inray 0.0.9 → 0.0.10

package/dist/jose/src/jwks/remote.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -8,7 +8,7 @@
 /***/
 import { JOSEError, JWKSNoMatchingKey, JWKSTimeout } from '../util/errors.js';
 import { createLocalJWKSet } from './local.js';
-import { isObject } from '../lib/type_checks.js';
+import { isJwkSet } from '../lib/validate.js';
 function isCloudflareWorkers() {
     return (
     // @ts-expect-error
@@ -25,16 +25,18 @@ let USER_AGENT;
 // @ts-ignore
 if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
     const NAME = 'jose';
-    const VERSION = 'v6.2.8';
+    const VERSION = 'v6.2.15';
     USER_AGENT = `${NAME}/${VERSION}`;
 }
 /**
- * When passed to {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} this allows the resolver
- * to make use of advanced fetch configurations, HTTP Proxies, retry on network errors, etc.
+ * Configures a custom fetch implementation for remote JWKS retrieval.
+ *
+ * Pass this to {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} to use advanced fetch
+ * configurations, HTTP proxies, network-error retries, and similar behavior.
  *
  * > [!NOTE]\
- * > Known caveat: Expect Type-related issues when passing the inputs through to fetch-like modules,
- * > they hardly ever get their typings inline with actual fetch, you should `@ts-expect-error` them.
+ * > Fetch-like libraries may have incompatible TypeScript signatures even when they accept the
+ * > supplied arguments at runtime.
  *
  * @example
  *
@@ -160,10 +162,10 @@ async function fetchJwks(url, headers, signal, fetchImpl = fetch) {
         method: 'GET',
         signal,
         redirect: 'manual',
-        headers,
+        headers
     }).catch((err) => {
         if (err.name === 'TimeoutError') {
-            throw new JWKSTimeout();
+            throw new JWKSTimeout(undefined, { cause: err });
         }
         throw err;
     });
@@ -173,15 +175,16 @@ async function fetchJwks(url, headers, signal, fetchImpl = fetch) {
     try {
         return await response.json();
     }
-    catch {
-        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON');
+    catch (cause) {
+        throw new JOSEError('Failed to parse the JSON Web Key Set HTTP response as JSON', { cause });
     }
 }
 /**
+ * Symbol used to configure an externally persisted remote JWKS cache.
+ *
  * > [!WARNING]\
- * > This option has security implications that must be understood, assessed for applicability, and
- * > accepted before use. It is critical that the JSON Web Key Set cache only be writable by your own
- * > code.
+ * > Only trusted application code must be allowed to write this cache; its keys are trusted for
+ * > signature verification.
  *
  * This option is intended for cloud computing runtimes that cannot keep an in memory cache between
  * their code's invocations. The supplied writable object seeds the resolver's cache and is updated
@@ -233,134 +236,30 @@ async function fetchJwks(url, headers, signal, fetchImpl = fetch) {
  * ```
  */
 export const jwksCache = Symbol();
-function isFreshJwksCache(input, cacheMaxAge) {
-    if (typeof input !== 'object' || input === null) {
-        return false;
-    }
-    if (!('uat' in input) || typeof input.uat !== 'number' || Date.now() - input.uat >= cacheMaxAge) {
-        return false;
-    }
-    if (!('jwks' in input) ||
-        !isObject(input.jwks) ||
-        !Array.isArray(input.jwks.keys) ||
-        !Array.prototype.every.call(input.jwks.keys, isObject)) {
-        return false;
-    }
-    return true;
+function isFreshFor(timestamp, duration) {
+    return Number.isFinite(timestamp) && Date.now() < timestamp + duration;
 }
-class RemoteJWKSetImpl {
-    #url;
-    #timeoutDuration;
-    #cooldownDuration;
-    #cacheMaxAge;
-    #jwksTimestamp;
-    #pendingFetch;
-    #headers;
-    #customFetch;
-    #local;
-    #cache;
-    constructor(url, options) {
-        if (!(url instanceof URL)) {
-            throw new TypeError('url must be an instance of URL');
-        }
-        this.#url = new URL(url.href);
-        const opts = options ?? {};
-        this.#timeoutDuration = typeof opts.timeoutDuration === 'number' ? opts.timeoutDuration : 5000;
-        this.#cooldownDuration =
-            typeof opts.cooldownDuration === 'number' ? opts.cooldownDuration : 30000;
-        this.#cacheMaxAge = typeof opts.cacheMaxAge === 'number' ? opts.cacheMaxAge : 600000;
-        this.#headers = new Headers(opts.headers);
-        if (USER_AGENT && !this.#headers.has('User-Agent')) {
-            this.#headers.set('User-Agent', USER_AGENT);
-        }
-        if (!this.#headers.has('accept')) {
-            this.#headers.set('accept', 'application/json');
-            this.#headers.append('accept', 'application/jwk-set+json');
-        }
-        this.#customFetch = opts[customFetch];
-        const cache = opts[jwksCache];
-        if (cache !== undefined) {
-            this.#cache = cache;
-            if (isFreshJwksCache(cache, this.#cacheMaxAge)) {
-                this.#jwksTimestamp = this.#cache.uat;
-                this.#local = createLocalJWKSet(this.#cache.jwks);
-            }
-        }
-    }
-    pendingFetch() {
-        return !!this.#pendingFetch;
-    }
-    #validFor(duration) {
-        return typeof this.#jwksTimestamp === 'number' && Date.now() < this.#jwksTimestamp + duration;
-    }
-    coolingDown() {
-        return this.#validFor(this.#cooldownDuration);
-    }
-    fresh() {
-        return this.#validFor(this.#cacheMaxAge);
+function validateDuration(value, fallback, option) {
+    if (Number.isNaN(value)) {
+        throw new TypeError(`"${option}" option must not be NaN`);
     }
-    jwks() {
-        return this.#local?.jwks();
-    }
-    async getKey(protectedHeader, token) {
-        if (!this.#local || !this.fresh()) {
-            await this.reload();
-        }
-        try {
-            return await this.#local(protectedHeader, token);
-        }
-        catch (err) {
-            if (err instanceof JWKSNoMatchingKey) {
-                if (this.coolingDown() === false) {
-                    await this.reload();
-                    return this.#local(protectedHeader, token);
-                }
-            }
-            throw err;
-        }
-    }
-    async reload() {
-        // Do not assume a fetch created in another request reliably resolves
-        // see https://github.com/panva/jose/issues/355 and https://github.com/panva/jose/issues/509
-        if (this.#pendingFetch && isCloudflareWorkers()) {
-            this.#pendingFetch = undefined;
-        }
-        this.#pendingFetch ||= fetchJwks(this.#url.href, this.#headers, AbortSignal.timeout(this.#timeoutDuration), this.#customFetch)
-            .then((json) => {
-            this.#local = createLocalJWKSet(json);
-            if (this.#cache) {
-                this.#cache.uat = Date.now();
-                this.#cache.jwks = json;
-            }
-            this.#jwksTimestamp = Date.now();
-        })
-            .finally(() => {
-            this.#pendingFetch = undefined;
-        });
-        await this.#pendingFetch;
+    if (typeof value === 'number' && value < 0) {
+        throw new TypeError(`"${option}" option must not be negative`);
     }
+    return typeof value === 'number' ? value : fallback;
 }
 /**
- * Returns a function that resolves a JWS JOSE Header to a public key object downloaded from a
- * remote endpoint returning a JSON Web Key Set, that is, for example, an OAuth 2.0 or OIDC
- * jwks_uri. The JSON Web Key Set is fetched when no key matches the selection process but only as
- * frequently as the `cooldownDuration` option allows to prevent abuse. Selection respects the
- * header's "alg" (Algorithm) and "kid" (Key ID) as well as the JWK's "use" (Public Key Use) and
- * "key_ops" (Key Operations). Exactly one key must match; if multiple keys match, the thrown
- * `JWKSMultipleMatchingKeys` can be iterated.
- *
- * It uses the "alg" (JWS Algorithm) Header Parameter to determine the right JWK "kty" (Key Type),
- * then proceeds to match the JWK "kid" (Key ID) with one found in the JWS Header Parameters (if
- * there is one) while also respecting the JWK "use" (Public Key Use) and JWK "key_ops" (Key
- * Operations) Parameters (if they are present on the JWK).
- *
- * Only a single public key must match the selection process. As shown in the example below when
- * multiple keys get matched it is possible to opt-in to iterate over the matched keys and attempt
- * verification in an iterative manner.
+ * Creates a resolver for a JSON Web Key Set available at an HTTP(S) URL. Fetches the JSON Web Key
+ * Set when the cache is missing or stale. An unmatched key triggers another fetch only when
+ * `cooldownDuration` has elapsed since the last successful fetch. Selection uses the header's "alg"
+ * and "kid" and respects the JWK's "use" and "key_ops". Exactly one key must match.
+ *
+ * If multiple keys match, the thrown {@link util/errors.JWKSMultipleMatchingKeys} error exposes an
+ * async iterator over the matching keys. The example below shows how to attempt verification with
+ * each.
  *
  * > [!NOTE]\
- * > The function's purpose is to resolve public keys used for verifying signatures and will not work
- * > for public encryption keys.
+ * > Only public signature verification keys are supported, not public encryption keys.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jwks/remote'`.
@@ -414,32 +313,108 @@ class RemoteJWKSetImpl {
  * @param options Options for the remote JSON Web Key Set.
  */
 export function createRemoteJWKSet(url, options) {
-    const set = new RemoteJWKSetImpl(url, options);
-    const remoteJWKSet = async (protectedHeader, token) => set.getKey(protectedHeader, token);
-    Object.defineProperties(remoteJWKSet, {
+    if (!(url instanceof URL)) {
+        throw new TypeError('url must be an instance of URL');
+    }
+    const href = new URL(url.href).href;
+    const opts = options ?? {};
+    const timeoutOption = opts.timeoutDuration;
+    if (typeof timeoutOption === 'number' && (!Number.isInteger(timeoutOption) || timeoutOption < 0)) {
+        throw new TypeError('"timeoutDuration" option must be a non-negative integer');
+    }
+    const timeoutDuration = typeof timeoutOption === 'number' ? timeoutOption : 5000;
+    const cooldownDuration = validateDuration(opts.cooldownDuration, 30000, 'cooldownDuration');
+    const cacheMaxAge = validateDuration(opts.cacheMaxAge, 600000, 'cacheMaxAge');
+    const headers = new Headers(opts.headers);
+    if (USER_AGENT && !headers.has('User-Agent')) {
+        headers.set('User-Agent', USER_AGENT);
+    }
+    if (!headers.has('accept')) {
+        headers.set('accept', 'application/json, application/jwk-set+json');
+    }
+    const fetchImpl = opts[customFetch];
+    const cache = opts[jwksCache];
+    let jwksTimestamp;
+    let pendingFetch;
+    let reloadSequence = 0;
+    let appliedSequence = 0;
+    let local;
+    if (cache && typeof cache === 'object') {
+        const { uat, jwks } = cache;
+        if (isFreshFor(uat, cacheMaxAge) && isJwkSet(jwks)) {
+            jwksTimestamp = uat;
+            local = createLocalJWKSet(jwks);
+        }
+    }
+    const reload = async () => {
+        // Do not assume a fetch created in another request reliably resolves
+        // see https://github.com/panva/jose/issues/355 and https://github.com/panva/jose/issues/509
+        if (pendingFetch && isCloudflareWorkers()) {
+            pendingFetch = undefined;
+        }
+        if (!pendingFetch) {
+            const sequence = ++reloadSequence;
+            const current = (pendingFetch = fetchJwks(href, headers, AbortSignal.timeout(timeoutDuration), fetchImpl)
+                .then((json) => {
+                const next = createLocalJWKSet(json);
+                if (sequence <= appliedSequence) {
+                    return;
+                }
+                local = next;
+                const updatedAt = Date.now();
+                if (cache) {
+                    cache.uat = updatedAt;
+                    cache.jwks = json;
+                }
+                jwksTimestamp = updatedAt;
+                appliedSequence = sequence;
+            })
+                .finally(() => {
+                if (pendingFetch === current) {
+                    pendingFetch = undefined;
+                }
+            }));
+        }
+        await pendingFetch;
+    };
+    const remoteJWKSet = async (protectedHeader, token) => {
+        if (!local || !isFreshFor(jwksTimestamp, cacheMaxAge)) {
+            await reload();
+        }
+        try {
+            return await local(protectedHeader, token);
+        }
+        catch (err) {
+            if (err instanceof JWKSNoMatchingKey && !isFreshFor(jwksTimestamp, cooldownDuration)) {
+                await reload();
+                return local(protectedHeader, token);
+            }
+            throw err;
+        }
+    };
+    // Object.defineProperties is used for the property attributes it affords and returns the
+    // un-augmented type; RemoteJWKSet describes exactly what the block below installs.
+    return Object.defineProperties(remoteJWKSet, {
         coolingDown: {
-            get: () => set.coolingDown(),
-            enumerable: true,
+            get: () => isFreshFor(jwksTimestamp, cooldownDuration),
+            enumerable: true
         },
         fresh: {
-            get: () => set.fresh(),
-            enumerable: true,
+            get: () => isFreshFor(jwksTimestamp, cacheMaxAge),
+            enumerable: true
         },
         reload: {
-            value: () => set.reload(),
-            enumerable: true,
+            value: reload,
+            enumerable: true
         },
         reloading: {
-            get: () => set.pendingFetch(),
-            enumerable: true,
+            get: () => !!pendingFetch,
+            enumerable: true
         },
         jwks: {
-            value: () => set.jwks(),
-            enumerable: true,
-        },
+            value: () => local?.jwks(),
+            enumerable: true
+        }
     });
-    // Object.defineProperties is used for the property attributes it affords and returns the
-    // un-augmented type; RemoteJWKSet describes exactly what the block above installs.
-    return remoteJWKSet;
 }
 //# sourceMappingURL=remote.js.map

package/dist/jose/src/jwks/remote.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../../src/jose/src/jwks/remote.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAEhD,SAAS,mBAAmB;IAC1B,OAAO;IACL,mBAAmB;IACnB,OAAO,aAAa,KAAK,WAAW;QACpC,aAAa;QACb,CAAC,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,SAAS,KAAK,oBAAoB,CAAC;QAClF,mBAAmB;QACnB,CAAC,OAAO,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ,CAAC,CACjE,CAAA;AACH,CAAC;AAED,+FAA+F;AAC/F,4FAA4F;AAC5F,gBAAgB;AAChB,IAAI,UAAkB,CAAA;AACtB,aAAa;AACb,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAA;IACnB,MAAM,OAAO,GAAG,QAAQ,CAAA;IACxB,UAAU,GAAG,GAAG,IAAI,IAAI,OAAO,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6HG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB,MAAM,EAAE,CAAA;AAkBlD,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,OAAgB,EAChB,MAAmB,EACnB,YAAiC,KAAK;IAEtC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,KAAK;QACb,MAAM;QACN,QAAQ,EAAE,QAAQ;QAClB,OAAO;KACR,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,WAAW,EAAE,CAAA;QACzB,CAAC;QAED,MAAM,GAAG,CAAA;IACX,CAAC,CAAC,CAAA;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;IAChF,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAA;IACnF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,MAAM,CAAC,MAAM,SAAS,GAAkB,MAAM,EAAE,CAAA;AAgFhD,SAAS,gBAAgB,CAAC,KAAc,EAAE,WAAmB;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC;QAChG,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IACE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC,QAAQ,CAAsB,KAAK,CAAC,IAAI,CAAC;QAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EACtD,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,gBAAgB;IACpB,IAAI,CAAK;IAET,gBAAgB,CAAQ;IAExB,iBAAiB,CAAQ;IAEzB,YAAY,CAAQ;IAEpB,cAAc,CAAS;IAEvB,aAAa,CAAmB;IAEhC,QAAQ,CAAS;IAEjB,YAAY,CAAsB;IAElC,MAAM,CAAuC;IAE7C,MAAM,CAAiB;IAEvB,YAAY,GAAY,EAAE,OAA6B;QACrD,IAAI,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAE7B,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAA;QAC1B,IAAI,CAAC,gBAAgB,GAAG,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAA;QAC9F,IAAI,CAAC,iBAAiB;YACpB,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAA;QAC3E,IAAI,CAAC,YAAY,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAA;QACpF,IAAI,CAAC,QAAQ,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;QAC7C,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAA;YAC/C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAA;QAC5D,CAAC;QAED,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;QAErC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;QAC7B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;YACnB,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;gBACrC,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,YAAY;QACV,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAA;IAC7B,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAA;IAC/F,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IAC1C,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,eAA2C,EAC3C,KAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;QACrB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;oBACjC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAA;oBACnB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;gBAC5C,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,qEAAqE;QACrE,4FAA4F;QAC5F,IAAI,IAAI,CAAC,aAAa,IAAI,mBAAmB,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;QAChC,CAAC;QAED,IAAI,CAAC,aAAa,KAAK,SAAS,CAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,EACd,IAAI,CAAC,QAAQ,EACb,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAC1C,IAAI,CAAC,YAAY,CAClB;aACE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,IAAsC,CAAC,CAAA;YACvE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAsC,CAAA;YAC3D,CAAC;YACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAClC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,aAAa,GAAG,SAAS,CAAA;QAChC,CAAC,CAAC,CAAA;QAEJ,MAAM,IAAI,CAAC,aAAa,CAAA;IAC1B,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ,EAAE,OAA6B;IACxE,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAE9C,MAAM,YAAY,GAAG,KAAK,EACxB,eAA2C,EAC3C,KAA+B,EACL,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IAEjE,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE;QACpC,WAAW,EAAE;YACX,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE;YAC5B,UAAU,EAAE,IAAI;SACjB;QACD,KAAK,EAAE;YACL,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE;YACtB,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;YACzB,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE;YAC7B,UAAU,EAAE,IAAI;SACjB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE;YACvB,UAAU,EAAE,IAAI;SACjB;KACF,CAAC,CAAA;IAEF,yFAAyF;IACzF,mFAAmF;IACnF,OAAO,YAA4B,CAAA;AACrC,CAAC"}
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../../src/jose/src/jwks/remote.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAaL,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,SAAS,mBAAmB;IAC1B,OAAO;IACL,mBAAmB;IACnB,OAAO,aAAa,KAAK,WAAW;QACpC,aAAa;QACb,CAAC,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,SAAS,KAAK,oBAAoB,CAAC;QAClF,mBAAmB;QACnB,CAAC,OAAO,WAAW,KAAK,WAAW,IAAI,WAAW,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,4FAA4F;AAC5F,gBAAgB;AAChB,IAAI,UAAkB,CAAC;AACvB,aAAa;AACb,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;IAC3F,MAAM,IAAI,GAAG,MAAM,CAAC;IACpB,MAAM,OAAO,GAAG,SAAS,CAAC;IAC1B,UAAU,GAAG,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+HG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB,MAAM,EAAE,CAAC;AAgBnD,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAgB,EAAE,MAAmB,EAAE,YAAiC,KAAK;IACjH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,KAAK;QACb,MAAM;QACN,QAAQ,EAAE,QAAQ;QAClB,OAAO;KACR,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACf,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAChC,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,4DAA4D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,MAAM,CAAC,MAAM,SAAS,GAAkB,MAAM,EAAE,CAAC;AA6EjD,SAAS,UAAU,CAAC,SAAkB,EAAE,QAAgB;IACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAI,SAAoB,GAAG,QAAQ,CAAC;AACrF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,QAAgB,EAAE,MAAc;IACnF,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,IAAI,MAAM,0BAA0B,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,IAAI,MAAM,+BAA+B,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ,EAAE,OAA6B;IACxE,IAAI,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAEpC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;IAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC;IAC3C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,eAAe,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,4CAA4C,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,aAAiC,CAAC;IACtC,IAAI,YAA0C,CAAC;IAC/C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,KAAuD,CAAC;IAE5D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAmC,CAAC;QAC1D,IAAI,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,aAAa,GAAG,GAAG,CAAC;YACpB,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,qEAAqE;QACrE,4FAA4F;QAC5F,IAAI,YAAY,IAAI,mBAAmB,EAAE,EAAE,CAAC;YAC1C,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,EAAE,cAAc,CAAC;YAClC,MAAM,OAAO,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC;iBACtG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACb,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAsC,CAAC,CAAC;gBACvE,IAAI,QAAQ,IAAI,eAAe,EAAE,CAAC;oBAChC,OAAO;gBACT,CAAC;gBACD,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,IAAI,KAAK,EAAE,CAAC;oBACV,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC;oBACtB,KAAK,CAAC,IAAI,GAAG,IAAsC,CAAC;gBACtD,CAAC;gBACD,aAAa,GAAG,SAAS,CAAC;gBAC1B,eAAe,GAAG,QAAQ,CAAC;YAC7B,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;oBAC7B,YAAY,GAAG,SAAS,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC,CAAC,CAAC;QACR,CAAC;QAED,MAAM,YAAY,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EACxB,eAA2C,EAC3C,KAA+B,EACL,EAAE;QAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;YACtD,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,KAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBACrF,MAAM,MAAM,EAAE,CAAC;gBACf,OAAO,KAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,yFAAyF;IACzF,mFAAmF;IACnF,OAAO,MAAM,CAAC,gBAAgB,CAAC,YAAY,EAAE;QAC3C,WAAW,EAAE;YACX,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC;YACtD,UAAU,EAAE,IAAI;SACjB;QACD,KAAK,EAAE;YACL,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC;YACjD,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY;YACzB,UAAU,EAAE,IAAI;SACjB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE;YAC1B,UAAU,EAAE,IAAI;SACjB;KACF,CAAiB,CAAC;AACrB,CAAC"}

package/dist/jose/src/jws/compact/sign.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,10 +10,12 @@
  * Signing JSON Web Signature (JWS) in Compact Serialization
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-7.1 RFC 7515, Section 7.1}
  */
 import type * as types from '../../types.d.ts';
 /**
- * The CompactSign class is used to build and sign Compact JWS strings.
+ * Produces JWS Compact Serialization using a digital signature or MAC.
  *
  * This class is exported (as a named export) from the main `'jose'` module entry point as well as
  * from its subpath export `'jose/jws/compact/sign'`.
@@ -33,21 +35,22 @@ import type * as types from '../../types.d.ts';
 export declare class CompactSign {
     #private;
     /**
-     * {@link CompactSign} constructor
+     * Creates a signer for JWS Compact Serialization.
      *
-     * @param payload Binary representation of the payload to sign.
+     * @param payload JWS Payload bytes to sign or MAC.
      */
     constructor(payload: Uint8Array);
     /**
-     * Sets the JWS Protected Header on the CompactSign object.
+     * Sets the JWS Protected Header. May only be called once.
      *
      * @param protectedHeader JWS Protected Header.
      */
     setProtectedHeader(protectedHeader: types.CompactJWSHeaderParameters): this;
     /**
-     * Signs and resolves the value of the Compact JWS string.
+     * Computes the JWS Signature (digital signature or MAC) and returns the JWS Compact
+     * Serialization.
      *
-     * @param key Private Key or Secret to sign the JWS with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */

package/dist/jose/src/jws/compact/sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAA;AAI9C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,WAAW;;IAItB;;;;OAIG;gBACS,OAAO,EAAE,UAAU;IAI/B;;;;OAIG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,0BAA0B,GAAG,IAAI;IAM3E;;;;;;OAMG;IACG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAS9E"}
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAI/C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,WAAW;;IAKtB;;;;OAIG;gBACS,OAAO,EAAE,UAAU;IAK/B;;;;OAIG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,0BAA0B,GAAG,IAAI;IAM3E;;;;;;;OAOG;IACG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAK9E"}

package/dist/jose/src/jws/compact/sign.js

@@ -1,15 +1,15 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
  * - Evgeniy Bushin
  */
 /***/
-import { FlattenedSign } from '../flattened/sign.js';
-import { unencodedPayload } from '../../lib/jws_sign.js';
+import { createCompactSignature } from '../../lib/jws_sign.js';
+import { assertNotSet, assertUint8Array } from '../../lib/validate.js';
 /**
- * The CompactSign class is used to build and sign Compact JWS strings.
+ * Produces JWS Compact Serialization using a digital signature or MAC.
  *
  * This class is exported (as a named export) from the main `'jose'` module entry point as well as
  * from its subpath export `'jose/jws/compact/sign'`.
@@ -27,39 +27,39 @@ import { unencodedPayload } from '../../lib/jws_sign.js';
  * ```
  */
 export class CompactSign {
-    #flattened;
+    #payload;
     #protectedHeader;
     /**
-     * {@link CompactSign} constructor
+     * Creates a signer for JWS Compact Serialization.
      *
-     * @param payload Binary representation of the payload to sign.
+     * @param payload JWS Payload bytes to sign or MAC.
      */
     constructor(payload) {
-        this.#flattened = new FlattenedSign(payload);
+        assertUint8Array(payload, 'payload');
+        this.#payload = payload;
     }
     /**
-     * Sets the JWS Protected Header on the CompactSign object.
+     * Sets the JWS Protected Header. May only be called once.
      *
      * @param protectedHeader JWS Protected Header.
      */
     setProtectedHeader(protectedHeader) {
-        this.#flattened.setProtectedHeader(protectedHeader);
+        assertNotSet(this.#protectedHeader, 'setProtectedHeader');
         this.#protectedHeader = protectedHeader;
         return this;
     }
     /**
-     * Signs and resolves the value of the Compact JWS string.
+     * Computes the JWS Signature (digital signature or MAC) and returns the JWS Compact
+     * Serialization.
      *
-     * @param key Private Key or Secret to sign the JWS with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */
     async sign(key, options) {
-        if (unencodedPayload(this.#protectedHeader)) {
+        return createCompactSignature(this.#payload, this.#protectedHeader, options?.crit, key, () => {
             throw new TypeError('use the flattened module for creating JWS with b64: false');
-        }
-        const jws = await this.#flattened.sign(key, options);
-        return `${jws.protected}.${jws.payload}.${jws.signature}`;
+        });
     }
 }
 //# sourceMappingURL=sign.js.map

package/dist/jose/src/jws/compact/sign.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,WAAW;IACtB,UAAU,CAAe;IACzB,gBAAgB,CAAmC;IAEnD;;;;OAIG;IACH,YAAY,OAAmB;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,eAAiD;QAClE,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAA;QACnD,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,OAA2B;QACzD,IAAI,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAEpD,OAAO,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE,CAAA;IAC3D,CAAC;CACF"}
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAWL,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,WAAW;IACtB,QAAQ,CAAa;IAErB,gBAAgB,CAAoC;IAEpD;;;;OAIG;IACH,YAAY,OAAmB;QAC7B,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,eAAiD;QAClE,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;QAC1D,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,OAA2B;QACzD,OAAO,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3F,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/jose/src/jws/compact/verify.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,11 +10,12 @@
  * Verifying JSON Web Signature (JWS) in Compact Serialization
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-7.1 RFC 7515, Section 7.1}
  */
 import type * as types from '../../types.d.ts';
 /**
- * Interface for Compact JWS Verification dynamic key resolution. No token components have been
- * verified at the time of this function call.
+ * Resolves a key for Compact JWS verification from unverified headers and token data.
  *
  * @typeParam KeyType Type definition of the keys the function resolves. Narrowing it is what lets
  *   {@link types.ResolvedKey.key ResolvedKey.key} be inferred at the call site.
@@ -24,7 +25,7 @@ import type * as types from '../../types.d.ts';
 export interface CompactVerifyGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.CompactJWSHeaderParameters, types.FlattenedJWSInput, KeyType | types.KeyObject | types.JWK> {
 }
 /**
- * Verifies the signature and format of and afterwards decodes the Compact JWS.
+ * Validates a JWS Compact Serialization (digital signature or MAC) and decodes its JWS Payload.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jws/compact/verify'`.
@@ -42,29 +43,26 @@ export interface CompactVerifyGetKey<KeyType extends types.CryptoKey | Uint8Arra
  * ```
  *
  * @param jws Compact JWS.
- * @param key Key to verify the JWS with. See
+ * @param key Public key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWS Verify options.
  */
 export declare function compactVerify(jws: string | Uint8Array, key: types.KeyInput, options?: types.VerifyOptions): Promise<types.CompactVerifyResult>;
 /**
- * Verifies the signature and format of and afterwards decodes the Compact JWS, resolving the key
- * dynamically. The result additionally carries the {@link types.ResolvedKey.key resolved key}.
+ * Validates a JWS Compact Serialization (digital signature or MAC) and decodes its JWS Payload with
+ * a dynamically resolved key, included in the result.
  *
  * @param jws Compact JWS.
- * @param getKey Function resolving a key to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
+ * @param getKey Resolves a public key or shared secret from unverified token data.
  * @param options JWS Verify options.
  */
 export declare function compactVerify<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jws: string | Uint8Array, getKey: CompactVerifyGetKey<KeyType>, options?: types.VerifyOptions): Promise<types.CompactVerifyResult & types.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Validates a JWS Compact Serialization (digital signature or MAC) and decodes its JWS Payload
+ * using a key or key resolver. The result includes `key` only when a resolver is used.
  *
  * @param jws Compact JWS.
- * @param key Key, or function resolving a key, to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
+ * @param key Public key or shared secret, or a function resolving one.
  * @param options JWS Verify options.
  */
 export declare function compactVerify(jws: string | Uint8Array, key: types.KeyInput | CompactVerifyGetKey, options?: types.VerifyOptions): Promise<types.CompactVerifyResult & Partial<types.ResolvedKey>>;

package/dist/jose/src/jws/compact/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAA;AAI9C;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB,CAClC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAC3E,SAAQ,KAAK,CAAC,cAAc,CAC5B,KAAK,CAAC,0BAA0B,EAChC,KAAK,CAAC,iBAAiB,EACvB,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CACtC;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;AACrC;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,EAE3E,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EACpC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;AAClE;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,mBAAmB,EACzC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAI/C;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB,CAClC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAC3E,SAAQ,KAAK,CAAC,cAAc,CAC5B,KAAK,CAAC,0BAA0B,EAChC,KAAK,CAAC,iBAAiB,EACvB,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CACtC;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACtC;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,EACvG,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EACpC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,GAAG,UAAU,EACxB,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,mBAAmB,EACzC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC"}

package/dist/jose/src/jws/compact/verify.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -11,11 +11,7 @@ export async function compactVerify(jws, key, options) {
     // A CompactVerifyGetKey declares a narrower Protected Header than a VerifyGetKey does, so it is
     // not assignable to one. Delegating is nevertheless sound: the core rejects a JWS whose Protected
     // Header has no "alg" before it ever calls the resolver.
-    const verified = await verifyCompact(jws, prepareVerify(options), key);
-    const result = { payload: verified[0], protectedHeader: verified[1] };
-    if (typeof key === 'function') {
-        return { ...result, key: verified[3] };
-    }
+    const [result] = await verifyCompact(jws, prepareVerify(options), key);
     return result;
 }
 //# sourceMappingURL=verify.js.map