@toa.io/extensions.exposition 1.0.0-alpha.285 → 1.0.0-alpha.286

package/components/identity.tokens/operations/decrypt.js

@@ -68,7 +68,9 @@ export class Computation {
         try {
             const { decodeProtectedHeader } = await load();
             const header = decodeProtectedHeader(token);
-            if (header.alg !== 'dir' || header.enc !== 'A256GCM' || header.typ !== 'JWT' ||
+            if (header.alg !== 'dir' ||
+                header.enc !== 'A256GCM' ||
+                header.typ !== 'JWT' ||
                 typeof header.kid !== 'string')
                 return ERR_INVALID_TOKEN;
             return header.kid;
@@ -107,15 +109,19 @@ async function decryptJWE(token, key) {
             keyManagementAlgorithms: ['dir'],
             contentEncryptionAlgorithms: ['A256GCM']
         });
-        if (typeof payload.iss !== 'string' || typeof payload.iat !== 'number' ||
-            typeof payload.identity !== 'object' || payload.identity === null)
+        if (typeof payload.iss !== 'string' ||
+            typeof payload.iat !== 'number' ||
+            typeof payload.identity !== 'object' ||
+            payload.identity === null)
             return ERR_INVALID_TOKEN;
         if (payload.exp !== undefined && payload.exp * 1000 <= Date.now())
             return ERR_INVALID_TOKEN;
         return {
             iss: payload.iss,
             iat: new Date(payload.iat * 1000).toISOString(),
-            ...(payload.exp === undefined ? {} : { exp: new Date(payload.exp * 1000).toISOString() }),
+            ...(payload.exp === undefined
+                ? {}
+                : { exp: new Date(payload.exp * 1000).toISOString() }),
             identity: payload.identity
         };
     }
@@ -137,4 +143,4 @@ const ERR_FORGED_KEY = new (class ForgedKeyError extends Error {
 const ERR_REVOKED_KEY = new (class RevokedKeyError extends Error {
     code = 'REVOKED_KEY';
 })();
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.tokens/operations/encrypt.js

@@ -14,7 +14,7 @@ export class Effect {
         const { EncryptJWT } = await load();
         if (input.scopes?.some((scope) => !within(scope, input.identity.roles)) === true)
             return ERR_INACCESSIBLE_SCOPE;
-        const lifetime = input.lifetime === undefined ? this.lifetime : (input.lifetime * 1000);
+        const lifetime = input.lifetime === undefined ? this.lifetime : input.lifetime * 1000;
         const identity = {
             id: input.identity.id,
             roles: input.scopes ?? input.identity.roles
@@ -38,4 +38,4 @@ function within(scope, roles) {
 const ERR_INACCESSIBLE_SCOPE = new (class InaccessibleScopeError extends Error {
     code = 'INACCESSIBLE_SCOPE';
 })();
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZW5jcnlwdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3NvdXJjZS9lbmNyeXB0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sRUFBRSxNQUFNLEVBQUUsTUFBTSxnQkFBZ0IsQ0FBQTtBQUN2QyxPQUFPLEVBQUUsSUFBSSxFQUFFLE1BQU0sZUFBZSxDQUFBO0FBS3BDLE1BQU0sT0FBTyxNQUFNO0lBQ1QsR0FBRyxDQUEwQjtJQUM3QixRQUFRLENBQVM7SUFFbEIsS0FBSyxDQUFFLE9BQWdCO1FBQzVCLE1BQU0sR0FBRyxHQUFHLE9BQU8sQ0FBQyxhQUFhLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxDQUFDLEVBQUUsTUFBTSxFQUFFLEVBQUUsRUFBRSxDQUFDLE1BQU0sS0FBSyxRQUFRLENBQUMsQ0FBQTtRQUVoRixJQUFJLEdBQUcsS0FBSyxTQUFTO1lBQ25CLE1BQU0sSUFBSSxTQUFTLENBQUMseUNBQXlDLENBQUMsQ0FBQTtRQUVoRSxJQUFJLENBQUMsR0FBRyxHQUFHLEVBQUUsRUFBRSxFQUFFLEdBQUcsQ0FBQyxFQUFFLEVBQUUsR0FBRyxFQUFFLEdBQUcsQ0FBQyxHQUFHLENBQUMsTUFBTSxFQUFFLEVBQUUsQ0FBQTtRQUNoRCxJQUFJLENBQUMsUUFBUSxHQUFHLE9BQU8sQ0FBQyxhQUFhLENBQUMsUUFBUSxHQUFHLElBQUksQ0FBQTtJQUN2RCxDQUFDO0lBRU0sS0FBSyxDQUFDLE9BQU8sQ0FBRSxLQUFtQjtRQUN2QyxNQUFNLEVBQUUsVUFBVSxFQUFFLEdBQUcsTUFBTSxJQUFJLEVBQUUsQ0FBQTtRQUVuQyxJQUFJLEtBQUssQ0FBQyxNQUFNLEVBQUUsSUFBSSxDQUFDLENBQUMsS0FBSyxFQUFFLEVBQUUsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLEVBQUUsS0FBSyxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsQ0FBQyxLQUFLLElBQUk7WUFDOUUsT0FBTyxzQkFBc0IsQ0FBQTtRQUUvQixNQUFNLFFBQVEsR0FBRyxLQUFLLENBQUMsUUFBUSxLQUFLLFNBQVMsQ0FBQyxDQUFDLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsUUFBUSxHQUFHLElBQUksQ0FBQyxDQUFBO1FBRXZGLE1BQU0sUUFBUSxHQUFhO1lBQ3pCLEVBQUUsRUFBRSxLQUFLLENBQUMsUUFBUSxDQUFDLEVBQUU7WUFDckIsS0FBSyxFQUFFLEtBQUssQ0FBQyxNQUFNLElBQUksS0FBSyxDQUFDLFFBQVEsQ0FBQyxLQUFLO1NBQzVDLENBQUE7UUFFRCxNQUFNLFdBQVcsR0FBRyxLQUFLLENBQUMsV0FBVyxJQUFJLEtBQUssQ0FBQyxRQUFRLENBQUMsV0FBVyxDQUFBO1FBRW5FLElBQUksV0FBVyxLQUFLLFNBQVM7WUFDM0IsUUFBUSxDQUFDLFdBQVcsR0FBRyxXQUFXLENBQUE7UUFFcEMsTUFBTSxHQUFHLEdBQUcsS0FBSyxDQUFDLEdBQUcsSUFBSSxJQUFJLENBQUMsR0FBRyxDQUFBO1FBRWpDLElBQUksS0FBSyxHQUFHLElBQUksVUFBVSxDQUFDLEVBQUUsUUFBUSxFQUFFLENBQUM7YUFDckMsa0JBQWtCLENBQUMsRUFBRSxHQUFHLEVBQUUsS0FBSyxFQUFFLEdBQUcsRUFBRSxTQUFTLEVBQUUsR0FBRyxFQUFFLEtBQUssRUFBRSxHQUFHLEVBQUUsR0FBRyxDQUFDLEVBQUUsRUFBRSxDQUFDO2FBQzNFLFNBQVMsQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDO2FBQzFCLFdBQVcsQ0FBQyxJQUFJLENBQUMsR0FBRyxFQUFFLEdBQUcsSUFBSSxDQUFDLENBQUE7UUFFakMsSUFBSSxRQUFRLEtBQUssQ0FBQztZQUNoQixLQUFLLEdBQUcsS0FBSyxDQUFDLGlCQUFpQixDQUFDLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxHQUFHLFFBQVEsQ0FBQyxHQUFHLElBQUksQ0FBQyxDQUFBO1FBRWpFLE9BQU8sTUFBTSxLQUFLLENBQUMsT0FBTyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsR0FBRyxDQUFDLENBQUMsQ0FBQTtJQUM3QyxDQUFDO0NBQ0Y7QUFFRCxTQUFTLE1BQU0sQ0FBRSxLQUFhLEVBQUUsS0FBZTtJQUM3QyxPQUFPLEtBQUssQ0FBQyxJQUFJLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRSxDQUFDLElBQUksS0FBSyxLQUFLLElBQUksS0FBSyxDQUFDLFVBQVUsQ0FBQyxJQUFJLEdBQUcsR0FBRyxDQUFDLENBQUMsQ0FBQTtBQUM3RSxDQUFDO0FBRUQsTUFBTSxzQkFBc0IsR0FBRyxJQUFJLENBQUMsTUFBTSxzQkFBdUIsU0FBUSxLQUFLO0lBQzVELElBQUksR0FBRyxvQkFBb0IsQ0FBQTtDQUM1QyxDQUFDLEVBQUUsQ0FBQSJ9
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.tokens/operations/issue.js

@@ -13,9 +13,7 @@ export class Effect {
     }
     async execute(input) {
         const lifetime = input.lifetime ?? this.lifetime;
-        const expires = lifetime === 0
-            ? undefined
-            : new Date(Date.now() + lifetime * 1000).getTime();
+        const expires = lifetime === 0 ? undefined : new Date(Date.now() + lifetime * 1000).getTime();
         const key = await this.keys.create({
             input: {
                 identity: input.identity,
@@ -54,4 +52,4 @@ export class Effect {
         };
     }
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaXNzdWUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zb3VyY2UvaXNzdWUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsT0FBTyxFQUFFLEtBQUssRUFBRSxNQUFNLGlCQUFpQixDQUFBO0FBS3ZDLE1BQU0sT0FBTyxNQUFNO0lBQ1QsSUFBSSxDQUF3QztJQUM1QyxLQUFLLENBQXlDO0lBQzlDLE9BQU8sQ0FBOEI7SUFDckMsUUFBUSxDQUFTO0lBRWxCLEtBQUssQ0FBRSxPQUFnQjtRQUM1QixJQUFJLENBQUMsSUFBSSxHQUFHLE9BQU8sQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQTtRQUN4QyxJQUFJLENBQUMsS0FBSyxHQUFHLE9BQU8sQ0FBQyxNQUFNLENBQUMsUUFBUSxDQUFDLEtBQUssQ0FBQTtRQUMxQyxJQUFJLENBQUMsT0FBTyxHQUFHLE9BQU8sQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFBO1FBQ3BDLHNEQUFzRDtRQUN0RCxJQUFJLENBQUMsUUFBUSxHQUFHLE9BQU8sQ0FBQyxhQUFhLENBQUMsUUFBUSxDQUFBO0lBQ2hELENBQUM7SUFFTSxLQUFLLENBQUMsT0FBTyxDQUFFLEtBQVk7UUFDaEMsTUFBTSxRQUFRLEdBQUcsS0FBSyxDQUFDLFFBQVEsSUFBSSxJQUFJLENBQUMsUUFBUSxDQUFBO1FBRWhELE1BQU0sT0FBTyxHQUFHLFFBQVEsS0FBSyxDQUFDO1lBQzVCLENBQUMsQ0FBQyxTQUFTO1lBQ1gsQ0FBQyxDQUFDLElBQUksSUFBSSxDQUFDLElBQUksQ0FBQyxHQUFHLEVBQUUsR0FBRyxRQUFRLEdBQUcsSUFBSSxDQUFDLENBQUMsT0FBTyxFQUFFLENBQUE7UUFFcEQsTUFBTSxHQUFHLEdBQUcsTUFBTSxJQUFJLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQztZQUNqQyxLQUFLLEVBQUU7Z0JBQ0wsUUFBUSxFQUFFLEtBQUssQ0FBQyxRQUFRO2dCQUN4QixLQUFLLEVBQUUsS0FBSyxDQUFDLEtBQUs7Z0JBQ2xCLE9BQU87YUFDUjtTQUNGLENBQUMsQ0FBQTtRQUVGLE1BQU0sS0FBSyxHQUFHLE1BQU0sSUFBSSxDQUFDLEtBQUssQ0FBQyxJQUFJLENBQUM7WUFDbEMsS0FBSyxFQUFFO2dCQUNMLFFBQVEsRUFBRSxhQUFhLEtBQUssQ0FBQyxLQUFLLENBQUMsUUFBUSxDQUFDLEVBQUU7Z0JBQzlDLEtBQUssRUFBRSxJQUFJO2FBQ1o7U0FDRixDQUFDLENBQUE7UUFFRixNQUFNLFFBQVEsR0FBYTtZQUN6QixFQUFFLEVBQUUsS0FBSyxDQUFDLFFBQVE7WUFDbEIsS0FBSztTQUNOLENBQUE7UUFFRCxNQUFNLEVBQUUsU0FBUyxFQUFFLE1BQU0sRUFBRSxXQUFXLEVBQUUsR0FBRyxLQUFLLENBQUE7UUFFaEQsTUFBTSxLQUFLLEdBQUcsTUFBTSxJQUFJLENBQUMsT0FBTyxDQUFDO1lBQy9CLEtBQUssRUFBRTtnQkFDTCxTQUFTO2dCQUNULFFBQVE7Z0JBQ1IsUUFBUTtnQkFDUixNQUFNO2dCQUNOLFdBQVc7Z0JBQ1gsR0FBRzthQUNKO1NBQ0YsQ0FBQyxDQUFBO1FBRUYsSUFBSSxLQUFLLFlBQVksS0FBSztZQUN4QixPQUFPLEtBQUssQ0FBQTtRQUVkLE9BQU87WUFDTCxHQUFHLEVBQUUsR0FBRyxDQUFDLEVBQUU7WUFDWCxpREFBaUQ7WUFDakQsR0FBRyxDQUFDLE9BQU8sS0FBSyxTQUFTLElBQUksRUFBRSxHQUFHLEVBQUUsT0FBTyxFQUFFLENBQUM7WUFDOUMsS0FBSztTQUNOLENBQUE7SUFDSCxDQUFDO0NBQ0YifQ==
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.tokens/operations/lib/form.js

@@ -21,4 +21,4 @@ function segments(token) {
 const PASETO = 'v3.local.';
 const JWE_SEGMENTS = 5;
 const DOT = 46;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZm9ybS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NvdXJjZS9saWIvZm9ybS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQTs7Ozs7R0FLRztBQUNILE1BQU0sVUFBVSxJQUFJLENBQUMsS0FBYTtJQUNoQyxJQUFJLEtBQUssQ0FBQyxVQUFVLENBQUMsTUFBTSxDQUFDO1FBQUUsT0FBTyxRQUFRLENBQUE7SUFFN0MsSUFBSSxRQUFRLENBQUMsS0FBSyxDQUFDLEtBQUssWUFBWTtRQUFFLE9BQU8sS0FBSyxDQUFBO0lBRWxELE9BQU8sSUFBSSxDQUFBO0FBQ2IsQ0FBQztBQUVELFNBQVMsUUFBUSxDQUFDLEtBQWE7SUFDN0IsSUFBSSxLQUFLLEdBQUcsQ0FBQyxDQUFBO0lBRWIsS0FBSyxJQUFJLENBQUMsR0FBRyxDQUFDLEVBQUUsQ0FBQyxHQUFHLEtBQUssQ0FBQyxNQUFNLEVBQUUsQ0FBQyxFQUFFO1FBQUUsSUFBSSxLQUFLLENBQUMsVUFBVSxDQUFDLENBQUMsQ0FBQyxLQUFLLEdBQUc7WUFBRSxLQUFLLEVBQUUsQ0FBQTtJQUUvRSxPQUFPLEtBQUssQ0FBQTtBQUNkLENBQUM7QUFFRCxNQUFNLE1BQU0sR0FBRyxXQUFXLENBQUE7QUFDMUIsTUFBTSxZQUFZLEdBQUcsQ0FBQyxDQUFBO0FBQ3RCLE1BQU0sR0FBRyxHQUFHLEVBQUUsQ0FBQSJ9

package/components/identity.tokens/operations/lib/key.js

@@ -4,4 +4,4 @@ export function jweKey(value) {
         throw new TypeError('JWE key must be a base64url-encoded 256-bit secret');
     return new Uint8Array(key);
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/components/identity.tokens/operations/revoke.js

@@ -1,4 +1,4 @@
 export function transition(_, object) {
     object.revokedAt = Date.now();
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmV2b2tlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc291cmNlL3Jldm9rZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFFQSxNQUFNLFVBQVUsVUFBVSxDQUFFLENBQVUsRUFBRSxNQUFjO0lBQ3BELE1BQU0sQ0FBQyxTQUFTLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFBO0FBQy9CLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmV2b2tlLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vc291cmNlL3Jldm9rZS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFFQSxNQUFNLFVBQVUsVUFBVSxDQUFDLENBQVUsRUFBRSxNQUFjO0lBQ25ELE1BQU0sQ0FBQyxTQUFTLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFBO0FBQy9CLENBQUMifQ==

package/components/identity.tokens/source/authenticate.test.ts

@@ -21,7 +21,11 @@ beforeEach(() => {
   configuration = {
     keys: [
       { id: 'key0', key: secret('sTxL6qVOadKkUJwh3FveU53XgTEo3Sdfg7k2FfiIKfs') },
-      { id: 'legacy0', key: secret('k3.local.m28p8SrbS467t-2IUjQuSOqmjvi24TbXhyjAW_dOrog'), format: 'paseto' }
+      {
+        id: 'legacy0',
+        key: secret('k3.local.m28p8SrbS467t-2IUjQuSOqmjvi24TbXhyjAW_dOrog'),
+        format: 'paseto'
+      }
     ],
     lifetime: 2592000,
     refresh: 600,
@@ -34,7 +38,7 @@ beforeEach(() => {
   context = {
     configuration,
     local: {
-      decrypt: mock.fn(async () => (output)),
+      decrypt: mock.fn(async () => output),
       observe: mock.fn(async () => null)
     }
   } as unknown as Context
@@ -47,23 +51,23 @@ for (const [expected, shift] of [
   [true, -50],
   [false, +50]
 ])
-   it(`should mark as stale: ${expected}`, async () => {
-  const now = Date.now()
-  const iat = new Date(now - configuration.refresh * 1000 + shift).toISOString()
-  const exp = new Date(now + 1000).toISOString()
+  it(`should mark as stale: ${expected}`, async () => {
+    const now = Date.now()
+    const iat = new Date(now - configuration.refresh * 1000 + shift).toISOString()
+    const exp = new Date(now + 1000).toISOString()
 
-  output = { iss: authority, identity, exp, iat, refresh: false, custom: false }
+    output = { iss: authority, identity, exp, iat, refresh: false, custom: false }
 
-  const result = await authenticate.execute({
-    authority,
-    credentials
-  })
+    const result = await authenticate.execute({
+      authority,
+      credentials
+    })
 
-  assert.deepStrictEqual(result, { identity, refresh: expected })
-})
+    assert.deepStrictEqual(result, { identity, refresh: expected })
+  })
 
 for (const refresh of [true, false])
-   it(`should return stale: ${refresh}`, async () => {
+  it(`should return stale: ${refresh}`, async () => {
     const iat = new Date().toISOString()
     const exp = new Date(Date.now() + 1000).toISOString()
 
@@ -93,7 +97,9 @@ it('should check revocation of an aged custom token', async () => {
   const exp = new Date(Date.now() + 1000).toISOString()
 
   output = { iss: authority, identity, exp, iat, refresh: false, custom: true }
-  context.local.observe = mock.fn(async () => ({ revokedAt: Date.now() })) as unknown as Context['local']['observe']
+  context.local.observe = mock.fn(async () => ({
+    revokedAt: Date.now()
+  })) as unknown as Context['local']['observe']
   authenticate.mount(context)
 
   const result: any = await authenticate.execute({ authority, credentials })
@@ -101,6 +107,6 @@ it('should check revocation of an aged custom token', async () => {
   assert.deepStrictEqual(result.code, 'TOKEN_REVOKED')
 })
 
-function secret (value: string): Secret {
+function secret(value: string): Secret {
   return { unwrap: () => value }
 }

package/components/identity.tokens/source/authenticate.ts

@@ -1,4 +1,4 @@
-import type { Maybe } from '@toa.io/core'
+import type { Maybe } from '@toa.io/core/types'
 import type { Operation } from '@toa.io/bridges.node'
 import { form } from './lib/index.js'
 import type { AuthenticateInput, AuthenticateOutput, Context } from './lib/index.js'
@@ -8,30 +8,27 @@ export class Computation implements Operation {
   private decrypt!: Context['local']['decrypt']
   private observe!: Context['local']['observe']
 
-  public mount (context: Context): void {
+  public mount(context: Context): void {
     this.refresh = context.configuration.refresh * 1000
     this.decrypt = context.local.decrypt
     this.observe = context.local.observe
   }
 
-  public async execute (input: AuthenticateInput): Promise<Maybe<AuthenticateOutput>> {
+  public async execute(input: AuthenticateInput): Promise<Maybe<AuthenticateOutput>> {
     // `Bearer` is presented by an OpenID id_token too, and the gateway asks each provider
     // in turn: a credential this component did not issue is declined, not rejected
-    if (form(input.credentials) === null)
-      return ERR_UNRECOGNIZED
+    if (form(input.credentials) === null) return ERR_UNRECOGNIZED
 
     const claims = await this.decrypt({ input: input.credentials })
 
-    if (claims instanceof Error)
-      return claims
+    if (claims instanceof Error) return claims
 
-    if (claims.iss !== input.authority)
-      return ERR_AUTHORITY
+    if (claims.iss !== input.authority) return ERR_AUTHORITY
 
     const identity = claims.identity
     const iat = new Date(claims.iat).getTime()
     const transient = claims.exp !== undefined
-    const aged = transient && (iat + this.refresh < Date.now())
+    const aged = transient && iat + this.refresh < Date.now()
 
     if (aged) {
       const revocation = await this.observe({ query: { id: identity.id } })

package/components/identity.tokens/source/decrypt.test.ts

@@ -22,8 +22,16 @@ beforeEach(() => {
       { id: 'key0', key: secret('sTxL6qVOadKkUJwh3FveU53XgTEo3Sdfg7k2FfiIKfs') },
       // keys are secrets, and a secret is an object
       { id: 'key1', key: secret('5I0iSKw3yfBkQ4AXfA8eR-tWR0Q1dpn4x3bPrPzHkP0') },
-      { id: 'legacy0', key: secret('k3.local.m28p8SrbS467t-2IUjQuSOqmjvi24TbXhyjAW_dOrog'), format: 'paseto' },
-      { id: 'legacy1', key: secret('k3.local.-498jfWenrZH-Dqw3-zQJih_hKzDgBgUMfe37OCqSOA'), format: 'paseto' }
+      {
+        id: 'legacy0',
+        key: secret('k3.local.m28p8SrbS467t-2IUjQuSOqmjvi24TbXhyjAW_dOrog'),
+        format: 'paseto'
+      },
+      {
+        id: 'legacy1',
+        key: secret('k3.local.-498jfWenrZH-Dqw3-zQJih_hKzDgBgUMfe37OCqSOA'),
+        format: 'paseto'
+      }
     ],
     lifetime: 1000,
     refresh: 500,
@@ -33,7 +41,11 @@ beforeEach(() => {
     }
   }
 
-  context = { configuration, remote, logs: { debug: () => undefined } } as unknown as Context
+  context = {
+    configuration,
+    remote,
+    logs: { debug: () => undefined }
+  } as unknown as Context
 
   encrypt = new Encrypt()
   encrypt.mount(context)
@@ -48,25 +60,33 @@ it('should decrypt', async () => {
 
   const reply = await encrypt.execute({ authority, identity, lifetime })
 
-  if (reply instanceof Error)
-    throw reply
+  if (reply instanceof Error) throw reply
 
   const decrypted = await decrypt.execute(reply)
 
-  assert.partialDeepStrictEqual(decrypted, { iss: authority, identity, refresh: false, custom: false })
+  assert.partialDeepStrictEqual(decrypted, {
+    iss: authority,
+    identity,
+    refresh: false,
+    custom: false
+  })
 })
 
 it('should mark a token encrypted with a custom key', async () => {
   const identity: Identity = { id: generate(), roles: [] }
-  const key = { id: generate(), key: '5I0iSKw3yfBkQ4AXfA8eR-tWR0Q1dpn4x3bPrPzHkP0', label: 'custom' }
+  const key = {
+    id: generate(),
+    key: '5I0iSKw3yfBkQ4AXfA8eR-tWR0Q1dpn4x3bPrPzHkP0',
+    label: 'custom'
+  }
 
   remote.identity.keys.observe = mock.fn(async ({ query }: { query: { id: string } }) =>
-    query.id === key.id ? { ...key, identity: identity.id } : null) as any
+    query.id === key.id ? { ...key, identity: identity.id } : null
+  ) as any
 
   const encrypted = await encrypt.execute({ authority, identity, lifetime: 100, key })
 
-  if (encrypted instanceof Error)
-    throw encrypted
+  if (encrypted instanceof Error) throw encrypted
 
   const decrypted = await decrypt.execute(encrypted)
 
@@ -88,8 +108,7 @@ it('should decrypt with key1', async () => {
 
   const encrypted = await encrypt.execute({ authority, identity, lifetime })
 
-  if (encrypted instanceof Error)
-    throw encrypted
+  if (encrypted instanceof Error) throw encrypted
 
   const decrypted = await decrypt.execute(encrypted)
 
@@ -99,7 +118,11 @@ it('should decrypt with key1', async () => {
 it('should decrypt legacy PASETO and require refresh', async () => {
   const identity: Identity = { id: generate(), roles: [] }
 
-  const token = await paseto(configuration.keys[2].key.unwrap(), { iss: authority, identity }, 'legacy0')
+  const token = await paseto(
+    configuration.keys[2].key.unwrap(),
+    { iss: authority, identity },
+    'legacy0'
+  )
 
   await assert.partialDeepStrictEqual(await decrypt.execute(token), {
     iss: authority,
@@ -116,22 +139,33 @@ it('should separate JWE and PASETO keys with the same id by format', async () =>
 
   const identity: Identity = { id: generate(), roles: [] }
 
-  const token = await paseto(configuration.keys[2].key.unwrap(), { iss: authority, identity }, 'key0')
+  const token = await paseto(
+    configuration.keys[2].key.unwrap(),
+    { iss: authority, identity },
+    'key0'
+  )
 
-  await assert.partialDeepStrictEqual(await decrypt.execute(token), { identity, refresh: true })
+  await assert.partialDeepStrictEqual(await decrypt.execute(token), {
+    identity,
+    refresh: true
+  })
 })
 
 it('should reject a token under a revoked key', async () => {
   const identity: Identity = { id: generate(), roles: [] }
-  const key = { id: generate(), key: '5I0iSKw3yfBkQ4AXfA8eR-tWR0Q1dpn4x3bPrPzHkP0', label: 'revoked' }
+  const key = {
+    id: generate(),
+    key: '5I0iSKw3yfBkQ4AXfA8eR-tWR0Q1dpn4x3bPrPzHkP0',
+    label: 'revoked'
+  }
 
   remote.identity.keys.observe = mock.fn(async ({ query }: { query: { id: string } }) =>
-    query.id === key.id ? { ...key, identity: identity.id, revokedAt: Date.now() } : null) as any
+    query.id === key.id ? { ...key, identity: identity.id, revokedAt: Date.now() } : null
+  ) as any
 
   const encrypted = await encrypt.execute({ authority, identity, lifetime: 0, key })
 
-  if (encrypted instanceof Error)
-    throw encrypted
+  if (encrypted instanceof Error) throw encrypted
 
   const thrown: any = await decrypt.execute(encrypted)
 
@@ -144,8 +178,7 @@ it('should reject a tampered JWE', async () => {
     identity: { id: generate(), roles: [] }
   })
 
-  if (token instanceof Error)
-    throw token
+  if (token instanceof Error) throw token
 
   const parts = token.split('.')
 
@@ -154,7 +187,7 @@ it('should reject a tampered JWE', async () => {
   const tampered = parts.join('.')
 
   const thrown: any = await decrypt.execute(tampered)
-        assert.deepStrictEqual(thrown.code, 'INVALID_TOKEN')
+  assert.deepStrictEqual(thrown.code, 'INVALID_TOKEN')
 })
 
 it('should reject JWE with an unknown key', async () => {
@@ -164,20 +197,20 @@ it('should reject JWE with an unknown key', async () => {
     key: { id: 'missing', key: configuration.keys[0].key.unwrap(), label: 'missing' }
   })
 
-  if (token instanceof Error)
-    throw token
+  if (token instanceof Error) throw token
 
   const thrown: any = await decrypt.execute(token)
-        assert.deepStrictEqual(thrown.code, 'INVALID_KEY')
+  assert.deepStrictEqual(thrown.code, 'INVALID_KEY')
 })
 
-function secret (value: string): Secret {
+function secret(value: string): Secret {
   return { unwrap: () => value }
 }
 
-async function paseto (key: string, claims: object, kid: string): Promise<string> {
+async function paseto(key: string, claims: object, kid: string): Promise<string> {
   const imported = await ImportKeyFactory().run(key as `k3.local.${string}`)
 
-  return await EncryptFactory().run(imported, claims,
-    { footer: new TextEncoder().encode(JSON.stringify({ kid })) })
+  return await EncryptFactory().run(imported, claims, {
+    footer: new TextEncoder().encode(JSON.stringify({ kid }))
+  })
 }

package/components/identity.tokens/source/decrypt.ts

@@ -2,7 +2,7 @@ import { DecryptFactory, ImportKeyFactory } from 'paseto/v3/local'
 import { LRUCache } from 'lru-cache'
 import { form, jweKey } from './lib/index.js'
 import { load } from './lib/jose.js'
-import type { Maybe } from '@toa.io/core'
+import type { Maybe } from '@toa.io/core/types'
 import type { Operation } from '@toa.io/bridges.node'
 import type { Context, Claims, DecryptOutput, JWEClaims } from './lib/index.js'
 
@@ -14,7 +14,7 @@ export class Computation implements Operation {
   private remote!: Context['remote']['identity']['keys']
   private logs!: Context['logs']
 
-  public mount (context: Context): void {
+  public mount(context: Context): void {
     const latest = context.configuration.keys.find(({ format }) => format !== 'paseto')
 
     if (latest === undefined)
@@ -32,32 +32,28 @@ export class Computation implements Operation {
     }
   }
 
-  public async execute (token: string): Promise<Maybe<DecryptOutput>> {
+  public async execute(token: string): Promise<Maybe<DecryptOutput>> {
     const legacy = form(token) === 'paseto'
     const kid = legacy ? this.pasetoKid(token) : await this.jweKid(token)
 
-    if (kid instanceof Error)
-      return kid
+    if (kid instanceof Error) return kid
 
     const key = await this.key(kid, legacy)
 
-    if (key instanceof Error)
-      return key
+    if (key instanceof Error) return key
 
     const claims = legacy
       ? await decryptPaseto(token, key.key)
       : await decryptJWE(token, key.key)
 
-    if (claims instanceof Error)
-      return claims
+    if (claims instanceof Error) return claims
 
     this.logs.debug('Token claims', claims)
 
     if (key.identity !== undefined && claims.identity.id !== key.identity)
       return ERR_FORGED_KEY
 
-    if (key.revokedAt !== undefined)
-      return ERR_REVOKED_KEY
+    if (key.revokedAt !== undefined) return ERR_REVOKED_KEY
 
     return {
       iss: claims.iss,
@@ -69,18 +65,16 @@ export class Computation implements Operation {
     }
   }
 
-  private pasetoKid (token: string): Maybe<string> {
+  private pasetoKid(token: string): Maybe<string> {
     const [, , , footer] = token.split('.')
 
-    if (footer === undefined)
-      return ERR_INVALID_TOKEN
+    if (footer === undefined) return ERR_INVALID_TOKEN
 
     try {
       const json = Buffer.from(footer, 'base64url').toString('utf-8')
       const { kid } = JSON.parse(json)
 
-      if (typeof kid !== 'string')
-        return ERR_INVALID_TOKEN
+      if (typeof kid !== 'string') return ERR_INVALID_TOKEN
 
       return kid
     } catch {
@@ -88,13 +82,17 @@ export class Computation implements Operation {
     }
   }
 
-  private async jweKid (token: string): Promise<Maybe<string>> {
+  private async jweKid(token: string): Promise<Maybe<string>> {
     try {
       const { decodeProtectedHeader } = await load()
       const header = decodeProtectedHeader(token)
 
-      if (header.alg !== 'dir' || header.enc !== 'A256GCM' || header.typ !== 'JWT' ||
-        typeof header.kid !== 'string')
+      if (
+        header.alg !== 'dir' ||
+        header.enc !== 'A256GCM' ||
+        header.typ !== 'JWT' ||
+        typeof header.kid !== 'string'
+      )
         return ERR_INVALID_TOKEN
 
       return header.kid
@@ -103,11 +101,10 @@ export class Computation implements Operation {
     }
   }
 
-  private async key (kid: string, legacy: boolean): Promise<Maybe<Key>> {
+  private async key(kid: string, legacy: boolean): Promise<Maybe<Key>> {
     const configured = legacy ? this.legacy : this.keys
 
-    if (kid in configured)
-      return configured[kid]
+    if (kid in configured) return configured[kid]
 
     if (!this.cache.has(kid)) {
       const value = await this.remote.observe({ query: { id: kid } })
@@ -121,7 +118,7 @@ export class Computation implements Operation {
   }
 }
 
-async function decryptPaseto (token: string, key: string): Promise<Maybe<Claims>> {
+async function decryptPaseto(token: string, key: string): Promise<Maybe<Claims>> {
   try {
     const secret = await importKey(key as `k3.local.${string}`)
     // paseto 3 read a token that never expires; these are tokens already in the wild
@@ -133,7 +130,7 @@ async function decryptPaseto (token: string, key: string): Promise<Maybe<Claims>
   }
 }
 
-async function decryptJWE (token: string, key: string): Promise<Maybe<Claims>> {
+async function decryptJWE(token: string, key: string): Promise<Maybe<Claims>> {
   try {
     const { jwtDecrypt } = await load()
 
@@ -142,8 +139,12 @@ async function decryptJWE (token: string, key: string): Promise<Maybe<Claims>> {
       contentEncryptionAlgorithms: ['A256GCM']
     })
 
-    if (typeof payload.iss !== 'string' || typeof payload.iat !== 'number' ||
-      typeof payload.identity !== 'object' || payload.identity === null)
+    if (
+      typeof payload.iss !== 'string' ||
+      typeof payload.iat !== 'number' ||
+      typeof payload.identity !== 'object' ||
+      payload.identity === null
+    )
       return ERR_INVALID_TOKEN
 
     if (payload.exp !== undefined && payload.exp * 1000 <= Date.now())
@@ -152,7 +153,9 @@ async function decryptJWE (token: string, key: string): Promise<Maybe<Claims>> {
     return {
       iss: payload.iss,
       iat: new Date(payload.iat * 1000).toISOString(),
-      ...(payload.exp === undefined ? {} : { exp: new Date(payload.exp * 1000).toISOString() }),
+      ...(payload.exp === undefined
+        ? {}
+        : { exp: new Date(payload.exp * 1000).toISOString() }),
       identity: payload.identity
     }
   } catch {