@venizia/ignis 0.0.7-9 → 0.0.7

package/dist/components/auth/authenticate/common/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGrE,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,mBAAmB,kBAAkB;IACrD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,SAAU;IACjD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,oBAAoB;IACxD,MAAM,CAAC,QAAQ,CAAC,wBAAwB,SAAU;IAGlD,MAAM,CAAC,QAAQ,CAAC,cAAc,WAA8B;IAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,SAA4B;IAGxD,MAAM,CAAC,QAAQ,CAAC,UAAU,WAAW;IACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,YAAY;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,6BAA6B;IACpE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,yBAAyB;IAE5D,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,aAAa,mBAAmB;CACjD;AAGD,qBAAa,wBAAwB;IACnC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,4BAA4B;IACnE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,sBAAsB;IACvD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAuB;CAC1D;AAGD,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAErE,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,aAAa,CAAC,CAAC;AAE9D,qBAAa,cAAc;IAEzB,MAAM,CAAC,QAAQ,CAAC,cAAc,WAA8B;IAC5D,MAAM,CAAC,QAAQ,CAAC,YAAY,SAA4B;IAGxD,MAAM,CAAC,QAAQ,CAAC,UAAU,WAAW;IACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,YAAY;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,6BAA6B;IACpE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,yBAAyB;IAE5D,MAAM,CAAC,QAAQ,CAAC,YAAY,uBAAuB;IACnD,MAAM,CAAC,QAAQ,CAAC,aAAa,mBAAmB;CACjD;AAED,qBAAa,wBAAwB;IACnC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,4BAA4B;IACnE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,sBAAsB;IACvD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uBAAuB;CAC1D;AAED,qBAAa,mBAAmB;IAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qBAAa,SAAS;IACpB,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,cAAc;IAEtC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAyC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC;AAEtD,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC;AAEhE,qBAAa,cAAc;IACzB,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAC5B,MAAM,CAAC,QAAQ,CAAC,GAAG,SAAS;IAE5B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAiC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/components/auth/authenticate/common/constants.js

@@ -1,7 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticationModes = exports.AuthenticationTokenTypes = exports.Authentication = exports.AuthenticateStrategy = void 0;
-// --------------------------------------------------------------------------------------------------------
+exports.JWKSKeyFormats = exports.JWKSKeyDrivers = exports.JWKSModes = exports.AuthenticationModes = exports.AuthenticationTokenTypes = exports.Authentication = exports.JOSEStandards = exports.AuthenticateStrategy = void 0;
 class AuthenticateStrategy {
     static { this.BASIC = 'basic'; }
     static { this.JWT = 'jwt'; }
@@ -11,12 +10,16 @@ class AuthenticateStrategy {
     }
 }
 exports.AuthenticateStrategy = AuthenticateStrategy;
-// --------------------------------------------------------------------------------------------------------
+class JOSEStandards {
+    static { this.JWS = 'JWS'; }
+    static { this.JWKS = 'JWKS'; }
+    static { this.SCHEME_SET = new Set([this.JWS, this.JWKS]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.JOSEStandards = JOSEStandards;
 class Authentication {
-    static { this.ACCESS_TOKEN_SECRET = 'token.secret'; }
-    static { this.ACCESS_TOKEN_EXPIRES_IN = 86_400; }
-    static { this.REFRESH_TOKEN_SECRET = 'refresh.secret'; }
-    static { this.REFRESH_TOKEN_EXPIRES_IN = 86_400; }
     // Strategy
     static { this.STRATEGY_BASIC = AuthenticateStrategy.BASIC; }
     static { this.STRATEGY_JWT = AuthenticateStrategy.JWT; }
@@ -29,14 +32,12 @@ class Authentication {
     static { this.AUDIT_USER_ID = 'audit.user.id'; }
 }
 exports.Authentication = Authentication;
-// --------------------------------------------------------------------------------------------------------
 class AuthenticationTokenTypes {
     static { this.TYPE_AUTHORIZATION_CODE = '000_AUTHORIZATION_CODE'; }
     static { this.TYPE_ACCESS_TOKEN = '100_ACCESS_TOKEN'; }
     static { this.TYPE_REFRESH_TOKEN = '200_REFRESH_TOKEN'; }
 }
 exports.AuthenticationTokenTypes = AuthenticationTokenTypes;
-// --------------------------------------------------------------------------------------------------------
 class AuthenticationModes {
     static { this.ANY = 'any'; }
     static { this.ALL = 'all'; }
@@ -46,4 +47,31 @@ class AuthenticationModes {
     }
 }
 exports.AuthenticationModes = AuthenticationModes;
+class JWKSModes {
+    static { this.ISSUER = 'issuer'; }
+    static { this.VERIFIER = 'verifier'; }
+    static { this.SCHEME_SET = new Set([this.ISSUER, this.VERIFIER]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.JWKSModes = JWKSModes;
+class JWKSKeyDrivers {
+    static { this.TEXT = 'text'; }
+    static { this.FILE = 'file'; }
+    static { this.SCHEME_SET = new Set([this.TEXT, this.FILE]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.JWKSKeyDrivers = JWKSKeyDrivers;
+class JWKSKeyFormats {
+    static { this.PEM = 'pem'; }
+    static { this.JWK = 'jwk'; }
+    static { this.SCHEME_SET = new Set([this.PEM, this.JWK]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.JWKSKeyFormats = JWKSKeyFormats;
 //# sourceMappingURL=constants.js.map

package/dist/components/auth/authenticate/common/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/constants.ts"],"names":[],"mappings":";;;AAEA,2GAA2G;AAC3G,MAAa,oBAAoB;aACf,UAAK,GAAG,OAAO,CAAC;aAChB,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,oDASC;AAGD,2GAA2G;AAC3G,MAAa,cAAc;aACT,wBAAmB,GAAG,cAAc,CAAC;aACrC,4BAAuB,GAAG,MAAM,CAAC;aACjC,yBAAoB,GAAG,gBAAgB,CAAC;aACxC,6BAAwB,GAAG,MAAM,CAAC;IAElD,WAAW;aACK,mBAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC;aAC5C,iBAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC;IAExD,aAAa;aACG,eAAU,GAAG,OAAO,CAAC;aACrB,gBAAW,GAAG,QAAQ,CAAC;aAEvB,4BAAuB,GAAG,yBAAyB,CAAC;aACpD,wBAAmB,GAAG,qBAAqB,CAAC;aAE5C,iBAAY,GAAG,mBAAmB,CAAC;aACnC,kBAAa,GAAG,eAAe,CAAC;;AAlBlD,wCAmBC;AAED,2GAA2G;AAC3G,MAAa,wBAAwB;aACnB,4BAAuB,GAAG,wBAAwB,CAAC;aACnD,sBAAiB,GAAG,kBAAkB,CAAC;aACvC,uBAAkB,GAAG,mBAAmB,CAAC;;AAH3D,4DAIC;AAED,2GAA2G;AAC3G,MAAa,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,kDASC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/constants.ts"],"names":[],"mappings":";;;AAEA,MAAa,oBAAoB;aACf,UAAK,GAAG,OAAO,CAAC;aAChB,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,oDASC;AAGD,MAAa,aAAa;aACR,QAAG,GAAG,KAAK,CAAC;aACZ,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE5D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,sCASC;AAID,MAAa,cAAc;IACzB,WAAW;aACK,mBAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC;aAC5C,iBAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC;IAExD,aAAa;aACG,eAAU,GAAG,OAAO,CAAC;aACrB,gBAAW,GAAG,QAAQ,CAAC;aAEvB,4BAAuB,GAAG,yBAAyB,CAAC;aACpD,wBAAmB,GAAG,qBAAqB,CAAC;aAE5C,iBAAY,GAAG,mBAAmB,CAAC;aACnC,kBAAa,GAAG,eAAe,CAAC;;AAblD,wCAcC;AAED,MAAa,wBAAwB;aACnB,4BAAuB,GAAG,wBAAwB,CAAC;aACnD,sBAAiB,GAAG,kBAAkB,CAAC;aACvC,uBAAkB,GAAG,mBAAmB,CAAC;;AAH3D,4DAIC;AAED,MAAa,mBAAmB;aACd,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,kDASC;AAID,MAAa,SAAS;aACJ,WAAM,GAAG,QAAQ,CAAC;aAClB,aAAQ,GAAG,UAAU,CAAC;aAEtB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,8BASC;AAID,MAAa,cAAc;aACT,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,wCASC;AAID,MAAa,cAAc;aACT,QAAG,GAAG,KAAK,CAAC;aACZ,QAAG,GAAG,KAAK,CAAC;aAEZ,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,wCASC"}

package/dist/components/auth/authenticate/common/index.d.ts

@@ -1,3 +1,4 @@
+export * from './codecs';
 export * from './constants';
 export * from './keys';
 export * from './types';

package/dist/components/auth/authenticate/common/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/components/auth/authenticate/common/index.js

@@ -14,6 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./codecs"), exports);
 __exportStar(require("./constants"), exports);
 __exportStar(require("./keys"), exports);
 __exportStar(require("./types"), exports);

package/dist/components/auth/authenticate/common/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yCAAuB;AACvB,0CAAwB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,8CAA4B;AAC5B,yCAAuB;AACvB,0CAAwB"}

package/dist/components/auth/authenticate/common/keys.d.ts

@@ -1,6 +1,7 @@
 export declare class AuthenticateBindingKeys {
     static readonly REST_OPTIONS = "@app/authenticate/rest-options";
     static readonly JWT_OPTIONS = "@app/authenticate/jwt-options";
+    static readonly JWKS_OPTIONS = "@app/authenticate/jwks-options";
     static readonly BASIC_OPTIONS = "@app/authenticate/basic-options";
 }
 //# sourceMappingURL=keys.d.ts.map

package/dist/components/auth/authenticate/common/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,WAAW,mCAAmC;IAC9D,MAAM,CAAC,QAAQ,CAAC,aAAa,qCAAqC;CACnE"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,uBAAuB;IAClC,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,WAAW,mCAAmC;IAC9D,MAAM,CAAC,QAAQ,CAAC,YAAY,oCAAoC;IAChE,MAAM,CAAC,QAAQ,CAAC,aAAa,qCAAqC;CACnE"}

package/dist/components/auth/authenticate/common/keys.js

@@ -4,6 +4,7 @@ exports.AuthenticateBindingKeys = void 0;
 class AuthenticateBindingKeys {
     static { this.REST_OPTIONS = '@app/authenticate/rest-options'; }
     static { this.JWT_OPTIONS = '@app/authenticate/jwt-options'; }
+    static { this.JWKS_OPTIONS = '@app/authenticate/jwks-options'; }
     static { this.BASIC_OPTIONS = '@app/authenticate/basic-options'; }
 }
 exports.AuthenticateBindingKeys = AuthenticateBindingKeys;

package/dist/components/auth/authenticate/common/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/keys.ts"],"names":[],"mappings":";;;AAAA,MAAa,uBAAuB;aAClB,iBAAY,GAAG,gCAAgC,CAAC;aAChD,gBAAW,GAAG,+BAA+B,CAAC;aAC9C,kBAAa,GAAG,iCAAiC,CAAC;;AAHpE,0DAIC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/keys.ts"],"names":[],"mappings":";;;AAAA,MAAa,uBAAuB;aAClB,iBAAY,GAAG,gCAAgC,CAAC;aAChD,gBAAW,GAAG,+BAA+B,CAAC;aAC9C,iBAAY,GAAG,gCAAgC,CAAC;aAChD,kBAAa,GAAG,iCAAiC,CAAC;;AAJpE,0DAKC"}

package/dist/components/auth/authenticate/common/types.d.ts

@@ -5,7 +5,7 @@ import { AESAlgorithmType, AnyObject, ValueOrPromise } from '@venizia/ignis-help
 import { Env, type MiddlewareHandler } from 'hono';
 import { JWTPayload } from 'jose';
 import { TChangePasswordRequest, TSignInRequest, TSignUpRequest } from '../../models/requests';
-import { type TAuthMode } from './constants';
+import { type TAuthMode, type TJWKSKeyDriver, type TJWKSKeyFormat, JOSEStandards, JWKSModes } from './constants';
 export type TDefineAuthControllerOpts = {
     restPath?: string;
     serviceKey: string;
@@ -43,33 +43,52 @@ export type TAuthenticationRestOptions = {} & ({
     useAuthController: true;
     controllerOpts: TDefineAuthControllerOpts;
 });
-export interface IJWTTokenServiceOptions {
-    aesAlgorithm?: AESAlgorithmType;
+export interface IJWSTokenServiceOptions {
     headerAlgorithm?: string;
     jwtSecret: string;
-    applicationSecret: string;
     getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+}
+export type TJWKSAlgorithm = 'ES256' | 'RS256' | 'EdDSA';
+export interface IJWKSIssuerOptions {
+    mode: typeof JWKSModes.ISSUER;
+    algorithm: TJWKSAlgorithm;
+    rest?: {
+        path: string;
+    };
+    keys: {
+        driver: TJWKSKeyDriver;
+        format: TJWKSKeyFormat;
+        private: string;
+        public: string;
+    };
+    kid: string;
+    getTokenExpiresFn: TGetTokenExpiresFn;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
 }
-export interface IBasicTokenServiceOptions<E extends Env = Env> {
-    /**
-     * Callback function to verify basic authentication credentials.
-     * Implement this to look up user and verify password.
-     *
-     * @param credentials - The extracted username and password
-     * @param context - The Hono request context (for accessing repos, services, etc.)
-     * @returns IAuthUser if valid, null if invalid
-     *
-     * @example
-     * ```typescript
-     * const verifyCredentials: TBasicAuthVerifyFn = async (creds, ctx) => {
-     *   const user = await userRepo.findByUsername(creds.username);
-     *   if (user && await bcrypt.compare(creds.password, user.passwordHash)) {
-     *     return { userId: user.id, roles: user.roles };
-     *   }
-     *   return null;
-     * };
-     * ```
-     */
+export interface IJWKSVerifierOptions {
+    mode: typeof JWKSModes.VERIFIER;
+    jwksUrl: string;
+    cacheTtlMs?: number;
+    cooldownMs?: number;
+    aesAlgorithm?: AESAlgorithmType;
+    applicationSecret?: string;
+    fieldCodecs?: IPayloadFieldCodec[];
+}
+export type TJWKSTokenServiceOptions = IJWKSIssuerOptions | IJWKSVerifierOptions;
+export type TJWTTokenServiceOptions = {
+    standard: typeof JOSEStandards.JWS;
+    options: IJWSTokenServiceOptions;
+} | {
+    standard: typeof JOSEStandards.JWKS;
+    options: TJWKSTokenServiceOptions;
+};
+export type TBasicTokenServiceOptions<E extends Env = Env> = {
+    /** Callback to verify basic auth credentials. Returns IAuthUser if valid, null otherwise. */
     verifyCredentials: (opts: {
         credentials: {
             username: string;
@@ -77,11 +96,11 @@ export interface IBasicTokenServiceOptions<E extends Env = Env> {
         };
         context: TContext<E, string>;
     }) => Promise<IAuthUser | null>;
-}
+};
 export interface IAuthenticateOptions {
     restOptions?: TAuthenticationRestOptions;
-    jwtOptions?: IJWTTokenServiceOptions;
-    basicOptions?: IBasicTokenServiceOptions;
+    jwtOptions?: TJWTTokenServiceOptions;
+    basicOptions?: TBasicTokenServiceOptions;
 }
 export interface IAuthUser {
     userId: IdType;
@@ -100,6 +119,15 @@ export interface IJWTTokenPayload extends JWTPayload, IAuthUser {
     name?: string;
     [extra: string | symbol]: any;
 }
+export interface IPayloadFieldCodec<T = unknown> {
+    key: string;
+    serialize(opts: {
+        value: T;
+    }): string;
+    deserialize(opts: {
+        raw: string;
+    }): T;
+}
 export type TGetTokenExpiresFn = () => ValueOrPromise<number>;
 export interface IAuthenticationStrategy<E extends Env = Env> {
     name: string;

package/dist/components/auth/authenticate/common/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,GAAG,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAG7C,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,kBAAkB,CAAC;CACvC;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC5D;;;;;;;;;;;;;;;;;;OAkBG;IACH,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC;AAMD,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;CAC1C;AAGD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAG9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAChE;AAMD,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,KAAK,iBAAiB,CAAC;AAGxB,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,GAAG,GAAG,GAAG,EAEnB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,sBAAsB,GAAG,sBAAsB,EAC5D,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,SAAS;IAEhB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,kBAAkB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/common/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,GAAG,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC/F,OAAO,EACL,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,aAAa,EACb,SAAS,EACV,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,MAAM,CAAC,EAAE;YACP,OAAO,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACtC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;QACF,cAAc,CAAC,EAAE;YACf,OAAO,EAAE;gBAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;aAAE,CAAC;YACvC,QAAQ,EAAE;gBAAE,MAAM,EAAE,gBAAgB,CAAA;aAAE,CAAC;SACxC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,EAAE,GAAG,CAC1C;IAAE,iBAAiB,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;CAAE,GACzC;IACE,iBAAiB,EAAE,IAAI,CAAC;IACxB,cAAc,EAAE,yBAAyB,CAAC;CAC3C,CACJ,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,cAAc,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACxB,IAAI,EAAE;QACJ,MAAM,EAAE,cAAc,CAAC;QACvB,MAAM,EAAE,cAAc,CAAC;QACvB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,OAAO,SAAS,CAAC,QAAQ,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GACxE;IAAE,QAAQ,EAAE,OAAO,aAAa,CAAC,IAAI,CAAC;IAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/E,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG,IAAI;IAC3D,6FAA6F;IAC7F,iBAAiB,EAAE,CAAC,IAAI,EAAE;QACxB,WAAW,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;KAC9B,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACjC,CAAC;AACF,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,YAAY,CAAC,EAAE,yBAAyB,CAAC;CAC1C;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAiB,SAAQ,UAAU,EAAE,SAAS;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAG9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IAGd,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC;IACtC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;AAE9D,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,GAAG,GAAG,GAAG;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB,KAAK,iBAAiB,CAAC;AAExB,MAAM,WAAW,YAAY,CAC3B,CAAC,SAAS,GAAG,GAAG,GAAG,EAEnB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,cAAc,GAAG,cAAc,EAC5C,IAAI,GAAG,SAAS,EAEhB,IAAI,SAAS,sBAAsB,GAAG,sBAAsB,EAC5D,IAAI,GAAG,SAAS,EAEhB,IAAI,GAAG,SAAS,EAChB,IAAI,GAAG,SAAS;IAEhB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,kBAAkB,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}

package/dist/components/auth/authenticate/component.d.ts

@@ -5,7 +5,8 @@ export declare class AuthenticateComponent extends BaseComponent {
     private application;
     constructor(application: BaseApplication);
     binding(): ValueOrPromise<void>;
-    private defineJWTAuth;
+    private defineJWSAuth;
+    private defineJWKSAuth;
     private defineBasicAuth;
     private defineControllers;
     defineOAuth2(): void;

package/dist/components/auth/authenticate/component.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAIvD,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAalE,qBAAa,qBAAsB,SAAQ,aAAa;IAEA,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,eAAe;IAcjF,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;IAgCxC,OAAO,CAAC,aAAa;IAyCrB,OAAO,CAAC,eAAe;IA0BvB,OAAO,CAAC,iBAAiB;IAsBzB,YAAY;CAGb"}
+{"version":3,"file":"component.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAKvD,OAAO,EAAY,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAyBlE,qBAAa,qBAAsB,SAAQ,aAAa;IAEA,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,eAAe;IAajF,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;IAmDxC,OAAO,CAAC,aAAa;IA2BrB,OAAO,CAAC,cAAc;IAuEtB,OAAO,CAAC,eAAe;IAyBvB,OAAO,CAAC,iBAAiB;IAqBzB,YAAY;CAGb"}

package/dist/components/auth/authenticate/component.js

@@ -17,6 +17,7 @@ exports.AuthenticateComponent = void 0;
 const base_1 = require("../../../base/applications/base");
 const base_2 = require("../../../base/components/base");
 const injectors_1 = require("../../../base/metadata/injectors");
+const routes_1 = require("../../../base/metadata/routes");
 const bindings_1 = require("../../../common/bindings");
 const ignis_inversion_1 = require("@venizia/ignis-inversion");
 const ignis_helpers_1 = require("@venizia/ignis-helpers");
@@ -37,69 +38,126 @@ let AuthenticateComponent = AuthenticateComponent_1 = class AuthenticateComponen
         });
         this.application = application;
     }
-    // ---------------------------------------------------------------------------
     binding() {
-        const options = {
-            restOptions: this.application.get({
-                key: common_1.AuthenticateBindingKeys.REST_OPTIONS,
-                isOptional: true,
-            }),
-            jwtOptions: this.application.get({
-                key: common_1.AuthenticateBindingKeys.JWT_OPTIONS,
-                isOptional: true,
-            }),
-            basicOptions: this.application.get({
-                key: common_1.AuthenticateBindingKeys.BASIC_OPTIONS,
-                isOptional: true,
-            }),
-        };
-        if (!options.jwtOptions && !options.basicOptions) {
+        const jwtOptions = this.application.get({
+            key: common_1.AuthenticateBindingKeys.JWT_OPTIONS,
+            isOptional: true,
+        });
+        const basicOptions = this.application.get({
+            key: common_1.AuthenticateBindingKeys.BASIC_OPTIONS,
+            isOptional: true,
+        });
+        const restOptions = this.application.get({
+            key: common_1.AuthenticateBindingKeys.REST_OPTIONS,
+            isOptional: true,
+        });
+        if (!jwtOptions && !basicOptions) {
             throw (0, ignis_helpers_1.getError)({
                 message: '[AuthenticateComponent] At least one of jwtOptions or basicOptions must be provided',
             });
         }
-        // Configure each auth method
-        this.defineJWTAuth({ options });
-        this.defineBasicAuth({ options });
+        const options = { restOptions, jwtOptions, basicOptions };
+        // Configure JWT auth based on discriminated union
+        if (jwtOptions) {
+            switch (jwtOptions.standard) {
+                case common_1.JOSEStandards.JWS: {
+                    this.defineJWSAuth({ options: jwtOptions.options });
+                    break;
+                }
+                case common_1.JOSEStandards.JWKS: {
+                    this.defineJWKSAuth({ options: jwtOptions.options });
+                    break;
+                }
+                default: {
+                    throw (0, ignis_helpers_1.getError)({
+                        message: `[AuthenticateComponent] Unknown JOSE standard: ${jwtOptions.standard}`,
+                    });
+                }
+            }
+        }
+        // Configure Basic auth
+        this.defineBasicAuth({ basicOptions });
+        // Configure controllers
         this.defineControllers({ options });
         this.defineOAuth2();
     }
-    // ---------------------------------------------------------------------------
-    defineJWTAuth(opts) {
-        const { jwtOptions } = opts.options;
-        if (!jwtOptions) {
-            this.logger
-                .for(this.defineJWTAuth.name)
-                .debug('jwtOptions not provided, skipping JWT configuration');
-            return;
-        }
-        const { jwtSecret, applicationSecret, getTokenExpiresFn } = jwtOptions;
-        // Validate JWT secrets
+    defineJWSAuth(opts) {
+        const { options: jwsOptions } = opts;
+        const { jwtSecret, getTokenExpiresFn } = jwsOptions;
+        // Validate JWS secrets
         if (!jwtSecret || jwtSecret === DEFAULT_SECRET) {
             throw (0, ignis_helpers_1.getError)({
-                message: `[defineJWTAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,
-            });
-        }
-        if (!applicationSecret || applicationSecret === DEFAULT_SECRET) {
-            throw (0, ignis_helpers_1.getError)({
-                message: `[defineJWTAuth] Invalid applicationSecret | Provided: ${applicationSecret}`,
+                message: `[defineJWSAuth] Invalid jwtSecret | Provided: ${jwtSecret}`,
             });
         }
         if (!getTokenExpiresFn) {
             throw (0, ignis_helpers_1.getError)({
-                message: '[defineJWTAuth] getTokenExpiresFn is required',
+                message: '[defineJWSAuth] getTokenExpiresFn is required',
             });
         }
-        // Bind JWT options and register service
+        // Bind JWS options and register service
         this.application
             .bind({ key: common_1.AuthenticateBindingKeys.JWT_OPTIONS })
-            .toValue(jwtOptions);
-        this.application.service(services_1.JWTTokenService);
-        this.logger.for(this.defineJWTAuth.name).info('JWT authentication configured');
+            .toValue(jwsOptions);
+        this.application.service(services_1.JWSTokenService);
+        this.logger.for(this.defineJWSAuth.name).info('JWS authentication configured');
+    }
+    defineJWKSAuth(opts) {
+        const { options: jwksOptions } = opts;
+        switch (jwksOptions.mode) {
+            case common_1.JWKSModes.ISSUER: {
+                const issuerOpts = jwksOptions;
+                if (!issuerOpts.keys?.private || !issuerOpts.keys?.public) {
+                    throw (0, ignis_helpers_1.getError)({
+                        message: '[defineJWKSAuth] keys.private and keys.public are required for issuer mode',
+                    });
+                }
+                if (!issuerOpts.keys?.format || !common_1.JWKSKeyFormats.isValid(issuerOpts.keys.format)) {
+                    throw (0, ignis_helpers_1.getError)({
+                        message: `[defineJWKSAuth] keys.format is required and must be one of: ${[...common_1.JWKSKeyFormats.SCHEME_SET].join(', ')}`,
+                    });
+                }
+                if (!issuerOpts.kid) {
+                    throw (0, ignis_helpers_1.getError)({ message: '[defineJWKSAuth] kid is required for issuer mode' });
+                }
+                if (!issuerOpts.getTokenExpiresFn) {
+                    throw (0, ignis_helpers_1.getError)({
+                        message: '[defineJWKSAuth] getTokenExpiresFn is required for issuer mode',
+                    });
+                }
+                this.application
+                    .bind({ key: common_1.AuthenticateBindingKeys.JWKS_OPTIONS })
+                    .toValue(issuerOpts);
+                this.application.service(services_1.JWKSIssuerTokenService);
+                // Register JWKS controller for /certs endpoint
+                Reflect.decorate([(0, routes_1.controller)({ path: issuerOpts?.rest?.path ?? '/certs' })], controllers_1.JWKSController);
+                this.application.controller(controllers_1.JWKSController);
+                this.logger
+                    .for(this.defineJWKSAuth.name)
+                    .info('JWKS issuer configured with /certs endpoint');
+                break;
+            }
+            case common_1.JWKSModes.VERIFIER: {
+                const verifierOpts = jwksOptions;
+                if (!verifierOpts.jwksUrl) {
+                    throw (0, ignis_helpers_1.getError)({ message: '[defineJWKSAuth] jwksUrl is required for verifier mode' });
+                }
+                this.application
+                    .bind({ key: common_1.AuthenticateBindingKeys.JWKS_OPTIONS })
+                    .toValue(verifierOpts);
+                this.application.service(services_1.JWKSVerifierTokenService);
+                this.logger.for(this.defineJWKSAuth.name).info('JWKS verifier configured');
+                break;
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[defineJWKSAuth] Invalid JWKS mode: ${jwksOptions.mode}`,
+                });
+            }
+        }
     }
-    // ---------------------------------------------------------------------------
     defineBasicAuth(opts) {
-        const { basicOptions } = opts.options;
+        const { basicOptions } = opts;
         if (!basicOptions) {
             this.logger
                 .for(this.defineBasicAuth.name)
@@ -118,7 +176,6 @@ let AuthenticateComponent = AuthenticateComponent_1 = class AuthenticateComponen
         this.application.service(services_1.BasicTokenService);
         this.logger.for(this.defineBasicAuth.name).info('Basic authentication configured');
     }
-    // ---------------------------------------------------------------------------
     defineControllers(opts) {
         const { restOptions, jwtOptions } = opts.options;
         if (!restOptions?.useAuthController) {
@@ -135,7 +192,6 @@ let AuthenticateComponent = AuthenticateComponent_1 = class AuthenticateComponen
         this.application.controller(AuthController);
         this.logger.for(this.defineControllers.name).info('Auth controller registered');
     }
-    // ---------------------------------------------------------------------------
     defineOAuth2() {
         // TODO Implement OAuth2
     }

package/dist/components/auth/authenticate/component.js.map

@@ -1 +1 @@
-{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAA2D;AAC3D,iDAAuD;AACvD,yDAAmD;AACnD,gDAAiD;AACjD,8DAAmD;AACnD,0DAAkE;AAClE,qCAMkB;AAClB,yCAAgE;AAChE,+CAAqD;AAErD,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,oBAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,gCAAuB,CAAC,YAAY,CAAC,EAAE,yBAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,gCAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAED,8EAA8E;IACrE,OAAO;QACd,MAAM,OAAO,GAAyB;YACpC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;gBAC5D,GAAG,EAAE,gCAAuB,CAAC,YAAY;gBACzC,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;gBACxD,GAAG,EAAE,gCAAuB,CAAC,WAAW;gBACxC,UAAU,EAAE,IAAI;aACjB,CAAC;YACF,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;gBAC5D,GAAG,EAAE,gCAAuB,CAAC,aAAa;gBAC1C,UAAU,EAAE,IAAI;aACjB,CAAC;SACH,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACjD,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,qFAAqF;aACxF,CAAC,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,8EAA8E;IACtE,aAAa,CAAC,IAAuC;QAC3D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEpC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;iBAC5B,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEvE,uBAAuB;QACvB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,cAAc,EAAE,CAAC;YAC/D,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,yDAAyD,iBAAiB,EAAE;aACtF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,gCAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAED,8EAA8E;IACtE,eAAe,CAAC,IAAuC;QAC7D,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEtC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,gCAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,4BAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAED,8EAA8E;IACtE,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,IAAA,kCAAoB,EAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,8EAA8E;IAC9E,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AA5IY,sDAAqB;gCAArB,qBAAqB;IAE7B,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,uBAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;qCAAsB,sBAAe;GAF/E,qBAAqB,CA4IjC"}
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../../src/components/auth/authenticate/component.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAA2D;AAC3D,iDAAuD;AACvD,yDAAmD;AACnD,mDAAoD;AACpD,gDAAiD;AACjD,8DAAmD;AACnD,0DAAkE;AAClE,qCAakB;AAClB,yCAKoB;AACpB,+CAAqE;AAErE,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC,IAAa,qBAAqB,6BAAlC,MAAa,qBAAsB,SAAQ,oBAAa;IACtD,YAC8D,WAA4B;QAExF,KAAK,CAAC;YACJ,KAAK,EAAE,uBAAqB,CAAC,IAAI;YACjC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,gCAAuB,CAAC,YAAY,CAAC,EAAE,yBAAO,CAAC,IAAI,CAA6B;oBAC/E,GAAG,EAAE,gCAAuB,CAAC,YAAY;iBAC1C,CAAC,CAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;aACzC;SACF,CAAC,CAAC;QAVyD,gBAAW,GAAX,WAAW,CAAiB;IAW1F,CAAC;IAEQ,OAAO;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA0B;YAC/D,GAAG,EAAE,gCAAuB,CAAC,WAAW;YACxC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA4B;YACnE,GAAG,EAAE,gCAAuB,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAA6B;YACnE,GAAG,EAAE,gCAAuB,CAAC,YAAY;YACzC,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,qFAAqF;aACxF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAyB,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAEhF,kDAAkD;QAClD,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC5B,KAAK,sBAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBACD,KAAK,sBAAa,CAAC,IAAI,CAAC,CAAC,CAAC;oBACxB,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACR,MAAM,IAAA,wBAAQ,EAAC;wBACb,OAAO,EAAE,kDAAmD,UAAkB,CAAC,QAAQ,EAAE;qBAC1F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvC,wBAAwB;QACxB,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAEO,aAAa,CAAC,IAA0C;QAC9D,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAErC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,UAAU,CAAC;QAEpD,uBAAuB;QACvB,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;YAC/C,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iDAAiD,SAAS,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC,WAAW;aACb,IAAI,CAA0B,EAAE,GAAG,EAAE,gCAAuB,CAAC,WAAW,EAAE,CAAC;aAC3E,OAAO,CAAC,UAAU,CAAC,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,0BAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACjF,CAAC;IAEO,cAAc,CAAC,IAA2C;QAChE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;QAEtC,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,kBAAS,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtB,MAAM,UAAU,GAAG,WAAiC,CAAC;gBAErD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC1D,MAAM,IAAA,wBAAQ,EAAC;wBACb,OAAO,EAAE,4EAA4E;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,uBAAc,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,MAAM,IAAA,wBAAQ,EAAC;wBACb,OAAO,EAAE,gEAAgE,CAAC,GAAG,uBAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBACrH,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;oBACpB,MAAM,IAAA,wBAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC,CAAC;gBAClF,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAClC,MAAM,IAAA,wBAAQ,EAAC;wBACb,OAAO,EAAE,gEAAgE;qBAC1E,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAqB,EAAE,GAAG,EAAE,gCAAuB,CAAC,YAAY,EAAE,CAAC;qBACvE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,iCAAsB,CAAC,CAAC;gBAEjD,+CAA+C;gBAC/C,OAAO,CAAC,QAAQ,CACd,CAAC,IAAA,mBAAU,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,EAC1D,4BAAc,CACf,CAAC;gBACF,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,4BAAc,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM;qBACR,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;qBAC7B,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBACvD,MAAM;YACR,CAAC;YAED,KAAK,kBAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACxB,MAAM,YAAY,GAAG,WAAmC,CAAC;gBAEzD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,IAAA,wBAAQ,EAAC,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,CAAC;gBACxF,CAAC;gBAED,IAAI,CAAC,WAAW;qBACb,IAAI,CAAuB,EAAE,GAAG,EAAE,gCAAuB,CAAC,YAAY,EAAE,CAAC;qBACzE,OAAO,CAAC,YAAY,CAAC,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,mCAAwB,CAAC,CAAC;gBAEnD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC3E,MAAM;YACR,CAAC;YAED,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,uCAAwC,WAAmB,CAAC,IAAI,EAAE;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAkD;QACxE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE9B,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM;iBACR,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;iBAC9B,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;YACpC,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,WAAW;aACb,IAAI,CAA4B,EAAE,GAAG,EAAE,gCAAuB,CAAC,aAAa,EAAE,CAAC;aAC/E,OAAO,CAAC,YAAY,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,4BAAiB,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACrF,CAAC;IAEO,iBAAiB,CAAC,IAAuC;QAC/D,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEjD,IAAI,CAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,0EAA0E;aACpF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,IAAA,kCAAoB,EAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,YAAY;QACV,wBAAwB;IAC1B,CAAC;CACF,CAAA;AArNY,sDAAqB;gCAArB,qBAAqB;IAE7B,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,uBAAY,CAAC,oBAAoB,EAAE,CAAC,CAAA;qCAAsB,sBAAe;GAF/E,qBAAqB,CAqNjC"}

package/dist/components/auth/authenticate/controllers/index.d.ts

@@ -1,2 +1,3 @@
 export * from './factory';
+export * from './jwks';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authenticate/controllers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAC;AAC1B,cAAc,QAAQ,CAAC"}

package/dist/components/auth/authenticate/controllers/index.js

@@ -15,4 +15,5 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./factory"), exports);
+__exportStar(require("./jwks"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/authenticate/controllers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authenticate/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4CAA0B;AAC1B,yCAAuB"}

package/dist/components/auth/authenticate/controllers/jwks/controller.d.ts

@@ -0,0 +1,9 @@
+import { BaseController } from '../../../../../base/controllers/base';
+import { ValueOrPromise } from '@venizia/ignis-helpers';
+import { JWKSIssuerTokenService } from '../../services';
+export declare class JWKSController extends BaseController {
+    private jwksService;
+    constructor(jwksService: JWKSIssuerTokenService);
+    binding(): ValueOrPromise<void>;
+}
+//# sourceMappingURL=controller.d.ts.map

package/dist/components/auth/authenticate/controllers/jwks/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authenticate/controllers/jwks/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAQ,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAGxD,qBAAa,cAAe,SAAQ,cAAc;IAQ9C,OAAO,CAAC,WAAW;gBAAX,WAAW,EAAE,sBAAsB;IASpC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC;CAUzC"}

package/dist/components/auth/authenticate/controllers/jwks/controller.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var JWKSController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JWKSController = void 0;
+const base_1 = require("../../../../../base/controllers/base");
+const injectors_1 = require("../../../../../base/metadata/injectors");
+const bindings_1 = require("../../../../../common/bindings");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const ignis_inversion_1 = require("@venizia/ignis-inversion");
+const services_1 = require("../../services");
+const definitions_1 = require("./definitions");
+let JWKSController = JWKSController_1 = class JWKSController extends base_1.BaseController {
+    constructor(jwksService) {
+        super({
+            scope: JWKSController_1.name,
+            path: '/certs',
+            isStrict: true,
+        });
+        this.jwksService = jwksService;
+    }
+    binding() {
+        this.defineRoute({
+            configs: definitions_1.RouteConfigs.GET_JWKS_CERTS,
+            handler: async (context) => {
+                const jwks = await this.jwksService.getJWKSAsync();
+                context.header('Cache-Control', 'public, max-age=3600, stale-while-revalidate=86400');
+                return context.json(jwks, ignis_helpers_1.HTTP.ResultCodes.RS_2.Ok);
+            },
+        });
+    }
+};
+exports.JWKSController = JWKSController;
+exports.JWKSController = JWKSController = JWKSController_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({
+        key: ignis_inversion_1.BindingKeys.build({
+            namespace: bindings_1.BindingNamespaces.SERVICE,
+            key: services_1.JWKSIssuerTokenService.name,
+        }),
+    })),
+    __metadata("design:paramtypes", [services_1.JWKSIssuerTokenService])
+], JWKSController);
+//# sourceMappingURL=controller.js.map