@workos-inc/node 10.7.0 → 10.9.0

package/lib/{webapi-CVu-Hjaz.cjs → webapi-BzGFatFp.cjs}

@@ -36,13 +36,13 @@ function writeUInt32BE(buf, value, offset) {
 function uint64be(value) {
 	const high = Math.floor(value / MAX_INT32);
 	const low = value % MAX_INT32;
-	const buf = new Uint8Array(8);
+	const buf = /* @__PURE__ */ new Uint8Array(8);
 	writeUInt32BE(buf, high, 0);
 	writeUInt32BE(buf, low, 4);
 	return buf;
 }
 function uint32be(value) {
-	const buf = new Uint8Array(4);
+	const buf = /* @__PURE__ */ new Uint8Array(4);
 	writeUInt32BE(buf, value);
 	return buf;
 }
@@ -627,10 +627,10 @@ async function concatKdf(Z, L, OtherInfo) {
 	}
 	return dk.slice(0, dkLen);
 }
-async function deriveKey$1(publicKey, privateKey, algorithm, keyLength, apu = new Uint8Array(), apv = new Uint8Array()) {
+async function deriveKey$1(publicKey, privateKey, algorithm, keyLength, apu = /* @__PURE__ */ new Uint8Array(), apv = /* @__PURE__ */ new Uint8Array()) {
 	checkEncCryptoKey(publicKey, "ECDH");
 	checkEncCryptoKey(privateKey, "ECDH", "deriveBits");
-	const otherInfo = concat(lengthAndInput(encode$1(algorithm)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyLength), new Uint8Array());
+	const otherInfo = concat(lengthAndInput(encode$1(algorithm)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyLength), /* @__PURE__ */ new Uint8Array());
 	return concatKdf(new Uint8Array(await crypto.subtle.deriveBits({
 		name: publicKey.algorithm.name,
 		public: publicKey
@@ -670,7 +670,7 @@ async function deriveKey(p2s, alg, p2c, key) {
 	const cryptoKey = await getCryptoKey(key, alg);
 	return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg, cryptoKey, keylen));
 }
-async function wrap$1(alg, key, cek, p2c = 2048, p2s = crypto.getRandomValues(new Uint8Array(16))) {
+async function wrap$1(alg, key, cek, p2c = 2048, p2s = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16))) {
 	const derived = await deriveKey(p2s, alg, p2c, key);
 	return {
 		encryptedKey: await wrap$2(alg.slice(-6), derived, cek),
@@ -964,11 +964,11 @@ const handleKeyObject = (keyObject, alg) => {
 		}, extractable, [isPublic ? "verify" : "sign"]);
 	}
 	if (keyObject.asymmetricKeyType === "ec") {
-		const namedCurve = new Map([
+		const namedCurve = (/* @__PURE__ */ new Map([
 			["prime256v1", "P-256"],
 			["secp384r1", "P-384"],
 			["secp521r1", "P-521"]
-		]).get(keyObject.asymmetricKeyDetails?.namedCurve);
+		])).get(keyObject.asymmetricKeyDetails?.namedCurve);
 		if (!namedCurve) throw new TypeError(unusableForAlg);
 		const expectedCurve = {
 			ES256: "P-256",
@@ -999,7 +999,8 @@ async function normalizeKey(key, alg) {
 		} catch (err) {
 			if (err instanceof TypeError) throw err;
 		}
-		return handleJWK(key, key.export({ format: "jwk" }), alg);
+		let jwk = key.export({ format: "jwk" });
+		return handleJWK(key, jwk, alg);
 	}
 	if (isJWK(key)) {
 		if (key.k) return decode(key.k);
@@ -1063,7 +1064,8 @@ const getSubarray = (state, length) => {
 };
 const parseAlgorithmOID = (state) => {
 	expectTag(state, 6, "Expected algorithm OID");
-	return getSubarray(state, parseLength(state));
+	const oidLen = parseLength(state);
+	return getSubarray(state, oidLen);
 };
 function parsePKCS8Header(state) {
 	expectTag(state, 48, "Invalid PKCS#8 structure");
@@ -1105,7 +1107,8 @@ const parseECAlgorithmIdentifier = (state) => {
 		1
 	])) throw new Error("Unsupported key algorithm");
 	expectTag(state, 6, "Expected curve OID");
-	const curveOid = getSubarray(state, parseLength(state));
+	const curveOidLen = parseLength(state);
+	const curveOid = getSubarray(state, curveOidLen);
 	for (const { name, oid } of [
 		{
 			name: "P-256",
@@ -1350,7 +1353,7 @@ async function exportJWK(key) {
 //#endregion
 //#region node_modules/jose/dist/webapi/lib/aesgcmkw.js
 async function wrap(alg, key, cek, iv) {
-	const wrapped = await encrypt$1(alg.slice(0, 7), cek, key, iv, new Uint8Array());
+	const wrapped = await encrypt$1(alg.slice(0, 7), cek, key, iv, /* @__PURE__ */ new Uint8Array());
 	return {
 		encryptedKey: wrapped.ciphertext,
 		iv: encode(wrapped.iv),
@@ -1358,7 +1361,7 @@ async function wrap(alg, key, cek, iv) {
 	};
 }
 async function unwrap(alg, key, encryptedKey, iv, tag) {
-	return decrypt$1(alg.slice(0, 7), key, encryptedKey, iv, tag, new Uint8Array());
+	return decrypt$1(alg.slice(0, 7), key, encryptedKey, iv, tag, /* @__PURE__ */ new Uint8Array());
 }
 //#endregion
 //#region node_modules/jose/dist/webapi/lib/key_management.js
@@ -1713,7 +1716,7 @@ async function flattenedDecrypt(jwe, key, options) {
 	let tag;
 	if (jwe.iv !== void 0) iv = decodeBase64url(jwe.iv, "iv", JWEInvalid);
 	if (jwe.tag !== void 0) tag = decodeBase64url(jwe.tag, "tag", JWEInvalid);
-	const protectedHeader = jwe.protected !== void 0 ? encode$1(jwe.protected) : new Uint8Array();
+	const protectedHeader = jwe.protected !== void 0 ? encode$1(jwe.protected) : /* @__PURE__ */ new Uint8Array();
 	let additionalData;
 	if (jwe.aad !== void 0) additionalData = concat(protectedHeader, encode$1("."), encode$1(jwe.aad));
 	else additionalData = protectedHeader;
@@ -1874,7 +1877,7 @@ var FlattenedEncrypt = class {
 			protectedHeaderB = encode$1(protectedHeaderS);
 		} else {
 			protectedHeaderS = "";
-			protectedHeaderB = new Uint8Array();
+			protectedHeaderB = /* @__PURE__ */ new Uint8Array();
 		}
 		if (this.#aad) {
 			aadMember = encode(this.#aad);
@@ -2053,7 +2056,7 @@ async function flattenedVerify(jws, key, options) {
 		...parsedProt,
 		...jws.header
 	};
-	const extensions = validateCrit(JWSInvalid, new Map([["b64", true]]), options?.crit, parsedProt, joseHeader);
+	const extensions = validateCrit(JWSInvalid, /* @__PURE__ */ new Map([["b64", true]]), options?.crit, parsedProt, joseHeader);
 	let b64 = true;
 	if (extensions.has("b64")) {
 		b64 = parsedProt.b64;
@@ -2072,7 +2075,7 @@ async function flattenedVerify(jws, key, options) {
 		resolvedKey = true;
 	}
 	checkKeyType(alg, key, "verify");
-	const data = concat(jws.protected !== void 0 ? encode$1(jws.protected) : new Uint8Array(), encode$1("."), typeof jws.payload === "string" ? b64 ? encode$1(jws.payload) : encoder.encode(jws.payload) : jws.payload);
+	const data = concat(jws.protected !== void 0 ? encode$1(jws.protected) : /* @__PURE__ */ new Uint8Array(), encode$1("."), typeof jws.payload === "string" ? b64 ? encode$1(jws.payload) : encoder.encode(jws.payload) : jws.payload);
 	const signature = decodeBase64url(jws.signature, "signature", JWSInvalid);
 	const k = await normalizeKey(key, alg);
 	if (!await verify(alg, k, signature, data)) throw new JWSSignatureVerificationFailed();
@@ -2385,7 +2388,7 @@ var FlattenedSign = class {
 			...this.#protectedHeader,
 			...this.#unprotectedHeader
 		};
-		const extensions = validateCrit(JWSInvalid, new Map([["b64", true]]), options?.crit, this.#protectedHeader, joseHeader);
+		const extensions = validateCrit(JWSInvalid, /* @__PURE__ */ new Map([["b64", true]]), options?.crit, this.#protectedHeader, joseHeader);
 		let b64 = true;
 		if (extensions.has("b64")) {
 			b64 = this.#protectedHeader.b64;
@@ -2410,7 +2413,7 @@ var FlattenedSign = class {
 			protectedHeaderBytes = encode$1(protectedHeaderString);
 		} else {
 			protectedHeaderString = "";
-			protectedHeaderBytes = new Uint8Array();
+			protectedHeaderBytes = /* @__PURE__ */ new Uint8Array();
 		}
 		const data = concat(protectedHeaderBytes, encode$1("."), payloadB);
 		const jws = {
@@ -3265,4 +3268,4 @@ exports.jwksCache = jwksCache;
 exports.jwtDecrypt = jwtDecrypt;
 exports.jwtVerify = jwtVerify;
 
-//# sourceMappingURL=webapi-CVu-Hjaz.cjs.map
+//# sourceMappingURL=webapi-BzGFatFp.cjs.map