inray 0.0.8 → 0.0.10

package/dist/jose/src/lib/jwe_decrypt.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -12,41 +12,37 @@ export type DecryptGetKey = (protectedHeader: types.JWEHeaderParameters | undefi
 export type DecryptShared = [
     keyManagementAlgorithms: Set<string> | undefined,
     contentEncryptionAlgorithms: Set<string> | undefined,
-    options: types.DecryptOptions | undefined
-];
-export type DecryptedJWE = [
-    plaintext: Uint8Array,
-    parsedProt: types.JWEHeaderParameters | undefined,
-    key: types.CryptoKey | Uint8Array,
-    resolvedKey: boolean
+    crit: {
+        [propName: string]: boolean;
+    } | undefined,
+    maxPBES2Count: number | undefined,
+    maxDecompressedLength: number | undefined
 ];
 /**
  * The parts of a JWE that every recipient shares. A General JWE pays for these once instead of once
  * per recipient.
  */
 export type SharedJWE = [
-    parsedProt: types.JWEHeaderParameters | undefined,
+    protectedHeader: types.JWEHeaderParameters | undefined,
     ciphertext: Uint8Array,
     iv: Uint8Array | undefined,
     tag: Uint8Array | undefined,
-    additionalData: Uint8Array
+    additionalAuthenticatedData: Uint8Array
 ];
-/** Checks the members every recipient of a General JWE shares. */
-export declare function checkShared(jwe: types.FlattenedJWE): void;
+export type SharedJWEMembers = Pick<types.FlattenedJWE, 'aad' | 'ciphertext' | 'iv' | 'protected' | 'tag' | 'unprotected'>;
+export type RecipientJWEMembers = Pick<types.FlattenedJWE, 'encrypted_key' | 'header'>;
+export type RecipientJWESnapshot = [members: RecipientJWEMembers, headerAlg: unknown, error?: never] | [members: undefined, headerAlg: unknown, error: unknown];
+/** Captures and validates shared members without reading any of them twice. */
+export declare function snapshotSharedJWE(jwe: types.FlattenedJWE | types.GeneralJWE): SharedJWEMembers;
+/** Captures one recipient's serialization members without reading either of them twice. */
+export declare function snapshotRecipientJWE(recipient: RecipientJWEMembers): RecipientJWESnapshot;
 /** Checks the members that belong to one recipient. */
 export declare function checkRecipient(jwe: types.FlattenedJWE): void;
 /** Parses and decodes the shared members. Their types must already have been checked. */
-export declare function shareJWE(jwe: types.FlattenedJWE): SharedJWE;
-/** Flattened and General results have the same shape, so they are assembled in one place. */
-export declare function decryptResult(jwe: types.FlattenedJWE, decrypted: DecryptedJWE): types.FlattenedDecryptResult & Partial<types.ResolvedKey>;
+export declare function shareJWE(jwe: SharedJWEMembers): SharedJWE;
 export declare function prepareDecrypt(options?: types.DecryptOptions): DecryptShared;
-/** Decrypts for one recipient, given the already-parsed shared parts of the JWE. */
-export declare function decryptRecipient(jwe: types.FlattenedJWE, token: SharedJWE, shared: DecryptShared, key: types.KeyInput | DecryptGetKey): Promise<DecryptedJWE>;
-/**
- * Decrypts a single-recipient JWE. `jwe` must already have been checked to have the member types
- * the Flattened Serialization requires; the Compact adapter gets that for free from String#split.
- */
-export declare function decryptJWE(jwe: types.FlattenedJWE, shared: DecryptShared, key: types.KeyInput | DecryptGetKey): Promise<DecryptedJWE>;
+/** Decrypts one recipient, optionally reusing a General JWE's already-decoded shared members. */
+export declare function decryptJWE(jwe: types.FlattenedJWE, shared: DecryptShared, key: types.KeyInput | DecryptGetKey, token?: SharedJWE): Promise<types.FlattenedDecryptResult & Partial<types.ResolvedKey>>;
 /** Splits a Compact JWE and decrypts it. Every member is a string by construction. */
-export declare function decryptCompact(jwe: string | Uint8Array, shared: DecryptShared, key: types.KeyInput | DecryptGetKey): Promise<DecryptedJWE>;
+export declare function decryptCompact(jwe: string | Uint8Array, shared: DecryptShared, key: types.KeyInput | DecryptGetKey): Promise<types.CompactDecryptResult & Partial<types.ResolvedKey>>;
 //# sourceMappingURL=jwe_decrypt.d.ts.map

package/dist/jose/src/lib/jwe_decrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe_decrypt.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_decrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAA;AAY3C,MAAM,MAAM,aAAa,GAAG,CAC1B,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACtD,KAAK,EAAE,KAAK,CAAC,YAAY,KACtB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAA;AAE7C,uFAAuF;AACvF,MAAM,MAAM,aAAa,GAAG;IAC1B,uBAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS;IAChD,2BAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS;IACpD,OAAO,EAAE,KAAK,CAAC,cAAc,GAAG,SAAS;CAC1C,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,UAAU;IACrB,UAAU,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS;IACjD,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU;IACjC,WAAW,EAAE,OAAO;CACrB,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS;IACjD,UAAU,EAAE,UAAU;IACtB,EAAE,EAAE,UAAU,GAAG,SAAS;IAC1B,GAAG,EAAE,UAAU,GAAG,SAAS;IAC3B,cAAc,EAAE,UAAU;CAC3B,CAAA;AAED,kEAAkE;AAClE,wBAAgB,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAyBzD;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAa5D;AAED,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,GAAG,SAAS,CAmB3D;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAC3B,GAAG,EAAE,KAAK,CAAC,YAAY,EACvB,SAAS,EAAE,YAAY,GACtB,KAAK,CAAC,sBAAsB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CA0B3D;AAED,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,aAAa,CAO5E;AAED,oFAAoF;AACpF,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,KAAK,CAAC,YAAY,EACvB,KAAK,EAAE,SAAS,EAChB,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,aAAa,GAClC,OAAO,CAAC,YAAY,CAAC,CAyGvB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,KAAK,CAAC,YAAY,EACvB,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,aAAa,GAClC,OAAO,CAAC,YAAY,CAAC,CAEvB;AAED,sFAAsF;AACtF,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,aAAa,GAClC,OAAO,CAAC,YAAY,CAAC,CAiCvB"}
+{"version":3,"file":"jwe_decrypt.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_decrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAoB5C,MAAM,MAAM,aAAa,GAAG,CAC1B,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACtD,KAAK,EAAE,KAAK,CAAC,YAAY,KACtB,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;AAE9C,uFAAuF;AACvF,MAAM,MAAM,aAAa,GAAG;IAC1B,uBAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS;IAChD,2BAA2B,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS;IACpD,IAAI,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS;IACjD,aAAa,EAAE,MAAM,GAAG,SAAS;IACjC,qBAAqB,EAAE,MAAM,GAAG,SAAS;CAC1C,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS;IACtD,UAAU,EAAE,UAAU;IACtB,EAAE,EAAE,UAAU,GAAG,SAAS;IAC1B,GAAG,EAAE,UAAU,GAAG,SAAS;IAC3B,2BAA2B,EAAE,UAAU;CACxC,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,KAAK,CAAC,YAAY,EAClB,KAAK,GAAG,YAAY,GAAG,IAAI,GAAG,WAAW,GAAG,KAAK,GAAG,aAAa,CAClE,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,eAAe,GAAG,QAAQ,CAAC,CAAC;AAEvF,MAAM,MAAM,oBAAoB,GAC5B,CAAC,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,GACjE,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAE7D,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,UAAU,GAAG,gBAAgB,CAkC9F;AAED,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,mBAAmB,GAAG,oBAAoB,CAoBzF;AAED,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAiB5D;AAED,yFAAyF;AACzF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAgBzD;AAED,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,cAAc,GAAG,aAAa,CAQ5E;AAED,iGAAiG;AACjG,wBAAsB,UAAU,CAC9B,GAAG,EAAE,KAAK,CAAC,YAAY,EACvB,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,aAAa,EACnC,KAAK,GAAE,SAAyB,GAC/B,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CA2JpE;AAED,sFAAsF;AACtF,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,aAAa,GAClC,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAuBlE"}

package/dist/jose/src/lib/jwe_decrypt.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,45 +7,78 @@
  */
 /***/
 import { decrypt, generateCek } from './content_encryption.js';
-import { decodeBase64url, encodeBase64url, parseJoseHeader } from './helpers.js';
+import { decodeBase64url, encodeAsciiMember, parseJoseHeader, isDisjoint, isObject, validateCrit, validateAlgorithms, JWE_RECOGNIZED } from './validate.js';
 import { JOSEAlgNotAllowed, JOSENotSupported, JWEInvalid } from '../util/errors.js';
-import { isDisjoint, isObject } from './type_checks.js';
 import { decryptKeyManagement } from './key_management.js';
-import { concat, decoder, encode } from './buffer_utils.js';
-import { validateCrit, validateAlgorithms, JWE_RECOGNIZED } from './options.js';
+import { decoder } from './buffer_utils.js';
 import { prepareKey } from './key.js';
-import { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';
-import { decompress } from './deflate.js';
-/** Checks the members every recipient of a General JWE shares. */
-export function checkShared(jwe) {
-    const { ciphertext, protected: encodedProtected, unprotected } = jwe;
-    if (jwe.iv !== undefined && typeof jwe.iv !== 'string') {
+import { JWE, isJWECEKTransport, jweAlgorithm, jweEncryption } from './jwe_algorithms.js';
+import { decompress, validateZip } from './deflate.js';
+/** Captures and validates shared members without reading any of them twice. */
+export function snapshotSharedJWE(jwe) {
+    const { aad, ciphertext, iv, protected: encodedProtected, tag, unprotected } = jwe;
+    if (iv !== undefined && (typeof iv !== 'string' || !iv)) {
         throw new JWEInvalid('JWE Initialization Vector incorrect type');
     }
     if (typeof ciphertext !== 'string') {
         throw new JWEInvalid('JWE Ciphertext missing or incorrect type');
     }
-    if (jwe.tag !== undefined && typeof jwe.tag !== 'string') {
+    if (tag !== undefined && (typeof tag !== 'string' || !tag)) {
         throw new JWEInvalid('JWE Authentication Tag incorrect type');
     }
     if (encodedProtected !== undefined && typeof encodedProtected !== 'string') {
         throw new JWEInvalid('JWE Protected Header incorrect type');
     }
-    if (jwe.aad !== undefined && typeof jwe.aad !== 'string') {
+    if (aad !== undefined && (typeof aad !== 'string' || !aad)) {
         throw new JWEInvalid('JWE AAD incorrect type');
     }
     if (unprotected !== undefined && !isObject(unprotected)) {
         throw new JWEInvalid('JWE Shared Unprotected Header incorrect type');
     }
+    return {
+        aad,
+        ciphertext,
+        iv,
+        protected: encodedProtected,
+        tag,
+        unprotected: unprotected === undefined ? undefined : { ...unprotected }
+    };
+}
+/** Captures one recipient's serialization members without reading either of them twice. */
+export function snapshotRecipientJWE(recipient) {
+    let header;
+    let headerAlg;
+    try {
+        const { header: inputHeader } = recipient;
+        if (isObject(inputHeader)) {
+            headerAlg = inputHeader.alg;
+            const parameters = Object.keys(inputHeader);
+            if (!parameters.includes('alg'))
+                headerAlg = undefined;
+            header = Object.fromEntries(parameters.map((parameter) => [parameter, parameter === 'alg' ? headerAlg : inputHeader[parameter]]));
+        }
+        else {
+            header = inputHeader;
+        }
+        const { encrypted_key: encryptedKey } = recipient;
+        return [{ encrypted_key: encryptedKey, header }, headerAlg];
+    }
+    catch (error) {
+        return [undefined, headerAlg, error];
+    }
 }
 /** Checks the members that belong to one recipient. */
 export function checkRecipient(jwe) {
     const { encrypted_key: encryptedKey, header } = jwe;
+    // Whether an empty string is a structural error depends on the resolved key-management mode.
+    // CEK transports must send it through RFC 3218 failure substitution instead.
     if (encryptedKey !== undefined && typeof encryptedKey !== 'string') {
         throw new JWEInvalid('JWE Encrypted Key incorrect type');
     }
-    if (header !== undefined && !isObject(header)) {
-        throw new JWEInvalid('JWE Per-Recipient Unprotected Header incorrect type');
+    if (header !== undefined) {
+        if (!isObject(header)) {
+            throw new JWEInvalid('JWE Per-Recipient Unprotected Header incorrect type');
+        }
     }
     if (jwe.protected === undefined && header === undefined && jwe.unprotected === undefined) {
         throw new JWEInvalid('JOSE Header missing');
@@ -53,141 +86,165 @@ export function checkRecipient(jwe) {
 }
 /** Parses and decodes the shared members. Their types must already have been checked. */
 export function shareJWE(jwe) {
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.2, steps 2-3: decode and parse.
     const { protected: encodedProtected, ciphertext, iv, tag, aad } = jwe;
-    let parsedProt;
-    if (encodedProtected) {
-        parsedProt = parseJoseHeader(encodedProtected, JWEInvalid, 'JWE Protected Header is invalid');
+    let protectedHeader;
+    if (encodedProtected !== undefined) {
+        protectedHeader = parseJoseHeader(encodedProtected, JWEInvalid, 'JWE Protected Header is invalid');
     }
-    const protectedHeader = encodedProtected !== undefined ? encode(encodedProtected) : new Uint8Array();
     return [
-        parsedProt,
+        protectedHeader,
         decodeBase64url(ciphertext, 'ciphertext', JWEInvalid),
         iv !== undefined ? decodeBase64url(iv, 'iv', JWEInvalid) : undefined,
         tag !== undefined ? decodeBase64url(tag, 'tag', JWEInvalid) : undefined,
-        aad !== undefined
-            ? concat(protectedHeader, encode('.'), encodeBase64url(aad, 'aad', JWEInvalid))
-            : protectedHeader,
+        // draft-ietf-jose-hpke-encrypt-22, Section 7.2, steps 15-16: use the received Encoded Protected Header.
+        encodeAsciiMember((encodedProtected ?? '') + (aad !== undefined ? `.${aad}` : ''), 'aad', JWEInvalid)
     ];
 }
-/** Flattened and General results have the same shape, so they are assembled in one place. */
-export function decryptResult(jwe, decrypted) {
-    const [plaintext, parsedProt, key, resolvedKey] = decrypted;
-    const { protected: encodedProtected, aad, unprotected, header } = jwe;
-    const result = { plaintext };
-    if (encodedProtected !== undefined) {
-        result.protectedHeader = parsedProt;
-    }
-    if (aad !== undefined) {
-        result.additionalAuthenticatedData = decodeBase64url(aad, 'aad', JWEInvalid);
-    }
-    if (unprotected !== undefined) {
-        result.sharedUnprotectedHeader = unprotected;
-    }
-    if (header !== undefined) {
-        result.unprotectedHeader = header;
-    }
-    if (resolvedKey) {
-        return { ...result, key };
-    }
-    return result;
-}
 export function prepareDecrypt(options) {
     return [
         options && validateAlgorithms('keyManagementAlgorithms', options.keyManagementAlgorithms),
-        options &&
-            validateAlgorithms('contentEncryptionAlgorithms', options.contentEncryptionAlgorithms),
-        options,
+        options && validateAlgorithms('contentEncryptionAlgorithms', options.contentEncryptionAlgorithms),
+        options?.crit,
+        options?.maxPBES2Count,
+        options?.maxDecompressedLength
     ];
 }
-/** Decrypts for one recipient, given the already-parsed shared parts of the JWE. */
-export async function decryptRecipient(jwe, token, shared, key) {
-    const [keyManagementAlgorithms, contentEncryptionAlgorithms, options] = shared;
-    const [parsedProt, ciphertext, iv, tag, additionalData] = token;
-    const { encrypted_key: encodedKey, header, unprotected } = jwe;
+/** Decrypts one recipient, optionally reusing a General JWE's already-decoded shared members. */
+export async function decryptJWE(jwe, shared, key, token = shareJWE(jwe)) {
+    const [protectedHeader, ciphertext, iv, tag, additionalAuthenticatedData] = token;
+    const { header, unprotected, aad } = jwe;
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.2, step 4: form the JOSE Header.
     let joseHeader;
     if (header !== undefined || unprotected !== undefined) {
-        if (!isDisjoint(parsedProt, header, unprotected)) {
+        if (!isDisjoint(protectedHeader, header, unprotected)) {
             throw new JWEInvalid('JWE Protected, JWE Unprotected Header, and JWE Per-Recipient Unprotected Header Parameter names must be disjoint');
         }
-        joseHeader = { ...parsedProt, ...header, ...unprotected };
+        joseHeader = { ...protectedHeader, ...header, ...unprotected };
     }
     else {
-        joseHeader = parsedProt ?? {};
-    }
-    validateCrit(JWEInvalid, JWE_RECOGNIZED, options?.crit, parsedProt, joseHeader);
-    if (joseHeader.zip !== undefined && joseHeader.zip !== 'DEF') {
-        throw new JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');
-    }
-    if (joseHeader.zip !== undefined && !parsedProt?.zip) {
-        throw new JWEInvalid('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');
+        joseHeader = protectedHeader ?? {};
     }
+    const [keyManagementAlgorithms, contentEncryptionAlgorithms, crit, maxPBES2Count, maxDecompressedLength] = shared;
+    const { encrypted_key: encodedKey } = jwe;
+    validateCrit(JWEInvalid, JWE_RECOGNIZED, crit, protectedHeader, joseHeader);
+    validateZip(joseHeader, protectedHeader);
     const { alg, enc } = joseHeader;
     if (typeof alg !== 'string' || !alg) {
         throw new JWEInvalid('missing JWE Algorithm (alg) in JWE Header');
     }
-    if (typeof enc !== 'string' || !enc) {
+    const selected = JWE[alg];
+    if (encodedKey === '' && (!selected || !isJWECEKTransport(selected))) {
+        throw new JWEInvalid('JWE Encrypted Key incorrect type');
+    }
+    const integrated = selected?.mode === 'integrated-encryption';
+    if (!integrated && (typeof enc !== 'string' || !enc)) {
         throw new JWEInvalid('missing JWE Encryption Algorithm (enc) in JWE Header');
     }
     if ((keyManagementAlgorithms && !keyManagementAlgorithms.has(alg)) ||
         (!keyManagementAlgorithms && alg.startsWith('PBES2'))) {
         throw new JOSEAlgNotAllowed('"alg" (Algorithm) Header Parameter value not allowed');
     }
-    if (contentEncryptionAlgorithms && !contentEncryptionAlgorithms.has(enc)) {
-        throw new JOSEAlgNotAllowed('"enc" (Encryption Algorithm) Header Parameter value not allowed');
+    let encEntry;
+    if (integrated) {
+        // draft-ietf-jose-hpke-encrypt-22, Section 7.2, step 18: enc must be absent.
+        if (enc !== undefined) {
+            throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter must not be present for integrated encryption');
+        }
+        if (iv?.byteLength) {
+            throw new JWEInvalid('JWE Initialization Vector must be empty for integrated encryption');
+        }
+        if (tag?.byteLength) {
+            throw new JWEInvalid('JWE Authentication Tag must be empty for integrated encryption');
+        }
+    }
+    else {
+        if (contentEncryptionAlgorithms && !contentEncryptionAlgorithms.has(enc)) {
+            throw new JOSEAlgNotAllowed('"enc" (Encryption Algorithm) Header Parameter value not allowed');
+        }
+        encEntry = jweEncryption(enc);
     }
-    const encEntry = jweEncryption(enc);
     let encryptedKey;
     if (encodedKey !== undefined) {
-        encryptedKey = decodeBase64url(encodedKey, 'encrypted_key', JWEInvalid);
+        try {
+            encryptedKey = decodeBase64url(encodedKey, 'encrypted_key', JWEInvalid);
+        }
+        catch (error) {
+            if (!selected || !isJWECEKTransport(selected))
+                throw error;
+            // RFC 7516 Section 11.5 requires a transported CEK's format, padding, and length failures
+            // to be indistinguishable. Feed malformed encodings through the same unwrap/decrypt and
+            // random-CEK substitution path as other malformed Encrypted Key values.
+            encryptedKey = new Uint8Array();
+        }
     }
     let resolvedKey = false;
     if (typeof key === 'function') {
-        key = await key(parsedProt, jwe);
+        key = await key(protectedHeader, jwe);
         resolvedKey = true;
     }
-    const algEntry = jweAlgorithm(alg);
-    const k = await prepareKey(alg === 'dir' ? encEntry : algEntry, key, 'decrypt');
-    let cek;
-    try {
-        cek = await decryptKeyManagement(alg, encEntry, k, encryptedKey, joseHeader, options);
+    const algEntry = selected ?? jweAlgorithm(alg);
+    if (isJWECEKTransport(algEntry) && encryptedKey === undefined) {
+        // RFC 7516 Section 11.5 requires malformed, missing, and wrong-length transported CEKs to be
+        // indistinguishable. Let the unwrap/decrypt fail and substitute a random CEK below.
+        encryptedKey = new Uint8Array();
+    }
+    const k = await prepareKey(algEntry.mode === 'direct-encryption' ? encEntry : algEntry, key, 'decrypt');
+    let plaintext;
+    if (algEntry.mode === 'integrated-encryption') {
+        // draft-ietf-jose-hpke-encrypt-22, Section 7.2, step 19: authenticated integrated decryption.
+        plaintext = await algEntry.decrypt(k, encryptedKey, ciphertext, additionalAuthenticatedData, protectedHeader, joseHeader);
     }
-    catch (err) {
-        if (err instanceof TypeError || err instanceof JWEInvalid || err instanceof JOSENotSupported) {
-            throw err;
+    else {
+        const encryption = encEntry;
+        let cek;
+        try {
+            cek = await decryptKeyManagement(algEntry, encryption, k, encryptedKey, joseHeader, maxPBES2Count);
+            if (isJWECEKTransport(algEntry) && cek instanceof Uint8Array && cek.byteLength << 3 !== encryption.cekBits) {
+                cek = generateCek(encryption);
+            }
+        }
+        catch (err) {
+            if (err instanceof TypeError || err instanceof JWEInvalid || err instanceof JOSENotSupported) {
+                throw err;
+            }
+            // https://www.rfc-editor.org/info/rfc7516/#section-11.5
+            // To mitigate the attacks described in RFC 3218, the
+            // recipient MUST NOT distinguish between format, padding, and length
+            // errors of encrypted keys.  It is strongly recommended, in the event
+            // of receiving an improperly formatted key, that the recipient
+            // substitute a randomly generated CEK and proceed to the next step, to
+            // mitigate timing attacks.
+            cek = generateCek(encryption);
         }
-        // https://www.rfc-editor.org/info/rfc7516/#section-11.5
-        // To mitigate the attacks described in RFC 3218, the
-        // recipient MUST NOT distinguish between format, padding, and length
-        // errors of encrypted keys.  It is strongly recommended, in the event
-        // of receiving an improperly formatted key, that the recipient
-        // substitute a randomly generated CEK and proceed to the next step, to
-        // mitigate timing attacks.
-        cek = generateCek(encEntry);
-    }
-    let plaintext = await decrypt(encEntry, cek, ciphertext, iv, tag, additionalData);
+        // draft-ietf-jose-hpke-encrypt-22, Section 7.2, step 17: authenticate before releasing plaintext.
+        plaintext = await decrypt(encryption, cek, ciphertext, iv, tag, additionalAuthenticatedData);
+    }
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.2, step 20.
     if (joseHeader.zip === 'DEF') {
-        const maxDecompressedLength = options?.maxDecompressedLength ?? 250_000;
-        if (maxDecompressedLength === 0) {
+        const decompressionLimit = maxDecompressedLength ?? 250_000;
+        if (decompressionLimit === 0) {
             throw new JOSENotSupported('JWE "zip" (Compression Algorithm) Header Parameter is not supported.');
         }
-        if (maxDecompressedLength !== Infinity &&
-            (!Number.isSafeInteger(maxDecompressedLength) || maxDecompressedLength < 1)) {
+        if (decompressionLimit !== Infinity && (!Number.isSafeInteger(decompressionLimit) || decompressionLimit < 1)) {
             throw new TypeError('maxDecompressedLength must be 0, a positive safe integer, or Infinity');
         }
-        plaintext = await decompress(plaintext, maxDecompressedLength).catch((cause) => {
+        plaintext = await decompress(plaintext, decompressionLimit).catch((cause) => {
             if (cause instanceof JWEInvalid)
                 throw cause;
             throw new JWEInvalid('Failed to decompress plaintext', { cause });
         });
     }
-    return [plaintext, parsedProt, k, resolvedKey];
-}
-/**
- * Decrypts a single-recipient JWE. `jwe` must already have been checked to have the member types
- * the Flattened Serialization requires; the Compact adapter gets that for free from String#split.
- */
-export async function decryptJWE(jwe, shared, key) {
-    return decryptRecipient(jwe, shareJWE(jwe), shared, key);
+    return {
+        plaintext,
+        ...(protectedHeader && { protectedHeader }),
+        ...(aad !== undefined && {
+            additionalAuthenticatedData: decodeBase64url(aad, 'aad', JWEInvalid)
+        }),
+        ...(unprotected && { sharedUnprotectedHeader: unprotected }),
+        ...(header && { unprotectedHeader: header }),
+        ...(resolvedKey && { key: k })
+    };
 }
 /** Splits a Compact JWE and decrypts it. Every member is a string by construction. */
 export async function decryptCompact(jwe, shared, key) {
@@ -197,16 +254,17 @@ export async function decryptCompact(jwe, shared, key) {
     if (typeof jwe !== 'string') {
         throw new JWEInvalid('Compact JWE must be a string or Uint8Array');
     }
-    const { 0: protectedHeader, 1: encryptedKey, 2: iv, 3: ciphertext, 4: tag, length, } = jwe.split('.');
+    const { 0: protectedHeader, 1: encryptedKey, 2: iv, 3: ciphertext, 4: tag, length } = jwe.split('.');
     if (length !== 5) {
         throw new JWEInvalid('Invalid Compact JWE');
     }
-    return decryptJWE({
+    const flattened = {
         ciphertext,
         iv: iv || undefined,
         protected: protectedHeader,
         tag: tag || undefined,
-        encrypted_key: encryptedKey || undefined,
-    }, shared, key);
+        encrypted_key: encryptedKey || undefined
+    };
+    return decryptJWE(flattened, shared, key);
 }
 //# sourceMappingURL=jwe_decrypt.js.map

package/dist/jose/src/lib/jwe_decrypt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwe_decrypt.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_decrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAChF,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC3D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAiCzC,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,GAAG,CAAA;IACpE,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAA;IAC/D,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAA;IAC7D,CAAC;IAED,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAA;IAChD,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACnD,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAA;IAC1D,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAA;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACzF,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,QAAQ,CAAC,GAAuB;IAC9C,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAA;IACrE,IAAI,UAAiD,CAAA;IACrD,IAAI,gBAAgB,EAAE,CAAC;QACrB,UAAU,GAAG,eAAe,CAAC,gBAAgB,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,eAAe,GACnB,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAA;IAE9E,OAAO;QACL,UAAU;QACV,eAAe,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;QACrD,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,GAAG,KAAK,SAAS;YACf,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/E,CAAC,CAAC,eAAe;KACpB,CAAA;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAC3B,GAAuB,EACvB,SAAuB;IAEvB,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,SAAS,CAAA;IAC3D,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,GAAG,CAAA;IACrE,MAAM,MAAM,GAAiC,EAAE,SAAS,EAAE,CAAA;IAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,eAAe,GAAG,UAAU,CAAA;IACrC,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,2BAA2B,GAAG,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,uBAAuB,GAAG,WAAW,CAAA;IAC9C,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAA;IACnC,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,CAAA;IAC3B,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,OAAO;QACL,OAAO,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,OAAO,CAAC,uBAAuB,CAAC;QACzF,OAAO;YACL,kBAAkB,CAAC,6BAA6B,EAAE,OAAO,CAAC,2BAA2B,CAAC;QACxF,OAAO;KACR,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAuB,EACvB,KAAgB,EAChB,MAAqB,EACrB,GAAmC;IAEnC,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,EAAE,OAAO,CAAC,GAAG,MAAM,CAAA;IAC9E,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,GAAG,KAAK,CAAA;IAC/D,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAA;IAE9D,IAAI,UAAqC,CAAA;IACzC,IAAI,MAAM,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,UAAU,CAClB,kHAAkH,CACnH,CAAA;QACH,CAAC;QACD,UAAU,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;IAC3D,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,UAAU,IAAI,EAAE,CAAA;IAC/B,CAAC;IAED,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;IAE/E,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,gBAAgB,CACxB,uEAAuE,CACxE,CAAA;IACH,CAAC;IAED,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAClB,mFAAmF,CACpF,CAAA;IACH,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,UAAU,CAAA;IAE/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAA;IAC9E,CAAC;IAED,IACE,CAAC,uBAAuB,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC,CAAC,uBAAuB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,iBAAiB,CAAC,sDAAsD,CAAC,CAAA;IACrF,CAAC;IAED,IAAI,2BAA2B,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,iBAAiB,CAAC,iEAAiE,CAAC,CAAA;IAChG,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAEnC,IAAI,YAAyB,CAAA;IAC7B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,YAAY,GAAG,eAAe,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,CAAA;IACzE,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAChC,WAAW,GAAG,IAAI,CAAA;IACpB,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAC/E,IAAI,GAAiC,CAAA;IACrC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,YAAY,UAAU,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;YAC7F,MAAM,GAAG,CAAA;QACX,CAAC;QACD,wDAAwD;QACxD,qDAAqD;QACrD,qEAAqE;QACrE,sEAAsE;QACtE,+DAA+D;QAC/D,uEAAuE;QACvE,2BAA2B;QAC3B,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC7B,CAAC;IAED,IAAI,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;IAEjF,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,qBAAqB,GAAG,OAAO,EAAE,qBAAqB,IAAI,OAAO,CAAA;QACvE,IAAI,qBAAqB,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,gBAAgB,CACxB,sEAAsE,CACvE,CAAA;QACH,CAAC;QACD,IACE,qBAAqB,KAAK,QAAQ;YAClC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,IAAI,qBAAqB,GAAG,CAAC,CAAC,EAC3E,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAA;QAC9F,CAAC;QACD,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7E,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAA;YAC5C,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAuB,EACvB,MAAqB,EACrB,GAAmC;IAEnC,OAAO,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AAC1D,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAwB,EACxB,MAAqB,EACrB,GAAmC;IAEnC,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAA;IACpE,CAAC;IAED,MAAM,EACJ,CAAC,EAAE,eAAe,EAClB,CAAC,EAAE,YAAY,EACf,CAAC,EAAE,EAAE,EACL,CAAC,EAAE,UAAU,EACb,CAAC,EAAE,GAAG,EACN,MAAM,GACP,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAElB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAA;IAC7C,CAAC;IAED,OAAO,UAAU,CACf;QACE,UAAU;QACV,EAAE,EAAE,EAAE,IAAI,SAAS;QACnB,SAAS,EAAE,eAAe;QAC1B,GAAG,EAAE,GAAG,IAAI,SAAS;QACrB,aAAa,EAAE,YAAY,IAAI,SAAS;KACzC,EACD,MAAM,EACN,GAAG,CACJ,CAAA;AACH,CAAC"}
+{"version":3,"file":"jwe_decrypt.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_decrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE1F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAuCvD,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,GAA0C;IAC1E,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;IACnF,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACL,GAAG;QACH,UAAU;QACV,EAAE;QACF,SAAS,EAAE,gBAAgB;QAC3B,GAAG;QACH,WAAW,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE;KACxE,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAAC,SAA8B;IACjE,IAAI,MAA6C,CAAC;IAClD,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QAC1C,IAAI,QAAQ,CAA4B,WAAW,CAAC,EAAE,CAAC;YACrD,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS,GAAG,SAAS,CAAC;YACvD,MAAM,GAAG,MAAM,CAAC,WAAW,CACzB,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CACrG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,WAAW,CAAC;QACvB,CAAC;QACD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;QAClD,OAAO,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACpD,6FAA6F;IAC7F,6EAA6E;IAC7E,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACzF,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,QAAQ,CAAC,GAAqB;IAC5C,6EAA6E;IAC7E,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IACtE,IAAI,eAAsD,CAAC;IAC3D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,eAAe,GAAG,eAAe,CAAC,gBAAgB,EAAE,UAAU,EAAE,iCAAiC,CAAC,CAAC;IACrG,CAAC;IAED,OAAO;QACL,eAAe;QACf,eAAe,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;QACrD,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,wGAAwG;QACxG,iBAAiB,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC;KACtG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,OAAO;QACL,OAAO,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,OAAO,CAAC,uBAAuB,CAAC;QACzF,OAAO,IAAI,kBAAkB,CAAC,6BAA6B,EAAE,OAAO,CAAC,2BAA2B,CAAC;QACjG,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,qBAAqB;KAC/B,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAuB,EACvB,MAAqB,EACrB,GAAmC,EACnC,QAAmB,QAAQ,CAAC,GAAG,CAAC;IAEhC,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,2BAA2B,CAAC,GAAG,KAAK,CAAC;IAClF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;IAEzC,8EAA8E;IAC9E,IAAI,UAAqC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,UAAU,CAClB,kHAAkH,CACnH,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,eAAe,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,EAAE,IAAI,EAAE,aAAa,EAAE,qBAAqB,CAAC,GAAG,MAAM,CAAC;IAClH,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;IAE1C,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IAE5E,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAEzC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;IAEhC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,UAAU,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,EAAE,IAAI,KAAK,uBAAuB,CAAC;IAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAC;IAC/E,CAAC;IAED,IACE,CAAC,uBAAuB,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC,CAAC,uBAAuB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,iBAAiB,CAAC,sDAAsD,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,QAAmC,CAAC;IACxC,IAAI,UAAU,EAAE,CAAC;QACf,6EAA6E;QAC7E,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,UAAU,CAClB,iGAAiG,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,mEAAmE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,UAAU,CAAC,gEAAgE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,2BAA2B,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAa,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,iBAAiB,CAAC,iEAAiE,CAAC,CAAC;QACjG,CAAC;QACD,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,YAAoC,CAAC;IACzC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,YAAY,GAAG,eAAe,CAAC,UAAU,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3D,0FAA0F;YAC1F,wFAAwF;YACxF,wEAAwE;YACxE,YAAY,GAAG,IAAI,UAAU,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QACtC,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9D,6FAA6F;QAC7F,oFAAoF;QACpF,YAAY,GAAG,IAAI,UAAU,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,QAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAEzG,IAAI,SAAqB,CAAC;IAC1B,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC9C,8FAA8F;QAC9F,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAChC,CAAC,EACD,YAAY,EACZ,UAAU,EACV,2BAA2B,EAC3B,eAAe,EACf,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,QAAS,CAAC;QAC7B,IAAI,GAAiC,CAAC;QACtC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YACnG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;gBAC3G,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,SAAS,IAAI,GAAG,YAAY,UAAU,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBAC7F,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,wDAAwD;YACxD,qDAAqD;YACrD,qEAAqE;YACrE,sEAAsE;YACtE,+DAA+D;YAC/D,uEAAuE;YACvE,2BAA2B;YAC3B,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAED,kGAAkG;QAClG,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAC/F,CAAC;IAED,yDAAyD;IACzD,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7B,MAAM,kBAAkB,GAAG,qBAAqB,IAAI,OAAO,CAAC;QAC5D,IAAI,kBAAkB,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,gBAAgB,CAAC,sEAAsE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,kBAAkB,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,SAAS,CAAC,uEAAuE,CAAC,CAAC;QAC/F,CAAC;QACD,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1E,IAAI,KAAK,YAAY,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7C,MAAM,IAAI,UAAU,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,SAAS;QACT,GAAG,CAAC,eAAe,IAAI,EAAE,eAAe,EAAE,CAAC;QAC3C,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI;YACvB,2BAA2B,EAAE,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;SACrE,CAAC;QACF,GAAG,CAAC,WAAW,IAAI,EAAE,uBAAuB,EAAE,WAAW,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5C,GAAG,CAAC,WAAW,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAwB,EACxB,MAAqB,EACrB,GAAmC;IAEnC,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAErG,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,SAAS,GAAG;QAChB,UAAU;QACV,EAAE,EAAE,EAAE,IAAI,SAAS;QACnB,SAAS,EAAE,eAAe;QAC1B,GAAG,EAAE,GAAG,IAAI,SAAS;QACrB,aAAa,EAAE,YAAY,IAAI,SAAS;KACzC,CAAC;IACF,OAAO,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAqE,CAAC;AAChH,CAAC"}

package/dist/jose/src/lib/jwe_encrypt.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,33 +7,36 @@
  */
 /***/
 import type * as types from '../types.d.ts';
-import type { JWEEncryption } from './jwe_algorithms.js';
+import type { JWEAlgorithm, JWEEncryption } from './jwe_algorithms.js';
 export type EncryptInput = [
     plaintext: Uint8Array,
-    protectedHeader: types.JWEHeaderParameters | undefined,
-    unprotectedHeader: types.JWEHeaderParameters | undefined,
-    sharedUnprotectedHeader: types.JWEHeaderParameters | undefined,
-    aad: Uint8Array | undefined,
-    cek: Uint8Array | undefined,
-    iv: Uint8Array | undefined,
-    keyManagementParameters: types.JWEKeyManagementHeaderParameters | undefined,
-    crit: {
+    protectedHeader?: types.JWEHeaderParameters,
+    unprotectedHeader?: types.JWEHeaderParameters,
+    sharedUnprotectedHeader?: types.JWEHeaderParameters,
+    aad?: Uint8Array,
+    cek?: Uint8Array,
+    iv?: Uint8Array,
+    keyManagementParameters?: types.JWEKeyManagementHeaderParameters,
+    crit?: {
         [propName: string]: boolean;
-    } | undefined,
+    },
     /** Put the key management parameters in the Per-Recipient Unprotected Header. */
-    unprotectedParameters: boolean
+    unprotectedParameters?: boolean
 ];
 export type CheckedHeaders = [
     joseHeader: types.JWEHeaderParameters,
-    alg: string,
-    enc: string,
-    encEntry: JWEEncryption
+    encEntry: JWEEncryption | undefined,
+    algEntry: JWEAlgorithm | undefined
 ];
+/** https://www.rfc-editor.org/info/rfc7516/#section-7.2.1 */
+export declare function checkDisjoint(protectedHeader: types.JWEHeaderParameters | undefined, unprotectedHeader: types.JWEHeaderParameters | undefined, sharedUnprotectedHeader: types.JWEHeaderParameters | undefined): void;
 /**
  * Validates the headers of one recipient. Split out so a General JWE can validate every recipient
- * up front and then encrypt without validating any of them a second time.
+ * up front and then encrypt without validating any of them a second time. Later recipients reuse
+ * the first recipient's normalized shared headers.
  */
-export declare function checkEncryptHeaders(input: EncryptInput): CheckedHeaders;
+export declare function checkEncryptHeaders(input: EncryptInput, options?: types.EncryptOptions, sharedHeadersNormalized?: boolean): CheckedHeaders;
 export declare function encryptJWE(input: EncryptInput, checked: CheckedHeaders, key: types.KeyInput): Promise<types.FlattenedJWE>;
-export declare function createJWE(input: EncryptInput, key: types.KeyInput): Promise<types.FlattenedJWE>;
+export declare function createJWE(input: EncryptInput, key: types.KeyInput, options?: types.EncryptOptions): Promise<types.FlattenedJWE>;
+export declare function compactJWE(jwe: types.FlattenedJWE): string;
 //# sourceMappingURL=jwe_encrypt.d.ts.map

package/dist/jose/src/lib/jwe_encrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwe_encrypt.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_encrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAA;AAU3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGxD,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS;IACtD,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS;IACxD,uBAAuB,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS;IAC9D,GAAG,EAAE,UAAU,GAAG,SAAS;IAC3B,GAAG,EAAE,UAAU,GAAG,SAAS;IAC3B,EAAE,EAAE,UAAU,GAAG,SAAS;IAC1B,uBAAuB,EAAE,KAAK,CAAC,gCAAgC,GAAG,SAAS;IAC3E,IAAI,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS;IACjD,iFAAiF;IACjF,qBAAqB,EAAE,OAAO;CAC/B,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,KAAK,CAAC,mBAAmB;IACrC,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,aAAa;CACxB,CAAA;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,cAAc,CAwCvE;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAClB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAsG7B;AAED,wBAAsB,SAAS,CAC7B,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAClB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAE7B"}
+{"version":3,"file":"jwe_encrypt.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_encrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAiB5C,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGvE,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,UAAU;IACrB,eAAe,CAAC,EAAE,KAAK,CAAC,mBAAmB;IAC3C,iBAAiB,CAAC,EAAE,KAAK,CAAC,mBAAmB;IAC7C,uBAAuB,CAAC,EAAE,KAAK,CAAC,mBAAmB;IACnD,GAAG,CAAC,EAAE,UAAU;IAChB,GAAG,CAAC,EAAE,UAAU;IAChB,EAAE,CAAC,EAAE,UAAU;IACf,uBAAuB,CAAC,EAAE,KAAK,CAAC,gCAAgC;IAChE,IAAI,CAAC,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE;IACtC,iFAAiF;IACjF,qBAAqB,CAAC,EAAE,OAAO;CAChC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,UAAU,EAAE,KAAK,CAAC,mBAAmB;IACrC,QAAQ,EAAE,aAAa,GAAG,SAAS;IACnC,QAAQ,EAAE,YAAY,GAAG,SAAS;CACnC,CAAC;AAEF,6DAA6D;AAC7D,wBAAgB,aAAa,CAC3B,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACtD,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACxD,uBAAuB,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,GAC7D,IAAI,CAMN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,cAAc,EAC9B,uBAAuB,UAAQ,GAC9B,cAAc,CAmFhB;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAClB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAiH7B;AAED,wBAAsB,SAAS,CAC7B,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,cAAc,GAC7B,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAE7B;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAE1D"}