@zuplo/runtime 6.68.28 → 6.68.30

package/out/types/index.d.ts

@@ -5128,6 +5128,30 @@ export declare interface JWTScopeValidationInboundPolicyOptions {
   scopes: string[];
 }
 
+/**
+ * Asymmetric JWT signing algorithms supported by {@link JwtServicePlugin}.
+ *
+ * Symmetric algorithms (e.g. `HS256`) are intentionally not supported because
+ * this plugin publishes a JWKS endpoint — symmetric keys cannot be safely
+ * exposed as public keys.
+ *
+ * - `EdDSA` — Edwards-curve (Ed25519). Modern, fast, small keys and signatures.
+ * - `RS256` / `RS384` / `RS512` — RSASSA-PKCS1-v1_5 with SHA-2. Broadly interoperable.
+ * - `PS256` / `PS384` / `PS512` — RSASSA-PSS with SHA-2. Recommended over `RS*` for new keys.
+ * - `ES256` / `ES384` / `ES512` — ECDSA on P-256 / P-384 / P-521.
+ */
+export declare type JwtServiceAlgorithm =
+  | "EdDSA"
+  | "RS256"
+  | "RS384"
+  | "RS512"
+  | "PS256"
+  | "PS384"
+  | "PS512"
+  | "ES256"
+  | "ES384"
+  | "ES512";
+
 export declare class JwtServicePlugin extends SystemRuntimePlugin {
   #private;
   static signJwt({
@@ -5152,6 +5176,22 @@ export declare interface JwtServicePluginOptions {
    * The default value is "/__zuplo/issuer".
    */
   basePath?: string;
+  /**
+   * The asymmetric signing algorithm used for issued JWTs. Must match the
+   * configured key pair — e.g. an RSA key requires an `RS*` or `PS*` value,
+   * a P-256 EC key requires `ES256`, and an Ed25519 key requires `EdDSA`.
+   *
+   * The selected value is advertised via `id_token_signing_alg_values_supported`
+   * in the published OpenID configuration.
+   *
+   * @default "EdDSA"
+   *
+   * @example
+   * ```ts
+   * new JwtServicePlugin({ algorithm: "RS256" });
+   * ```
+   */
+  algorithm?: JwtServiceAlgorithm;
   /**
    * Sets the default time for the "exp" (Expiration Time) Claim in the JWT.
    * This value can be overridden when signing a JWT.

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zuplo/runtime",
   "type": "module",
-  "version": "6.68.28",
+  "version": "6.68.30",
   "repository": "https://github.com/zuplo/zuplo",
   "author": "Zuplo, Inc.",
   "exports": {