dbsc-toolkit 2.10.0 → 2.12.0

package/README.md

@@ -6,7 +6,7 @@
 
 <p align="center">
   <strong>Stop stolen session cookies from being replayed on another device.</strong><br>
-  A language-neutral DBSC protocol spec plus a reference implementation for Node.js — with a Web Crypto polyfill so every browser is covered, not just Chrome.
+  Device Bound Session Credentials for Node.js — one framework-agnostic core with adapters for Express, Fastify, Hono, Next.js, NestJS, Koa, SvelteKit and raw <code>node:http</code>, plus a Web Crypto polyfill so every browser is covered, not just Chrome. A language-neutral protocol spec with a Node reference implementation.
 </p>
 
 <p align="center">
@@ -122,9 +122,23 @@ Load the polyfill in your HTML so non-Chromium browsers reach `tier: "bound"`:
 
 Full walk-through, failure modes, and migration timeline: **[docs/getting-started.md](./docs/getting-started.md)** and **[docs/integrating-existing-auth.md](./docs/integrating-existing-auth.md)**.
 
-### Not on Express?
+### Any framework
 
-The protocol lives in a framework-agnostic core — plain functions plus a `StorageAdapter`, no HTTP-layer assumptions. The Express/Fastify/Hono/Next.js adapters are thin wrappers. Build on the core directly for any runtime:
+The protocol lives in a framework-agnostic core — plain functions plus a `StorageAdapter`, no HTTP-layer assumptions. The adapters are thin wrappers; pick yours:
+
+| Framework | Import |
+|---|---|
+| Express | `dbsc-toolkit/express` |
+| Fastify | `dbsc-toolkit/fastify` |
+| Hono (Node, Bun, Deno, Workers) | `dbsc-toolkit/hono` |
+| Next.js (App Router) | `dbsc-toolkit/nextjs` |
+| NestJS | `dbsc-toolkit/nestjs` |
+| Koa | `dbsc-toolkit/koa` |
+| SvelteKit | `dbsc-toolkit/sveltekit` |
+| Any other server (raw `node:http`) | `dbsc-toolkit/node` |
+| [Better Auth](https://better-auth.com) | `@dbsc-toolkit/better-auth` |
+
+**No adapter for your framework? You can still use it.** Every adapter is a thin shell over the same core, so any HTTP framework on Node works — wire the core in directly:
 
 ```ts
 import {
@@ -136,7 +150,7 @@ import {
 } from "dbsc-toolkit";
 ```
 
-Complete raw-`http` example: [docs/adapters.md](./docs/adapters.md#writing-your-own-adapter).
+The generic `dbsc-toolkit/node` adapter is exactly this over raw `node:http`. Complete example: [docs/adapters.md](./docs/adapters.md#writing-your-own-adapter).
 
 ## How it compares
 
@@ -147,6 +161,7 @@ Complete raw-`http` example: [docs/adapters.md](./docs/adapters.md#writing-your-
 | Works on Firefox / Safari / mobile / no-TPM | ✅ | ✅ | ❌ | ✅ (polyfill) |
 | Per-request body-hash proof vs MITM | ❌ | ❌ | ❌ | ✅ |
 | Captured-proof replay defense | n/a | ❌ | n/a | ✅ (replay cache) |
+| Bearer/access-token replay (DPoP, RFC 9449) | n/a | ❌ | n/a | ✅ (`dbsc-toolkit/dpop`) |
 | Multi-subdomain binding | loose | loose | ❌ | ✅ (`cookieScope: "site"`) |
 | Better Auth integration | n/a | n/a | n/a | ✅ (plugin) |
 
@@ -182,11 +197,30 @@ Every session carries a `tier`. You don't gate on it directly — `requireProof(
 
 The polyfill is on by default. To run native DBSC only (Chromium 145+, no `bound` tier), pass `bound: false` — the `/dbsc-bound/*` routes don't mount and `requireProof()` relaxes to the native binding.
 
+## Optional: DPoP for bearer tokens (RFC 9449)
+
+DBSC binds a session **cookie**. If you hand out **bearer / access tokens** for an API, those have the same replay problem a cookie does — copy the `Authorization` header, use it anywhere. DPoP closes that the same way: bind the token to a device key and require a per-request `DPoP` proof. It ships as a separate import, off the default path, so projects that don't use it pay nothing.
+
+```ts
+import { dpopConfirmation } from "dbsc-toolkit/dpop";
+import { requireDpop } from "dbsc-toolkit/express";
+
+// at issue time — bind the token to the device key:
+const { jkt } = await dpopConfirmation(deviceJwk);
+const token = signAccessToken({ sub, cnf: { jkt } });   // your JWT lib
+
+// on the resource route — verify the proof and the binding:
+app.get("/api/resource", requireDpop({ getBoundJkt }), handler);
+```
+
+`requireDpop` is exported from every adapter (Express, Fastify, Hono, Next.js, NestJS, Koa, SvelteKit, `node:http`). A failed check answers `401` with `WWW-Authenticate: DPoP`. Always pass `getBoundJkt` so the presented token is bound to its key — see [docs/dpop.md](./docs/dpop.md) and [spec/10-dpop.md](./spec/10-dpop.md).
+
 ## Ecosystem
 
 | Package | What it is |
 |---|---|
-| `dbsc-toolkit` | Core + Express/Fastify/Hono/Next.js adapters, memory/Redis/Postgres storage |
+| `dbsc-toolkit` | Core + adapters for Express, Fastify, Hono, Next.js, NestJS, Koa, SvelteKit & raw `node:http`; memory/Redis/Postgres storage |
+| `dbsc-toolkit/dpop` | Optional DPoP (RFC 9449) — bind bearer/access tokens to a device key |
 | `dbsc-toolkit/client` | Browser SDK + Web Crypto polyfill |
 | [`@dbsc-toolkit/better-auth`](./packages/better-auth/) | First-class [Better Auth](https://better-auth.com) plugin — binds every sign-in method automatically |
 
@@ -211,7 +245,8 @@ The wire protocol is documented as a language-neutral spec in [`spec/`](./spec/)
 - [x] Per-request proof + body signing + replay cache
 - [x] Multi-subdomain binding (`cookieScope: "site"`)
 - [x] Better Auth plugin
-- [ ] Koa / NestJS adapters
+- [x] NestJS, Koa, SvelteKit & generic `node:http` adapters
+- [x] DPoP (RFC 9449) for bearer-token binding
 - [ ] Bun / Deno native paths
 - [ ] Third-party security audit
 
@@ -220,7 +255,8 @@ The wire protocol is documented as a language-neutral spec in [`spec/`](./spec/)
 | Import | What it is |
 |---|---|
 | `dbsc-toolkit` | Core: types, crypto, protocol handlers, framework-agnostic |
-| `dbsc-toolkit/express` · `/fastify` · `/hono` · `/nextjs` | Framework adapters |
+| `dbsc-toolkit/express` · `/fastify` · `/hono` · `/nextjs` · `/nestjs` · `/koa` · `/sveltekit` · `/node` | Framework adapters |
+| `dbsc-toolkit/dpop` | Optional DPoP (RFC 9449) verifier + `requireDpop` per adapter |
 | `dbsc-toolkit/client` | Browser SDK + polyfill |
 | `dbsc-toolkit/storage/{memory,redis,postgres}` | Storage adapters |
 

package/dist/core/dpop/bind.d.ts

@@ -0,0 +1,13 @@
+export interface DpopConfirmation {
+    /** RFC 7638 thumbprint of the bound key, for the token's cnf.jkt. */
+    jkt: string;
+}
+/**
+ * Build the `cnf` confirmation to embed in an access token at issue time so
+ * the token is bound to a DPoP key (RFC 9449 §6). Embed the return value as
+ * `{ cnf: { jkt } }` in the token claims, then guard the resource route with
+ * `requireDpop({ getBoundJkt })` returning the same jkt. Framework-neutral:
+ * the caller signs the token however it already does.
+ */
+export declare function dpopConfirmation(jwk: JsonWebKey): Promise<DpopConfirmation>;
+//# sourceMappingURL=bind.d.ts.map

package/dist/core/dpop/bind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.d.ts","sourceRoot":"","sources":["../../../src/core/dpop/bind.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAEjF"}

package/dist/core/dpop/bind.js

@@ -0,0 +1,12 @@
+import { jwkThumbprint } from "./thumbprint.js";
+/**
+ * Build the `cnf` confirmation to embed in an access token at issue time so
+ * the token is bound to a DPoP key (RFC 9449 §6). Embed the return value as
+ * `{ cnf: { jkt } }` in the token claims, then guard the resource route with
+ * `requireDpop({ getBoundJkt })` returning the same jkt. Framework-neutral:
+ * the caller signs the token however it already does.
+ */
+export async function dpopConfirmation(jwk) {
+    return { jkt: await jwkThumbprint(jwk) };
+}
+//# sourceMappingURL=bind.js.map

package/dist/core/dpop/bind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bind.js","sourceRoot":"","sources":["../../../src/core/dpop/bind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAOhD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAe;IACpD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC"}

package/dist/core/dpop/guard.d.ts

@@ -0,0 +1,55 @@
+import type { ProofReplayCache } from "../types.js";
+/**
+ * Adapter-neutral options for a `requireDpop()` guard. `getBoundJkt` is generic
+ * over the framework request type so each adapter passes its own.
+ */
+export interface RequireDpopOptions<Req = unknown> {
+    /**
+     * Resolve the `cnf.jkt` the presented bearer token was issued against, from
+     * the request (e.g. decode the token, read `cnf.jkt`). Required for token
+     * binding — without it a presented token is rejected as
+     * DPOP_TOKEN_BINDING_REQUIRED unless `requireTokenBinding` is false.
+     */
+    getBoundJkt?: (req: Req) => string | undefined | Promise<string | undefined>;
+    /**
+     * Default true. Set false to verify a presented token's proof without binding
+     * it to a jkt — strictly weaker proof-of-possession only. A conscious choice.
+     */
+    requireTokenBinding?: boolean;
+    /** Acceptable iat window in ms. Default 300000. */
+    iatWindowMs?: number;
+    /** jti replay store. Falls back to the DBSC middleware's replayCache. */
+    replayCache?: ProofReplayCache;
+}
+export interface DpopGuardInput {
+    proof: string | undefined;
+    authorization: string | undefined;
+    method: string;
+    url: string;
+    boundJkt: string | undefined;
+    replayCache: ProofReplayCache | undefined;
+    opts: {
+        requireTokenBinding?: boolean;
+        iatWindowMs?: number;
+    };
+}
+export interface DpopGuardOutcome {
+    ok: boolean;
+    /** Set when ok=false: the HTTP error to emit. */
+    error?: {
+        code: string;
+        message: string;
+    };
+    /** Set when ok=true. */
+    jkt?: string;
+}
+/** Parse a `DPoP <token>` Authorization header. Returns the token or undefined. */
+export declare function parseDpopAuthorization(authorization: string | undefined): string | undefined;
+/**
+ * Adapter-neutral core of every `requireDpop()`. Each adapter extracts the
+ * fields, calls this, then writes its own 401 + WWW-Authenticate on failure.
+ */
+export declare function runDpopGuard(input: DpopGuardInput): Promise<DpopGuardOutcome>;
+/** The WWW-Authenticate header value for a failed DPoP check (RFC 9449 §7.1). */
+export declare const DPOP_WWW_AUTHENTICATE = "DPoP error=\"invalid_dpop_proof\"";
+//# sourceMappingURL=guard.d.ts.map

package/dist/core/dpop/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/core/dpop/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD;;;GAGG;AACH,MAAM,WAAW,kBAAkB,CAAC,GAAG,GAAG,OAAO;IAC/C;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7E;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,WAAW,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC1C,IAAI,EAAE;QAAE,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,iDAAiD;IACjD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,wBAAwB;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAI5F;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsBnF;AAED,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,sCAAoC,CAAC"}

package/dist/core/dpop/guard.js

@@ -0,0 +1,40 @@
+import { DbscVerificationError } from "../errors.js";
+import { verifyDpopProof } from "./verify.js";
+/** Parse a `DPoP <token>` Authorization header. Returns the token or undefined. */
+export function parseDpopAuthorization(authorization) {
+    if (!authorization)
+        return undefined;
+    const m = /^DPoP\s+(.+)$/i.exec(authorization.trim());
+    return m ? m[1] : undefined;
+}
+/**
+ * Adapter-neutral core of every `requireDpop()`. Each adapter extracts the
+ * fields, calls this, then writes its own 401 + WWW-Authenticate on failure.
+ */
+export async function runDpopGuard(input) {
+    const accessToken = parseDpopAuthorization(input.authorization);
+    try {
+        const { jkt } = await verifyDpopProof({
+            proof: input.proof,
+            method: input.method,
+            url: input.url,
+            ...(accessToken !== undefined && { accessToken }),
+            ...(input.boundJkt !== undefined && { boundJkt: input.boundJkt }),
+            ...(input.opts.requireTokenBinding !== undefined && {
+                requireTokenBinding: input.opts.requireTokenBinding,
+            }),
+            ...(input.opts.iatWindowMs !== undefined && { iatWindowMs: input.opts.iatWindowMs }),
+            ...(input.replayCache !== undefined && { replayCache: input.replayCache }),
+        });
+        return { ok: true, jkt };
+    }
+    catch (e) {
+        if (e instanceof DbscVerificationError) {
+            return { ok: false, error: { code: e.code, message: e.message } };
+        }
+        throw e;
+    }
+}
+/** The WWW-Authenticate header value for a failed DPoP check (RFC 9449 §7.1). */
+export const DPOP_WWW_AUTHENTICATE = 'DPoP error="invalid_dpop_proof"';
+//# sourceMappingURL=guard.js.map

package/dist/core/dpop/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/core/dpop/guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA2C9C,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,aAAiC;IACtE,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAqB;IACtD,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS,IAAI;gBAClD,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB;aACpD,CAAC;YACF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpF,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,qBAAqB,EAAE,CAAC;YACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAC"}

package/dist/core/dpop/htu.d.ts

@@ -0,0 +1,4 @@
+export declare function normalizeHtu(uri: string): string;
+/** True when the claimed htu and the actual request URL normalize equal. */
+export declare function htuMatches(claimed: string, requestUrl: string): boolean;
+//# sourceMappingURL=htu.d.ts.map

package/dist/core/dpop/htu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"htu.d.ts","sourceRoot":"","sources":["../../../src/core/dpop/htu.ts"],"names":[],"mappings":"AAsBA,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAoBhD;AAED,4EAA4E;AAC5E,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAEvE"}

package/dist/core/dpop/htu.js

@@ -0,0 +1,42 @@
+/**
+ * RFC 9449 htu normalization. This is the dangerous check: a weak normalizer
+ * lets a proof minted for one URL be accepted on another. §4.3 requires the
+ * htu claim to match the request URI "ignoring any query and fragment parts"
+ * and SHOULD apply RFC 3986 §6.2.2 (syntax-based) + §6.2.3 (scheme-based)
+ * normalization before comparing.
+ *
+ * Rules applied here, on both the claimed htu and the live request URL, then
+ * compared as strings:
+ *   - lowercase scheme and host (WHATWG URL does this for us)
+ *   - drop ONLY the scheme-default port (443 for https, 80 for http); keep
+ *     every non-default port exactly (:8443 stays :8443)
+ *   - strip query and fragment
+ *   - empty path becomes "/"
+ *   - trailing slash is SIGNIFICANT: "/token/" does not equal "/token"
+ *
+ * Percent-encoding and path "."/".." resolution are handled by `new URL()`.
+ */
+import { DbscVerificationError, ErrorCodes } from "../errors.js";
+const DEFAULT_PORT = { "https:": "443", "http:": "80" };
+export function normalizeHtu(uri) {
+    let u;
+    try {
+        u = new URL(uri);
+    }
+    catch {
+        throw new DbscVerificationError(ErrorCodes.DPOP_HTU_MISMATCH, `htu is not an absolute URI: ${uri}`);
+    }
+    const scheme = u.protocol.toLowerCase();
+    const host = u.hostname.toLowerCase();
+    // u.port is "" when the URL used the scheme-default port implicitly, and the
+    // numeric string otherwise. Drop it only when it equals the scheme default.
+    const port = u.port && u.port !== DEFAULT_PORT[scheme] ? `:${u.port}` : "";
+    const path = u.pathname === "" ? "/" : u.pathname;
+    // scheme://host[:port]path — query and fragment intentionally dropped.
+    return `${scheme}//${host}${port}${path}`;
+}
+/** True when the claimed htu and the actual request URL normalize equal. */
+export function htuMatches(claimed, requestUrl) {
+    return normalizeHtu(claimed) === normalizeHtu(requestUrl);
+}
+//# sourceMappingURL=htu.js.map

package/dist/core/dpop/htu.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"htu.js","sourceRoot":"","sources":["../../../src/core/dpop/htu.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,YAAY,GAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAEhF,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAC7B,UAAU,CAAC,iBAAiB,EAC5B,+BAA+B,GAAG,EAAE,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAElD,uEAAuE;IACvE,OAAO,GAAG,MAAM,KAAK,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,UAAkB;IAC5D,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,UAAU,CAAC,CAAC;AAC5D,CAAC"}

package/dist/core/dpop/index.d.ts

@@ -0,0 +1,9 @@
+export { verifyDpopProof } from "./verify.js";
+export type { VerifyDpopProofRequest, DpopVerifyResult } from "./verify.js";
+export { normalizeHtu, htuMatches } from "./htu.js";
+export { jwkThumbprint, accessTokenHash } from "./thumbprint.js";
+export { dpopConfirmation } from "./bind.js";
+export type { DpopConfirmation } from "./bind.js";
+export { runDpopGuard, parseDpopAuthorization, DPOP_WWW_AUTHENTICATE, } from "./guard.js";
+export type { RequireDpopOptions, DpopGuardInput, DpopGuardOutcome, } from "./guard.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/core/dpop/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/dpop/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/core/dpop/index.js

@@ -0,0 +1,6 @@
+export { verifyDpopProof } from "./verify.js";
+export { normalizeHtu, htuMatches } from "./htu.js";
+export { jwkThumbprint, accessTokenHash } from "./thumbprint.js";
+export { dpopConfirmation } from "./bind.js";
+export { runDpopGuard, parseDpopAuthorization, DPOP_WWW_AUTHENTICATE, } from "./guard.js";
+//# sourceMappingURL=index.js.map

package/dist/core/dpop/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/dpop/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC"}

package/dist/core/dpop/thumbprint.d.ts

@@ -0,0 +1,13 @@
+/**
+ * RFC 7638 JWK SHA-256 Thumbprint, base64url without padding. This is the
+ * `jkt` value: the access token is bound to the proof key by embedding this
+ * thumbprint in the token's `cnf.jkt`, and the resource server confirms the
+ * DPoP proof's `jwk` produces the same thumbprint (RFC 9449 §6).
+ */
+export declare function jwkThumbprint(jwk: JsonWebKey): Promise<string>;
+/**
+ * The `ath` claim: base64url(SHA-256(ASCII(access token))) (RFC 9449 §4.2).
+ * Lets the server confirm the proof was minted for the exact token presented.
+ */
+export declare function accessTokenHash(accessToken: string): Promise<string>;
+//# sourceMappingURL=thumbprint.d.ts.map

package/dist/core/dpop/thumbprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thumbprint.d.ts","sourceRoot":"","sources":["../../../src/core/dpop/thumbprint.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAEpE;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1E"}

package/dist/core/dpop/thumbprint.js

@@ -0,0 +1,30 @@
+import { calculateJwkThumbprint } from "jose";
+/**
+ * RFC 7638 JWK SHA-256 Thumbprint, base64url without padding. This is the
+ * `jkt` value: the access token is bound to the proof key by embedding this
+ * thumbprint in the token's `cnf.jkt`, and the resource server confirms the
+ * DPoP proof's `jwk` produces the same thumbprint (RFC 9449 §6).
+ */
+export async function jwkThumbprint(jwk) {
+    return calculateJwkThumbprint(jwk, "sha256");
+}
+/**
+ * The `ath` claim: base64url(SHA-256(ASCII(access token))) (RFC 9449 §4.2).
+ * Lets the server confirm the proof was minted for the exact token presented.
+ */
+export async function accessTokenHash(accessToken) {
+    const bytes = new TextEncoder().encode(accessToken);
+    const digest = await crypto.subtle.digest("SHA-256", bytes);
+    return base64UrlBytes(new Uint8Array(digest));
+}
+function base64UrlBytes(b) {
+    let s = "";
+    for (let i = 0; i < b.length; i++)
+        s += String.fromCharCode(b[i]);
+    return Buffer.from(s, "binary")
+        .toString("base64")
+        .replace(/=/g, "")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_");
+}
+//# sourceMappingURL=thumbprint.js.map

package/dist/core/dpop/thumbprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thumbprint.js","sourceRoot":"","sources":["../../../src/core/dpop/thumbprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAY,MAAM,MAAM,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAe;IACjD,OAAO,sBAAsB,CAAC,GAAU,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5D,OAAO,cAAc,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,CAAa;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC;SAC5B,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/core/dpop/verify.d.ts

@@ -0,0 +1,44 @@
+import { type JWTPayload } from "jose";
+import type { ProofReplayCache } from "../types.js";
+export interface VerifyDpopProofRequest {
+    /** The `DPoP` header value (the proof JWT). */
+    proof: string | undefined;
+    /** The actual HTTP method of the request being guarded. */
+    method: string;
+    /** The actual absolute request URL (scheme://host[:port]/path...). */
+    url: string;
+    /**
+     * The bearer access token presented with the request, when binding a token.
+     * Omit for pure proof-of-possession (no token).
+     */
+    accessToken?: string | undefined;
+    /**
+     * The `cnf.jkt` the presented access token was issued against. Required
+     * whenever `accessToken` is set unless `requireTokenBinding` is explicitly
+     * false. When present, the proof key's thumbprint MUST equal it.
+     */
+    boundJkt?: string | undefined;
+    /**
+     * Default true. With a token presented but no `boundJkt`, throw
+     * DPOP_TOKEN_BINDING_REQUIRED rather than silently accepting an unbound
+     * proof. Pass false to opt into proof-of-possession-only on a presented
+     * token — strictly weaker, a conscious choice.
+     */
+    requireTokenBinding?: boolean | undefined;
+    /** Acceptable `iat` window in ms (past and future). Default 300000. */
+    iatWindowMs?: number | undefined;
+    /**
+     * jti replay store. Reuses the per-request proof cache: keyed on the proof
+     * `jti`. Default no-op (no replay defense). Pass Memory/Redis to enable.
+     */
+    replayCache?: ProofReplayCache | undefined;
+}
+export interface DpopVerifyResult {
+    /** RFC 7638 thumbprint of the proof key — the value to bind a token to. */
+    jkt: string;
+    /** The proof's unique id, recorded for replay defense. */
+    jti: string;
+    payload: JWTPayload;
+}
+export declare function verifyDpopProof(req: VerifyDpopProofRequest): Promise<DpopVerifyResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/core/dpop/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/core/dpop/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,MAAM,CAAC;AAGd,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAWpD,MAAM,WAAW,sBAAsB;IACrC,+CAA+C;IAC/C,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;OAGG;IACH,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,wBAAsB,eAAe,CACnC,GAAG,EAAE,sBAAsB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CA6I3B"}

package/dist/core/dpop/verify.js

@@ -0,0 +1,124 @@
+import { decodeProtectedHeader, importJWK, jwtVerify, } from "jose";
+import { DbscVerificationError, ErrorCodes } from "../errors.js";
+import { validateJwk } from "../crypto/jwk.js";
+import { htuMatches } from "./htu.js";
+import { accessTokenHash, jwkThumbprint } from "./thumbprint.js";
+const DPOP_TYP = "dpop+jwt";
+const SUPPORTED_ALGS = ["ES256", "RS256"];
+const DEFAULT_IAT_WINDOW_MS = 5 * 60 * 1000;
+// Private-key members that must never appear in a DPoP proof's public jwk
+// (RFC 9449 §4.3: "the jwk JOSE Header Parameter does not contain a private key").
+const PRIVATE_JWK_MEMBERS = ["d", "p", "q", "dp", "dq", "qi", "k", "oth"];
+export async function verifyDpopProof(req) {
+    if (!req.proof) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MISSING, "DPoP header missing");
+    }
+    // A DPoP header carrying more than one token is malformed (§4.3).
+    if (req.proof.includes(",") || /\s/.test(req.proof.trim())) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP header must be a single JWT");
+    }
+    let header;
+    try {
+        header = decodeProtectedHeader(req.proof);
+    }
+    catch {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "failed to decode DPoP header");
+    }
+    if (header["typ"] !== DPOP_TYP) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_INVALID_TYP, `expected typ=${DPOP_TYP}, got ${String(header["typ"])}`);
+    }
+    const alg = header["alg"];
+    if (!SUPPORTED_ALGS.includes(alg)) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_INVALID_ALG, `unsupported or disallowed alg: ${String(alg)}`);
+    }
+    const jwk = header["jwk"];
+    if (!jwk || typeof jwk !== "object") {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP proof missing jwk header");
+    }
+    for (const m of PRIVATE_JWK_MEMBERS) {
+        if (m in jwk) {
+            throw new DbscVerificationError(ErrorCodes.DPOP_JWK_PRIVATE, "DPoP proof jwk contains private key material");
+        }
+    }
+    // Reuse the existing JWK validation (P-256 / RSA-2048 floor). Map its
+    // INVALID_JWK to the DPoP code so callers get a DPoP-shaped error.
+    try {
+        validateJwk(jwk);
+    }
+    catch {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP proof jwk failed validation");
+    }
+    let key;
+    try {
+        key = await importJWK(jwk, alg);
+    }
+    catch {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "failed to import DPoP proof jwk");
+    }
+    let payload;
+    try {
+        const result = await jwtVerify(req.proof, key, { algorithms: [...SUPPORTED_ALGS] });
+        payload = result.payload;
+    }
+    catch {
+        throw new DbscVerificationError(ErrorCodes.DPOP_SIGNATURE_INVALID, "DPoP proof signature did not verify");
+    }
+    const { jti, htm, htu, iat } = payload;
+    if (typeof jti !== "string" || !jti) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP proof missing jti");
+    }
+    if (typeof htm !== "string") {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP proof missing htm");
+    }
+    if (typeof htu !== "string") {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP proof missing htu");
+    }
+    if (typeof iat !== "number") {
+        throw new DbscVerificationError(ErrorCodes.DPOP_PROOF_MALFORMED, "DPoP proof missing iat");
+    }
+    if (htm.toUpperCase() !== req.method.toUpperCase()) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_HTM_MISMATCH, "DPoP htm does not match request method");
+    }
+    if (!htuMatches(htu, req.url)) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_HTU_MISMATCH, "DPoP htu does not match request URI");
+    }
+    // iat is a NumericDate (seconds). Window applies in both directions to allow
+    // for clock skew (§11.1).
+    const windowMs = req.iatWindowMs ?? DEFAULT_IAT_WINDOW_MS;
+    if (Math.abs(Date.now() - iat * 1000) > windowMs) {
+        throw new DbscVerificationError(ErrorCodes.DPOP_IAT_OUT_OF_WINDOW, "DPoP iat outside acceptable window");
+    }
+    const jkt = await jwkThumbprint(jwk);
+    // Token binding. Default-secure: a presented token without a boundJkt is
+    // rejected, never silently downgraded.
+    if (req.accessToken !== undefined) {
+        const requireBinding = req.requireTokenBinding ?? true;
+        if (req.boundJkt === undefined) {
+            if (requireBinding) {
+                throw new DbscVerificationError(ErrorCodes.DPOP_TOKEN_BINDING_REQUIRED, "access token presented without a bound jkt; pass getBoundJkt or set requireTokenBinding:false");
+            }
+        }
+        else if (jkt !== req.boundJkt) {
+            throw new DbscVerificationError(ErrorCodes.DPOP_JKT_MISMATCH, "DPoP proof key does not match token cnf.jkt");
+        }
+        const ath = payload.ath;
+        if (typeof ath !== "string") {
+            throw new DbscVerificationError(ErrorCodes.DPOP_ATH_MISMATCH, "DPoP proof missing ath for presented token");
+        }
+        const expected = await accessTokenHash(req.accessToken);
+        if (ath !== expected) {
+            throw new DbscVerificationError(ErrorCodes.DPOP_ATH_MISMATCH, "DPoP ath does not match presented token");
+        }
+    }
+    // Replay defense, after the cryptographic gate. Recording an unverified jti
+    // would let an attacker poison the cache. TTL is 2*window so a proof at the
+    // edge of the future window survives until the past window closes.
+    if (req.replayCache) {
+        const fresh = await req.replayCache.checkAndRecord(`dpop:${jti}`, 2 * windowMs);
+        if (!fresh) {
+            throw new DbscVerificationError(ErrorCodes.DPOP_JTI_REPLAY, "DPoP proof jti already used (replay)");
+        }
+    }
+    return { jkt, jti, payload };
+}
+//# sourceMappingURL=verify.js.map

package/dist/core/dpop/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/core/dpop/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,SAAS,GAGV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEjE,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;AACnD,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,0EAA0E;AAC1E,mFAAmF;AACnF,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAU,CAAC;AA4CnF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAA2B;IAE3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;IACxF,CAAC;IACD,kEAAkE;IAClE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,qBAAqB,CAC7B,UAAU,CAAC,oBAAoB,EAC/B,kCAAkC,CACnC,CAAC;IACJ,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAA4B,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAC7B,UAAU,CAAC,gBAAgB,EAC3B,gBAAgB,QAAQ,SAAS,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAsC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,qBAAqB,CAC7B,UAAU,CAAC,gBAAgB,EAC3B,kCAAkC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAA2B,CAAC;IACpD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,+BAA+B,CAAC,CAAC;IACpG,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACpC,IAAI,CAAC,IAAK,GAA+B,EAAE,CAAC;YAC1C,MAAM,IAAI,qBAAqB,CAC7B,UAAU,CAAC,gBAAgB,EAC3B,8CAA8C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,mEAAmE;IACnE,IAAI,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,kCAAkC,CAAC,CAAC;IACvG,CAAC;IAED,IAAI,GAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAU,EAAE,GAAa,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;IACtG,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAK9B,CAAC;IACF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,wCAAwC,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IACvG,CAAC;IAED,6EAA6E;IAC7E,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,sBAAsB,EAAE,oCAAoC,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IAErC,yEAAyE;IACzE,uCAAuC;IACvC,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC;QACvD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,IAAI,qBAAqB,CAC7B,UAAU,CAAC,2BAA2B,EACtC,+FAA+F,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,6CAA6C,CAAC,CAAC;QAC/G,CAAC;QAED,MAAM,GAAG,GAAI,OAA6B,CAAC,GAAG,CAAC;QAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;QAC9G,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,mEAAmE;IACnE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,GAAG,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/core/errors.d.ts

@@ -29,5 +29,18 @@ export declare const ErrorCodes: {
     readonly MISSING_PROOF: "MISSING_PROOF";
     readonly MALFORMED_PROOF: "MALFORMED_PROOF";
     readonly PROOF_REPLAY: "PROOF_REPLAY";
+    readonly DPOP_PROOF_MISSING: "DPOP_PROOF_MISSING";
+    readonly DPOP_PROOF_MALFORMED: "DPOP_PROOF_MALFORMED";
+    readonly DPOP_INVALID_TYP: "DPOP_INVALID_TYP";
+    readonly DPOP_INVALID_ALG: "DPOP_INVALID_ALG";
+    readonly DPOP_JWK_PRIVATE: "DPOP_JWK_PRIVATE";
+    readonly DPOP_SIGNATURE_INVALID: "DPOP_SIGNATURE_INVALID";
+    readonly DPOP_HTM_MISMATCH: "DPOP_HTM_MISMATCH";
+    readonly DPOP_HTU_MISMATCH: "DPOP_HTU_MISMATCH";
+    readonly DPOP_IAT_OUT_OF_WINDOW: "DPOP_IAT_OUT_OF_WINDOW";
+    readonly DPOP_JTI_REPLAY: "DPOP_JTI_REPLAY";
+    readonly DPOP_ATH_MISMATCH: "DPOP_ATH_MISMATCH";
+    readonly DPOP_JKT_MISMATCH: "DPOP_JKT_MISMATCH";
+    readonly DPOP_TOKEN_BINDING_REQUIRED: "DPOP_TOKEN_BINDING_REQUIRED";
 };
 //# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;CAuBb,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCb,CAAC"}

package/dist/core/errors.js

@@ -45,5 +45,21 @@ export const ErrorCodes = {
     MISSING_PROOF: "MISSING_PROOF",
     MALFORMED_PROOF: "MALFORMED_PROOF",
     PROOF_REPLAY: "PROOF_REPLAY",
+    // DPoP (RFC 9449). Optional layer, reached only via the dbsc-toolkit/dpop
+    // subpath. A failed DPoP check maps to HTTP 401 + WWW-Authenticate: DPoP
+    // (resource-server semantics) — not the 403 the DBSC per-request proof uses.
+    DPOP_PROOF_MISSING: "DPOP_PROOF_MISSING",
+    DPOP_PROOF_MALFORMED: "DPOP_PROOF_MALFORMED",
+    DPOP_INVALID_TYP: "DPOP_INVALID_TYP",
+    DPOP_INVALID_ALG: "DPOP_INVALID_ALG",
+    DPOP_JWK_PRIVATE: "DPOP_JWK_PRIVATE",
+    DPOP_SIGNATURE_INVALID: "DPOP_SIGNATURE_INVALID",
+    DPOP_HTM_MISMATCH: "DPOP_HTM_MISMATCH",
+    DPOP_HTU_MISMATCH: "DPOP_HTU_MISMATCH",
+    DPOP_IAT_OUT_OF_WINDOW: "DPOP_IAT_OUT_OF_WINDOW",
+    DPOP_JTI_REPLAY: "DPOP_JTI_REPLAY",
+    DPOP_ATH_MISMATCH: "DPOP_ATH_MISMATCH",
+    DPOP_JKT_MISMATCH: "DPOP_JKT_MISMATCH",
+    DPOP_TOKEN_BINDING_REQUIRED: "DPOP_TOKEN_BINDING_REQUIRED",
 };
 //# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,uBAAuB,EAAE,yBAAyB;IAClD,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;IAC1B,iBAAiB,EAAE,mBAAmB;IACtC,mBAAmB,EAAE,qBAAqB;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,oBAAoB;IACxC,YAAY,EAAE,cAAc;IAC5B,iBAAiB,EAAE,mBAAmB;IACtC,aAAa,EAAE,eAAe;IAC9B,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,gBAAgB;IAChB,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,qBAAqB;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,0BAA0B,EAAE,4BAA4B;IACxD,YAAY,EAAE,cAAc;IAC5B,aAAa,EAAE,eAAe;IAC9B,eAAe,EAAE,iBAAiB;IAClC,YAAY,EAAE,cAAc;CACpB,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,uBAAuB,EAAE,yBAAyB;IAClD,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;IAC1B,iBAAiB,EAAE,mBAAmB;IACtC,mBAAmB,EAAE,qBAAqB;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,kBAAkB,EAAE,oBAAoB;IACxC,YAAY,EAAE,cAAc;IAC5B,iBAAiB,EAAE,mBAAmB;IACtC,aAAa,EAAE,eAAe;IAC9B,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,gBAAgB;IAChB,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,qBAAqB;IAC1C,iBAAiB,EAAE,mBAAmB;IACtC,0BAA0B,EAAE,4BAA4B;IACxD,YAAY,EAAE,cAAc;IAC5B,aAAa,EAAE,eAAe;IAC9B,eAAe,EAAE,iBAAiB;IAClC,YAAY,EAAE,cAAc;IAC5B,0EAA0E;IAC1E,yEAAyE;IACzE,6EAA6E;IAC7E,kBAAkB,EAAE,oBAAoB;IACxC,oBAAoB,EAAE,sBAAsB;IAC5C,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,sBAAsB,EAAE,wBAAwB;IAChD,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,sBAAsB,EAAE,wBAAwB;IAChD,eAAe,EAAE,iBAAiB;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,2BAA2B,EAAE,6BAA6B;CAClD,CAAC"}