inray 0.0.8 → 0.0.10

package/dist/jose/src/lib/jwe_encrypt.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -9,54 +9,101 @@
 import { encode as b64u } from '../util/base64url.js';
 import { encrypt } from './content_encryption.js';
 import { encryptKeyManagement } from './key_management.js';
-import { JOSENotSupported, JWEInvalid } from '../util/errors.js';
-import { isDisjoint } from './type_checks.js';
-import { concat, encode } from './buffer_utils.js';
-import { validateCrit, JWE_RECOGNIZED } from './options.js';
+import { JWEInvalid } from '../util/errors.js';
+import { assertUint8Array, isDisjoint, isObject, serializeJoseHeader, validateCrit, validateCritDuplicates, JWE_RECOGNIZED } from './validate.js';
+import { encode } from './buffer_utils.js';
 import { prepareKey } from './key.js';
-import { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';
-import { compress } from './deflate.js';
+import { JWE, jweAlgorithm, jweEncryption } from './jwe_algorithms.js';
+import { compress, validateZip } from './deflate.js';
+/** https://www.rfc-editor.org/info/rfc7516/#section-7.2.1 */
+export function checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader) {
+    if (!isDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader)) {
+        throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');
+    }
+}
 /**
  * Validates the headers of one recipient. Split out so a General JWE can validate every recipient
- * up front and then encrypt without validating any of them a second time.
+ * up front and then encrypt without validating any of them a second time. Later recipients reuse
+ * the first recipient's normalized shared headers.
  */
-export function checkEncryptHeaders(input) {
-    const [, protectedHeader, unprotectedHeader, sharedUnprotectedHeader, , , , , crit] = input;
-    if (!isDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader)) {
-        throw new JWEInvalid('JWE Protected, JWE Shared Unprotected and JWE Per-Recipient Header Parameter names must be disjoint');
+export function checkEncryptHeaders(input, options, sharedHeadersNormalized = false) {
+    if (!input[1] && !input[2] && !input[3]) {
+        throw new JWEInvalid('either setProtectedHeader, setUnprotectedHeader, or sharedUnprotectedHeader must be called before #encrypt()');
+    }
+    if (options !== undefined) {
+        input[8] = options?.crit;
+    }
+    let [, protectedHeader, unprotectedHeader, sharedUnprotectedHeader, aad, cek, iv, keyManagementParameters, crit] = input;
+    if (aad !== undefined) {
+        assertUint8Array(aad, 'JWE Additional Authenticated Data');
+    }
+    if (cek !== undefined) {
+        assertUint8Array(cek, 'JWE Content Encryption Key');
     }
+    if (iv !== undefined) {
+        assertUint8Array(iv, 'JWE Initialization Vector');
+    }
+    if (!sharedHeadersNormalized && protectedHeader !== undefined) {
+        protectedHeader = serializeJoseHeader(JWEInvalid, protectedHeader)[0];
+        input[1] = protectedHeader;
+    }
+    if (unprotectedHeader !== undefined) {
+        unprotectedHeader = serializeJoseHeader(JWEInvalid, unprotectedHeader)[0];
+        input[2] = unprotectedHeader;
+    }
+    if (!sharedHeadersNormalized && sharedUnprotectedHeader !== undefined) {
+        sharedUnprotectedHeader = serializeJoseHeader(JWEInvalid, sharedUnprotectedHeader)[0];
+        input[3] = sharedUnprotectedHeader;
+    }
+    if (keyManagementParameters !== undefined && !isObject(keyManagementParameters)) {
+        throw new TypeError('JWE Key Management Parameters must be an object');
+    }
+    checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader);
     const joseHeader = {
         ...protectedHeader,
         ...unprotectedHeader,
-        ...sharedUnprotectedHeader,
+        ...sharedUnprotectedHeader
     };
+    validateCritDuplicates(JWEInvalid, protectedHeader);
     validateCrit(JWEInvalid, JWE_RECOGNIZED, crit, protectedHeader, joseHeader);
-    if (joseHeader.zip !== undefined && joseHeader.zip !== 'DEF') {
-        throw new JOSENotSupported('Unsupported JWE "zip" (Compression Algorithm) Header Parameter value.');
-    }
-    if (joseHeader.zip !== undefined && !protectedHeader?.zip) {
-        throw new JWEInvalid('JWE "zip" (Compression Algorithm) Header Parameter MUST be in a protected header.');
-    }
+    validateZip(joseHeader, protectedHeader);
     const { alg, enc } = joseHeader;
     if (typeof alg !== 'string' || !alg) {
         throw new JWEInvalid('JWE "alg" (Algorithm) Header Parameter missing or invalid');
     }
+    const algEntry = JWE[alg];
+    if (algEntry?.mode === 'integrated-encryption') {
+        if (enc !== undefined) {
+            throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter must not be present for integrated encryption');
+        }
+        if (cek !== undefined) {
+            throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+        }
+        if (iv !== undefined) {
+            throw new TypeError(`setInitializationVector cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+        }
+        return [joseHeader, undefined, algEntry];
+    }
     if (typeof enc !== 'string' || !enc) {
         throw new JWEInvalid('JWE "enc" (Encryption Algorithm) Header Parameter missing or invalid');
     }
-    return [joseHeader, alg, enc, jweEncryption(enc)];
+    return [joseHeader, jweEncryption(enc), algEntry];
 }
 export async function encryptJWE(input, checked, key) {
-    const [joseHeader, alg, , encEntry] = checked;
-    const [inputPlaintext, inputProtectedHeader, inputUnprotectedHeader, sharedUnprotectedHeader, aad, providedCek, inputIv, keyManagementParameters, , unprotectedParameters,] = input;
+    const [joseHeader, encEntry, selected] = checked;
+    const [inputPlaintext, inputProtectedHeader, inputUnprotectedHeader, sharedUnprotectedHeader, aad, providedCek, inputIv, keyManagementParameters, , unprotectedParameters] = input;
     let protectedHeader = inputProtectedHeader;
     let unprotectedHeader = inputUnprotectedHeader;
-    if (providedCek && (alg === 'dir' || alg === 'ECDH-ES')) {
-        throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+    const algEntry = selected ?? jweAlgorithm(joseHeader.alg);
+    let encryptedKey;
+    let parameters;
+    let cek;
+    if (algEntry.mode === 'integrated-encryption') {
+        cek = await prepareKey(algEntry, key, 'encrypt');
+    }
+    else {
+        [cek, encryptedKey, parameters] = await encryptKeyManagement(algEntry, encEntry, key, joseHeader, providedCek, keyManagementParameters);
     }
-    const algEntry = jweAlgorithm(alg);
-    const k = await prepareKey(alg === 'dir' ? encEntry : algEntry, key, 'encrypt');
-    const [cek, encryptedKey, parameters] = await encryptKeyManagement(alg, encEntry, k, providedCek, keyManagementParameters);
     if (parameters) {
         if (unprotectedParameters) {
             unprotectedHeader = unprotectedHeader ? { ...unprotectedHeader, ...parameters } : parameters;
@@ -64,35 +111,35 @@ export async function encryptJWE(input, checked, key) {
         else {
             protectedHeader = protectedHeader ? { ...protectedHeader, ...parameters } : parameters;
         }
-    }
-    let protectedHeaderS;
-    let protectedHeaderB;
-    if (protectedHeader) {
-        protectedHeaderS = b64u(JSON.stringify(protectedHeader));
-        protectedHeaderB = encode(protectedHeaderS);
-    }
-    else {
-        protectedHeaderS = '';
-        protectedHeaderB = new Uint8Array();
-    }
-    let additionalData;
-    let aadMember;
-    if (aad?.byteLength) {
-        aadMember = b64u(aad);
-        additionalData = concat(protectedHeaderB, encode('.'), encode(aadMember));
-    }
-    else {
-        additionalData = protectedHeaderB;
-    }
+        // The generated Key Management Parameters join a header only after the input headers were
+        // checked, so a name they collide with in another header would otherwise reach the result.
+        checkDisjoint(protectedHeader, unprotectedHeader, sharedUnprotectedHeader);
+    }
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.1, steps 14-15: Encoded Protected Header and encryption AAD.
+    const encodedProtectedHeader = protectedHeader ? b64u(JSON.stringify(protectedHeader)) : '';
+    const encodedAad = aad?.byteLength ? b64u(aad) : undefined;
+    const additionalAuthenticatedData = encode(encodedAad ? `${encodedProtectedHeader}.${encodedAad}` : encodedProtectedHeader);
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.1, step 12: M is the optionally compressed plaintext.
     let plaintext = inputPlaintext;
     if (joseHeader.zip === 'DEF') {
         plaintext = await compress(plaintext).catch((cause) => {
             throw new JWEInvalid('Failed to compress plaintext', { cause });
         });
     }
-    const { ciphertext, tag, iv } = await encrypt(encEntry, plaintext, cek, inputIv, additionalData);
+    let ciphertext;
+    let tag;
+    let iv;
+    if (algEntry.mode === 'integrated-encryption') {
+        // draft-ietf-jose-hpke-encrypt-22, Section 7.1, steps 7 and 17: integrated encryption.
+        [encryptedKey, ciphertext] = await algEntry.encrypt(cek, plaintext, additionalAuthenticatedData, protectedHeader, joseHeader, keyManagementParameters);
+    }
+    else {
+        // draft-ietf-jose-hpke-encrypt-22, Section 7.1, step 16.
+        ({ ciphertext, tag, iv } = await encrypt(encEntry, plaintext, cek, inputIv, additionalAuthenticatedData));
+    }
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.1, steps 18-21: encode and serialize.
     const jwe = {
-        ciphertext: b64u(ciphertext),
+        ciphertext: b64u(ciphertext)
     };
     if (iv) {
         jwe.iv = b64u(iv);
@@ -100,14 +147,14 @@ export async function encryptJWE(input, checked, key) {
     if (tag) {
         jwe.tag = b64u(tag);
     }
-    if (encryptedKey) {
+    if (encryptedKey?.byteLength) {
         jwe.encrypted_key = b64u(encryptedKey);
     }
-    if (aadMember) {
-        jwe.aad = aadMember;
+    if (encodedAad) {
+        jwe.aad = encodedAad;
     }
     if (protectedHeader) {
-        jwe.protected = protectedHeaderS;
+        jwe.protected = encodedProtectedHeader;
     }
     if (sharedUnprotectedHeader) {
         jwe.unprotected = sharedUnprotectedHeader;
@@ -117,7 +164,10 @@ export async function encryptJWE(input, checked, key) {
     }
     return jwe;
 }
-export async function createJWE(input, key) {
-    return encryptJWE(input, checkEncryptHeaders(input), key);
+export async function createJWE(input, key, options) {
+    return encryptJWE(input, checkEncryptHeaders(input, options), key);
+}
+export function compactJWE(jwe) {
+    return [jwe.protected, jwe.encrypted_key, jwe.iv, jwe.ciphertext, jwe.tag].join('.');
 }
 //# sourceMappingURL=jwe_encrypt.js.map

package/dist/jose/src/lib/jwe_encrypt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwe_encrypt.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_encrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAuBvC;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,MAAM,CAAC,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,AAAD,EAAG,AAAD,EAAG,AAAD,EAAG,AAAD,EAAG,IAAI,CAAC,GAAG,KAAK,CAAA;IAE3F,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,UAAU,CAClB,qGAAqG,CACtG,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAA8B;QAC5C,GAAG,eAAe;QAClB,GAAG,iBAAiB;QACpB,GAAG,uBAAuB;KAC3B,CAAA;IAED,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAA;IAE3E,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,gBAAgB,CACxB,uEAAuE,CACxE,CAAA;IACH,CAAC;IAED,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC;QAC1D,MAAM,IAAI,UAAU,CAClB,mFAAmF,CACpF,CAAA;IACH,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,UAAU,CAAA;IAE/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAA;IACnF,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,sEAAsE,CAAC,CAAA;IAC9F,CAAC;IAED,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAmB,EACnB,OAAuB,EACvB,GAAmB;IAEnB,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,AAAD,EAAG,QAAQ,CAAC,GAAG,OAAO,CAAA;IAC7C,MAAM,CACJ,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,GAAG,EACH,WAAW,EACX,OAAO,EACP,uBAAuB,EACvB,AADwB,EAExB,qBAAqB,EACtB,GAAG,KAAK,CAAA;IACT,IAAI,eAAe,GAAG,oBAAoB,CAAA;IAC1C,IAAI,iBAAiB,GAAG,sBAAsB,CAAA;IAE9C,IAAI,WAAW,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CACjB,8EAA8E,GAAG,EAAE,CACpF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAC/E,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,oBAAoB,CAChE,GAAG,EACH,QAAQ,EACR,CAAC,EACD,WAAW,EACX,uBAAuB,CACxB,CAAA;IAED,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,qBAAqB,EAAE,CAAC;YAC1B,iBAAiB,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,iBAAiB,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAA;QAC9F,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAA;QACxF,CAAC;IACH,CAAC;IAED,IAAI,gBAAwB,CAAA;IAC5B,IAAI,gBAA4B,CAAA;IAChC,IAAI,eAAe,EAAE,CAAC;QACpB,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAA;QACxD,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAC7C,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,EAAE,CAAA;QACrB,gBAAgB,GAAG,IAAI,UAAU,EAAE,CAAA;IACrC,CAAC;IAED,IAAI,cAA0B,CAAA;IAC9B,IAAI,SAA6B,CAAA;IACjC,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC;QACpB,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACrB,cAAc,GAAG,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IAC3E,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,gBAAgB,CAAA;IACnC,CAAC;IAED,IAAI,SAAS,GAAG,cAAc,CAAA;IAC9B,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7B,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,IAAI,UAAU,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,cAAc,CAAC,CAAA;IAEhG,MAAM,GAAG,GAAuB;QAC9B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC;KAC7B,CAAA;IAED,IAAI,EAAE,EAAE,CAAC;QACP,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;IACnB,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;IACxC,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,GAAG,GAAG,SAAS,CAAA;IACrB,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,SAAS,GAAG,gBAAgB,CAAA;IAClC,CAAC;IAED,IAAI,uBAAuB,EAAE,CAAC;QAC5B,GAAG,CAAC,WAAW,GAAG,uBAAuB,CAAA;IAC3C,CAAC;IAED,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,GAAG,iBAAiB,CAAA;IAChC,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAmB,EACnB,GAAmB;IAEnB,OAAO,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;AAC3D,CAAC"}
+{"version":3,"file":"jwe_encrypt.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jwe_encrypt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,QAAQ,EACR,mBAAmB,EACnB,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEvE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAsBrD,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAC3B,eAAsD,EACtD,iBAAwD,EACxD,uBAA8D;IAE9D,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,UAAU,CAClB,qGAAqG,CACtG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAmB,EACnB,OAA8B,EAC9B,uBAAuB,GAAG,KAAK;IAE/B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAClB,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,uBAAuB,EAAE,IAAI,CAAC,GAC9G,KAAK,CAAC;IAER,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,gBAAgB,CAAC,GAAG,EAAE,mCAAmC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,gBAAgB,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,gBAAgB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,uBAAuB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAC9D,eAAe,GAAG,mBAAmB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;IAC7B,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,iBAAiB,GAAG,mBAAmB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,KAAK,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,uBAAuB,IAAI,uBAAuB,KAAK,SAAS,EAAE,CAAC;QACtE,uBAAuB,GAAG,mBAAmB,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,KAAK,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC;IACrC,CAAC;IAED,IAAI,uBAAuB,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IAED,aAAa,CAAC,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAE3E,MAAM,UAAU,GAA8B;QAC5C,GAAG,eAAe;QAClB,GAAG,iBAAiB;QACpB,GAAG,uBAAuB;KAC3B,CAAC;IAEF,sBAAsB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACpD,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IAE5E,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAEzC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;IAEhC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,QAAQ,EAAE,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,UAAU,CAClB,iGAAiG,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CAAC,8EAA8E,GAAG,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CAAC,8EAA8E,GAAG,EAAE,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,sEAAsE,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAmB,EACnB,OAAuB,EACvB,GAAmB;IAEnB,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC;IACjD,MAAM,CACJ,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,uBAAuB,EACvB,GAAG,EACH,WAAW,EACX,OAAO,EACP,uBAAuB,EACvB,AADwB,EAExB,qBAAqB,CACtB,GAAG,KAAK,CAAC;IACV,IAAI,eAAe,GAAG,oBAAoB,CAAC;IAC3C,IAAI,iBAAiB,GAAG,sBAAsB,CAAC;IAE/C,MAAM,QAAQ,GAAG,QAAQ,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,YAAoC,CAAC;IACzC,IAAI,UAAiD,CAAC;IACtD,IAAI,GAAiC,CAAC;IACtC,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC9C,GAAG,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,oBAAoB,CAC1D,QAAQ,EACR,QAAS,EACT,GAAG,EACH,UAAU,EACV,WAAW,EACX,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,qBAAqB,EAAE,CAAC;YAC1B,iBAAiB,GAAG,iBAAiB,CAAC,CAAC,CAAC,EAAE,GAAG,iBAAiB,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,eAAe,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QACzF,CAAC;QAED,0FAA0F;QAC1F,2FAA2F;QAC3F,aAAa,CAAC,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;IAC7E,CAAC;IAED,0GAA0G;IAC1G,MAAM,sBAAsB,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,UAAU,GAAG,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,2BAA2B,GAAG,MAAM,CACxC,UAAU,CAAC,CAAC,CAAC,GAAG,sBAAsB,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAChF,CAAC;IAEF,mGAAmG;IACnG,IAAI,SAAS,GAAG,cAAc,CAAC;IAC/B,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC7B,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACpD,MAAM,IAAI,UAAU,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAsB,CAAC;IAC3B,IAAI,GAA2B,CAAC;IAChC,IAAI,EAA0B,CAAC;IAC/B,IAAI,QAAQ,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC9C,uFAAuF;QACvF,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,OAAO,CACjD,GAAG,EACH,SAAS,EACT,2BAA2B,EAC3B,eAAe,EACf,UAAU,EACV,uBAAuB,CACxB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,yDAAyD;QACzD,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,CAAC,QAAS,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAC7G,CAAC;IAED,mFAAmF;IACnF,MAAM,GAAG,GAAuB;QAC9B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC;KAC7B,CAAC;IAEF,IAAI,EAAE,EAAE,CAAC;QACP,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;QAC7B,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC;IACvB,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,SAAS,GAAG,sBAAsB,CAAC;IACzC,CAAC;IAED,IAAI,uBAAuB,EAAE,CAAC;QAC5B,GAAG,CAAC,WAAW,GAAG,uBAAuB,CAAC;IAC5C,CAAC;IAED,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAmB,EACnB,GAAmB,EACnB,OAA8B;IAE9B,OAAO,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvF,CAAC"}

package/dist/jose/src/lib/jws_algorithms.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":

package/dist/jose/src/lib/jws_algorithms.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws_algorithms.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAIL,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,8DAA8D;IAC9D,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC9D;AAwDD,eAAO,MAAM,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAkB3C,CAAA;AAEF,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAQvD"}
+{"version":3,"file":"jws_algorithms.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAIL,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,8DAA8D;IAC9D,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D;AA8DD,eAAO,MAAM,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAkB3C,CAAC;AAEH,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAMvD"}

package/dist/jose/src/lib/jws_algorithms.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -9,10 +9,12 @@
 import { JOSENotSupported } from '../util/errors.js';
 import { table } from './key_descriptor.js';
 const sig = [['verify'], ['sign']];
+// RFC 7518, Section 3.2: HMAC with the SHA-2 hash selected by the JWA identifier.
 function hmac(bits) {
     const subtle = { name: 'HMAC', hash: `SHA-${bits}` };
     return { kty: ['oct'], secret: true, subtle, signing: subtle, usages: sig };
 }
+// RFC 7518, Sections 3.3/3.5: RSA signature parameters; PSS salt length equals hash length.
 function rsa(bits, saltLength) {
     const name = saltLength ? 'RSA-PSS' : 'RSASSA-PKCS1-v1_5';
     const subtle = { name, hash: `SHA-${bits}` };
@@ -21,18 +23,21 @@ function rsa(bits, saltLength) {
         subtle,
         signing: saltLength ? { ...subtle, saltLength } : subtle,
         usages: sig,
-        minRsaBits: 2048,
+        minRsaBits: 2048
     };
 }
+// RFC 7518, Section 3.4: the identifier selects both curve and SHA-2 hash.
+// Web Crypto supplies the fixed-width R || S signature representation required by JWS.
 function ecdsa(crv, bits) {
     return {
         kty: ['EC'],
         crv,
         subtle: { name: 'ECDSA', namedCurve: crv },
         signing: { name: 'ECDSA', hash: `SHA-${bits}` },
-        usages: sig,
+        usages: sig
     };
 }
+// RFC 8037, Sections 3.1.1-3.1.2; RFC 9864, Section 2.2 for the Ed25519 identifier.
 function eddsa() {
     const subtle = { name: 'Ed25519' };
     return {
@@ -40,18 +45,19 @@ function eddsa() {
         crv: 'Ed25519',
         subtle,
         signing: subtle,
-        usages: sig,
+        usages: sig
     };
 }
 /** ML-DSA names its WebCrypto algorithm and its Node key type after the JWA identifier. */
-function mldsa(bits) {
-    const name = `ML-DSA-${bits}`;
+// RFC 9964, Section 5: use pure ML-DSA with an empty context, the Web Crypto default.
+function mldsa(parameterSet) {
+    const name = `ML-DSA-${parameterSet}`;
     const subtle = { name };
     return {
         kty: ['AKP'],
         subtle,
         signing: subtle,
-        usages: sig,
+        usages: sig
     };
 }
 export const JWS = table({
@@ -71,7 +77,7 @@ export const JWS = table({
     Ed25519: eddsa(),
     'ML-DSA-44': mldsa(44),
     'ML-DSA-65': mldsa(65),
-    'ML-DSA-87': mldsa(87),
+    'ML-DSA-87': mldsa(87)
 });
 /** Resolves a JWS "alg" to its entry, or throws if this module does not implement it. */
 export function jwsAlgorithm(alg) {

package/dist/jose/src/lib/jws_algorithms.js.map

@@ -1 +1 @@
-{"version":3,"file":"jws_algorithms.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAe3C,MAAM,GAAG,GAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;AAE5D,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAA;IACpD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAC7E,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,UAAyB;IAClD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAA;IACzD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAA;IAC5C,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM;QACN,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM;QACxD,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,IAAI;KACjB,CAAA;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAW,EAAE,IAAY;IACtC,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,CAAC;QACX,GAAG;QACH,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;QAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG;KACZ,CAAA;AACH,CAAC;AAED,SAAS,KAAK;IACZ,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;IAClC,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,SAAS;QACd,MAAM;QACN,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,GAAG;KACZ,CAAA;AACH,CAAC;AAED,2FAA2F;AAC3F,SAAS,KAAK,CAAC,IAAkB;IAC/B,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,CAAA;IAC7B,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAA;IACvB,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM;QACN,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,GAAG;KACZ,CAAA;AACH,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAiC,KAAK,CAAC;IACrD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,EAAE;IACd,OAAO,EAAE,KAAK,EAAE;IAChB,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;CACvB,CAAC,CAAA;AAEF,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CACxB,OAAO,GAAG,6DAA6D,CACxE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}
+{"version":3,"file":"jws_algorithms.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_algorithms.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAe5C,MAAM,GAAG,GAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AAE7D,kFAAkF;AAClF,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IACrD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9E,CAAC;AAED,4FAA4F;AAC5F,SAAS,GAAG,CAAC,IAAY,EAAE,UAAyB;IAClD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC1D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;IAC7C,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM;QACN,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM;QACxD,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,uFAAuF;AACvF,SAAS,KAAK,CAAC,GAAW,EAAE,IAAY;IACtC,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,CAAC;QACX,GAAG;QACH,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE;QAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG;KACZ,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,KAAK;IACZ,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACnC,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,GAAG,EAAE,SAAS;QACd,MAAM;QACN,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,GAAG;KACZ,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,sFAAsF;AACtF,SAAS,KAAK,CAAC,YAA0B;IACvC,MAAM,IAAI,GAAG,UAAU,YAAY,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC;IACxB,OAAO;QACL,GAAG,EAAE,CAAC,KAAK,CAAC;QACZ,MAAM;QACN,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,GAAG;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,GAAG,GAAiC,KAAK,CAAC;IACrD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC;IAChB,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC;IAC1B,KAAK,EAAE,KAAK,EAAE;IACd,OAAO,EAAE,KAAK,EAAE;IAChB,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;IACtB,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;CACvB,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,gBAAgB,CAAC,OAAO,GAAG,6DAA6D,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/jose/src/lib/jws_sign.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,17 +7,19 @@
  */
 /***/
 import type * as types from '../types.d.ts';
-export interface SignInput {
-    payload: Uint8Array;
-    protectedHeader?: types.JWSHeaderParameters;
-    unprotectedHeader?: types.JWSHeaderParameters;
+export type SignInput = [
+    payload: Uint8Array,
+    protectedHeader?: types.JWSHeaderParameters,
+    unprotectedHeader?: types.JWSHeaderParameters,
     crit?: {
         [propName: string]: boolean;
-    };
+    },
     /** Reused across the signatures of a General JWS, which all cover the same payload. */
-    encoded?: [b64?: string, raw?: Uint8Array];
-}
-/** RFC 7797 - whether this Protected Header opts the payload out of base64url encoding. */
-export declare function unencodedPayload(protectedHeader?: types.JWSHeaderParameters): boolean;
-export declare function createSignature(input: SignInput, key: types.KeyInput): Promise<types.FlattenedJWS>;
+    encodedPayloadCache?: [value?: string, octets?: Uint8Array]
+];
+export type CreatedSignature = [jws: types.FlattenedJWS, b64: boolean];
+export declare function createSignature(input: SignInput, key: types.KeyInput, rejectUnencoded?: () => never): Promise<CreatedSignature>;
+export declare function createCompactSignature(payload: Uint8Array, protectedHeader: types.JWSHeaderParameters | undefined, crit: {
+    [propName: string]: boolean;
+} | undefined, key: types.KeyInput, rejectUnencoded: () => never): Promise<string>;
 //# sourceMappingURL=jws_sign.d.ts.map

package/dist/jose/src/lib/jws_sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jws_sign.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAA;AAU3C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,UAAU,CAAA;IACnB,eAAe,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAA;IAC3C,iBAAiB,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAA;IAC7C,IAAI,CAAC,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACtC,uFAAuF;IACvF,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;CAC3C;AAED,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAMrF;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAClB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAqF7B"}
+{"version":3,"file":"jws_sign.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAe5C,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,UAAU;IACnB,eAAe,CAAC,EAAE,KAAK,CAAC,mBAAmB;IAC3C,iBAAiB,CAAC,EAAE,KAAK,CAAC,mBAAmB;IAC7C,IAAI,CAAC,EAAE;QAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE;IACtC,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAEvE,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,eAAe,CAAC,EAAE,MAAM,KAAK,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CAyE3B;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,UAAU,EACnB,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,EACtD,IAAI,EAAE;IAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,SAAS,EACjD,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,eAAe,EAAE,MAAM,KAAK,GAC3B,OAAO,CAAC,MAAM,CAAC,CAGjB"}

package/dist/jose/src/lib/jws_sign.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,78 +7,77 @@
  */
 /***/
 import { encode as b64u } from '../util/base64url.js';
-import { sign } from './signing.js';
 import { jwsAlgorithm } from './jws_algorithms.js';
-import { isDisjoint } from './type_checks.js';
+import { isDisjoint, serializeJoseHeader, validateB64, validateCrit, validateCritDuplicates, JWS_RECOGNIZED } from './validate.js';
 import { JWSInvalid } from '../util/errors.js';
-import { concat, encode } from './buffer_utils.js';
-import { validateCrit, validateCritDuplicates, JWS_RECOGNIZED } from './options.js';
-import { prepareKey } from './key.js';
-/** RFC 7797 - whether this Protected Header opts the payload out of base64url encoding. */
-export function unencodedPayload(protectedHeader) {
-    return (protectedHeader?.b64 === false &&
-        Array.isArray(protectedHeader.crit) &&
-        protectedHeader.crit.includes('b64'));
-}
-export async function createSignature(input, key) {
-    const { protectedHeader, unprotectedHeader } = input;
+import { concat, encode, encoder } from './buffer_utils.js';
+import { prepareKey, rawKey, checkModulusLength } from './key.js';
+export async function createSignature(input, key, rejectUnencoded) {
+    let [payload, protectedHeader, unprotectedHeader, crit] = input;
+    // RFC 7515, Section 5.1, step 4.
+    let encodedProtectedHeader = '';
+    if (protectedHeader !== undefined) {
+        const normalized = serializeJoseHeader(JWSInvalid, protectedHeader);
+        protectedHeader = normalized[0];
+        encodedProtectedHeader = b64u(normalized[1]);
+    }
+    if (unprotectedHeader !== undefined) {
+        unprotectedHeader = serializeJoseHeader(JWSInvalid, unprotectedHeader)[0];
+    }
     if (!protectedHeader && !unprotectedHeader) {
         throw new JWSInvalid('either setProtectedHeader or setUnprotectedHeader must be called before #sign()');
     }
+    // RFC 7515, Section 7.2.1: the JOSE Header is a disjoint union.
     if (!isDisjoint(protectedHeader, unprotectedHeader)) {
         throw new JWSInvalid('JWS Protected and JWS Unprotected Header Parameter names must be disjoint');
     }
     const joseHeader = { ...protectedHeader, ...unprotectedHeader };
     validateCritDuplicates(JWSInvalid, protectedHeader);
-    const extensions = validateCrit(JWSInvalid, JWS_RECOGNIZED, input.crit, protectedHeader, joseHeader);
-    let b64 = true;
-    if (extensions.includes('b64')) {
-        b64 = protectedHeader.b64;
-        if (typeof b64 !== 'boolean') {
-            throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
-        }
-    }
+    const b64 = validateB64(protectedHeader, validateCrit(JWSInvalid, JWS_RECOGNIZED, crit, protectedHeader, joseHeader));
+    if (!b64)
+        rejectUnencoded?.();
     const { alg } = joseHeader;
     if (typeof alg !== 'string' || !alg) {
         throw new JWSInvalid('JWS "alg" (Algorithm) Header Parameter missing or invalid');
     }
     const entry = jwsAlgorithm(alg);
-    let payloadS;
-    let payloadB;
+    // RFC 7515, Section 5.1, step 2; RFC 7797, Section 3 for an unencoded payload.
+    let encodedPayload = '';
+    let signingPayload = payload;
+    let signingInput;
     if (b64) {
-        const encoded = (input.encoded ??= []);
-        encoded[0] ??= b64u(input.payload);
-        encoded[1] ??= encode(encoded[0]);
-        payloadS = encoded[0];
-        payloadB = encoded[1];
-    }
-    else {
-        payloadB = input.payload;
-        payloadS = '';
-    }
-    let protectedHeaderString;
-    let protectedHeaderBytes;
-    if (protectedHeader) {
-        protectedHeaderString = b64u(JSON.stringify(protectedHeader));
-        protectedHeaderBytes = encode(protectedHeaderString);
-    }
-    else {
-        protectedHeaderString = '';
-        protectedHeaderBytes = new Uint8Array();
+        const encodedPayloadCache = input[4];
+        if (encodedPayloadCache) {
+            encodedPayload = encodedPayloadCache[0] ??= b64u(payload);
+            signingPayload = encodedPayloadCache[1] ??= encode(encodedPayload);
+        }
+        else {
+            encodedPayload = b64u(payload);
+            // Both components are generated base64url strings.
+            signingInput = encoder.encode(`${encodedProtectedHeader}.${encodedPayload}`);
+        }
     }
-    const data = concat(protectedHeaderBytes, encode('.'), payloadB);
-    const k = await prepareKey(entry, key, 'sign');
-    const signature = await sign(entry, k, data);
+    // RFC 7515, Section 5.1, step 5: JWS Signing Input (modified by RFC 7797, Section 3).
+    signingInput ??= concat(encode(encodedProtectedHeader), encode('.'), signingPayload);
+    const signingKey = await rawKey(await prepareKey(entry, key, 'sign'), entry.subtle, 'sign');
+    if (entry.minRsaBits)
+        checkModulusLength(entry.alg, signingKey);
+    // RFC 7515, Section 5.1, steps 6 and 8: encode the JWS Signature and serialize.
+    // With b64=false this API returns detached content (Appendix F; RFC 7797, Section 5.1).
     const jws = {
-        signature: b64u(signature),
-        payload: payloadS,
+        signature: b64u(new Uint8Array(await crypto.subtle.sign(entry.signing, signingKey, signingInput))),
+        payload: encodedPayload
     };
     if (protectedHeader) {
-        jws.protected = protectedHeaderString;
+        jws.protected = encodedProtectedHeader;
     }
     if (unprotectedHeader) {
         jws.header = unprotectedHeader;
     }
-    return jws;
+    return [jws, b64];
+}
+export async function createCompactSignature(payload, protectedHeader, crit, key, rejectUnencoded) {
+    const [jws] = await createSignature([payload, protectedHeader, undefined, crit], key, rejectUnencoded);
+    return `${jws.protected}.${jws.payload}.${jws.signature}`;
 }
 //# sourceMappingURL=jws_sign.js.map

package/dist/jose/src/lib/jws_sign.js.map

@@ -1 +1 @@
-{"version":3,"file":"jws_sign.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAWrC,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,eAA2C;IAC1E,OAAO,CACL,eAAe,EAAE,GAAG,KAAK,KAAK;QAC9B,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC;QACnC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CACrC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAgB,EAChB,GAAmB;IAEnB,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAA;IAEpD,IAAI,CAAC,eAAe,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAClB,iFAAiF,CAClF,CAAA;IACH,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAClB,2EAA2E,CAC5E,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAA8B,EAAE,GAAG,eAAe,EAAE,GAAG,iBAAiB,EAAE,CAAA;IAE1F,sBAAsB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;IACnD,MAAM,UAAU,GAAG,YAAY,CAC7B,UAAU,EACV,cAAc,EACd,KAAK,CAAC,IAAI,EACV,eAAe,EACf,UAAU,CACX,CAAA;IAED,IAAI,GAAG,GAAG,IAAI,CAAA;IACd,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,GAAG,GAAG,eAAgB,CAAC,GAAI,CAAA;QAC3B,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAClB,yEAAyE,CAC1E,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAAA;IAE1B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAA;IACnF,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAE/B,IAAI,QAAgB,CAAA;IACpB,IAAI,QAAoB,CAAA;IACxB,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAA;QACtC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;QACjC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACrB,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAA;QACxB,QAAQ,GAAG,EAAE,CAAA;IACf,CAAC;IAED,IAAI,qBAA6B,CAAA;IACjC,IAAI,oBAAgC,CAAA;IACpC,IAAI,eAAe,EAAE,CAAC;QACpB,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAA;QAC7D,oBAAoB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAA;IACtD,CAAC;SAAM,CAAC;QACN,qBAAqB,GAAG,EAAE,CAAA;QAC1B,oBAAoB,GAAG,IAAI,UAAU,EAAE,CAAA;IACzC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;IAEhE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAE5C,MAAM,GAAG,GAAuB;QAC9B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,QAAQ;KAClB,CAAA;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,SAAS,GAAG,qBAAqB,CAAA;IACvC,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,GAAG,iBAAiB,CAAA;IAChC,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"jws_sign.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/jws_sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAalE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAgB,EAChB,GAAmB,EACnB,eAA6B;IAE7B,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAEhE,iCAAiC;IACjC,IAAI,sBAAsB,GAAG,EAAE,CAAC;IAChC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QACpE,eAAe,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,sBAAsB,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,iBAAiB,GAAG,mBAAmB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,eAAe,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAAC,iFAAiF,CAAC,CAAC;IAC1G,CAAC;IAED,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,2EAA2E,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,UAAU,GAA8B,EAAE,GAAG,eAAe,EAAE,GAAG,iBAAiB,EAAE,CAAC;IAE3F,sBAAsB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,WAAW,CAAC,eAAe,EAAE,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC;IAEtH,IAAI,CAAC,GAAG;QAAE,eAAe,EAAE,EAAE,CAAC;IAE9B,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;IAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEhC,+EAA+E;IAC/E,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,cAAc,GAAG,OAAO,CAAC;IAC7B,IAAI,YAAoC,CAAC;IACzC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,mBAAmB,EAAE,CAAC;YACxB,cAAc,GAAG,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,cAAc,GAAG,mBAAmB,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,cAAc,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,mDAAmD;YACnD,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,sBAAsB,IAAI,cAAc,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,UAAU;QAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAChE,gFAAgF;IAChF,wFAAwF;IACxF,MAAM,GAAG,GAAuB;QAC9B,SAAS,EAAE,IAAI,CACb,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,YAAuC,CAAC,CAAC,CAC7G;QACD,OAAO,EAAE,cAAc;KACxB,CAAC;IAEF,IAAI,eAAe,EAAE,CAAC;QACpB,GAAG,CAAC,SAAS,GAAG,sBAAsB,CAAC;IACzC,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,GAAG,iBAAiB,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAmB,EACnB,eAAsD,EACtD,IAAiD,EACjD,GAAmB,EACnB,eAA4B;IAE5B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IACvG,OAAO,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;AAC5D,CAAC"}

package/dist/jose/src/lib/jws_verify.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -15,23 +15,19 @@ export type VerifyShared = [
         [propName: string]: boolean;
     } | undefined,
     /** ASCII octets of a base64url payload, reused as signing input across signatures. */
-    b64p?: Uint8Array
+    encodedPayloadOctets?: Uint8Array
 ];
-export type VerifiedSignature = [
-    payload: Uint8Array,
-    parsedProt: types.JWSHeaderParameters,
-    b64: boolean,
-    key: types.CryptoKey | Uint8Array,
-    resolvedKey: boolean
-];
-/** Flattened and General results have the same shape, so they are assembled in one place. */
-export declare function verifyResult(jws: types.FlattenedJWSInput | Omit<types.FlattenedJWSInput, 'payload'>, verified: VerifiedSignature): types.FlattenedVerifyResult & Partial<types.ResolvedKey>;
+export type VerifiedSignature = [result: types.FlattenedVerifyResult & Partial<types.ResolvedKey>, b64: boolean];
+/** Captures a JSON signature into data properties and validates its serialization members. */
+export declare function snapshotJws(jws: types.FlattenedJWSInput, sharedPayload?: [payload: types.FlattenedJWSInput['payload']]): types.FlattenedJWSInput;
 export declare function prepareVerify(options?: types.VerifyOptions): VerifyShared;
+export declare function parseProtectedHeader(encodedProtectedHeader: string | undefined): types.JWSHeaderParameters;
+export declare function encodeJsonUnencodedPayload(payload: string): Uint8Array;
 /**
  * Verifies one signature. `jws` must already have been checked to have the member types the
  * Flattened Serialization requires; the Compact adapter gets that for free from String#split.
  */
-export declare function verifySignature(jws: types.FlattenedJWSInput, shared: VerifyShared, key: types.KeyInput | VerifyGetKey): Promise<VerifiedSignature>;
+export declare function verifySignature(jws: types.FlattenedJWSInput, shared: VerifyShared, key: types.KeyInput | VerifyGetKey, encodeUnencodedPayload: (payload: string) => Uint8Array, parsedProtected?: types.JWSHeaderParameters): Promise<VerifiedSignature>;
 /** Splits a Compact JWS and verifies it. Every member is a string by construction. */
 export declare function verifyCompact(jws: string | Uint8Array, shared: VerifyShared, key: types.KeyInput | VerifyGetKey): Promise<VerifiedSignature>;
 //# sourceMappingURL=jws_verify.d.ts.map