|
*/
|
|
13
|
-
export declare function EmbeddedJWK(protectedHeader?:
|
|
8
|
+
export declare function EmbeddedJWK(protectedHeader?: t.JWSHeaderParameters, token?: t.FlattenedJWSInput): Promise<t.CryptoKey>;
|
|
@@ -1,17 +1,17 @@
|
|
|
1
|
-
import type * as
|
|
1
|
+
import type * as t from '../types.d.ts';
|
|
2
2
|
/**
|
|
3
|
-
* Calculates a base64url-encoded JSON Web Key (JWK) Thumbprint
|
|
3
|
+
* Calculates a base64url-encoded JSON Web Key (JWK) Thumbprint.
|
|
4
4
|
*
|
|
5
5
|
* @param key Key to calculate the thumbprint for.
|
|
6
6
|
* @param digestAlgorithm Digest Algorithm to use for calculating the thumbprint. Default is
|
|
7
7
|
* "sha256".
|
|
8
8
|
*/
|
|
9
|
-
export declare function calculateJwkThumbprint(key:
|
|
9
|
+
export declare function calculateJwkThumbprint(key: t.JWK | t.CryptoKey | t.KeyObject, digestAlgorithm?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;
|
|
10
10
|
/**
|
|
11
|
-
* Calculates a JSON Web Key (JWK) Thumbprint URI
|
|
11
|
+
* Calculates a JSON Web Key (JWK) Thumbprint URI.
|
|
12
12
|
*
|
|
13
13
|
* @param key Key to calculate the thumbprint for.
|
|
14
14
|
* @param digestAlgorithm Digest Algorithm to use for calculating the thumbprint. Default is
|
|
15
15
|
* "sha256".
|
|
16
16
|
*/
|
|
17
|
-
export declare function calculateJwkThumbprintUri(key:
|
|
17
|
+
export declare function calculateJwkThumbprintUri(key: t.CryptoKey | t.KeyObject | t.JWK, digestAlgorithm?: 'sha256' | 'sha384' | 'sha512'): Promise<string>;
|
|
@@ -1,20 +1,16 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
1
|
+
import type * as t from '../types.d.ts';
|
|
2
|
+
/** A key resolver created by {@link createLocalJWKSet}. */
|
|
3
3
|
export interface LocalJWKSet {
|
|
4
|
-
(protectedHeader?:
|
|
4
|
+
(protectedHeader?: t.JWSHeaderParameters, token?: t.FlattenedJWSInput): Promise<t.CryptoKey>;
|
|
5
5
|
/** Returns a structured clone of the JSON Web Key Set this resolver was created with. */
|
|
6
|
-
jwks: () =>
|
|
6
|
+
jwks: () => t.JSONWebKeySet;
|
|
7
7
|
}
|
|
8
8
|
/**
|
|
9
|
-
*
|
|
10
|
-
* or otherwise available, JSON Web Key Set. Selection respects the header's "alg" (Algorithm) and
|
|
11
|
-
* "kid" (Key ID) as well as the JWK's "use" (Public Key Use) and "key_ops" (Key Operations).
|
|
12
|
-
* Exactly one key must match; if multiple keys match, the thrown `JWKSMultipleMatchingKeys` can be
|
|
13
|
-
* iterated.
|
|
9
|
+
* Creates a resolver for a locally available JSON Web Key Set.
|
|
14
10
|
*
|
|
15
11
|
* > Note: The function's purpose is to resolve public keys used for verifying signatures and will not work
|
|
16
12
|
* > for public encryption keys.
|
|
17
13
|
*
|
|
18
14
|
* @param jwks JSON Web Key Set formatted object.
|
|
19
15
|
*/
|
|
20
|
-
export declare function createLocalJWKSet(jwks:
|
|
16
|
+
export declare function createLocalJWKSet(jwks: t.JSONWebKeySet): LocalJWKSet;
|
|
@@ -1,13 +1,12 @@
|
|
|
1
|
-
import type * as
|
|
1
|
+
import type * as t from '../types.d.ts';
|
|
2
2
|
/**
|
|
3
|
-
*
|
|
4
|
-
* to make use of advanced fetch configurations, HTTP Proxies, retry on network errors, etc.
|
|
3
|
+
* Symbol used to configure a custom fetch implementation for remote JWKS retrieval.
|
|
5
4
|
*
|
|
6
5
|
* > Note: Known caveat: Expect Type-related issues when passing the inputs through to fetch-like modules,
|
|
7
6
|
* > they hardly ever get their typings inline with actual fetch, you should `@ts-expect-error` them.
|
|
8
7
|
*/
|
|
9
8
|
export declare const customFetch: unique symbol;
|
|
10
|
-
/**
|
|
9
|
+
/** Function signature accepted by {@link customFetch}. */
|
|
11
10
|
export type FetchImplementation = (
|
|
12
11
|
/** URL the request is being made sent to {@link !fetch} as the `resource` argument */
|
|
13
12
|
url: string,
|
|
@@ -22,17 +21,14 @@ options: {
|
|
|
22
21
|
signal: AbortSignal;
|
|
23
22
|
}) => Promise<Response>;
|
|
24
23
|
/**
|
|
24
|
+
* Symbol used to configure an externally persisted remote JWKS cache.
|
|
25
|
+
*
|
|
25
26
|
* > Warning: This option has security implications that must be understood, assessed for applicability, and
|
|
26
27
|
* > accepted before use. It is critical that the JSON Web Key Set cache only be writable by your own
|
|
27
28
|
* > code.
|
|
28
|
-
*
|
|
29
|
-
* This option is intended for cloud computing runtimes that cannot keep an in memory cache between
|
|
30
|
-
* their code's invocations. The supplied writable object seeds the resolver's cache and is updated
|
|
31
|
-
* with `jwks` and `uat` after a successful fetch; persist it whenever `uat` changes. Using this in
|
|
32
|
-
* runtimes that can keep an in-memory cache between requests is not desirable.
|
|
33
29
|
*/
|
|
34
30
|
export declare const jwksCache: unique symbol;
|
|
35
|
-
/**
|
|
31
|
+
/** Remote JWKS resolver options. */
|
|
36
32
|
export interface RemoteJWKSetOptions {
|
|
37
33
|
/**
|
|
38
34
|
* Timeout (in milliseconds) for the HTTP request. When reached the request will be aborted and
|
|
@@ -56,18 +52,18 @@ export interface RemoteJWKSetOptions {
|
|
|
56
52
|
/** See {@link customFetch}. */
|
|
57
53
|
[customFetch]?: FetchImplementation;
|
|
58
54
|
}
|
|
59
|
-
/**
|
|
55
|
+
/** Shape of an externally persisted remote JWKS cache. */
|
|
60
56
|
export interface ExportedJWKSCache {
|
|
61
57
|
/** Current cached JSON Web Key Set */
|
|
62
|
-
jwks:
|
|
58
|
+
jwks: t.JSONWebKeySet;
|
|
63
59
|
/** Last updated at timestamp (milliseconds since epoch) */
|
|
64
60
|
uat: number;
|
|
65
61
|
}
|
|
66
|
-
/**
|
|
62
|
+
/** Values accepted by the {@link jwksCache} option. */
|
|
67
63
|
export type JWKSCacheInput = ExportedJWKSCache | Record<string, never>;
|
|
68
|
-
/**
|
|
64
|
+
/** A key resolver created by {@link createRemoteJWKSet}. */
|
|
69
65
|
export interface RemoteJWKSet {
|
|
70
|
-
(protectedHeader?:
|
|
66
|
+
(protectedHeader?: t.JWSHeaderParameters, token?: t.FlattenedJWSInput): Promise<t.CryptoKey>;
|
|
71
67
|
/** Whether the cooldown window following the last successful fetch is still in effect. */
|
|
72
68
|
readonly coolingDown: boolean;
|
|
73
69
|
/**
|
|
@@ -86,21 +82,14 @@ export interface RemoteJWKSet {
|
|
|
86
82
|
* The currently cached JSON Web Key Set, or `undefined` when none has been fetched or seeded via
|
|
87
83
|
* {@link jwksCache} yet.
|
|
88
84
|
*/
|
|
89
|
-
jwks: () =>
|
|
85
|
+
jwks: () => t.JSONWebKeySet | undefined;
|
|
90
86
|
}
|
|
91
87
|
/**
|
|
92
|
-
*
|
|
93
|
-
* remote endpoint returning a JSON Web Key Set, that is, for example, an OAuth 2.0 or OIDC
|
|
94
|
-
* jwks_uri. The JSON Web Key Set is fetched when no key matches the selection process but only as
|
|
95
|
-
* frequently as the `cooldownDuration` option allows to prevent abuse. Selection respects the
|
|
96
|
-
* header's "alg" (Algorithm) and "kid" (Key ID) as well as the JWK's "use" (Public Key Use) and
|
|
97
|
-
* "key_ops" (Key Operations). Exactly one key must match; if multiple keys match, the thrown
|
|
98
|
-
* `JWKSMultipleMatchingKeys` can be iterated.
|
|
88
|
+
* Creates a resolver for a JSON Web Key Set available at an HTTP(S) URL.
|
|
99
89
|
*
|
|
100
90
|
* > Note: The function's purpose is to resolve public keys used for verifying signatures and will not work
|
|
101
91
|
* > for public encryption keys.
|
|
102
92
|
*
|
|
103
93
|
* @param url URL to fetch the JSON Web Key Set from.
|
|
104
|
-
* @param options Options for the remote JSON Web Key Set.
|
|
105
94
|
*/
|
|
106
95
|
export declare function createRemoteJWKSet(url: URL, options?: RemoteJWKSetOptions): RemoteJWKSet;
|
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import type * as
|
|
2
|
-
/**
|
|
1
|
+
import type * as t from '../../types.d.ts';
|
|
2
|
+
/** Builds and signs Compact JWS strings. */
|
|
3
3
|
export declare class CompactSign {
|
|
4
4
|
#private;
|
|
5
5
|
/**
|
|
@@ -8,18 +8,13 @@ export declare class CompactSign {
|
|
|
8
8
|
* @param payload Binary representation of the payload to sign.
|
|
9
9
|
*/
|
|
10
10
|
constructor(payload: Uint8Array);
|
|
11
|
-
/**
|
|
12
|
-
|
|
13
|
-
*
|
|
14
|
-
* @param protectedHeader JWS Protected Header.
|
|
15
|
-
*/
|
|
16
|
-
setProtectedHeader(protectedHeader: types.CompactJWSHeaderParameters): this;
|
|
11
|
+
/** Sets the JWS Protected Header on the CompactSign object. */
|
|
12
|
+
setProtectedHeader(protectedHeader: t.CompactJWSHeaderParameters): this;
|
|
17
13
|
/**
|
|
18
14
|
* Signs and resolves the value of the Compact JWS string.
|
|
19
15
|
*
|
|
20
16
|
* @param key Private Key or Secret to sign the JWS with. See
|
|
21
17
|
* {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
|
|
22
|
-
* @param options JWS Sign options.
|
|
23
18
|
*/
|
|
24
|
-
sign(key:
|
|
19
|
+
sign(key: t.KeyInput, options?: t.SignOptions): Promise<string>;
|
|
25
20
|
}
|