@suveren/gateway 0.7.6 → 0.8.0

package/node_modules/jose/dist/webapi/lib/asn1.js

@@ -1,179 +1,140 @@
-import { invalidKeyInput } from './invalid_key_input.js';
-import { encodeBase64, decodeBase64 } from '../lib/base64.js';
-import { JOSENotSupported } from '../util/errors.js';
-import { keyAlgorithm, unsupportedAlg, algArgument } from './key_algorithm.js';
-import { isCryptoKey, isKeyObject } from './is_key_like.js';
-import { validateExtractableOption } from './key_options.js';
+import { invalidKeyInput } from "./invalid_key_input.js";
+import { encodeBase64, decodeBase64 } from "../lib/base64.js";
+import { JOSENotSupported } from "../util/errors.js";
+import { keyAlgorithm, unsupportedAlg, algArgument } from "./key_algorithm.js";
+import { isCryptoKey, isKeyObject } from "./is_key_like.js";
+import { validateExtractableOption } from "./key_options.js";
 const formatPEM = (b64, descriptor) => {
-    const newlined = (b64.match(/.{1,64}/g) || []).join('\n');
-    return `-----BEGIN ${descriptor}-----\n${newlined}\n-----END ${descriptor}-----`;
-};
-const genericExport = async (keyType, keyFormat, key) => {
-    if (isKeyObject(key)) {
-        if (key.type !== keyType) {
-            throw new TypeError(`key is not a ${keyType} key`);
-        }
-        return key.export({ format: 'pem', type: keyFormat });
-    }
-    if (!isCryptoKey(key)) {
-        throw new TypeError(invalidKeyInput(key, 'CryptoKey', 'KeyObject'));
-    }
-    if (!key.extractable) {
-        throw new TypeError('CryptoKey is not extractable');
-    }
-    if (key.type !== keyType) {
-        throw new TypeError(`key is not a ${keyType} key`);
-    }
-    return formatPEM(encodeBase64(new Uint8Array(await crypto.subtle.exportKey(keyFormat, key))), `${keyType.toUpperCase()} KEY`);
-};
-export const toSPKI = (key) => genericExport('public', 'spki', key);
-export const toPKCS8 = (key) => genericExport('private', 'pkcs8', key);
-const bytesEqual = (a, b) => {
-    if (a.byteLength !== b.length)
-        return false;
-    for (let i = 0; i < a.byteLength; i++) {
-        if (a[i] !== b[i])
-            return false;
-    }
-    return true;
-};
-const createASN1State = (data) => ({ data, pos: 0 });
-const readByte = (state) => {
-    const byte = state.data[state.pos++];
-    if (byte === undefined) {
-        throw new Error('Unexpected end of ASN.1 input');
-    }
-    return byte;
-};
-const parseLength = (state) => {
-    const first = readByte(state);
-    if (first & 0x80) {
-        const lengthOfLen = first & 0x7f;
-        let length = 0;
-        for (let i = 0; i < lengthOfLen; i++) {
-            length = (length << 8) | readByte(state);
-        }
-        return length;
-    }
-    return first;
-};
-const skipElement = (state, count = 1) => {
-    while (count-- > 0) {
-        state.pos++;
-        const length = parseLength(state);
-        state.pos += length;
-    }
-};
-const expectTag = (state, expectedTag, errorMessage) => {
-    if (readByte(state) !== expectedTag) {
-        throw new Error(errorMessage);
-    }
-};
-const getSubarray = (state, length) => {
-    if (length < 0 || state.pos + length > state.data.length) {
-        throw new Error('Unexpected end of ASN.1 input');
-    }
-    const result = state.data.subarray(state.pos, state.pos + length);
+  const newlined = (b64.match(/.{1,64}/g) || []).join(`
+`);
+  return `-----BEGIN ${descriptor}-----
+${newlined}
+-----END ${descriptor}-----`;
+}, genericExport = async (keyType, keyFormat, key) => {
+  if (isKeyObject(key)) {
+    if (key.type !== keyType)
+      throw new TypeError(`key is not a ${keyType} key`);
+    return key.export({ format: "pem", type: keyFormat });
+  }
+  if (!isCryptoKey(key))
+    throw new TypeError(invalidKeyInput(key, "CryptoKey", "KeyObject"));
+  if (!key.extractable)
+    throw new TypeError("CryptoKey is not extractable");
+  if (key.type !== keyType)
+    throw new TypeError(`key is not a ${keyType} key`);
+  return formatPEM(encodeBase64(new Uint8Array(await crypto.subtle.exportKey(keyFormat, key))), `${keyType.toUpperCase()} KEY`);
+}, toSPKI = (key) => genericExport("public", "spki", key), toPKCS8 = (key) => genericExport("private", "pkcs8", key), bytesEqual = (a, b) => {
+  if (a.byteLength !== b.length)
+    return !1;
+  for (let i = 0; i < a.byteLength; i++)
+    if (a[i] !== b[i])
+      return !1;
+  return !0;
+}, createASN1State = (data) => ({ data, pos: 0 }), readByte = (state) => {
+  const byte = state.data[state.pos++];
+  if (byte === void 0)
+    throw new Error("Unexpected end of ASN.1 input");
+  return byte;
+}, parseLength = (state) => {
+  const first = readByte(state);
+  if (first & 128) {
+    const lengthOfLen = first & 127;
+    let length = 0;
+    for (let i = 0; i < lengthOfLen; i++)
+      length = length << 8 | readByte(state);
+    return length;
+  }
+  return first;
+}, skipElement = (state, count = 1) => {
+  for (; count-- > 0; ) {
+    state.pos++;
+    const length = parseLength(state);
     state.pos += length;
-    return result;
-};
-const parseAlgorithmOID = (state) => {
-    expectTag(state, 0x06, 'Expected algorithm OID');
-    const oidLen = parseLength(state);
-    return getSubarray(state, oidLen);
+  }
+}, expectTag = (state, expectedTag, errorMessage) => {
+  if (readByte(state) !== expectedTag)
+    throw new Error(errorMessage);
+}, getSubarray = (state, length) => {
+  if (length < 0 || state.pos + length > state.data.length)
+    throw new Error("Unexpected end of ASN.1 input");
+  const result = state.data.subarray(state.pos, state.pos + length);
+  return state.pos += length, result;
+}, parseAlgorithmOID = (state) => {
+  expectTag(state, 6, "Expected algorithm OID");
+  const oidLen = parseLength(state);
+  return getSubarray(state, oidLen);
 };
 function parseKeyHeader(state, keyFormat) {
-    expectTag(state, 0x30, `Invalid ${keyFormat === 'spki' ? 'SPKI' : 'PKCS#8'} structure`);
-    parseLength(state);
-    if (keyFormat === 'pkcs8') {
-        expectTag(state, 0x02, 'Expected version field');
-        const length = parseLength(state);
-        state.pos += length;
-    }
-    expectTag(state, 0x30, 'Expected algorithm identifier');
-    parseLength(state);
+  if (expectTag(state, 48, `Invalid ${keyFormat === "spki" ? "SPKI" : "PKCS#8"} structure`), parseLength(state), keyFormat === "pkcs8") {
+    expectTag(state, 2, "Expected version field");
+    const length = parseLength(state);
+    state.pos += length;
+  }
+  expectTag(state, 48, "Expected algorithm identifier"), parseLength(state);
 }
 const parseECAlgorithmIdentifier = (state) => {
-    const algOid = parseAlgorithmOID(state);
-    if (bytesEqual(algOid, [0x2b, 0x65, 0x6e])) {
-        return 'X25519';
-    }
-    if (!bytesEqual(algOid, [0x2a, 0x86, 0x48, 0xce, 0x3d, 0x02, 0x01])) {
-        throw new Error('Unsupported key algorithm');
-    }
-    expectTag(state, 0x06, 'Expected curve OID');
-    const curveOidLen = parseLength(state);
-    const curveOid = getSubarray(state, curveOidLen);
-    if (bytesEqual(curveOid, [0x2a, 0x86, 0x48, 0xce, 0x3d, 0x03, 0x01, 0x07]))
-        return 'P-256';
-    if (bytesEqual(curveOid, [0x2b, 0x81, 0x04, 0x00, 0x22]))
-        return 'P-384';
-    if (bytesEqual(curveOid, [0x2b, 0x81, 0x04, 0x00, 0x23]))
-        return 'P-521';
-    throw new Error('Unsupported named curve');
-};
-const genericImport = async (keyFormat, keyData, alg, options) => {
-    const extractable = validateExtractableOption(options?.extractable);
-    const entry = keyAlgorithm(alg, algArgument);
-    if (entry.secret) {
-        unsupportedAlg(algArgument);
-    }
-    const isPublic = keyFormat === 'spki';
-    let algorithm;
-    if (entry.resolve) {
-        try {
-            const state = createASN1State(keyData);
-            parseKeyHeader(state, keyFormat);
-            algorithm = entry.resolve({ crv: parseECAlgorithmIdentifier(state) });
-        }
-        catch {
-            throw new JOSENotSupported('Invalid or unsupported key format');
-        }
-    }
-    else {
-        algorithm = entry.subtle;
-    }
-    return crypto.subtle.importKey(keyFormat, keyData, algorithm, extractable ?? isPublic, entry.usages[isPublic ? 0 : 1]);
-};
-const processPEMData = (pem, pattern) => {
-    return decodeBase64(pem.replace(pattern, ''));
-};
-export const fromPKCS8 = (pem, alg, options) => {
-    const keyData = processPEMData(pem, /(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g);
-    return genericImport('pkcs8', keyData, alg, options);
-};
-export const fromSPKI = (pem, alg, options) => {
-    const keyData = processPEMData(pem, /(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g);
-    return genericImport('spki', keyData, alg, options);
+  const algOid = parseAlgorithmOID(state);
+  if (bytesEqual(algOid, [43, 101, 110]))
+    return "X25519";
+  if (!bytesEqual(algOid, [42, 134, 72, 206, 61, 2, 1]))
+    throw new Error("Unsupported key algorithm");
+  expectTag(state, 6, "Expected curve OID");
+  const curveOidLen = parseLength(state), curveOid = getSubarray(state, curveOidLen);
+  if (bytesEqual(curveOid, [42, 134, 72, 206, 61, 3, 1, 7]))
+    return "P-256";
+  if (bytesEqual(curveOid, [43, 129, 4, 0, 34]))
+    return "P-384";
+  if (bytesEqual(curveOid, [43, 129, 4, 0, 35]))
+    return "P-521";
+  throw new Error("Unsupported named curve");
+}, genericImport = async (keyFormat, keyData, alg, options) => {
+  const extractable = validateExtractableOption(options?.extractable), entry = keyAlgorithm(alg, algArgument);
+  entry.secret && unsupportedAlg(algArgument);
+  const isPublic = keyFormat === "spki";
+  let algorithm;
+  if (entry.resolve)
+    try {
+      const state = createASN1State(keyData);
+      parseKeyHeader(state, keyFormat), algorithm = entry.resolve({ crv: parseECAlgorithmIdentifier(state) });
+    } catch {
+      throw new JOSENotSupported("Invalid or unsupported key format");
+    }
+  else
+    algorithm = entry.subtle;
+  return crypto.subtle.importKey(keyFormat, keyData, algorithm, extractable ?? isPublic, entry.usages[isPublic ? 0 : 1]);
+}, processPEMData = (pem, pattern) => decodeBase64(pem.replace(pattern, "")), fromPKCS8 = (pem, alg, options) => {
+  const keyData = processPEMData(pem, /(?:-----(?:BEGIN|END) PRIVATE KEY-----|\s)/g);
+  return genericImport("pkcs8", keyData, alg, options);
+}, fromSPKI = (pem, alg, options) => {
+  const keyData = processPEMData(pem, /(?:-----(?:BEGIN|END) PUBLIC KEY-----|\s)/g);
+  return genericImport("spki", keyData, alg, options);
 };
 function spkiFromX509(buf) {
-    const state = createASN1State(buf);
-    expectTag(state, 0x30, 'Invalid certificate structure');
-    const certificateLength = parseLength(state);
-    if (certificateLength < 0 || state.pos + certificateLength > state.data.length) {
-        throw new Error('Unexpected end of ASN.1 input');
-    }
-    expectTag(state, 0x30, 'Invalid tbsCertificate structure');
-    parseLength(state);
-    if (buf[state.pos] === 0xa0) {
-        skipElement(state, 6);
-    }
-    else {
-        skipElement(state, 5);
-    }
-    const spkiStart = state.pos;
-    expectTag(state, 0x30, 'Invalid SPKI structure');
-    const spkiContentLen = parseLength(state);
-    return buf.subarray(spkiStart, spkiStart + spkiContentLen + (state.pos - spkiStart));
+  const state = createASN1State(buf);
+  expectTag(state, 48, "Invalid certificate structure");
+  const certificateLength = parseLength(state);
+  if (certificateLength < 0 || state.pos + certificateLength > state.data.length)
+    throw new Error("Unexpected end of ASN.1 input");
+  expectTag(state, 48, "Invalid tbsCertificate structure"), parseLength(state), buf[state.pos] === 160 ? skipElement(state, 6) : skipElement(state, 5);
+  const spkiStart = state.pos;
+  expectTag(state, 48, "Invalid SPKI structure");
+  const spkiContentLen = parseLength(state);
+  return buf.subarray(spkiStart, spkiStart + spkiContentLen + (state.pos - spkiStart));
 }
-export const fromX509 = (pem, alg, options) => {
-    let spki;
-    try {
-        const certificate = processPEMData(pem, /(?:-----(?:BEGIN|END) CERTIFICATE-----|\s)/g);
-        spki = spkiFromX509(certificate);
-    }
-    catch (cause) {
-        throw new TypeError('Failed to parse the X.509 certificate', { cause });
-    }
-    return genericImport('spki', spki, alg, options);
+const fromX509 = (pem, alg, options) => {
+  let spki;
+  try {
+    const certificate = processPEMData(pem, /(?:-----(?:BEGIN|END) CERTIFICATE-----|\s)/g);
+    spki = spkiFromX509(certificate);
+  } catch (cause) {
+    throw new TypeError("Failed to parse the X.509 certificate", { cause });
+  }
+  return genericImport("spki", spki, alg, options);
+};
+export {
+  fromPKCS8,
+  fromSPKI,
+  fromX509,
+  toPKCS8,
+  toSPKI
 };

package/node_modules/jose/dist/webapi/lib/base64.js

@@ -1,22 +1,20 @@
-export function encodeBase64(input) {
-    if (Uint8Array.prototype.toBase64) {
-        return input.toBase64();
-    }
-    const CHUNK_SIZE = 0x8000;
-    const arr = [];
-    for (let i = 0; i < input.length; i += CHUNK_SIZE) {
-        arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));
-    }
-    return btoa(arr.join(''));
+function encodeBase64(input) {
+  if (Uint8Array.prototype.toBase64)
+    return input.toBase64();
+  const CHUNK_SIZE = 32768, arr = [];
+  for (let i = 0; i < input.length; i += CHUNK_SIZE)
+    arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));
+  return btoa(arr.join(""));
 }
-export function decodeBase64(encoded) {
-    if (Uint8Array.fromBase64) {
-        return Uint8Array.fromBase64(encoded);
-    }
-    const binary = atob(encoded);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
+function decodeBase64(encoded) {
+  if (Uint8Array.fromBase64)
+    return Uint8Array.fromBase64(encoded);
+  const binary = atob(encoded), bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++)
+    bytes[i] = binary.charCodeAt(i);
+  return bytes;
 }
+export {
+  decodeBase64,
+  encodeBase64
+};

package/node_modules/jose/dist/webapi/lib/buffer_utils.js

@@ -1,44 +1,40 @@
-export const encoder = new TextEncoder();
-export const decoder = new TextDecoder();
-export const strictDecoder = new TextDecoder('utf-8', { fatal: true });
-const MAX_INT32 = 2 ** 32;
-export function concat(...buffers) {
-    const size = buffers.reduce((acc, { length }) => acc + length, 0);
-    const buf = new Uint8Array(size);
-    let i = 0;
-    for (const buffer of buffers) {
-        buf.set(buffer, i);
-        i += buffer.length;
-    }
-    return buf;
+const encoder = new TextEncoder(), decoder = new TextDecoder(), strictDecoder = new TextDecoder("utf-8", { fatal: !0 }), MAX_INT32 = 2 ** 32;
+function concat(...buffers) {
+  const size = buffers.reduce((acc, { length }) => acc + length, 0), buf = new Uint8Array(size);
+  let i = 0;
+  for (const buffer of buffers)
+    buf.set(buffer, i), i += buffer.length;
+  return buf;
 }
 function writeUInt32BE(buf, value, offset) {
-    if (value < 0 || value >= MAX_INT32) {
-        throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);
-    }
-    buf.set([value >>> 24, value >>> 16, value >>> 8, value & 0xff], offset);
+  if (value < 0 || value >= MAX_INT32)
+    throw new RangeError(`value must be >= 0 and <= ${MAX_INT32 - 1}. Received ${value}`);
+  buf.set([value >>> 24, value >>> 16, value >>> 8, value & 255], offset);
 }
-export function uint64be(value) {
-    const high = Math.floor(value / MAX_INT32);
-    const low = value % MAX_INT32;
-    const buf = new Uint8Array(8);
-    writeUInt32BE(buf, high, 0);
-    writeUInt32BE(buf, low, 4);
-    return buf;
+function uint64be(value) {
+  const high = Math.floor(value / MAX_INT32), low = value % MAX_INT32, buf = new Uint8Array(8);
+  return writeUInt32BE(buf, high, 0), writeUInt32BE(buf, low, 4), buf;
 }
-export function uint32be(value) {
-    const buf = new Uint8Array(4);
-    writeUInt32BE(buf, value);
-    return buf;
+function uint32be(value) {
+  const buf = new Uint8Array(4);
+  return writeUInt32BE(buf, value), buf;
 }
-export function encode(string) {
-    const bytes = new Uint8Array(string.length);
-    for (let i = 0; i < string.length; i++) {
-        const code = string.charCodeAt(i);
-        if (code > 127) {
-            throw new TypeError('non-ASCII string encountered in encode()');
-        }
-        bytes[i] = code;
-    }
-    return bytes;
+function encode(string) {
+  const bytes = new Uint8Array(string.length);
+  for (let i = 0; i < string.length; i++) {
+    const code = string.charCodeAt(i);
+    if (code > 127)
+      throw new TypeError("non-ASCII string encountered in encode()");
+    bytes[i] = code;
+  }
+  return bytes;
 }
+export {
+  concat,
+  decoder,
+  encode,
+  encoder,
+  strictDecoder,
+  uint32be,
+  uint64be
+};