euclid-ndk 0.2.0

package/dist/auth/rfc9421.d.ts

@@ -0,0 +1,112 @@
+/**
+ * RFC 9421 HTTP Message Signatures, the scheme meant to take over from SigV4.
+ *
+ * Same credentials, same threat model, standard wire format: the caller still presents an access
+ * key ID and its secret, and the signature is still an HMAC-SHA256 over a canonical rendering of
+ * the request, but what gets rendered and how it travels is the IETF's rather than AWS's. The
+ * signature goes in `Signature` and `Signature-Input` instead of `Authorization`, which is what
+ * lets the two schemes coexist during a migration - SigV4 owns `Authorization`, this owns its own
+ * headers, and a server can accept either without guessing which one a request meant.
+ *
+ * **Algorithm.** Only `hmac-sha256`, because that is the algorithm that takes euclid's existing
+ * access-key/secret pairs unchanged: the HMAC key is the secret's UTF-8 bytes directly (RFC 9421
+ * §3.3.3), with none of SigV4's key-derivation chain to reproduce.
+ *
+ * **Covered components.** RFC 9421 lets a signer choose what its signature covers and declare it
+ * in `Signature-Input`. Taken literally that would let a request decide how little of itself to
+ * authenticate, so it is not taken literally here: the set is fixed, {@link verify} rejects a
+ * signature covering anything else in any other order, and {@link sign} refuses to sign a request
+ * that cannot supply all of it. The list is a wire format shared with euclid's
+ * `Core::HttpSignature::CoveredComponents()` and the two only ever change together.
+ *
+ * See RFC 9421 and RFC 9530 (Content-Digest).
+ */
+import type { SignableRequest } from "./signable.js";
+export declare const ALGORITHM = "hmac-sha256";
+export declare const TAG = "euclid";
+export declare const SIGNATURE_HEADER_NAMES: readonly ["Content-Digest", "Signature-Input", "Signature"];
+/**
+ * The parameters of one signature, as carried in `Signature-Input`.
+ *
+ * `raw` is the parameter string exactly as received. It is kept because that is what the signature
+ * was computed over: re-serialising the parsed fields would not reliably reproduce another
+ * implementation's byte-for-byte choices, and a base rebuilt from a re-serialisation would fail to
+ * verify a perfectly good signature.
+ */
+export interface SignatureParams {
+    components: string[];
+    created: number | null;
+    expires: number | null;
+    keyId: string;
+    algorithm: string | null;
+    nonce: string | null;
+    tag: string | null;
+    raw: string;
+}
+/** A signature and its parameters, paired by the dictionary label they share. */
+export interface ParsedSignature {
+    label: string;
+    params: SignatureParams;
+    signature: Buffer;
+}
+/** The components every euclid signature covers, in signing order. */
+export declare function requiredComponents(): readonly string[];
+/**
+ * The components a signature over this request must cover.
+ *
+ * Takes the request because RFC 9421 allows a signer to cover a field only when the message carries
+ * one, and a future version of euclid may want that back. It does not vary today.
+ */
+export declare function coveredComponents(_req: SignableRequest): readonly string[];
+/** The headers {@link sign} writes, in the case they should be sent in. */
+export declare function signatureHeaderNames(): readonly string[];
+/** The RFC 9530 `Content-Digest` value binding a body to its signature. */
+export declare function contentDigest(body: Buffer | string): string;
+/** Serialises the `Signature-Input` value for a set of covered components, without a label. */
+export declare function serializeSignatureParams(components: readonly string[], created: number, keyId: string, nonce: string): string;
+/**
+ * Builds the §2.5 signature base: one line per component, then `@signature-params`.
+ *
+ * The last line carries no trailing newline. Answers null if any covered component is absent from
+ * the request - §2.1 forbids signing over a field that is not there, and producing a base with a
+ * blank in its place would sign something the verifier will never reconstruct.
+ */
+export declare function signatureBase(req: SignableRequest, components: readonly string[], params: string): string | null;
+/**
+ * Signs a request in place: sets Content-Digest, Signature-Input and Signature.
+ *
+ * Call it once every header the signature covers and the body are already set. Unlike SigV4 this
+ * leaves Authorization alone, so a request can carry a bearer token and a signature at once if a
+ * deployment wants both during a migration.
+ *
+ * Throws when a component that must be covered is missing, which for a client means it was
+ * configured without a region, an account id or a user id and so has nothing to sign with.
+ */
+export declare function sign(req: SignableRequest, accessKeyId: string, secretAccessKey: string): void;
+/**
+ * Verifies an RFC 9421-signed request, answering the key ID it was signed with.
+ *
+ * Rebuilds the base from the request exactly as received - including the parameters verbatim - and
+ * compares the HMAC in constant time. Answers null on every failure without saying which, as
+ * {@link import("./sigv4.js").verify} does.
+ *
+ * The checks mirror euclid's `Core::HttpSignature::Verify`: the covered set must be exactly
+ * {@link requiredComponents}, in that order; `alg` must be `hmac-sha256`; `created` must be within
+ * the skew window; and `Content-Digest` must match the body actually received, since that header is
+ * the only thing the signature covers the body through.
+ *
+ * `tag` is checked only when present, and euclid's own signer emits none. Requiring it would reject
+ * signatures made by the server itself.
+ */
+export declare function verify(req: SignableRequest, lookupSecret: (keyId: string) => string | null | undefined, maxSkewSeconds?: number): string | null;
+/**
+ * Parses a matching pair of `Signature-Input` and `Signature` values.
+ *
+ * Both must hold exactly one signature under the same label. RFC 9421 allows several - a proxy
+ * adding its own alongside the client's - but euclid has no use for more than one, and refusing to
+ * choose among them means never verifying the wrong one.
+ */
+export declare function parseSignature(signatureInputHeader: string, signatureHeader: string): ParsedSignature | null;
+/** Parses a `Signature-Input` value: an inner list of components, then the parameters. */
+export declare function parseSignatureParams(value: string): SignatureParams | null;
+//# sourceMappingURL=rfc9421.d.ts.map

package/dist/auth/rfc9421.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rfc9421.d.ts","sourceRoot":"","sources":["../../src/auth/rfc9421.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,eAAO,MAAM,SAAS,gBAAgB,CAAC;AACvC,eAAO,MAAM,GAAG,WAAW,CAAC;AA2B5B,eAAO,MAAM,sBAAsB,6DAA8D,CAAC;AAElG;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,IAAI,SAAS,MAAM,EAAE,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,SAAS,MAAM,EAAE,CAE1E;AAED,2EAA2E;AAC3E,wBAAgB,oBAAoB,IAAI,SAAS,MAAM,EAAE,CAExD;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAG3D;AAED,+FAA+F;AAC/F,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,MAAM,CAGR;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAShH;AAED;;;;;;;;;GASG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAiB7F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,MAAM,CACpB,GAAG,EAAE,eAAe,EACpB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,EAC1D,cAAc,GAAE,MAAiC,GAChD,MAAM,GAAG,IAAI,CA+Bf;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,oBAAoB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAS5G;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CA+C1E"}

package/dist/auth/rfc9421.js

@@ -0,0 +1,452 @@
+/**
+ * RFC 9421 HTTP Message Signatures, the scheme meant to take over from SigV4.
+ *
+ * Same credentials, same threat model, standard wire format: the caller still presents an access
+ * key ID and its secret, and the signature is still an HMAC-SHA256 over a canonical rendering of
+ * the request, but what gets rendered and how it travels is the IETF's rather than AWS's. The
+ * signature goes in `Signature` and `Signature-Input` instead of `Authorization`, which is what
+ * lets the two schemes coexist during a migration - SigV4 owns `Authorization`, this owns its own
+ * headers, and a server can accept either without guessing which one a request meant.
+ *
+ * **Algorithm.** Only `hmac-sha256`, because that is the algorithm that takes euclid's existing
+ * access-key/secret pairs unchanged: the HMAC key is the secret's UTF-8 bytes directly (RFC 9421
+ * §3.3.3), with none of SigV4's key-derivation chain to reproduce.
+ *
+ * **Covered components.** RFC 9421 lets a signer choose what its signature covers and declare it
+ * in `Signature-Input`. Taken literally that would let a request decide how little of itself to
+ * authenticate, so it is not taken literally here: the set is fixed, {@link verify} rejects a
+ * signature covering anything else in any other order, and {@link sign} refuses to sign a request
+ * that cannot supply all of it. The list is a wire format shared with euclid's
+ * `Core::HttpSignature::CoveredComponents()` and the two only ever change together.
+ *
+ * See RFC 9421 and RFC 9530 (Content-Digest).
+ */
+import { createHash, createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+export const ALGORITHM = "hmac-sha256";
+export const TAG = "euclid";
+const LABEL = "sig1";
+const DEFAULT_MAX_SKEW_SECONDS = 15 * 60;
+/**
+ * The derived components pin the request line and host, content-digest pins the body, and the
+ * x-euclid-* headers pin what the request asks for and on whose behalf - which for euclid lives in
+ * headers rather than in the URI.
+ *
+ * Two absences are deliberate. "@query" is not covered because euclid POSTs everything to "/" and
+ * carries its arguments in the body, so there is no query string to protect. "x-euclid-namespace"
+ * is not covered either, and that one is a real gap rather than a simplification: the namespace
+ * scopes what a request may touch and it currently travels unsigned. Closing it means adding the
+ * component to euclid's server and to this list in the same release.
+ */
+const REQUIRED_COMPONENTS = [
+    "@method",
+    "@path",
+    "@authority",
+    "content-digest",
+    "x-euclid-account-id",
+    "x-euclid-action",
+    "x-euclid-region",
+    "x-euclid-target",
+    "x-euclid-user-id",
+];
+export const SIGNATURE_HEADER_NAMES = ["Content-Digest", "Signature-Input", "Signature"];
+/** The components every euclid signature covers, in signing order. */
+export function requiredComponents() {
+    return REQUIRED_COMPONENTS;
+}
+/**
+ * The components a signature over this request must cover.
+ *
+ * Takes the request because RFC 9421 allows a signer to cover a field only when the message carries
+ * one, and a future version of euclid may want that back. It does not vary today.
+ */
+export function coveredComponents(_req) {
+    return REQUIRED_COMPONENTS;
+}
+/** The headers {@link sign} writes, in the case they should be sent in. */
+export function signatureHeaderNames() {
+    return SIGNATURE_HEADER_NAMES;
+}
+/** The RFC 9530 `Content-Digest` value binding a body to its signature. */
+export function contentDigest(body) {
+    const raw = typeof body === "string" ? Buffer.from(body, "utf8") : body;
+    return `sha-256=:${createHash("sha256").update(raw).digest("base64")}:`;
+}
+/** Serialises the `Signature-Input` value for a set of covered components, without a label. */
+export function serializeSignatureParams(components, created, keyId, nonce) {
+    const inner = components.map(quote).join(" ");
+    return `(${inner});created=${created};keyid=${quote(keyId)};alg=${quote(ALGORITHM)};nonce=${quote(nonce)};tag=${quote(TAG)}`;
+}
+/**
+ * Builds the §2.5 signature base: one line per component, then `@signature-params`.
+ *
+ * The last line carries no trailing newline. Answers null if any covered component is absent from
+ * the request - §2.1 forbids signing over a field that is not there, and producing a base with a
+ * blank in its place would sign something the verifier will never reconstruct.
+ */
+export function signatureBase(req, components, params) {
+    const lines = [];
+    for (const component of components) {
+        const value = componentValue(req, component);
+        if (value === null)
+            return null;
+        lines.push(`"${component}": ${value}`);
+    }
+    lines.push(`"@signature-params": ${params}`);
+    return lines.join("\n");
+}
+/**
+ * Signs a request in place: sets Content-Digest, Signature-Input and Signature.
+ *
+ * Call it once every header the signature covers and the body are already set. Unlike SigV4 this
+ * leaves Authorization alone, so a request can carry a bearer token and a signature at once if a
+ * deployment wants both during a migration.
+ *
+ * Throws when a component that must be covered is missing, which for a client means it was
+ * configured without a region, an account id or a user id and so has nothing to sign with.
+ */
+export function sign(req, accessKeyId, secretAccessKey) {
+    req.header("Content-Digest", contentDigest(req.body));
+    const components = coveredComponents(req);
+    const params = serializeSignatureParams(components, Math.floor(Date.now() / 1000), accessKeyId, newNonce());
+    const base = signatureBase(req, components, params);
+    if (base === null) {
+        const missing = components.filter((component) => componentValue(req, component) === null);
+        throw new Error(`request cannot be signed, it is missing ${JSON.stringify(missing)} - euclid signs a fixed set of ` +
+            "components, so a client configured without a region, account id or user id has nothing to sign with");
+    }
+    const signature = createHmac("sha256", Buffer.from(secretAccessKey, "utf8")).update(base, "utf8").digest();
+    req.header("Signature-Input", `${LABEL}=${params}`);
+    req.header("Signature", `${LABEL}=:${signature.toString("base64")}:`);
+}
+/**
+ * Verifies an RFC 9421-signed request, answering the key ID it was signed with.
+ *
+ * Rebuilds the base from the request exactly as received - including the parameters verbatim - and
+ * compares the HMAC in constant time. Answers null on every failure without saying which, as
+ * {@link import("./sigv4.js").verify} does.
+ *
+ * The checks mirror euclid's `Core::HttpSignature::Verify`: the covered set must be exactly
+ * {@link requiredComponents}, in that order; `alg` must be `hmac-sha256`; `created` must be within
+ * the skew window; and `Content-Digest` must match the body actually received, since that header is
+ * the only thing the signature covers the body through.
+ *
+ * `tag` is checked only when present, and euclid's own signer emits none. Requiring it would reject
+ * signatures made by the server itself.
+ */
+export function verify(req, lookupSecret, maxSkewSeconds = DEFAULT_MAX_SKEW_SECONDS) {
+    const parsed = parseSignature(req.get("signature-input"), req.get("signature"));
+    if (parsed === null)
+        return null;
+    const params = parsed.params;
+    // Only one algorithm exists here, so an unexpected alg is a rejection rather than a branch -
+    // which is also what stops a signature being reinterpreted under a weaker one.
+    if (params.algorithm !== ALGORITHM)
+        return null;
+    if (params.tag !== null && params.tag !== TAG)
+        return null;
+    // Fixed policy, not client-negotiated, and order-sensitive because the server is.
+    const required = coveredComponents(req);
+    if (params.components.length !== required.length)
+        return null;
+    if (params.components.some((component, index) => component !== required[index]))
+        return null;
+    const now = Math.floor(Date.now() / 1000);
+    if (params.created === null || Math.abs(now - params.created) > maxSkewSeconds)
+        return null;
+    if (params.expires !== null && params.expires < now)
+        return null;
+    if (!req.has("content-digest") || !equal(req.get("content-digest"), contentDigest(req.body)))
+        return null;
+    const secret = lookupSecret(params.keyId);
+    if (secret == null)
+        return null;
+    const base = signatureBase(req, params.components, params.raw);
+    if (base === null)
+        return null;
+    const expected = createHmac("sha256", Buffer.from(secret, "utf8")).update(base, "utf8").digest();
+    if (expected.length !== parsed.signature.length || !timingSafeEqual(expected, parsed.signature))
+        return null;
+    return params.keyId;
+}
+/**
+ * Parses a matching pair of `Signature-Input` and `Signature` values.
+ *
+ * Both must hold exactly one signature under the same label. RFC 9421 allows several - a proxy
+ * adding its own alongside the client's - but euclid has no use for more than one, and refusing to
+ * choose among them means never verifying the wrong one.
+ */
+export function parseSignature(signatureInputHeader, signatureHeader) {
+    const inputMember = singleDictionaryMember(signatureInputHeader);
+    const signatureMember = singleDictionaryMember(signatureHeader);
+    if (inputMember === null || signatureMember === null || inputMember[0] !== signatureMember[0])
+        return null;
+    const params = parseSignatureParams(inputMember[1]);
+    const signature = parseByteSequence(signatureMember[1]);
+    if (params === null || signature === null)
+        return null;
+    return { label: inputMember[0], params, signature };
+}
+/** Parses a `Signature-Input` value: an inner list of components, then the parameters. */
+export function parseSignatureParams(value) {
+    if (!value || value[0] !== "(")
+        return null;
+    const components = [];
+    let pos = 1;
+    for (;;) {
+        if (pos >= value.length)
+            return null;
+        const char = value[pos];
+        if (char === ")") {
+            pos += 1;
+            break;
+        }
+        if (char === " ") {
+            pos += 1;
+            continue;
+        }
+        if (char !== '"')
+            return null;
+        const end = endOfQuotedString(value, pos);
+        if (end < 0)
+            return null;
+        // A component carrying parameters of its own ("x";req and friends) means something this module
+        // does not implement, so it is rejected rather than quietly read as plain.
+        if (end + 1 < value.length && value[end + 1] !== " " && value[end + 1] !== ")")
+            return null;
+        components.push(unquote(value.slice(pos, end + 1)));
+        pos = end + 1;
+    }
+    if (components.length === 0)
+        return null;
+    const parameters = parseParameters(value.slice(pos));
+    if (parameters === null)
+        return null;
+    const keyId = parameters["keyid"];
+    if (typeof keyId !== "string")
+        return null;
+    const created = timestampOf(parameters, "created");
+    const expires = timestampOf(parameters, "expires");
+    if (created === INVALID || expires === INVALID)
+        return null;
+    return {
+        components,
+        created,
+        expires,
+        keyId,
+        algorithm: stringOrNull(parameters["alg"]),
+        nonce: stringOrNull(parameters["nonce"]),
+        tag: stringOrNull(parameters["tag"]),
+        raw: value,
+    };
+}
+// -- internals -------------------------------------------------------------------------------
+/** One covered component's value for the base: §2.2's derived values, or the header. */
+function componentValue(req, component) {
+    if (!component.startsWith("@"))
+        return req.has(component) ? req.get(component) : null;
+    const question = req.target.indexOf("?");
+    const path = question < 0 ? req.target : req.target.slice(0, question);
+    const query = question < 0 ? null : req.target.slice(question + 1);
+    switch (component) {
+        case "@method":
+            return req.method.toUpperCase();
+        case "@authority":
+            return authorityOf(req);
+        case "@scheme":
+            return req.scheme;
+        case "@path":
+            // §2.2.6: the path is "/" when empty.
+            return path === "" ? "/" : path;
+        case "@query":
+            // §2.2.7: the query keeps its leading "?", and is that character alone when there is none.
+            return query === null ? "?" : `?${query}`;
+        case "@request-target":
+            return req.target;
+        case "@target-uri": {
+            const authority = authorityOf(req);
+            return authority === null ? null : `${req.scheme}://${authority}${req.target}`;
+        }
+        default:
+            return null;
+    }
+}
+/** §2.2.3: the host header lowercased, minus the port when it is the scheme's default. */
+function authorityOf(req) {
+    const host = req.get("host").toLowerCase();
+    if (!host)
+        return null;
+    const defaultPort = req.scheme === "https" ? ":443" : req.scheme === "http" ? ":80" : "";
+    return defaultPort && host.endsWith(defaultPort) ? host.slice(0, -defaultPort.length) : host;
+}
+/**
+ * Splits a structured-field dictionary that must hold exactly one member into label and value.
+ *
+ * Respects quoting and nesting, so a comma inside a component name or a base64 signature cannot be
+ * mistaken for a member separator.
+ */
+function singleDictionaryMember(value) {
+    if (!value)
+        return null;
+    const members = splitTopLevel(value, ",");
+    if (members.length !== 1)
+        return null;
+    const member = members[0].trim();
+    const equals = indexOfTopLevel(member, "=");
+    if (equals <= 0 || equals === member.length - 1)
+        return null;
+    return [member.slice(0, equals).trim(), member.slice(equals + 1).trim()];
+}
+function splitTopLevel(value, delimiter) {
+    const parts = [];
+    let depth = 0;
+    let inQuotes = false;
+    let start = 0;
+    let i = 0;
+    while (i < value.length) {
+        const char = value[i];
+        if (inQuotes) {
+            if (char === "\\") {
+                i += 2;
+                continue;
+            }
+            if (char === '"')
+                inQuotes = false;
+        }
+        else if (char === '"')
+            inQuotes = true;
+        else if (char === "(")
+            depth += 1;
+        else if (char === ")")
+            depth -= 1;
+        else if (char === delimiter && depth === 0) {
+            parts.push(value.slice(start, i));
+            start = i + 1;
+        }
+        i += 1;
+    }
+    parts.push(value.slice(start));
+    return parts;
+}
+function indexOfTopLevel(value, charToFind) {
+    let inQuotes = false;
+    let i = 0;
+    while (i < value.length) {
+        const char = value[i];
+        if (inQuotes) {
+            if (char === "\\") {
+                i += 2;
+                continue;
+            }
+            if (char === '"')
+                inQuotes = false;
+        }
+        else if (char === '"')
+            inQuotes = true;
+        else if (char === charToFind)
+            return i;
+        i += 1;
+    }
+    return -1;
+}
+/** The index of the closing quote of the string opening at `start`, or -1 if unterminated. */
+function endOfQuotedString(value, start) {
+    let i = start + 1;
+    while (i < value.length) {
+        if (value[i] === "\\") {
+            i += 2;
+            continue;
+        }
+        if (value[i] === '"')
+            return i;
+        i += 1;
+    }
+    return -1;
+}
+/** Parses `;name=value;name2=value2` into a mapping, or null if it is not well-formed. */
+function parseParameters(rest) {
+    const parameters = {};
+    let pos = 0;
+    while (pos < rest.length) {
+        if (rest[pos] !== ";")
+            return null;
+        pos += 1;
+        while (pos < rest.length && rest[pos] === " ")
+            pos += 1;
+        const nameStart = pos;
+        while (pos < rest.length && rest[pos] !== "=" && rest[pos] !== ";")
+            pos += 1;
+        const name = rest.slice(nameStart, pos).trim();
+        if (!name)
+            return null;
+        if (pos >= rest.length || rest[pos] === ";") {
+            // A bare parameter is a boolean true in structured fields.
+            parameters[name] = true;
+            continue;
+        }
+        pos += 1; // the '='
+        if (pos < rest.length && rest[pos] === '"') {
+            const end = endOfQuotedString(rest, pos);
+            if (end < 0)
+                return null;
+            parameters[name] = unquote(rest.slice(pos, end + 1));
+            pos = end + 1;
+        }
+        else if (pos < rest.length && rest[pos] === ":") {
+            const end = rest.indexOf(":", pos + 1);
+            if (end < 0)
+                return null;
+            parameters[name] = decodeBase64(rest.slice(pos + 1, end));
+            pos = end + 1;
+        }
+        else {
+            const valueStart = pos;
+            while (pos < rest.length && rest[pos] !== ";")
+                pos += 1;
+            parameters[name] = asIntegerOrToken(rest.slice(valueStart, pos).trim());
+        }
+    }
+    return parameters;
+}
+/** Parses a structured-field byte sequence, `:<base64>:`. */
+function parseByteSequence(value) {
+    const trimmed = value.trim();
+    if (trimmed.length < 2 || trimmed[0] !== ":" || trimmed[trimmed.length - 1] !== ":")
+        return null;
+    return decodeBase64(trimmed.slice(1, -1));
+}
+function decodeBase64(value) {
+    // Node's base64 decoder ignores what it cannot read rather than refusing it, so a round trip is
+    // what says the input really was base64 - the strictness the verifier depends on.
+    const decoded = Buffer.from(value, "base64");
+    return decoded.toString("base64").replace(/=+$/, "") === value.replace(/=+$/, "") ? decoded : null;
+}
+function asIntegerOrToken(raw) {
+    return /^-?\d+$/.test(raw) ? Number(raw) : raw;
+}
+const INVALID = Symbol("invalid");
+/** The parameter as a Unix timestamp; null when absent, INVALID when present but not an integer. */
+function timestampOf(parameters, name) {
+    if (!(name in parameters))
+        return null;
+    const value = parameters[name];
+    return typeof value === "number" && Number.isInteger(value) ? value : INVALID;
+}
+function stringOrNull(value) {
+    return typeof value === "string" ? value : null;
+}
+function quote(value) {
+    return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+function unquote(quoted) {
+    return quoted.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+}
+function newNonce() {
+    return randomBytes(16).toString("base64url");
+}
+/** Constant-time string comparison, which is what a digest check has to be. */
+function equal(left, right) {
+    const a = Buffer.from(left, "utf8");
+    const b = Buffer.from(right, "utf8");
+    return a.length === b.length && timingSafeEqual(a, b);
+}
+//# sourceMappingURL=rfc9421.js.map

package/dist/auth/rfc9421.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rfc9421.js","sourceRoot":"","sources":["../../src/auth/rfc9421.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAInF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,CAAC;AACvC,MAAM,CAAC,MAAM,GAAG,GAAG,QAAQ,CAAC;AAC5B,MAAM,KAAK,GAAG,MAAM,CAAC;AACrB,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,CAAC;AAEzC;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG;IAC1B,SAAS;IACT,OAAO;IACP,YAAY;IACZ,gBAAgB;IAChB,qBAAqB;IACrB,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,CAAU,CAAC;AA4BlG,sEAAsE;AACtE,MAAM,UAAU,kBAAkB;IAChC,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB;IAClC,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,OAAO,YAAY,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC1E,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,wBAAwB,CACtC,UAA6B,EAC7B,OAAe,EACf,KAAa,EACb,KAAa;IAEb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,IAAI,KAAK,aAAa,OAAO,UAAU,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,SAAS,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;AAC/H,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAoB,EAAE,UAA6B,EAAE,MAAc;IAC/F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,MAAM,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,EAAE,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,IAAI,CAAC,GAAoB,EAAE,WAAmB,EAAE,eAAuB;IACrF,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC5G,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,2CAA2C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,iCAAiC;YACjG,qGAAqG,CACxG,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3G,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,KAAK,KAAK,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,MAAM,CACpB,GAAoB,EACpB,YAA0D,EAC1D,iBAAyB,wBAAwB;IAEjD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAChF,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,6FAA6F;IAC7F,+EAA+E;IAC/E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAE3D,kFAAkF;IAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,cAAc;QAAE,OAAO,IAAI,CAAC;IAC5F,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAEjE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1G,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE/B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACjG,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7G,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,oBAA4B,EAAE,eAAuB;IAClF,MAAM,WAAW,GAAG,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,eAAe,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,IAAI,IAAI,eAAe,KAAK,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3G,MAAM,MAAM,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACtD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,SAAS,CAAC;QACR,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,GAAG,IAAI,CAAC,CAAC;YACT,MAAM;QACR,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,GAAG,IAAI,CAAC,CAAC;YACT,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,+FAA+F;QAC/F,2EAA2E;QAC3E,IAAI,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5F,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAE5D,OAAO;QACL,UAAU;QACV,OAAO;QACP,OAAO;QACP,KAAK;QACL,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxC,GAAG,EAAE,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpC,GAAG,EAAE,KAAK;KACX,CAAC;AACJ,CAAC;AAED,+FAA+F;AAE/F,wFAAwF;AACxF,SAAS,cAAc,CAAC,GAAoB,EAAE,SAAiB;IAC7D,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAEnE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAClC,KAAK,YAAY;YACf,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,KAAK,OAAO;YACV,sCAAsC;YACtC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,KAAK,QAAQ;YACX,2FAA2F;YAC3F,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QAC5C,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC,MAAM,CAAC;QACpB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACjF,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,WAAW,CAAC,GAAoB;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,OAAO,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,SAAiB;IACrD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;aACpC,IAAI,IAAI,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;aAC7B,IAAI,IAAI,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;aAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,UAAkB;IACxD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,GAAG;gBAAE,QAAQ,GAAG,KAAK,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG;YAAE,QAAQ,GAAG,IAAI,CAAC;aACpC,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,CAAC,CAAC;QACvC,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,8FAA8F;AAC9F,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAa;IACrD,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,CAAC;QAC/B,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,0FAA0F;AAC1F,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACnC,GAAG,IAAI,CAAC,CAAC;QACT,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,GAAG,IAAI,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,GAAG,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5C,2DAA2D;YAC3D,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACxB,SAAS;QACX,CAAC;QAED,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU;QACpB,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrD,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QAChB,CAAC;aAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC1D,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,GAAG,CAAC;YACvB,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG;gBAAE,GAAG,IAAI,CAAC,CAAC;YACxD,UAAU,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,6DAA6D;AAC7D,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,gGAAgG;IAChG,kFAAkF;IAClF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACrG,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACjD,CAAC;AAED,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;AAElC,oGAAoG;AACpG,SAAS,WAAW,CAAC,UAAmC,EAAE,IAAY;IACpE,IAAI,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,+EAA+E;AAC/E,SAAS,KAAK,CAAC,IAAY,EAAE,KAAa;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/auth/scheme.d.ts

@@ -0,0 +1,46 @@
+/** Which request-signing scheme a client uses when it authenticates with an access key. */
+import type { SignableRequest } from "./signable.js";
+/**
+ * SigV4 or RFC 9421.
+ *
+ * Two schemes exist because euclid is moving from one to the other, not because both are wanted in
+ * the end. {@link SIGV4} is what euclid has always spoken and stays the default, so no existing
+ * caller changes behaviour; {@link RFC9421} is the standard scheme meant to replace it. Choosing
+ * one is a per-client decision, so a deployment can move one service at a time and roll back by
+ * changing a line rather than a release.
+ *
+ * Neither is consulted when a client authenticates with a bearer token: with no access key there is
+ * nothing to sign with, and the token goes in Authorization as before.
+ *
+ * The two do not collide on the wire - SigV4 puts its signature in Authorization, RFC 9421 in
+ * Signature/Signature-Input - so a server can accept both at once and tell which a request used.
+ * {@link signingSchemeOf} is that test.
+ */
+export interface SigningScheme {
+    readonly name: "sigv4" | "rfc9421";
+    /**
+     * Signs a request in place.
+     *
+     * `region` and `service` are ignored by {@link RFC9421}: SigV4 needs them to derive its signing
+     * key, whereas RFC 9421 signs the `x-euclid-region` and `x-euclid-target` headers that carry the
+     * same facts, and binding them twice would add a way for the two copies to disagree.
+     */
+    sign(req: SignableRequest, accessKeyId: string, secretAccessKey: string, region: string, service: string): void;
+    /** Verifies a request signed with this scheme, answering the access key ID or null. */
+    verify(req: SignableRequest, lookupSecret: (keyId: string) => string | null | undefined): string | null;
+    /** The headers {@link SigningScheme.sign} writes, for callers that copy them onto another request. */
+    signatureHeaderNames(): readonly string[];
+}
+/** What euclid has always spoken, and the default. */
+export declare const SIGV4: SigningScheme;
+/** The standard scheme meant to replace SigV4. */
+export declare const RFC9421: SigningScheme;
+/**
+ * Which scheme, if either, a received request presents a signature for.
+ *
+ * A routing decision, not a verification: it says which {@link SigningScheme.verify} to call and
+ * nothing about whether that call will succeed. Null means the request presents no signature at
+ * all - a bearer-token request, or an unsigned one.
+ */
+export declare function signingSchemeOf(req: SignableRequest): SigningScheme | null;
+//# sourceMappingURL=scheme.d.ts.map

package/dist/auth/scheme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheme.d.ts","sourceRoot":"","sources":["../../src/auth/scheme.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAG3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAEnC;;;;;;OAMG;IACH,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAEhH,uFAAuF;IACvF,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAAC;IAExG,sGAAsG;IACtG,oBAAoB,IAAI,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,sDAAsD;AACtD,eAAO,MAAM,KAAK,EAAE,aAWlB,CAAC;AAEH,kDAAkD;AAClD,eAAO,MAAM,OAAO,EAAE,aAWpB,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,aAAa,GAAG,IAAI,CAI1E"}