inray 0.0.9 → 0.0.10

package/dist/jose/src/jws/compact/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AA+EtE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAwB,EACxB,GAAyC,EACzC,OAA6B;IAE7B,gGAAgG;IAChG,kGAAkG;IAClG,yDAAyD;IACzD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,GAAG,EACH,aAAa,CAAC,OAAO,CAAC,EACtB,GAAoC,CACrC,CAAA;IAED,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IAErE,IAAI,OAAO,GAAG,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;IACxC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/compact/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAWL,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAyEvE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAwB,EACxB,GAAyC,EACzC,OAA6B;IAE7B,gGAAgG;IAChG,kGAAkG;IAClG,yDAAyD;IACzD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,GAAoC,CAAC,CAAC;IAExG,OAAO,MAAgE,CAAC;AAC1E,CAAC"}

package/dist/jose/src/jws/flattened/sign.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,10 +10,12 @@
  * Signing JSON Web Signature (JWS) in Flattened JSON Serialization
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-7.2.2 RFC 7515, Section 7.2.2}
  */
 import type * as types from '../../types.d.ts';
 /**
- * The FlattenedSign class is used to build and sign Flattened JWS objects.
+ * Produces flattened JWS JSON Serialization using a digital signature or MAC.
  *
  * This class is exported (as a named export) from the main `'jose'` module entry point as well as
  * from its subpath export `'jose/jws/flattened/sign'`.
@@ -33,27 +35,28 @@ import type * as types from '../../types.d.ts';
 export declare class FlattenedSign {
     #private;
     /**
-     * {@link FlattenedSign} constructor
+     * Creates a signer for flattened JWS JSON Serialization.
      *
-     * @param payload Binary representation of the payload to sign.
+     * @param payload JWS Payload bytes to sign or MAC.
      */
     constructor(payload: Uint8Array);
     /**
-     * Sets the JWS Protected Header on the FlattenedSign object.
+     * Sets the JWS Protected Header. May only be called once.
      *
      * @param protectedHeader JWS Protected Header.
      */
     setProtectedHeader(protectedHeader: types.JWSHeaderParameters): this;
     /**
-     * Sets the JWS Unprotected Header on the FlattenedSign object.
+     * Sets the JWS Unprotected Header. May only be called once.
      *
      * @param unprotectedHeader JWS Unprotected Header.
      */
     setUnprotectedHeader(unprotectedHeader: types.JWSHeaderParameters): this;
     /**
-     * Signs and resolves the value of the Flattened JWS object.
+     * Computes the JWS Signature (digital signature or MAC) and returns the flattened JWS JSON
+     * Serialization.
      *
-     * @param key Private Key or Secret to sign the JWS with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */

package/dist/jose/src/jws/flattened/sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAA;AAI9C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,aAAa;;IAOxB;;;;OAIG;gBACS,OAAO,EAAE,UAAU;IAO/B;;;;OAIG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,IAAI;IAMpE;;;;OAIG;IACH,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,GAAG,IAAI;IAMxE;;;;;;OAMG;IACG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;CAW1F"}
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAK/C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,aAAa;;IAGxB;;;;OAIG;gBACS,OAAO,EAAE,UAAU;IAK/B;;;;OAIG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,IAAI;IAMpE;;;;OAIG;IACH,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,GAAG,IAAI;IAMxE;;;;;;;OAOG;IACG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;CAM1F"}

package/dist/jose/src/jws/flattened/sign.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,9 +7,9 @@
  */
 /***/
 import { createSignature } from '../../lib/jws_sign.js';
-import { assertNotSet } from '../../lib/helpers.js';
+import { assertNotSet, assertUint8Array } from '../../lib/validate.js';
 /**
- * The FlattenedSign class is used to build and sign Flattened JWS objects.
+ * Produces flattened JWS JSON Serialization using a digital signature or MAC.
  *
  * This class is exported (as a named export) from the main `'jose'` module entry point as well as
  * from its subpath export `'jose/jws/flattened/sign'`.
@@ -27,54 +27,49 @@ import { assertNotSet } from '../../lib/helpers.js';
  * ```
  */
 export class FlattenedSign {
-    #payload;
-    #protectedHeader;
-    #unprotectedHeader;
+    #input;
     /**
-     * {@link FlattenedSign} constructor
+     * Creates a signer for flattened JWS JSON Serialization.
      *
-     * @param payload Binary representation of the payload to sign.
+     * @param payload JWS Payload bytes to sign or MAC.
      */
     constructor(payload) {
-        if (!(payload instanceof Uint8Array)) {
-            throw new TypeError('payload must be an instance of Uint8Array');
-        }
-        this.#payload = payload;
+        assertUint8Array(payload, 'payload');
+        this.#input = [payload];
     }
     /**
-     * Sets the JWS Protected Header on the FlattenedSign object.
+     * Sets the JWS Protected Header. May only be called once.
      *
      * @param protectedHeader JWS Protected Header.
      */
     setProtectedHeader(protectedHeader) {
-        assertNotSet(this.#protectedHeader, 'setProtectedHeader');
-        this.#protectedHeader = protectedHeader;
+        assertNotSet(this.#input[1], 'setProtectedHeader');
+        this.#input[1] = protectedHeader;
         return this;
     }
     /**
-     * Sets the JWS Unprotected Header on the FlattenedSign object.
+     * Sets the JWS Unprotected Header. May only be called once.
      *
      * @param unprotectedHeader JWS Unprotected Header.
      */
     setUnprotectedHeader(unprotectedHeader) {
-        assertNotSet(this.#unprotectedHeader, 'setUnprotectedHeader');
-        this.#unprotectedHeader = unprotectedHeader;
+        assertNotSet(this.#input[2], 'setUnprotectedHeader');
+        this.#input[2] = unprotectedHeader;
         return this;
     }
     /**
-     * Signs and resolves the value of the Flattened JWS object.
+     * Computes the JWS Signature (digital signature or MAC) and returns the flattened JWS JSON
+     * Serialization.
      *
-     * @param key Private Key or Secret to sign the JWS with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */
     async sign(key, options) {
-        return createSignature({
-            payload: this.#payload,
-            protectedHeader: this.#protectedHeader,
-            unprotectedHeader: this.#unprotectedHeader,
-            crit: options?.crit,
-        }, key);
+        const input = [...this.#input];
+        input[3] = options?.crit;
+        const [jws] = await createSignature(input, key);
+        return jws;
     }
 }
 //# sourceMappingURL=sign.js.map

package/dist/jose/src/jws/flattened/sign.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,aAAa;IACxB,QAAQ,CAAY;IAEpB,gBAAgB,CAA4B;IAE5C,kBAAkB,CAA4B;IAE9C;;;;OAIG;IACH,YAAY,OAAmB;QAC7B,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;QAClE,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,eAA0C;QAC3D,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAA;QACzD,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,iBAA4C;QAC/D,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,CAAA;QAC7D,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAA;QAC3C,OAAO,IAAI,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,OAA2B;QACzD,OAAO,eAAe,CACpB;YACE,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,eAAe,EAAE,IAAI,CAAC,gBAAgB;YACtC,iBAAiB,EAAE,IAAI,CAAC,kBAAkB;YAC1C,IAAI,EAAE,OAAO,EAAE,IAAI;SACpB,EACD,GAAG,CACJ,CAAA;IACH,CAAC;CACF"}
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAWL,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,aAAa;IACxB,MAAM,CAAY;IAElB;;;;OAIG;IACH,YAAY,OAAmB;QAC7B,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,eAA0C;QAC3D,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,iBAA4C;QAC/D,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,GAAmB,EAAE,OAA2B;QACzD,MAAM,KAAK,GAAc,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/jose/src/jws/flattened/verify.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,11 +10,12 @@
  * Verifying JSON Web Signature (JWS) in Flattened JSON Serialization
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-7.2.2 RFC 7515, Section 7.2.2}
  */
 import type * as types from '../../types.d.ts';
 /**
- * Interface for Flattened JWS Verification dynamic key resolution. No token components have been
- * verified at the time of this function call.
+ * Resolves a key for Flattened JWS verification from unverified headers and token data.
  *
  * @typeParam KeyType Type definition of the keys the function resolves. Narrowing it is what lets
  *   {@link types.ResolvedKey.key ResolvedKey.key} be inferred at the call site.
@@ -24,7 +25,8 @@ import type * as types from '../../types.d.ts';
 export interface FlattenedVerifyGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWSHeaderParameters, types.FlattenedJWSInput, KeyType | types.KeyObject | types.JWK> {
 }
 /**
- * Verifies the signature and format of and afterwards decodes the Flattened JWS.
+ * Validates a flattened JWS JSON Serialization (digital signature or MAC) and decodes its JWS
+ * Payload.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jws/flattened/verify'`.
@@ -47,29 +49,26 @@ export interface FlattenedVerifyGetKey<KeyType extends types.CryptoKey | Uint8Ar
  * ```
  *
  * @param jws Flattened JWS.
- * @param key Key to verify the JWS with. See
+ * @param key Public key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWS Verify options.
  */
 export declare function flattenedVerify(jws: types.FlattenedJWSInput, key: types.KeyInput, options?: types.VerifyOptions): Promise<types.FlattenedVerifyResult>;
 /**
- * Verifies the signature and format of and afterwards decodes the Flattened JWS, resolving the key
- * dynamically. The result additionally carries the {@link types.ResolvedKey.key resolved key}.
+ * Validates a flattened JWS JSON Serialization (digital signature or MAC) and decodes its JWS
+ * Payload with a dynamically resolved key, included in the result.
  *
  * @param jws Flattened JWS.
- * @param getKey Function resolving a key to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
+ * @param getKey Resolves a public key or shared secret from unverified token data.
  * @param options JWS Verify options.
  */
 export declare function flattenedVerify<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jws: types.FlattenedJWSInput, getKey: FlattenedVerifyGetKey<KeyType>, options?: types.VerifyOptions): Promise<types.FlattenedVerifyResult & types.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Validates a flattened JWS JSON Serialization (digital signature or MAC) and decodes its JWS
+ * Payload using a key or key resolver. The result includes `key` only when a resolver is used.
  *
  * @param jws Flattened JWS.
- * @param key Key, or function resolving a key, to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
+ * @param key Public key or shared secret, or a function resolving one.
  * @param options JWS Verify options.
  */
 export declare function flattenedVerify(jws: types.FlattenedJWSInput, key: types.KeyInput | FlattenedVerifyGetKey, options?: types.VerifyOptions): Promise<types.FlattenedVerifyResult & Partial<types.ResolvedKey>>;

package/dist/jose/src/jws/flattened/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAA;AAK9C;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB,CACpC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAC3E,SAAQ,KAAK,CAAC,cAAc,CAC5B,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,iBAAiB,EACvB,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CACtC;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAC5B,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAA;AACvC;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,EAE3E,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAC5B,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;AACpE;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAC5B,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,qBAAqB,EAC3C,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAK/C;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB,CACpC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAC3E,SAAQ,KAAK,CAAC,cAAc,CAC5B,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,iBAAiB,EACvB,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CACtC;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAC5B,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACxC;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,EACzG,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAC5B,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,EACtC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,KAAK,CAAC,iBAAiB,EAC5B,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,qBAAqB,EAC3C,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC"}

package/dist/jose/src/jws/flattened/verify.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,27 +7,14 @@
  */
 /***/
 import { JWSInvalid } from '../../util/errors.js';
-import { isObject } from '../../lib/type_checks.js';
-import { prepareVerify, verifySignature, verifyResult } from '../../lib/jws_verify.js';
+import { isObject } from '../../lib/validate.js';
+import { encodeJsonUnencodedPayload, prepareVerify, snapshotJws, verifySignature } from '../../lib/jws_verify.js';
 export async function flattenedVerify(jws, key, options) {
     if (!isObject(jws)) {
         throw new JWSInvalid('Flattened JWS must be an object');
     }
-    if (jws.protected === undefined && jws.header === undefined) {
-        throw new JWSInvalid('Flattened JWS must have either of the "protected" or "header" members');
-    }
-    if (jws.protected !== undefined && typeof jws.protected !== 'string') {
-        throw new JWSInvalid('JWS Protected Header incorrect type');
-    }
-    if (jws.payload === undefined) {
-        throw new JWSInvalid('JWS Payload missing');
-    }
-    if (typeof jws.signature !== 'string') {
-        throw new JWSInvalid('JWS Signature missing or incorrect type');
-    }
-    if (jws.header !== undefined && !isObject(jws.header)) {
-        throw new JWSInvalid('JWS Unprotected Header incorrect type');
-    }
-    return verifyResult(jws, await verifySignature(jws, prepareVerify(options), key));
+    const snapshot = snapshotJws(jws);
+    const [result] = await verifySignature(snapshot, prepareVerify(options), key, encodeJsonUnencodedPayload);
+    return result;
 }
 //# sourceMappingURL=verify.js.map

package/dist/jose/src/jws/flattened/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAmFtF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAA4B,EAC5B,GAA2C,EAC3C,OAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,UAAU,CAAC,uEAAuE,CAAC,CAAA;IAC/F,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,UAAU,CAAC,qCAAqC,CAAC,CAAA;IAC7D,CAAC;IAED,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAA;IAC7C,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,UAAU,CAAC,yCAAyC,CAAC,CAAA;IACjE,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,UAAU,CAAC,uCAAuC,CAAC,CAAA;IAC/D,CAAC;IAED,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,eAAe,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;AACnF,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/flattened/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAWL,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA8ElH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAA4B,EAC5B,GAA2C,EAC3C,OAA6B;IAE7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/jose/src/jws/general/sign.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,41 +10,39 @@
  * Signing JSON Web Signature (JWS) in General JSON Serialization
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-7.2.1 RFC 7515, Section 7.2.1}
  */
 import type * as types from '../../types.d.ts';
-/** Used to build General JWS object's individual signatures. */
+/** Configures an individual JWS Signature (digital signature or MAC) in a General JWS. */
 export interface Signature {
     /**
-     * Sets the JWS Protected Header on the Signature object.
+     * Sets the JWS Protected Header. May only be called once.
      *
      * @param protectedHeader JWS Protected Header.
      */
     setProtectedHeader(protectedHeader: types.JWSHeaderParameters): Signature;
     /**
-     * Sets the JWS Unprotected Header on the Signature object.
+     * Sets the JWS Unprotected Header. May only be called once.
      *
      * @param unprotectedHeader JWS Unprotected Header.
      */
     setUnprotectedHeader(unprotectedHeader: types.JWSHeaderParameters): Signature;
     /**
-     * A shorthand for calling {@link GeneralSign.addSignature addSignature()} on the enclosing
-     * {@link GeneralSign} instance.
+     * Adds another signature to the enclosing {@link GeneralSign} and returns its configuration.
      *
-     * @param key Private Key or Secret to sign the individual JWS signature with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */
     addSignature(key: types.KeyInput, options?: types.SignOptions): Signature;
-    /**
-     * A shorthand for calling {@link GeneralSign.sign sign()} on the enclosing {@link GeneralSign}
-     * instance. Takes no arguments — each signature's key is supplied to {@link addSignature}.
-     */
+    /** Computes all JWS Signatures on the enclosing {@link GeneralSign}, using their configured keys. */
     sign(): Promise<types.GeneralJWS>;
-    /** Returns the enclosing {@link GeneralSign} instance */
+    /** Returns the enclosing {@link GeneralSign} instance. */
     done(): GeneralSign;
 }
 /**
- * The GeneralSign class is used to build and sign General JWS objects.
+ * Produces general JWS JSON Serialization using digital signatures or MACs.
  *
  * This class is exported (as a named export) from the main `'jose'` module entry point as well as
  * from its subpath export `'jose/jws/general/sign'`.
@@ -67,20 +65,23 @@ export interface Signature {
 export declare class GeneralSign {
     #private;
     /**
-     * {@link GeneralSign} constructor
+     * Creates a signer for general JWS JSON Serialization.
      *
-     * @param payload Binary representation of the payload to sign.
+     * @param payload JWS Payload bytes to sign or MAC.
      */
     constructor(payload: Uint8Array);
     /**
-     * Adds an additional signature for the General JWS object.
+     * Adds a signature and returns its configuration.
      *
-     * @param key Private Key or Secret to sign the individual JWS signature with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */
     addSignature(key: types.KeyInput, options?: types.SignOptions): Signature;
-    /** Signs and resolves the value of the General JWS object. */
+    /**
+     * Computes each JWS Signature (digital signature or MAC) and returns the general JWS JSON
+     * Serialization.
+     */
     sign(): Promise<types.GeneralJWS>;
 }
 //# sourceMappingURL=sign.d.ts.map

package/dist/jose/src/jws/general/sign.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/general/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAA;AAM9C,gEAAgE;AAChE,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAA;IAEzE;;;;OAIG;IACH,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAA;IAE7E;;;;;;;OAOG;IACH,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAA;IAEzE;;;OAGG;IACH,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAEjC,yDAAyD;IACzD,IAAI,IAAI,WAAW,CAAA;CACpB;AA4CD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,WAAW;;IAKtB;;;;OAIG;gBACS,OAAO,EAAE,UAAU;IAI/B;;;;;;OAMG;IACH,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,SAAS;IAMzE,8DAA8D;IACxD,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;CAyCxC"}
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/general/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAM/C,0FAA0F;AAC1F,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,kBAAkB,CAAC,eAAe,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAE1E;;;;OAIG;IACH,oBAAoB,CAAC,iBAAiB,EAAE,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAE9E;;;;;;OAMG;IACH,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;IAE1E,qGAAqG;IACrG,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAElC,0DAA0D;IAC1D,IAAI,IAAI,WAAW,CAAC;CACrB;AA4CD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,WAAW;;IAKtB;;;;OAIG;gBACS,OAAO,EAAE,UAAU;IAI/B;;;;;;OAMG;IACH,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,WAAW,GAAG,SAAS;IAMzE;;;OAGG;IACG,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;CAmCxC"}

package/dist/jose/src/jws/general/sign.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -8,7 +8,7 @@
 /***/
 import { createSignature } from '../../lib/jws_sign.js';
 import { JWSInvalid } from '../../util/errors.js';
-import { assertNotSet } from '../../lib/helpers.js';
+import { assertNotSet, assertUint8Array } from '../../lib/validate.js';
 class IndividualSignature {
     #parent;
     state;
@@ -37,7 +37,7 @@ class IndividualSignature {
     }
 }
 /**
- * The GeneralSign class is used to build and sign General JWS objects.
+ * Produces general JWS JSON Serialization using digital signatures or MACs.
  *
  * This class is exported (as a named export) from the main `'jose'` module entry point as well as
  * from its subpath export `'jose/jws/general/sign'`.
@@ -61,17 +61,17 @@ export class GeneralSign {
     #payload;
     #signatures = [];
     /**
-     * {@link GeneralSign} constructor
+     * Creates a signer for general JWS JSON Serialization.
      *
-     * @param payload Binary representation of the payload to sign.
+     * @param payload JWS Payload bytes to sign or MAC.
      */
     constructor(payload) {
         this.#payload = payload;
     }
     /**
-     * Adds an additional signature for the General JWS object.
+     * Adds a signature and returns its configuration.
      *
-     * @param key Private Key or Secret to sign the individual JWS signature with. See
+     * @param key Private key or shared secret. See
      *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
      * @param options JWS Sign options.
      */
@@ -80,36 +80,33 @@ export class GeneralSign {
         this.#signatures.push(signature);
         return signature;
     }
-    /** Signs and resolves the value of the General JWS object. */
+    /**
+     * Computes each JWS Signature (digital signature or MAC) and returns the general JWS JSON
+     * Serialization.
+     */
     async sign() {
         if (!this.#signatures.length) {
             throw new JWSInvalid('at least one signature must be added');
         }
-        if (!(this.#payload instanceof Uint8Array)) {
-            throw new TypeError('payload must be an instance of Uint8Array');
-        }
+        assertUint8Array(this.#payload, 'payload');
         const jws = {
             signatures: [],
-            payload: '',
+            payload: ''
         };
-        const encoded = [];
-        for (let i = 0; i < this.#signatures.length; i++) {
-            const signature = this.#signatures[i];
+        const encodedPayloadCache = [];
+        let b64;
+        for (const signature of this.#signatures) {
             const [protectedHeader, unprotectedHeader, key, crit] = signature.state;
-            const { payload, ...rest } = await createSignature({
-                payload: this.#payload,
-                protectedHeader,
-                unprotectedHeader,
-                crit,
-                encoded,
-            }, key);
-            if (i === 0) {
+            const [{ payload, ...signatureMembers }, signatureB64] = await createSignature([this.#payload, protectedHeader, unprotectedHeader, crit, encodedPayloadCache], key);
+            // RFC 7797, Section 3: every signature must use the same b64 value.
+            if (b64 === undefined) {
+                b64 = signatureB64;
                 jws.payload = payload;
             }
-            else if (jws.payload !== payload) {
+            else if (b64 !== signatureB64) {
                 throw new JWSInvalid('inconsistent use of JWS Unencoded Payload (RFC7797)');
             }
-            jws.signatures.push(rest);
+            jws.signatures.push(signatureMembers);
         }
         return jws;
     }

package/dist/jose/src/jws/general/sign.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/general/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AA6CnD,MAAM,mBAAmB;IACvB,OAAO,CAAa;IAEpB,KAAK,CAAgB;IAErB,YAAY,GAAgB,EAAE,GAAmB,EAAE,OAA2B;QAC5E,IAAI,CAAC,OAAO,GAAG,GAAG,CAAA;QAClB,IAAI,CAAC,KAAK,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;IACzD,CAAC;IAED,kBAAkB,CAAC,eAA0C;QAC3D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,eAAe,CAAA;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,oBAAoB,CAAC,iBAA4C;QAC/D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAA;QACnD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAA;QACjC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,YAAY,CAAC,GAAG,IAA6C;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAA;IAC3C,CAAC;IAED,IAAI,CAAC,GAAG,IAAqC;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;IACnC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAA;IACrB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,WAAW;IACtB,QAAQ,CAAY;IAEpB,WAAW,GAA0B,EAAE,CAAA;IAEvC;;;;OAIG;IACH,YAAY,OAAmB;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,GAAmB,EAAE,OAA2B;QAC3D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;QAC7D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAChC,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAA;QAC9D,CAAC;QAED,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,YAAY,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;QAClE,CAAC;QAED,MAAM,GAAG,GAAqB;YAC5B,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,EAAE;SACZ,CAAA;QAED,MAAM,OAAO,GAAsC,EAAE,CAAA;QAErD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;YACrC,MAAM,CAAC,eAAe,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAA;YAEvE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,eAAe,CAChD;gBACE,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,eAAe;gBACf,iBAAiB;gBACjB,IAAI;gBACJ,OAAO;aACR,EACD,GAAG,CACJ,CAAA;YAED,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;YACvB,CAAC;iBAAM,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAA;YAC7E,CAAC;YACD,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QAED,OAAO,GAAG,CAAA;IACZ,CAAC;CACF"}
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../src/jose/src/jws/general/sign.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAWL,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAyCvE,MAAM,mBAAmB;IACvB,OAAO,CAAc;IAErB,KAAK,CAAiB;IAEtB,YAAY,GAAgB,EAAE,GAAmB,EAAE,OAA2B;QAC5E,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,kBAAkB,CAAC,eAA0C;QAC3D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oBAAoB,CAAC,iBAA4C;QAC/D,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,GAAG,IAA6C;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,GAAG,IAAqC;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,WAAW;IACtB,QAAQ,CAAa;IAErB,WAAW,GAA0B,EAAE,CAAC;IAExC;;;;OAIG;IACH,YAAY,OAAmB;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,GAAmB,EAAE,OAA2B;QAC3D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;QAC/D,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE3C,MAAM,GAAG,GAAqB;YAC5B,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,EAAE;SACZ,CAAC;QAEF,MAAM,mBAAmB,GAA8B,EAAE,CAAC;QAC1D,IAAI,GAAwB,CAAC;QAE7B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACzC,MAAM,CAAC,eAAe,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC;YAExE,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,gBAAgB,EAAE,EAAE,YAAY,CAAC,GAAG,MAAM,eAAe,CAC5E,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,CAAC,EAC9E,GAAG,CACJ,CAAC;YAEF,oEAAoE;YACpE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,GAAG,GAAG,YAAY,CAAC;gBACnB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;YACxB,CAAC;iBAAM,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;YAC9E,CAAC;YACD,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/jose/src/jws/general/verify.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -10,11 +10,12 @@
  * Verifying JSON Web Signature (JWS) in General JSON Serialization
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-7.2.1 RFC 7515, Section 7.2.1}
  */
 import type * as types from '../../types.d.ts';
 /**
- * Interface for General JWS Verification dynamic key resolution. No token components have been
- * verified at the time of this function call.
+ * Resolves a key for General JWS verification from unverified headers and token data.
  *
  * @typeParam KeyType Type definition of the keys the function resolves. Narrowing it is what lets
  *   {@link types.ResolvedKey.key ResolvedKey.key} be inferred at the call site.
@@ -24,18 +25,16 @@ import type * as types from '../../types.d.ts';
 export interface GeneralVerifyGetKey<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array> extends types.GetKeyFunction<types.JWSHeaderParameters, types.FlattenedJWSInput, KeyType | types.KeyObject | types.JWK> {
 }
 /**
- * Verifies the signature and format of and afterwards decodes the General JWS.
+ * Validates a JWS Signature (digital signature or MAC) from a general JWS JSON Serialization and
+ * decodes its JWS Payload.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jws/general/verify'`.
  *
  * > [!NOTE]\
- * > The function iterates over the `signatures` array in the General JWS and returns the verification
- * > result of the first signature entry that can be successfully verified. The result only contains
- * > the payload, protected header, and unprotected header of that successfully verified signature
- * > entry. Other signature entries in the General JWS are not validated, and their headers are not
- * > included in the returned result. Recipients of a General JWS should only rely on the returned
- * > (verified) data.
+ * > Returns payload and headers from the first signature that verifies successfully. Other entries'
+ * > headers may be inspected to reject inconsistent use of the JWS Unencoded Payload Option, but are
+ * > not included in the result. Rely only on the returned data.
  *
  * @example
  *
@@ -58,29 +57,27 @@ export interface GeneralVerifyGetKey<KeyType extends types.CryptoKey | Uint8Arra
  * ```
  *
  * @param jws General JWS.
- * @param key Key to verify the JWS with. See
+ * @param key Public key or shared secret. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWS Verify options.
  */
 export declare function generalVerify(jws: types.GeneralJWSInput, key: types.KeyInput, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult>;
 /**
- * Verifies the signature and format of and afterwards decodes the General JWS, resolving the key
- * dynamically. The result additionally carries the {@link types.ResolvedKey.key resolved key}.
+ * Validates a JWS Signature (digital signature or MAC) from a general JWS JSON Serialization and
+ * decodes its JWS Payload with a dynamically resolved key, included in the result.
  *
  * @param jws General JWS.
- * @param getKey Function resolving a key to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
+ * @param getKey Resolves a public key or shared secret from unverified token data.
  * @param options JWS Verify options.
  */
 export declare function generalVerify<KeyType extends types.CryptoKey | Uint8Array = types.CryptoKey | Uint8Array>(jws: types.GeneralJWSInput, getKey: GeneralVerifyGetKey<KeyType>, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult & types.ResolvedKey<KeyType>>;
 /**
- * Accepts either form of the `key` argument. Use this overload when forwarding a value that may be
- * either a key or a key resolution function; `key` is present on the result only when a resolution
- * function was used.
+ * Validates a JWS Signature (digital signature or MAC) from a general JWS JSON Serialization and
+ * decodes its JWS Payload using a key or key resolver. The result includes `key` only when a
+ * resolver is used.
  *
  * @param jws General JWS.
- * @param key Key, or function resolving a key, to verify the JWS with. See
- *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
+ * @param key Public key or shared secret, or a function resolving one.
  * @param options JWS Verify options.
  */
 export declare function generalVerify(jws: types.GeneralJWSInput, key: types.KeyInput | GeneralVerifyGetKey, options?: types.VerifyOptions): Promise<types.GeneralVerifyResult & Partial<types.ResolvedKey>>;

package/dist/jose/src/jws/general/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/general/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAA;AAM9C;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB,CAClC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAC3E,SAAQ,KAAK,CAAC,cAAc,CAC5B,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,iBAAiB,EACvB,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CACtC;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,KAAK,CAAC,eAAe,EAC1B,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;AACrC;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,EAE3E,GAAG,EAAE,KAAK,CAAC,eAAe,EAC1B,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EACpC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;AAClE;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,KAAK,CAAC,eAAe,EAC1B,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,mBAAmB,EACzC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../../../src/jose/src/jws/general/verify.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;GAMG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,kBAAkB,CAAC;AAsC/C;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB,CAClC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,CAC3E,SAAQ,KAAK,CAAC,cAAc,CAC5B,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,iBAAiB,EACvB,OAAO,GAAG,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,CACtC;CAAG;AAEJ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,KAAK,CAAC,eAAe,EAC1B,GAAG,EAAE,KAAK,CAAC,QAAQ,EACnB,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACtC;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,SAAS,KAAK,CAAC,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC,SAAS,GAAG,UAAU,EACvG,GAAG,EAAE,KAAK,CAAC,eAAe,EAC1B,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EACpC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACnE;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,KAAK,CAAC,eAAe,EAC1B,GAAG,EAAE,KAAK,CAAC,QAAQ,GAAG,mBAAmB,EACzC,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,GAC5B,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC"}