inray 0.0.8 → 0.0.10

package/dist/jose/src/lib/key.js

@@ -1,17 +1,16 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
  * - Evgeniy Bushin
  */
 /***/
-import { withAlg as invalidKeyInput } from './invalid_key_input.js';
-import { isKeyLike, isCryptoKey } from './is_key_like.js';
-import * as jwk from './type_checks.js';
+import { isObject } from './validate.js';
 import { decode } from '../util/base64url.js';
-import { jwkToKey } from './jwk_to_key.js';
+import { JOSENotSupported } from '../util/errors.js';
 const tag = (key) => key[Symbol.toStringTag];
+// RFC 7517, Sections 4.2-4.4: honor declared use, key_ops and alg when consuming a JWK.
 const jwkMatchesOp = (entry, key, usage) => {
     const { alg } = entry;
     if (key.use !== undefined) {
@@ -30,50 +29,73 @@ const jwkMatchesOp = (entry, key, usage) => {
         }
     }
 };
-export function checkKeyType(entry, key, usage) {
+/** Validates and converts a key in one pass into the form consumed by the crypto primitives. */
+export async function prepareKey(entry, key, usage) {
     const { alg, secret } = entry;
-    const privateKey = usage === 'decrypt' || usage === 'sign';
+    const requiresPrivateKey = usage === 'decrypt' || usage === 'sign';
     if (secret && key instanceof Uint8Array)
-        return [BYTES, key];
-    if (jwk.isJWK(key)) {
-        if (secret ? !jwk.isSecretJWK(key) : !(privateKey ? jwk.isPrivateJWK(key) : jwk.isPublicJWK(key))) {
+        return key;
+    let normalized;
+    let keyObject;
+    if (isObject(key)) {
+        normalized = normalizeJwk(key);
+        if (typeof normalized.kty !== 'string') {
+            throw invalidKeyType(alg, key, secret);
+        }
+        const valid = secret
+            ? normalized.kty === 'oct' && typeof normalized.k === 'string'
+            : normalized.kty !== 'oct' &&
+                (requiresPrivateKey
+                    ? (normalized.kty === 'AKP' && typeof normalized.priv === 'string') || typeof normalized.d === 'string'
+                    : normalized.d === undefined && normalized.priv === undefined);
+        if (!valid) {
             throw new TypeError(secret
                 ? `JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present`
-                : `JSON Web Key for this operation must be a ${privateKey ? 'private' : 'public'} JWK`);
+                : `JSON Web Key for this operation must be a ${requiresPrivateKey ? 'private' : 'public'} JWK`);
         }
-        jwkMatchesOp(entry, key, usage);
-        return [JWK, key];
-    }
-    if (!isKeyLike(key)) {
-        throw new TypeError(secret
-            ? invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key', 'Uint8Array')
-            : invalidKeyInput(alg, key, 'CryptoKey', 'KeyObject', 'JSON Web Key'));
-    }
-    if (secret) {
-        if (key.type !== 'secret') {
-            throw new TypeError(`${tag(key)} instances for symmetric algorithms must be of type "secret"`);
+        jwkMatchesOp(entry, normalized, usage);
+        if (normalized.kty === 'oct') {
+            return decode(normalized.k);
+        }
+        if (!Object.isFrozen(key)) {
+            const { key_ops } = key;
+            if (Array.isArray(key_ops))
+                Object.freeze(key_ops);
+            Object.freeze(key);
         }
     }
     else {
-        if (key.type === 'secret') {
-            throw new TypeError(`${tag(key)} instances for asymmetric algorithms must not be of type "secret"`);
+        if (!isKeyLike(key)) {
+            throw invalidKeyType(alg, key, secret);
+        }
+        const expectedType = secret ? 'secret' : requiresPrivateKey ? 'private' : 'public';
+        if (key.type !== expectedType && (secret || ['secret', 'public', 'private'].includes(key.type))) {
+            throw new TypeError(`${tag(key)} instances must be of type "${expectedType}" for the ${alg} algorithm`);
         }
-        const expectedType = privateKey ? 'private' : 'public';
-        if ((key.type === 'public' || key.type === 'private') && key.type !== expectedType) {
-            const operation = usage === 'sign'
-                ? 'signing'
-                : usage === 'verify'
-                    ? 'verifying'
-                    : `${usage.slice(0, -1)}tion`;
-            throw new TypeError(`${tag(key)} instances for asymmetric algorithm ${operation} must be of type "${expectedType}"`);
+        if (isCryptoKey(key))
+            return key;
+        keyObject = key;
+        if (keyObject.type === 'secret') {
+            return keyObject.export();
         }
     }
-    return isCryptoKey(key) ? [CRYPTO, key] : [KEYOBJECT, key];
+    cache ||= new WeakMap();
+    const cacheKey = key;
+    let cached = cache.get(cacheKey);
+    if (cached?.[alg])
+        return cached[alg];
+    if (!cached)
+        cache.set(cacheKey, (cached = {}));
+    if (keyObject && typeof keyObject.toCryptoKey === 'function') {
+        const isPublic = keyObject.type === 'public';
+        const crv = nist[keyObject.asymmetricKeyDetails?.namedCurve];
+        const params = entry.resolve?.({ crv, asymmetricKeyType: keyObject.asymmetricKeyType }) ?? entry.subtle;
+        return (cached[alg] = keyObject.toCryptoKey(params, isPublic, entry.usages[isPublic ? 0 : 1]));
+    }
+    normalized ??= keyObject.export({ format: 'jwk' });
+    normalized.alg = alg;
+    return (cached[alg] = await jwkToKey(entry, normalized));
 }
-const BYTES = 0;
-const CRYPTO = 1;
-const KEYOBJECT = 2;
-const JWK = 3;
 let cache;
 /** Node names the NIST curves after the OpenSSL identifiers rather than the JOSE ones. */
 const nist = {
@@ -81,68 +103,144 @@ const nist = {
     __proto__: null,
     prime256v1: 'P-256',
     secp384r1: 'P-384',
-    secp521r1: 'P-521',
+    secp521r1: 'P-521'
 };
-function cached(key, alg, value) {
-    cache ||= new WeakMap();
-    const entry = cache.get(key);
-    if (value) {
-        if (entry) {
-            entry[alg] = value;
-        }
-        else {
-            cache.set(key, { __proto__: null, [alg]: value });
-        }
+export function assertCryptoKey(key) {
+    if (!isCryptoKey(key)) {
+        throw new Error('CryptoKey instance expected');
     }
-    return value ?? entry?.[alg];
 }
-const handleJWK = async (key, jwk, entry) => cached(key, entry.alg) ??
-    cached(key, entry.alg, await jwkToKey(entry, { ...jwk, alg: entry.alg }));
-const handleKeyObject = (keyObject, entry) => {
-    const hit = cached(keyObject, entry.alg);
-    if (hit)
-        return hit;
-    const isPublic = keyObject.type === 'public';
-    const usages = entry.usages[isPublic ? 0 : 1];
-    const { asymmetricKeyType } = keyObject;
-    const crv = nist[keyObject.asymmetricKeyDetails?.namedCurve];
-    const params = entry.resolve?.({ crv, asymmetricKeyType }) ?? entry.subtle;
-    return cached(keyObject, entry.alg, keyObject.toCryptoKey(params, isPublic, usages));
+export const isCryptoKey = (key) => {
+    // @ts-expect-error
+    if (key?.[Symbol.toStringTag] === 'CryptoKey')
+        return true;
+    try {
+        return key instanceof CryptoKey;
+    }
+    catch {
+        return false;
+    }
 };
+export const isKeyObject = (key) => 
+// @ts-expect-error
+key?.[Symbol.toStringTag] === 'KeyObject';
+export const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);
+function message(msg, actual, ...types) {
+    if (types.length > 2) {
+        const last = types.pop();
+        msg += `one of type ${types.join(', ')}, or ${last}.`;
+    }
+    else if (types.length === 2) {
+        msg += `one of type ${types[0]} or ${types[1]}.`;
+    }
+    else {
+        msg += `of type ${types[0]}.`;
+    }
+    if (actual == null) {
+        msg += ` Received ${actual}`;
+    }
+    else if (typeof actual === 'function' && actual.name) {
+        msg += ` Received function ${actual.name}`;
+    }
+    else if (typeof actual === 'object' && actual != null) {
+        if (actual.constructor?.name) {
+            msg += ` Received an instance of ${actual.constructor.name}`;
+        }
+    }
+    return msg;
+}
+export const invalidKeyInput = (actual, ...types) => message('Key must be ', actual, ...types);
+function invalidKeyType(alg, actual, secret) {
+    const types = ['CryptoKey', 'KeyObject', 'JSON Web Key'];
+    if (secret)
+        types.push('Uint8Array');
+    return new TypeError(message(`Key for the ${alg} algorithm must be `, actual, ...types));
+}
+const unusable = (name, prop = 'algorithm.name') => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
+export function checkUsage(key, usage) {
+    if (usage && !key.usages.includes(usage)) {
+        throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);
+    }
+}
+// RFC 7518, Sections 3.3, 3.5 and 4.3: RSA keys must be at least 2048 bits.
+export function checkModulusLength(alg, key) {
+    const { modulusLength } = key.algorithm;
+    if (typeof modulusLength !== 'number' || modulusLength < 2048) {
+        throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);
+    }
+}
 /**
- * Asserts everything there is to assert about `key` for this algorithm and operation, and returns
- * what the crypto primitives consume. The key is discriminated once: checkKeyType reports what it
- * found, and the conversion below acts on that rather than testing the input all over again.
+ * Asserts a caller-supplied CryptoKey matches what an algorithm entry describes. Generic - it names
+ * no algorithm itself, so it belongs to neither family.
  */
-export async function prepareKey(entry, key, usage) {
-    const tagged = checkKeyType(entry, key, usage);
-    switch (tagged[0]) {
-        case BYTES:
-        case CRYPTO:
-            return tagged[1];
-        case JWK: {
-            const key = tagged[1];
-            if (key.k) {
-                return decode(key.k);
-            }
-            if (!Object.isFrozen(key)) {
-                const { key_ops } = key;
-                if (Array.isArray(key_ops))
-                    Object.freeze(key_ops);
-                Object.freeze(key);
-            }
-            return handleJWK(key, key, entry);
-        }
-        case KEYOBJECT: {
-            const keyObject = tagged[1];
-            if (keyObject.type === 'secret') {
-                return keyObject.export();
-            }
-            if ('toCryptoKey' in keyObject && typeof keyObject.toCryptoKey === 'function') {
-                return handleKeyObject(keyObject, entry);
-            }
-            return handleJWK(keyObject, keyObject.export({ format: 'jwk' }), entry);
+export function checkCryptoKey(key, expected, usage) {
+    const algorithm = key.algorithm;
+    if (algorithm.name !== expected.name) {
+        throw unusable(expected.name);
+    }
+    if (expected.hash && algorithm.hash?.name !== expected.hash) {
+        throw unusable(expected.hash, 'algorithm.hash');
+    }
+    if (expected.namedCurve && algorithm.namedCurve !== expected.namedCurve) {
+        throw unusable(expected.namedCurve, 'algorithm.namedCurve');
+    }
+    if (expected.length !== undefined && algorithm.length !== expected.length) {
+        throw unusable(expected.length, 'algorithm.length');
+    }
+    checkUsage(key, usage);
+}
+/** Snapshots a JWK into data properties. */
+export function snapshotJwk(jwk) {
+    return { __proto__: null, ...jwk };
+}
+/** Snapshots a JWK and validates the metadata Web Crypto consumes. */
+export function normalizeJwk(jwk) {
+    const normalized = snapshotJwk(jwk);
+    if (normalized.ext !== undefined && typeof normalized.ext !== 'boolean') {
+        throw new TypeError('"ext" (Extractable) Parameter must be a boolean');
+    }
+    // RFC 7517, Section 4.3: key_ops is an array of strings without duplicate values.
+    if (normalized.key_ops !== undefined) {
+        const value = normalized.key_ops;
+        const keyOps = Array.isArray(value) ? [...value] : undefined;
+        if (!keyOps ||
+            keyOps.some((operation) => typeof operation !== 'string') ||
+            new Set(keyOps).size !== keyOps.length) {
+            throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');
         }
+        normalized.key_ops = keyOps;
+    }
+    return normalized;
+}
+export function validateExtractableOption(extractable) {
+    if (extractable !== undefined && typeof extractable !== 'boolean') {
+        throw new TypeError('"extractable" option must be a boolean');
+    }
+    return extractable;
+}
+export async function jwkToKey(entry, jwk, extractable) {
+    if (!entry.kty.includes(jwk.kty)) {
+        throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+    }
+    const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle;
+    const isPrivate = !!(jwk.d || jwk.priv);
+    const keyData = { ...jwk, ext: extractable ?? jwk.ext };
+    // RFC 9964, Section 3 requires alg for AKP. Other algorithms are already resolved above.
+    // Removing JOSE metadata here is a Web Crypto adapter choice, not a JWK format rule.
+    if (keyData.kty !== 'AKP') {
+        delete keyData.alg;
+    }
+    delete keyData.use;
+    // Key-material validation is delegated to Web Crypto, including RFC 9964, Sections 4/7.3
+    // seed-length validation for ML-DSA and RFC 7518, Section 6 public/private key encodings.
+    return crypto.subtle.importKey('jwk', keyData, algorithm, keyData.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
+}
+/** Imports raw key bytes or validates a supplied CryptoKey against the operation's parameters. */
+export async function rawKey(key, expected, usage, extractable = false) {
+    if (key instanceof Uint8Array) {
+        key = await crypto.subtle.importKey('raw', key, expected, extractable, [usage]);
     }
+    checkCryptoKey(key, expected, usage);
+    return key;
 }
 //# sourceMappingURL=key.js.map

package/dist/jose/src/lib/key.js.map

@@ -1 +1 @@
-{"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,KAAK,GAAG,MAAM,kBAAkB,CAAA;AAEvC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAG1C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAsB,EAAE,CAC7C,GAAyC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAEhE,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAE,GAAc,EAAE,KAAY,EAAE,EAAE;IAC1E,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAA;IACrB,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;QACvE,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CACjB,sDAAsD,QAAQ,gBAAgB,CAC/E,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CAAC,sDAAsD,GAAG,gBAAgB,CAAC,CAAA;IAChG,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,aAAa,GACjB,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;QAE/F,IAAI,aAAa,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,+DAA+D,aAAa,gBAAgB,CAC7F,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAED,MAAM,UAAU,YAAY,CAAC,KAAoB,EAAE,GAAY,EAAE,KAAY;IAC3E,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAC7B,MAAM,UAAU,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAA;IAC1D,IAAI,MAAM,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE5D,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,IACE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAC7F,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,MAAM;gBACJ,CAAC,CAAC,yHAAyH;gBAC3H,CAAC,CAAC,6CAA6C,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM,CACzF,CAAA;QACH,CAAC;QACD,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QAC/B,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACnB,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CACjB,MAAM;YACJ,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC;YACnF,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CACxE,CAAA;IACH,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAA;QAChG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CACjB,GAAG,GAAG,CAAC,GAAG,CAAC,mEAAmE,CAC/E,CAAA;QACH,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;QACtD,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnF,MAAM,SAAS,GACb,KAAK,KAAK,MAAM;gBACd,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,KAAK,QAAQ;oBAClB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAA;YACnC,MAAM,IAAI,SAAS,CACjB,GAAG,GAAG,CAAC,GAAG,CAAC,uCAAuC,SAAS,qBAAqB,YAAY,GAAG,CAChG,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;AAC5D,CAAC;AAID,MAAM,KAAK,GAAG,CAAC,CAAA;AACf,MAAM,MAAM,GAAG,CAAC,CAAA;AAChB,MAAM,SAAS,GAAG,CAAC,CAAA;AACnB,MAAM,GAAG,GAAG,CAAC,CAAA;AAYb,IAAI,KAAiD,CAAA;AAcrD,0FAA0F;AAC1F,MAAM,IAAI,GAA2B;IACnC,mBAAmB;IACnB,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,OAAO;CACnB,CAAA;AAID,SAAS,MAAM,CAAC,GAAW,EAAE,GAAW,EAAE,KAAiB;IACzD,KAAK,KAAK,IAAI,OAAO,EAAE,CAAA;IACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAA0C,CAAC,CAAA;QAC3F,CAAC;IACH,CAAC;IACD,OAAO,KAAK,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,SAAS,GAAG,KAAK,EAAE,GAAgC,EAAE,GAAc,EAAE,KAAoB,EAAE,EAAE,CACjG,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;AAE3E,MAAM,eAAe,GAAG,CAAC,SAA+B,EAAE,KAAoB,EAAE,EAAE;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAA;IAEnB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAA;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAE7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,SAAS,CAAA;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,UAAW,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAA;IAE1E,OAAO,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;AACtF,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAoB,EACpB,GAAY,EACZ,KAAgD;IAEhD,MAAM,MAAM,GAAW,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAEtD,QAAQ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,KAAK,KAAK,CAAC;QACX,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,CAAC,CAAC,CAAA;QAElB,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;YACrB,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;gBACV,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACtB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;gBACvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBAClD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACpB,CAAC;YACD,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QACnC,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAyB,CAAA;YAEnD,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,SAAS,CAAC,MAAM,EAAE,CAAA;YAC3B,CAAC;YAED,IAAI,aAAa,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;gBAC9E,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC1C,CAAC;YAED,OAAO,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QACzE,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,GAAG,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAE,GAAyC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAEhH,wFAAwF;AACxF,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAE,GAAc,EAAE,KAAY,EAAE,EAAE;IAC1E,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,sDAAsD,QAAQ,gBAAgB,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CAAC,sDAAsD,GAAG,gBAAgB,CAAC,CAAC;IACjG,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEpH,IAAI,aAAa,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,+DAA+D,aAAa,gBAAgB,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAoB,EACpB,GAAY,EACZ,KAAY;IAEZ,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,kBAAkB,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,CAAC;IACnE,IAAI,MAAM,IAAI,GAAG,YAAY,UAAU;QAAE,OAAO,GAAG,CAAC;IAEpD,IAAI,UAAiC,CAAC;IACtC,IAAI,SAA2C,CAAC;IAChD,IAAI,QAAQ,CAAY,GAAG,CAAC,EAAE,CAAC;QAC7B,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM;YAClB,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,QAAQ;YAC9D,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,KAAK;gBACxB,CAAC,kBAAkB;oBACjB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,KAAK,KAAK,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,QAAQ;oBACvG,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CACjB,MAAM;gBACJ,CAAC,CAAC,yHAAyH;gBAC3H,CAAC,CAAC,6CAA6C,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,MAAM,CACjG,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,UAAU,CAAC,CAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;YACxB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnF,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,+BAA+B,YAAY,aAAa,GAAG,YAAY,CAAC,CAAC;QAC1G,CAAC;QAED,IAAI,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QAEjC,SAAS,GAAG,GAA2B,CAAC;QACxC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,KAAK,KAAK,IAAI,OAAO,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,GAAa,CAAC;IAC/B,IAAI,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,MAAM,EAAE,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAEhD,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,UAAW,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,SAAS,CAAC,iBAAiB,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;QACxG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,UAAU,KAAK,SAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;IACrB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3D,CAAC;AAID,IAAI,KAAiD,CAAC;AActD,0FAA0F;AAC1F,MAAM,IAAI,GAA2B;IACnC,mBAAmB;IACnB,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,OAAO;IACnB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,OAAO;CACnB,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAY,EAA0B,EAAE;IAClE,mBAAmB;IACnB,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,SAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAA8C,GAAY,EAAY,EAAE;AACjG,mBAAmB;AACnB,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,WAAW,CAAC;AAE5C,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAY,EAA4C,EAAE,CAClF,WAAW,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;AAEvC,SAAS,OAAO,CAAC,GAAW,EAAE,MAAe,EAAE,GAAG,KAAe;IAC/D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACzB,GAAG,IAAI,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;IACxD,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,GAAG,IAAI,eAAe,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAChC,CAAC;IAED,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,GAAG,IAAI,aAAa,MAAM,EAAE,CAAC;IAC/B,CAAC;SAAM,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,IAAI,sBAAsB,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;SAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;YAC7B,GAAG,IAAI,4BAA4B,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,GAAG,KAAe,EAAU,EAAE,CAC7E,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;AAE5C,SAAS,cAAc,CAAC,GAAW,EAAE,MAAe,EAAE,MAAgB;IACpE,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,eAAe,GAAG,qBAAqB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,IAAqB,EAAE,IAAI,GAAG,gBAAgB,EAAE,EAAE,CAClE,IAAI,SAAS,CAAC,kDAAkD,IAAI,YAAY,IAAI,EAAE,CAAC,CAAC;AAI1F,MAAM,UAAU,UAAU,CAAC,GAAoB,EAAE,KAAgB;IAC/D,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,sEAAsE,KAAK,GAAG,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAoB;IAClE,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,SAA4B,CAAC;IAC3D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,GAAG,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,uDAAuD,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAoB,EAAE,QAA2B,EAAE,KAAgB;IAChG,MAAM,SAAS,GAAG,GAAG,CAAC,SAAqE,CAAC;IAE5F,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxE,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,WAAW,CAAC,GAAc;IACxC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,EAA0B,CAAC;AAC7D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,GAAc;IACzC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAEpC,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACzE,CAAC;IAED,kFAAkF;IAClF,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IACE,CAAC,MAAM;YACP,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC;YACzD,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EACtC,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,yEAAyE,CAAC,CAAC;QACjG,CAAC;QACD,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAAoB;IAC5D,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAoB,EAAE,GAAc,EAAE,WAAqB;IACxF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,gBAAgB,CAAC,8DAA8D,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;IAClF,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,OAAO,GAAc,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,WAAW,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;IACnE,yFAAyF;IACzF,qFAAqF;IACrF,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC;IAEnB,yFAAyF;IACzF,0FAA0F;IAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,KAAK,EACL,OAAO,EACP,SAAS,EACT,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,EACxB,GAAG,CAAC,OAAsB,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAiC,EACjC,QAA2B,EAC3B,KAAe,EACf,WAAW,GAAG,KAAK;IAEnB,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAA8B,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7G,CAAC;IACD,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/jose/src/lib/key_algorithm.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":

package/dist/jose/src/lib/key_algorithm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key_algorithm.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_algorithm.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAIxD,mGAAmG;AACnG,eAAO,MAAM,WAAW,wBAAsB,CAAA;AAE9C,wBAAgB,cAAc,CAAC,MAAM,SAAoC,GAAG,KAAK,CAEhF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAEzE"}
+{"version":3,"file":"key_algorithm.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_algorithm.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,mGAAmG;AACnG,eAAO,MAAM,WAAW,wBAAsB,CAAC;AAE/C,wBAAgB,cAAc,CAAC,MAAM,SAAoC,GAAG,KAAK,CAEhF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,aAAa,CAEzE"}

package/dist/jose/src/lib/key_algorithm.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":

package/dist/jose/src/lib/key_algorithm.js.map

@@ -1 +1 @@
-{"version":3,"file":"key_algorithm.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_algorithm.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAA;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAA;AAEzC,mGAAmG;AACnG,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAA;AAE9C,MAAM,UAAU,cAAc,CAAC,MAAM,GAAG,iCAAiC;IACvE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,MAAM,QAAQ,CAAC,CAAA;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,MAAe;IACxD,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,CAAA;AACjG,CAAC"}
+{"version":3,"file":"key_algorithm.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_algorithm.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAE1C,mGAAmG;AACnG,MAAM,CAAC,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAE/C,MAAM,UAAU,cAAc,CAAC,MAAM,GAAG,iCAAiC;IACvE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,MAAM,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,MAAe;IACxD,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;AAClG,CAAC"}

package/dist/jose/src/lib/key_descriptor.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -15,7 +15,7 @@ export interface KeyDescriptor {
     alg: string;
     /** JWK "kty" (Key Type) values this algorithm accepts. */
     kty: readonly string[];
-    /** JWK "crv" the identifier implies, where it implies one. */
+    /** JWK "crv" (Curve) Parameter the identifier implies, where it implies one. */
     crv?: string;
     /**
      * Resolves the WebCrypto parameters from the key itself, for algorithms whose curve the
@@ -31,7 +31,7 @@ export interface KeyDescriptor {
         hash?: string;
         namedCurve?: string;
     };
-    /** True for algorithms that take a secret rather than a key pair. */
+    /** True for symmetric-key algorithms. */
     secret?: boolean;
     /** WebCrypto parameters for importing, generating, and asserting a key's shape. */
     subtle: {
@@ -43,9 +43,10 @@ export interface KeyDescriptor {
     /** Key usages, ordered as public then private. */
     usages: [publicKey: KeyUsage[], privateKey: KeyUsage[]];
     /**
-     * JWK "key_ops" expected per operation. Absent for JWS, where it is always the operation itself.
-     * A JWE entry states it explicitly, and may leave an operation out to mean that no key_ops value
-     * is implied - deriving with a recipient's public ECDH key, for one.
+     * JWK "key_ops" (Key Operations) Parameter expected per operation. Absent for JWS, where it is
+     * always the operation itself. A JWE entry states it explicitly, and may leave an operation out
+     * to mean that no key_ops value is implied - deriving with a recipient's public ECDH key, for
+     * one.
      */
     ops?: [encrypt: string | undefined, decrypt: string | undefined];
     /** Minimum RSA modulus length in bits. */

package/dist/jose/src/lib/key_descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key_descriptor.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,0DAA0D;IAC1D,GAAG,EAAE,SAAS,MAAM,EAAE,CAAA;IACtB,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QAClF,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD,qEAAqE;IACrE,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,mFAAmF;IACnF,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7E,kDAAkD;IAClD,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAA;IACvD;;;;OAIG;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAChE,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,SAAS,aAAa,EAC3C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAMnB"}
+{"version":3,"file":"key_descriptor.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,+CAA+C;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,GAAG,EAAE,SAAS,MAAM,EAAE,CAAC;IACvB,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK;QAClF,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,yCAAyC;IACzC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,mFAAmF;IACnF,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,kDAAkD;IAClD,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxD;;;;;OAKG;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjE,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,SAAS,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAMzG"}

package/dist/jose/src/lib/key_descriptor.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":

package/dist/jose/src/lib/key_descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"key_descriptor.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAuCL;;;;GAIG;AACH,MAAM,UAAU,KAAK,CACnB,OAAuC;IAEvC,MAAM,GAAG,GAAsB,EAAE,SAAS,EAAE,IAAI,EAAkC,CAAA;IAClF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAO,CAAA;IAC1C,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"key_descriptor.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAwCL;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAA0B,OAAuC;IACpF,MAAM,GAAG,GAAsB,EAAE,SAAS,EAAE,IAAI,EAAkC,CAAC;IACnF,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,EAAO,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/jose/src/lib/key_management.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -8,9 +8,10 @@
 /***/
 import type * as types from '../types.d.ts';
 import type { JWEKeyManagementHeaderParameters, JWEHeaderParameters } from '../types.d.ts';
-import type { JWEEncryption } from './jwe_algorithms.js';
-export declare function decryptKeyManagement(alg: string, enc: JWEEncryption, key: types.CryptoKey | Uint8Array, encryptedKey: Uint8Array | undefined, joseHeader: types.JWEHeaderParameters, options?: types.DecryptOptions): Promise<types.CryptoKey | Uint8Array>;
-export declare function encryptKeyManagement(alg: string, enc: JWEEncryption, key: types.CryptoKey | Uint8Array, providedCek?: Uint8Array, providedParameters?: JWEKeyManagementHeaderParameters): Promise<[
+import { type JWEConventionalAlgorithm, type JWEEncryption } from './jwe_algorithms.js';
+export declare function validateMaxPBES2Count(value: number | undefined): void;
+export declare function decryptKeyManagement(entry: JWEConventionalAlgorithm, enc: JWEEncryption, key: types.CryptoKey | Uint8Array, encryptedKey: Uint8Array | undefined, joseHeader: types.JWEHeaderParameters, maxPBES2Count?: number): Promise<types.CryptoKey | Uint8Array>;
+export declare function encryptKeyManagement(entry: JWEConventionalAlgorithm, enc: JWEEncryption, inputKey: types.KeyInput, joseHeader: types.JWEHeaderParameters, providedCek?: Uint8Array, providedParameters?: JWEKeyManagementHeaderParameters): Promise<[
     cek: types.CryptoKey | Uint8Array,
     encryptedKey: Uint8Array | undefined,
     parameters: JWEHeaderParameters | undefined

package/dist/jose/src/lib/key_management.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"key_management.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_management.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAA;AAC3C,OAAO,KAAK,EAAE,gCAAgC,EAAE,mBAAmB,EAAO,MAAM,eAAe,CAAA;AAK/F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAyOxD,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU,EACjC,YAAY,EAAE,UAAU,GAAG,SAAS,EACpC,UAAU,EAAE,KAAK,CAAC,mBAAmB,EACrC,OAAO,CAAC,EAAE,KAAK,CAAC,cAAc,GAC7B,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,CAgGvC;AAED,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU,EACjC,WAAW,CAAC,EAAE,UAAU,EACxB,kBAAkB,GAAE,gCAAqC,GACxD,OAAO,CACR;IACE,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU;IACjC,YAAY,EAAE,UAAU,GAAG,SAAS;IACpC,UAAU,EAAE,mBAAmB,GAAG,SAAS;CAC5C,CACF,CA0FA"}
+{"version":3,"file":"key_management.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_management.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAC5C,OAAO,KAAK,EAAE,gCAAgC,EAAE,mBAAmB,EAAO,MAAM,eAAe,CAAC;AAWhG,OAAO,EAIL,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAmN7B,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAIrE;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,wBAAwB,EAC/B,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU,EACjC,YAAY,EAAE,UAAU,GAAG,SAAS,EACpC,UAAU,EAAE,KAAK,CAAC,mBAAmB,EACrC,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,CAoFvC;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,wBAAwB,EAC/B,GAAG,EAAE,aAAa,EAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ,EACxB,UAAU,EAAE,KAAK,CAAC,mBAAmB,EACrC,WAAW,CAAC,EAAE,UAAU,EACxB,kBAAkB,GAAE,gCAAqC,GACxD,OAAO,CACR;IAAC,GAAG,EAAE,KAAK,CAAC,SAAS,GAAG,UAAU;IAAE,YAAY,EAAE,UAAU,GAAG,SAAS;IAAE,UAAU,EAAE,mBAAmB,GAAG,SAAS;CAAC,CACvH,CA+FA"}