inray 0.0.9 → 0.0.10

package/dist/jose/src/lib/key_management.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,16 +7,12 @@
  */
 /***/
 import { encode as b64u } from '../util/base64url.js';
-import { prepareKey } from './key.js';
-import { jwkToKey } from './jwk_to_key.js';
-import { jweAlgorithm, jweEncryption } from './jwe_algorithms.js';
+import { prepareKey, rawKey, jwkToKey, checkCryptoKey, checkModulusLength, checkUsage, assertCryptoKey } from './key.js';
+import { jweAlgorithm, jweEncryption, isJWECEKTransport } from './jwe_algorithms.js';
 import { JOSENotSupported, JWEInvalid } from '../util/errors.js';
-import { decodeBase64url, digest } from './helpers.js';
-import { generateCek, encrypt, decrypt } from './content_encryption.js';
-import { isObject } from './type_checks.js';
-import { checkCryptoKey, checkModulusLength, checkUsage } from './crypto_key.js';
-import { concat, encode, uint32be } from './buffer_utils.js';
-import { assertCryptoKey } from './is_key_like.js';
+import { decodeBase64url, assertUint8Array, isObject } from './validate.js';
+import { digest, concat, encode, uint32be } from './buffer_utils.js';
+import { checkCekLength, generateCek, encrypt, decrypt } from './content_encryption.js';
 /** ECDH accepts either of two algorithm names, so it cannot go through the generic comparison. */
 function checkEcdhCryptoKey(key, usage) {
     if (key.algorithm.name !== 'ECDH' && key.algorithm.name !== 'X25519') {
@@ -24,63 +20,47 @@ function checkEcdhCryptoKey(key, usage) {
     }
     checkUsage(key, usage);
 }
-// --- aeskw ---
-async function aeskwCryptoKey(key, alg, usage) {
-    const expected = jweAlgorithm(alg).subtle;
-    const cryptoKey = key instanceof Uint8Array
-        ? await crypto.subtle.importKey('raw', key, 'AES-KW', true, [
-            usage,
-        ])
-        : key;
-    checkCryptoKey(cryptoKey, expected, usage);
-    return cryptoKey;
-}
+// RFC 7518, Section 4.4: wrap the CEK using AES Key Wrap with the default initial value.
 async function aeskwWrap(alg, key, cek) {
-    const cryptoKey = await aeskwCryptoKey(key, alg, 'wrapKey');
-    // algorithm used is irrelevant
+    const cryptoKey = await rawKey(key, jweAlgorithm(alg).subtle, 'wrapKey', true);
+    // The algorithm only supplies a carrier key for Web Crypto wrapKey/unwrapKey.
     const cryptoKeyCek = await crypto.subtle.importKey('raw', cek, { hash: 'SHA-256', name: 'HMAC' }, true, ['sign']);
     return new Uint8Array(await crypto.subtle.wrapKey('raw', cryptoKeyCek, cryptoKey, 'AES-KW'));
 }
 async function aeskwUnwrap(alg, key, encryptedKey) {
-    const cryptoKey = await aeskwCryptoKey(key, alg, 'unwrapKey');
-    // algorithm used is irrelevant
+    const cryptoKey = await rawKey(key, jweAlgorithm(alg).subtle, 'unwrapKey', true);
+    // The algorithm only supplies a carrier key for Web Crypto wrapKey/unwrapKey.
     const cryptoKeyCek = await crypto.subtle.unwrapKey('raw', encryptedKey, cryptoKey, 'AES-KW', { hash: 'SHA-256', name: 'HMAC' }, true, ['sign']);
     return new Uint8Array(await crypto.subtle.exportKey('raw', cryptoKeyCek));
 }
-// --- rsaes ---
+// RFC 7518, Section 4.3: RSAES OAEP parameters and minimum RSA key size.
 function checkRsaKey(alg, key, usage) {
     checkCryptoKey(key, jweAlgorithm(alg).subtle, usage);
     checkModulusLength(alg, key);
 }
-// --- pbes2kw ---
-function pbes2CryptoKey(key, alg) {
-    if (key instanceof Uint8Array) {
-        return crypto.subtle.importKey('raw', key, 'PBKDF2', false, [
-            'deriveBits',
-        ]);
-    }
-    checkCryptoKey(key, jweAlgorithm(alg).subtle, 'deriveBits');
-    return key;
-}
+// RFC 7518, Sections 4.8 and 4.8.1: PBES2 derives an AES Key Wrap key from a password.
 async function deriveKey(p2s, alg, p2c, key) {
+    // RFC 7518, Section 4.8.1.1 requires at least eight Salt Input octets.
     if (!(p2s instanceof Uint8Array) || p2s.length < 8) {
         throw new JWEInvalid('PBES2 Salt Input must be 8 or more octets');
     }
+    // RFC 7518, Section 4.8.1.2: PBES2 Count is a positive JSON integer.
     if (!Number.isSafeInteger(p2c) || Math.sign(p2c) !== 1) {
         throw new JWEInvalid('PBES2 Count Input must be a positive integer');
     }
+    // RFC 7518, Section 4.8.1.1: UTF8(alg) || 0x00 || Salt Input; alg is ASCII here.
     const salt = concat(encode(alg), Uint8Array.of(0), p2s);
-    const keylen = parseInt(alg.slice(13, 16), 10);
+    const keyLengthBits = parseInt(alg.slice(13, 16), 10);
     const subtleAlg = {
         hash: `SHA-${alg.slice(8, 11)}`,
         iterations: p2c,
         name: 'PBKDF2',
-        salt,
+        salt
     };
-    const cryptoKey = await pbes2CryptoKey(key, alg);
-    return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg, cryptoKey, keylen));
+    const cryptoKey = await rawKey(key, jweAlgorithm(alg).subtle, 'deriveBits');
+    return new Uint8Array(await crypto.subtle.deriveBits(subtleAlg, cryptoKey, keyLengthBits));
 }
-// --- ecdhes ---
+// RFC 7518, Section 4.6.2: Concat KDF inputs for ECDH-ES.
 function lengthAndInput(input) {
     return concat(uint32be(input.length), input);
 }
@@ -88,12 +68,12 @@ function lengthAndInput(input) {
  * Concat KDF implementation
  *
  * @param Z - Shared secret from key-agreement scheme
- * @param L - Length of derived keying material in bits
+ * @param keyDataLength - RFC 7518 keydatalen, in bits
  * @param OtherInfo - Context and application specific data
  */
-async function concatKdf(Z, L, OtherInfo) {
-    // dkLen = L (in bits), converted to bytes for output length
-    const dkLen = L >> 3;
+async function concatKdf(Z, keyDataLength, OtherInfo) {
+    // dkLen = keyDataLength (in bits), converted to bytes for output length
+    const dkLen = keyDataLength >> 3;
     // Hash output length in bytes (SHA-256 produces 32 bytes)
     const hashLen = 32;
     // Number of hash function calls needed
@@ -106,7 +86,7 @@ async function concatKdf(Z, L, OtherInfo) {
         const hashResult = await digest('sha256', concat(uint32be(i), Z, OtherInfo));
         dk.set(hashResult, (i - 1) * hashLen);
     }
-    // Return leading L bits of dk (truncate to exact length needed)
+    // Return leading keyDataLength bits of dk (truncate to exact length needed)
     return dk.slice(0, dkLen);
 }
 /**
@@ -114,36 +94,57 @@ async function concatKdf(Z, L, OtherInfo) {
  *
  * @param publicKey
  * @param privateKey
- * @param algorithm - AlgorithmID: For Direct Key Agreement (ECDH-ES), this is the "enc" value. For
- *   Key Agreement with Key Wrapping, this is the "alg" value
- * @param keyLength - Keydatalen: Number of bits in the desired output key
- * @param apu - PartyUInfo: Agreement PartyUInfo value (information about the producer)
- * @param apv - PartyVInfo: Agreement PartyVInfo value (information about the recipient)
+ * @param algorithmId - Data for the length-prefixed AlgorithmID: For Direct Key Agreement
+ *   (ECDH-ES), this is the "enc" value. For Key Agreement with Key Wrapping, this is the "alg"
+ *   value
+ * @param keyDataLength - Keydatalen: Number of bits in the desired output key
+ * @param apu - Data for the length-prefixed PartyUInfo: Agreement PartyUInfo value (information
+ *   about the producer)
+ * @param apv - Data for the length-prefixed PartyVInfo: Agreement PartyVInfo value (information
+ *   about the recipient)
  */
-async function ecdhesDeriveKey(publicKey, privateKey, algorithm, keyLength, apu = new Uint8Array(), apv = new Uint8Array()) {
+async function ecdhesDeriveKey(publicKey, privateKey, algorithmId, keyDataLength, apu = new Uint8Array(), apv = new Uint8Array()) {
     checkEcdhCryptoKey(publicKey);
     checkEcdhCryptoKey(privateKey, 'deriveBits');
-    const otherInfo = concat(lengthAndInput(encode(algorithm)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyLength));
+    // RFC 7518, Section 4.6.2: AlgorithmID || PartyUInfo || PartyVInfo || SuppPubInfo.
+    // Each variable-length field has a 32-bit octet count; SuppPrivInfo is empty.
+    const otherInfo = concat(lengthAndInput(encode(algorithmId)), lengthAndInput(apu), lengthAndInput(apv), uint32be(keyDataLength));
     // Perform ECDH to get the shared secret Z
     const Z = new Uint8Array(await crypto.subtle.deriveBits({
         name: publicKey.algorithm.name,
-        public: publicKey,
+        public: publicKey
     }, privateKey, publicKey.algorithm.name === 'X25519'
         ? 256
         : Math.ceil(parseInt(publicKey.algorithm.namedCurve.slice(-3), 10) / 8) << 3));
     // Apply Concat KDF to derive the final key material
-    return concatKdf(Z, keyLength, otherInfo);
+    return concatKdf(Z, keyDataLength, otherInfo);
 }
 function assertEcdhKey(key) {
     assertCryptoKey(key);
     const curve = key.algorithm.namedCurve;
-    if (curve !== 'P-256' &&
-        curve !== 'P-384' &&
-        curve !== 'P-521' &&
-        key.algorithm.name !== 'X25519') {
+    if (curve !== 'P-256' && curve !== 'P-384' && curve !== 'P-521' && key.algorithm.name !== 'X25519') {
         throw new JOSENotSupported('ECDH with the provided key is not allowed or not supported by your javascript runtime');
     }
 }
+function partyInfo(joseHeader, name) {
+    const value = joseHeader[name];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string') {
+        throw new JWEInvalid(`JOSE Header "${name}" (Agreement Party${name === 'apu' ? 'U' : 'V'}Info) invalid`);
+    }
+    return decodeBase64url(value, name, JWEInvalid);
+}
+// RFC 7518, Section 4.6.2, paragraph after SuppPrivInfo: apu and apv MUST be distinct.
+function checkPartyInfo(apu, apv) {
+    if (apu === undefined || apv === undefined || apu.byteLength !== apv.byteLength)
+        return;
+    for (let i = 0; i < apu.byteLength; i++) {
+        if (apu[i] !== apv[i])
+            return;
+    }
+    throw new JWEInvalid('JOSE Header "apu" and "apv" values must be distinct');
+}
 function assertEncryptedKey(encryptedKey) {
     if (encryptedKey === undefined)
         throw new JWEInvalid('JWE Encrypted Key missing');
@@ -152,150 +153,168 @@ function assertNoEncryptedKey(encryptedKey) {
     if (encryptedKey !== undefined)
         throw new JWEInvalid('Encountered unexpected JWE Encrypted Key');
 }
-export async function decryptKeyManagement(alg, enc, key, encryptedKey, joseHeader, options) {
-    const entry = jweAlgorithm(alg);
-    if (alg === 'dir') {
+export function validateMaxPBES2Count(value) {
+    if (value !== undefined && value !== Infinity && (!Number.isSafeInteger(value) || value < 1)) {
+        throw new TypeError('maxPBES2Count must be a positive safe integer or Infinity');
+    }
+}
+export async function decryptKeyManagement(entry, enc, key, encryptedKey, joseHeader, maxPBES2Count) {
+    const { alg } = entry;
+    const mode = entry.mode;
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.2, steps 11-12; RFC 7518, Section 4.5.
+    if (mode === 'direct-encryption') {
         assertNoEncryptedKey(encryptedKey);
         return key;
     }
+    const direct = mode === 'direct-key-agreement';
+    if (direct)
+        assertNoEncryptedKey(encryptedKey);
+    else
+        assertEncryptedKey(encryptedKey);
     switch (entry.subtle.name) {
         case 'ECDH': {
-            if (alg === 'ECDH-ES')
-                assertNoEncryptedKey(encryptedKey);
-            if (!isObject(joseHeader.epk))
+            // RFC 7518, Section 4.6.1.1: epk is a JWK containing only public key parameters.
+            const { epk } = joseHeader;
+            if (!isObject(epk) ||
+                ['d', 'k', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'priv'].some((parameter) => Object.hasOwn(epk, parameter))) {
                 throw new JWEInvalid(`JOSE Header "epk" (Ephemeral Public Key) missing or invalid`);
-            assertEcdhKey(key);
-            const epk = await jwkToKey(entry, joseHeader.epk);
-            let partyUInfo;
-            let partyVInfo;
-            if (joseHeader.apu !== undefined) {
-                if (typeof joseHeader.apu !== 'string')
-                    throw new JWEInvalid(`JOSE Header "apu" (Agreement PartyUInfo) invalid`);
-                partyUInfo = decodeBase64url(joseHeader.apu, 'apu', JWEInvalid);
             }
-            if (joseHeader.apv !== undefined) {
-                if (typeof joseHeader.apv !== 'string')
-                    throw new JWEInvalid(`JOSE Header "apv" (Agreement PartyVInfo) invalid`);
-                partyVInfo = decodeBase64url(joseHeader.apv, 'apv', JWEInvalid);
-            }
-            const sharedSecret = await ecdhesDeriveKey(epk, key, alg === 'ECDH-ES' ? enc.alg : alg, alg === 'ECDH-ES' ? enc.cekBits : parseInt(alg.slice(-5, -2), 10), partyUInfo, partyVInfo);
-            if (alg === 'ECDH-ES')
-                return sharedSecret;
-            // Key Agreement with Key Wrapping
-            assertEncryptedKey(encryptedKey);
-            return aeskwUnwrap(alg.slice(-6), sharedSecret, encryptedKey);
+            assertEcdhKey(key);
+            const ephemeralPublicKey = await jwkToKey(entry, epk);
+            const partyUInfo = partyInfo(joseHeader, 'apu');
+            const partyVInfo = partyInfo(joseHeader, 'apv');
+            checkPartyInfo(partyUInfo, partyVInfo);
+            const derivedKey = await ecdhesDeriveKey(ephemeralPublicKey, key, direct ? enc.alg : alg, direct ? enc.cekBits : parseInt(alg.slice(-5, -2), 10), partyUInfo, partyVInfo);
+            if (direct)
+                return derivedKey;
+            key = derivedKey;
+            break;
         }
         case 'RSA-OAEP': {
-            assertEncryptedKey(encryptedKey);
             assertCryptoKey(key);
             checkRsaKey(alg, key, 'decrypt');
             return new Uint8Array(await crypto.subtle.decrypt('RSA-OAEP', key, encryptedKey));
         }
         case 'PBKDF2': {
-            assertEncryptedKey(encryptedKey);
             if (typeof joseHeader.p2c !== 'number')
                 throw new JWEInvalid(`JOSE Header "p2c" (PBES2 Count) missing or invalid`);
-            const p2cLimit = options?.maxPBES2Count || 10_000;
+            validateMaxPBES2Count(maxPBES2Count);
+            const p2cLimit = maxPBES2Count ?? 10_000;
             if (joseHeader.p2c > p2cLimit)
                 throw new JWEInvalid(`JOSE Header "p2c" (PBES2 Count) out is of acceptable bounds`);
             if (typeof joseHeader.p2s !== 'string')
                 throw new JWEInvalid(`JOSE Header "p2s" (PBES2 Salt) missing or invalid`);
             const p2s = decodeBase64url(joseHeader.p2s, 'p2s', JWEInvalid);
-            const derived = await deriveKey(p2s, alg, joseHeader.p2c, key);
-            return aeskwUnwrap(alg.slice(-6), derived, encryptedKey);
-        }
-        case 'AES-KW': {
-            assertEncryptedKey(encryptedKey);
-            return aeskwUnwrap(alg, key, encryptedKey);
+            key = await deriveKey(p2s, alg, joseHeader.p2c, key);
+            break;
         }
         case 'AES-GCM': {
-            assertEncryptedKey(encryptedKey);
             if (typeof joseHeader.iv !== 'string')
                 throw new JWEInvalid(`JOSE Header "iv" (Initialization Vector) missing or invalid`);
             if (typeof joseHeader.tag !== 'string')
                 throw new JWEInvalid(`JOSE Header "tag" (Authentication Tag) missing or invalid`);
-            let iv;
-            iv = decodeBase64url(joseHeader.iv, 'iv', JWEInvalid);
-            let tag;
-            tag = decodeBase64url(joseHeader.tag, 'tag', JWEInvalid);
+            // RFC 7518, Sections 4.7 and 4.7.1: 96-bit IV, 128-bit tag, empty AAD.
+            const iv = decodeBase64url(joseHeader.iv, 'iv', JWEInvalid);
+            const tag = decodeBase64url(joseHeader.tag, 'tag', JWEInvalid);
+            if (iv.byteLength !== 12)
+                throw new JWEInvalid('Invalid Initialization Vector length');
+            if (tag.byteLength !== 16)
+                throw new JWEInvalid('Invalid Authentication Tag length');
             return decrypt(jweEncryption(alg.slice(0, -2)), key, encryptedKey, iv, tag, new Uint8Array());
         }
     }
+    return aeskwUnwrap(alg.slice(-6), key, encryptedKey);
 }
-export async function encryptKeyManagement(alg, enc, key, providedCek, providedParameters = {}) {
+export async function encryptKeyManagement(entry, enc, inputKey, joseHeader, providedCek, providedParameters = {}) {
+    const { alg, mode } = entry;
+    const transport = isJWECEKTransport(entry);
+    if (providedCek !== undefined && !transport) {
+        throw new TypeError(`setContentEncryptionKey cannot be called with JWE "alg" (Algorithm) Header ${alg}`);
+    }
+    let key = await prepareKey(mode === 'direct-encryption' ? enc : entry, inputKey, 'encrypt');
+    if (mode === 'direct-encryption')
+        return [key, undefined, undefined];
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.1, step 2: generate one CEK for the content encryption algorithm.
+    const cek = transport ? (providedCek ?? generateCek(enc)) : undefined;
+    if (cek)
+        checkCekLength(cek, enc.cekBits);
     let encryptedKey;
     let parameters;
-    let cek;
-    const entry = jweAlgorithm(alg);
-    if (alg === 'dir')
-        return [key, undefined, undefined];
     switch (entry.subtle.name) {
         case 'ECDH': {
             assertEcdhKey(key);
-            const { apu, apv } = providedParameters;
-            let ephemeralKey;
-            if (providedParameters.epk) {
-                ephemeralKey = (await prepareKey(entry, providedParameters.epk, 'decrypt'));
+            const { apu: providedApu, apv: providedApv } = providedParameters;
+            if (providedApu !== undefined) {
+                assertUint8Array(providedApu, '"apu"');
+            }
+            if (providedApv !== undefined) {
+                assertUint8Array(providedApv, '"apv"');
+            }
+            const apu = providedApu ?? partyInfo(joseHeader, 'apu');
+            const apv = providedApv ?? partyInfo(joseHeader, 'apv');
+            checkPartyInfo(apu, apv);
+            let ephemeralPrivateKey;
+            if (providedParameters.epk !== undefined) {
+                ephemeralPrivateKey = (await prepareKey(entry, providedParameters.epk, 'decrypt'));
             }
             else {
-                ephemeralKey = (await crypto.subtle.generateKey(key.algorithm, true, ['deriveBits'])).privateKey;
+                // RFC 7518, Section 4.6: a new ephemeral key is required for each agreement.
+                ephemeralPrivateKey = (await crypto.subtle.generateKey(key.algorithm, true, ['deriveBits']))
+                    .privateKey;
             }
             const subtle = crypto.subtle;
-            let exportableEpk = ephemeralKey;
+            let exportableEpk = ephemeralPrivateKey;
             if (!exportableEpk.extractable) {
                 if (typeof subtle.getPublicKey !== 'function') {
                     throw new TypeError('CryptoKey for "epk" must be extractable');
                 }
-                exportableEpk = await subtle.getPublicKey(ephemeralKey, []);
+                exportableEpk = await subtle.getPublicKey(ephemeralPrivateKey, []);
             }
             const { x, y, crv, kty } = (await subtle.exportKey('jwk', exportableEpk));
-            const sharedSecret = await ecdhesDeriveKey(key, ephemeralKey, alg === 'ECDH-ES' ? enc.alg : alg, alg === 'ECDH-ES' ? enc.cekBits : parseInt(alg.slice(-5, -2), 10), apu, apv);
-            parameters = { epk: { x, crv, kty } };
+            const direct = mode === 'direct-key-agreement';
+            const derivedKey = await ecdhesDeriveKey(key, ephemeralPrivateKey, direct ? enc.alg : alg, direct ? enc.cekBits : parseInt(alg.slice(-5, -2), 10), apu, apv);
+            const epk = { x, crv, kty };
             if (kty === 'EC')
-                parameters.epk.y = y;
-            if (apu)
-                parameters.apu = b64u(apu);
-            if (apv)
-                parameters.apv = b64u(apv);
-            if (alg === 'ECDH-ES') {
-                cek = sharedSecret;
-                break;
-            }
-            // Key Agreement with Key Wrapping
-            cek = providedCek || generateCek(enc);
-            const kwAlg = alg.slice(-6);
-            encryptedKey = await aeskwWrap(kwAlg, sharedSecret, cek);
+                epk.y = y;
+            parameters = { epk };
+            if (providedApu !== undefined)
+                parameters.apu = b64u(providedApu);
+            if (providedApv !== undefined)
+                parameters.apv = b64u(providedApv);
+            if (direct)
+                return [derivedKey, undefined, parameters];
+            key = derivedKey;
             break;
         }
         case 'RSA-OAEP': {
-            cek = providedCek || generateCek(enc);
             assertCryptoKey(key);
             checkRsaKey(alg, key, 'encrypt');
             encryptedKey = new Uint8Array(await crypto.subtle.encrypt('RSA-OAEP', key, cek));
             break;
         }
         case 'PBKDF2': {
-            cek = providedCek || generateCek(enc);
+            // RFC 7518, Sections 4.8.1.1-4.8.1.2: fresh Salt Input; 1000 iterations recommended.
+            // 2048 iterations and 16 Salt Input octets are library defaults; overrides support vectors.
             const { p2c = 2048, p2s = crypto.getRandomValues(new Uint8Array(16)) } = providedParameters;
-            const derived = await deriveKey(p2s, alg, p2c, key);
-            encryptedKey = await aeskwWrap(alg.slice(-6), derived, cek);
+            key = await deriveKey(p2s, alg, p2c, key);
             parameters = { p2c, p2s: b64u(p2s) };
             break;
         }
-        case 'AES-KW': {
-            cek = providedCek || generateCek(enc);
-            encryptedKey = await aeskwWrap(alg, key, cek);
-            break;
-        }
         case 'AES-GCM': {
-            cek = providedCek || generateCek(enc);
-            const { iv } = providedParameters;
+            const iv = providedParameters.iv === undefined ? crypto.getRandomValues(new Uint8Array(12)) : providedParameters.iv;
+            if (!(iv instanceof Uint8Array)) {
+                throw new TypeError('"iv" must be an instance of Uint8Array');
+            }
+            // RFC 7518, Section 4.7: the CEK is plaintext; key-encryption AAD is empty.
             const wrapped = await encrypt(jweEncryption(alg.slice(0, -2)), cek, key, iv, new Uint8Array());
             encryptedKey = wrapped.ciphertext;
             parameters = { iv: b64u(wrapped.iv), tag: b64u(wrapped.tag) };
-            break;
         }
     }
+    encryptedKey ??= await aeskwWrap(alg.slice(-6), key, cek);
+    if (!(encryptedKey instanceof Uint8Array) || !encryptedKey.byteLength) {
+        throw new TypeError('JWE key management algorithm did not produce an Encrypted Key');
+    }
     return [cek, encryptedKey, parameters];
 }
 //# sourceMappingURL=key_management.js.map

package/dist/jose/src/lib/key_management.js.map

@@ -1 +1 @@
-{"version":3,"file":"key_management.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_management.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAIL,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEjE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACtD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAChF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAMlD,kGAAkG;AAClG,SAAS,kBAAkB,CAAC,GAAoB,EAAE,KAAgB;IAChE,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CACjB,sFAAsF,CACvF,CAAA;IACH,CAAC;IAED,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,gBAAgB;AAEhB,KAAK,UAAU,cAAc,CAAC,GAAiC,EAAE,GAAW,EAAE,KAAe;IAC3F,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IACzC,MAAM,SAAS,GACb,GAAG,YAAY,UAAU;QACvB,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAA8B,EAAE,QAAQ,EAAE,IAAI,EAAE;YACnF,KAAK;SACN,CAAC;QACJ,CAAC,CAAC,GAAG,CAAA;IACT,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC1C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,GAAiC,EACjC,GAAe;IAEf,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAE3D,+BAA+B;IAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChD,KAAK,EACL,GAA8B,EAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EACjC,IAAI,EACJ,CAAC,MAAM,CAAC,CACT,CAAA;IAED,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC9F,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,GAAiC,EACjC,YAAwB;IAExB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;IAE7D,+BAA+B;IAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChD,KAAK,EACL,YAAuC,EACvC,SAAS,EACT,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EACjC,IAAI,EACJ,CAAC,MAAM,CAAC,CACT,CAAA;IAED,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,gBAAgB;AAEhB,SAAS,WAAW,CAAC,GAAW,EAAE,GAAoB,EAAE,KAA4B;IAClF,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACpD,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;AAC9B,CAAC;AAED,kBAAkB;AAElB,SAAS,cAAc,CAAC,GAAiC,EAAE,GAAW;IACpE,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAA8B,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrF,YAAY;SACb,CAAC,CAAA;IACJ,CAAC;IAED,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IAC3D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,GAAW,EACX,GAAW,EACX,GAAiC;IAEjC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC/B,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,QAAQ;QACd,IAAI;KACL,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAEhD,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;AACrF,CAAC;AAED,iBAAiB;AAEjB,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,CAAa,EAAE,CAAS,EAAE,SAAqB;IACtE,4DAA4D;IAC5D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,0DAA0D;IAC1D,MAAM,OAAO,GAAG,EAAE,CAAA;IAClB,uCAAuC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,CAAA;IACvC,yDAAyD;IACzD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,CAAA;IAEzC,+CAA+C;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,2CAA2C;QAC3C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;QAC5E,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAA;IACvC,CAAC;IAED,gEAAgE;IAChE,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,eAAe,CAC5B,SAA0B,EAC1B,UAA2B,EAC3B,SAAiB,EACjB,SAAiB,EACjB,MAAkB,IAAI,UAAU,EAAE,EAClC,MAAkB,IAAI,UAAU,EAAE;IAElC,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAC7B,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IAE5C,MAAM,SAAS,GAAG,MAAM,CACtB,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EACjC,cAAc,CAAC,GAAG,CAAC,EACnB,cAAc,CAAC,GAAG,CAAC,EACnB,QAAQ,CAAC,SAAS,CAAC,CACpB,CAAA;IAED,0CAA0C;IAC1C,MAAM,CAAC,GAAG,IAAI,UAAU,CACtB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC5B;QACE,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI;QAC9B,MAAM,EAAE,SAAS;KAClB,EACD,UAAU,EACV,SAAS,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;QACnC,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,CAAC,IAAI,CACP,QAAQ,CAAE,SAAS,CAAC,SAA4B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAC/E,IAAI,CAAC,CACX,CACF,CAAA;IAED,oDAAoD;IACpD,OAAO,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,GAAiC;IACtD,eAAe,CAAC,GAAG,CAAC,CAAA;IACpB,MAAM,KAAK,GAAI,GAAG,CAAC,SAA4B,CAAC,UAAU,CAAA;IAC1D,IACE,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,KAAK,KAAK,OAAO;QACjB,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAC/B,CAAC;QACD,MAAM,IAAI,gBAAgB,CACxB,uFAAuF,CACxF,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,YAAoC;IAEpC,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAA;AACnF,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoC;IAChE,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAA;AAClG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW,EACX,GAAkB,EAClB,GAAiC,EACjC,YAAoC,EACpC,UAAqC,EACrC,OAA8B;IAE9B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,oBAAoB,CAAC,YAAY,CAAC,CAAA;QAElC,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,QAAQ,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,GAAG,KAAK,SAAS;gBAAE,oBAAoB,CAAC,YAAY,CAAC,CAAA;YACzD,IAAI,CAAC,QAAQ,CAAY,UAAU,CAAC,GAAG,CAAC;gBACtC,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAA;YAErF,aAAa,CAAC,GAAG,CAAC,CAAA;YAElB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAA;YACjD,IAAI,UAAuB,CAAA;YAC3B,IAAI,UAAuB,CAAA;YAE3B,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;oBACpC,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAA;gBAC1E,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;YACjE,CAAC;YAED,IAAI,UAAU,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;oBACpC,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAA;gBAC1E,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;YACjE,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,GAAG,EACH,GAAG,EACH,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACjE,UAAU,EACV,UAAU,CACX,CAAA;YAED,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,YAAY,CAAA;YAE1C,kCAAkC;YAClC,kBAAkB,CAAC,YAAY,CAAC,CAAA;YAEhC,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,kBAAkB,CAAC,YAAY,CAAC,CAAA;YAChC,eAAe,CAAC,GAAG,CAAC,CAAA;YACpB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;YAChC,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,YAAuC,CAAC,CACtF,CAAA;QACH,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,kBAAkB,CAAC,YAAY,CAAC,CAAA;YAEhC,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;gBACpC,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAA;YAE5E,MAAM,QAAQ,GAAG,OAAO,EAAE,aAAa,IAAI,MAAM,CAAA;YAEjD,IAAI,UAAU,CAAC,GAAG,GAAG,QAAQ;gBAC3B,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAA;YAErF,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;gBACpC,MAAM,IAAI,UAAU,CAAC,mDAAmD,CAAC,CAAA;YAE3E,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;YAC9D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC9D,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;QAC1D,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,kBAAkB,CAAC,YAAY,CAAC,CAAA;YAEhC,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QAC5C,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,kBAAkB,CAAC,YAAY,CAAC,CAAA;YAEhC,IAAI,OAAO,UAAU,CAAC,EAAE,KAAK,QAAQ;gBACnC,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAA;YAErF,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;gBACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAA;YAEnF,IAAI,EAAc,CAAA;YAClB,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;YACrD,IAAI,GAAe,CAAA;YACnB,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;YAExD,OAAO,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,CAAA;QAC/F,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAW,EACX,GAAkB,EAClB,GAAiC,EACjC,WAAwB,EACxB,qBAAuD,EAAE;IAQzD,IAAI,YAAoC,CAAA;IACxC,IAAI,UAA6D,CAAA;IACjE,IAAI,GAAiC,CAAA;IAErC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IAErD,QAAQ,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,aAAa,CAAC,GAAG,CAAC,CAAA;YAClB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,kBAAkB,CAAA;YACvC,IAAI,YAA6B,CAAA;YACjC,IAAI,kBAAkB,CAAC,GAAG,EAAE,CAAC;gBAC3B,YAAY,GAAG,CAAC,MAAM,UAAU,CAC9B,KAAK,EACL,kBAAkB,CAAC,GAAG,EACtB,SAAS,CACV,CAAoB,CAAA;YACvB,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,CACb,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,SAA2B,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CACvF,CAAC,UAAU,CAAA;YACd,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAsC,CAAA;YAC5D,IAAI,aAAa,GAAG,YAAY,CAAA;YAChC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;gBAC/B,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;oBAC9C,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAA;gBAChE,CAAC;gBACD,aAAa,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;YAC7D,CAAC;YACD,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAc,CAAA;YACtF,MAAM,YAAY,GAAG,MAAM,eAAe,CACxC,GAAG,EACH,YAAY,EACZ,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACjC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACjE,GAAG,EACH,GAAG,CACJ,CAAA;YACD,UAAU,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAA;YACrC,IAAI,GAAG,KAAK,IAAI;gBAAE,UAAU,CAAC,GAAI,CAAC,CAAC,GAAG,CAAC,CAAA;YACvC,IAAI,GAAG;gBAAE,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,GAAG;gBAAE,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;YAEnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,GAAG,GAAG,YAAY,CAAA;gBAClB,MAAK;YACP,CAAC;YAED,kCAAkC;YAClC,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3B,YAAY,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,CAAA;YACxD,MAAK;QACP,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;YACrC,eAAe,CAAC,GAAG,CAAC,CAAA;YACpB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;YAChC,YAAY,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAA8B,CAAC,CAC7E,CAAA;YACD,MAAK;QACP,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;YACrC,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,kBAAkB,CAAA;YAC3F,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACnD,YAAY,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;YAC3D,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;YACpC,MAAK;QACP,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;YACrC,YAAY,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YAC7C,MAAK;QACP,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,GAAG,GAAG,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;YACrC,MAAM,EAAE,EAAE,EAAE,GAAG,kBAAkB,CAAA;YACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC,CAAA;YAC9F,YAAY,GAAG,OAAO,CAAC,UAAU,CAAA;YACjC,UAAU,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC,EAAE,CAAA;YAC/D,MAAK;QACP,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;AACxC,CAAC"}
+{"version":3,"file":"key_management.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/key_management.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAIL,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,UAAU,EACV,MAAM,EACN,QAAQ,EACR,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,eAAe,EAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,iBAAiB,EAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAMxF,kGAAkG;AAClG,SAAS,kBAAkB,CAAC,GAAoB,EAAE,KAAgB;IAChE,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,sFAAsF,CAAC,CAAC;IAC9G,CAAC;IAED,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,yFAAyF;AAEzF,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAAiC,EAAE,GAAe;IACtF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAE/E,8EAA8E;IAC9E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChD,KAAK,EACL,GAA8B,EAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EACjC,IAAI,EACJ,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,GAAiC,EACjC,YAAwB;IAExB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAEjF,8EAA8E;IAC9E,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChD,KAAK,EACL,YAAuC,EACvC,SAAS,EACT,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EACjC,IAAI,EACJ,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,yEAAyE;AAEzE,SAAS,WAAW,CAAC,GAAW,EAAE,GAAoB,EAAE,KAA4B;IAClF,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrD,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,uFAAuF;AAEvF,KAAK,UAAU,SAAS,CAAC,GAAe,EAAE,GAAW,EAAE,GAAW,EAAE,GAAiC;IACnG,uEAAuE;IACvE,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;IACpE,CAAC;IACD,qEAAqE;IACrE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;IACvE,CAAC;IAED,iFAAiF;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC/B,UAAU,EAAE,GAAG;QACf,IAAI,EAAE,QAAQ;QACd,IAAI;KACL,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAE5E,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,0DAA0D;AAE1D,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,SAAS,CAAC,CAAa,EAAE,aAAqB,EAAE,SAAqB;IAClF,wEAAwE;IACxE,MAAM,KAAK,GAAG,aAAa,IAAI,CAAC,CAAC;IACjC,0DAA0D;IAC1D,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,uCAAuC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;IACxC,yDAAyD;IACzD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,CAAC;IAE1C,+CAA+C;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,2CAA2C;QAC3C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7E,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,eAAe,CAC5B,SAA0B,EAC1B,UAA2B,EAC3B,WAAmB,EACnB,aAAqB,EACrB,MAAkB,IAAI,UAAU,EAAE,EAClC,MAAkB,IAAI,UAAU,EAAE;IAElC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC9B,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAE7C,mFAAmF;IACnF,8EAA8E;IAC9E,MAAM,SAAS,GAAG,MAAM,CACtB,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EACnC,cAAc,CAAC,GAAG,CAAC,EACnB,cAAc,CAAC,GAAG,CAAC,EACnB,QAAQ,CAAC,aAAa,CAAC,CACxB,CAAC;IAEF,0CAA0C;IAC1C,MAAM,CAAC,GAAG,IAAI,UAAU,CACtB,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC5B;QACE,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI;QAC9B,MAAM,EAAE,SAAS;KAClB,EACD,UAAU,EACV,SAAS,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ;QACnC,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAE,SAAS,CAAC,SAA4B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CACnG,CACF,CAAC;IAEF,oDAAoD;IACpD,OAAO,SAAS,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,GAAiC;IACtD,eAAe,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,KAAK,GAAI,GAAG,CAAC,SAA4B,CAAC,UAAU,CAAC;IAC3D,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnG,MAAM,IAAI,gBAAgB,CAAC,uFAAuF,CAAC,CAAC;IACtH,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,UAAqC,EAAE,IAAmB;IAC3E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAAC,gBAAgB,IAAI,qBAAqB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,uFAAuF;AACvF,SAAS,cAAc,CAAC,GAA2B,EAAE,GAA2B;IAC9E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QAAE,OAAO;IACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;IAChC,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoC;IAC9D,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoC;IAChE,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,0CAA0C,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA+B,EAC/B,GAAkB,EAClB,GAAiC,EACjC,YAAoC,EACpC,UAAqC,EACrC,aAAsB;IAEtB,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,oFAAoF;IACpF,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,KAAK,sBAAsB,CAAC;IAC/C,IAAI,MAAM;QAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;;QAC1C,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAEtC,QAAQ,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,iFAAiF;YACjF,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAAC;YAC3B,IACE,CAAC,QAAQ,CAAY,GAAG,CAAC;gBACzB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,EACxG,CAAC;gBACD,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;YACtF,CAAC;YAED,aAAa,CAAC,GAAG,CAAC,CAAC;YAEnB,MAAM,kBAAkB,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAChD,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAChD,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAEvC,MAAM,UAAU,GAAG,MAAM,eAAe,CACtC,kBAAkB,EAClB,GAAG,EACH,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACtB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACtD,UAAU,EACV,UAAU,CACX,CAAC;YAEF,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC;YAE9B,GAAG,GAAG,UAAU,CAAC;YACjB,MAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,eAAe,CAAC,GAAG,CAAC,CAAC;YACrB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACjC,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,YAAuC,CAAC,CAAC,CAAC;QAC/G,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;gBACpC,MAAM,IAAI,UAAU,CAAC,oDAAoD,CAAC,CAAC;YAE7E,qBAAqB,CAAC,aAAa,CAAC,CAAC;YAErC,MAAM,QAAQ,GAAG,aAAa,IAAI,MAAM,CAAC;YAEzC,IAAI,UAAU,CAAC,GAAG,GAAG,QAAQ;gBAC3B,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;YAEtF,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;gBAAE,MAAM,IAAI,UAAU,CAAC,mDAAmD,CAAC,CAAC;YAElH,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAC/D,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,UAAU,CAAC,EAAE,KAAK,QAAQ;gBACnC,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;YAEtF,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ;gBACpC,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAC;YAEpF,uEAAuE;YACvE,MAAM,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YAE/D,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;YACvF,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;YAErF,OAAO,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAa,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAa,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA+B,EAC/B,GAAkB,EAClB,QAAwB,EACxB,UAAqC,EACrC,WAAwB,EACxB,qBAAuD,EAAE;IAIzD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CAAC,8EAA8E,GAAG,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5F,IAAI,IAAI,KAAK,mBAAmB;QAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAErE,+GAA+G;IAC/G,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,GAAG;QAAE,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,YAAoC,CAAC;IACzC,IAAI,UAA2C,CAAC;IAChD,QAAQ,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;YAClE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,MAAM,GAAG,GAAG,WAAW,IAAI,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACxD,MAAM,GAAG,GAAG,WAAW,IAAI,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACxD,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzB,IAAI,mBAAoC,CAAC;YACzC,IAAI,kBAAkB,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACzC,mBAAmB,GAAG,CAAC,MAAM,UAAU,CAAC,KAAK,EAAE,kBAAkB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAoB,CAAC;YACxG,CAAC;iBAAM,CAAC;gBACN,6EAA6E;gBAC7E,mBAAmB,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,SAA2B,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;qBAC3G,UAAU,CAAC;YAChB,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAsC,CAAC;YAC7D,IAAI,aAAa,GAAG,mBAAmB,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;gBAC/B,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;oBAC9C,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBACjE,CAAC;gBACD,aAAa,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAc,CAAC;YACvF,MAAM,MAAM,GAAG,IAAI,KAAK,sBAAsB,CAAC;YAC/C,MAAM,UAAU,GAAG,MAAM,eAAe,CACtC,GAAG,EACH,mBAAmB,EACnB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EACtB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACtD,GAAG,EACH,GAAG,CACJ,CAAC;YACF,MAAM,GAAG,GAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YACjC,IAAI,GAAG,KAAK,IAAI;gBAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5B,UAAU,GAAG,EAAE,GAAG,EAAE,CAAC;YACrB,IAAI,WAAW,KAAK,SAAS;gBAAE,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;YAClE,IAAI,WAAW,KAAK,SAAS;gBAAE,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;YAElE,IAAI,MAAM;gBAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAEvD,GAAG,GAAG,UAAU,CAAC;YACjB,MAAM;QACR,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,eAAe,CAAC,GAAG,CAAC,CAAC;YACrB,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YACjC,YAAY,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAA8B,CAAC,CAAC,CAAC;YAC5G,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,qFAAqF;YACrF,4FAA4F;YAC5F,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,kBAAkB,CAAC;YAC5F,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,GACN,kBAAkB,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3G,IAAI,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;YAChE,CAAC;YACD,4EAA4E;YAC5E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAI,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,UAAU,EAAE,CAAC,CAAC;YAChG,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;YAClC,UAAU,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IACD,YAAY,KAAK,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,YAAY,YAAY,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QACtE,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,CAAC,GAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC"}

package/dist/jose/src/lib/validate.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Original library: jose (v6.2.15)
+ * - Copyright (c) 2018 Filip Skokan
+ *
+ * Modified and integrated in "Inray":
+ * - Evgeniy Bushin
+ */
+/***/
+import type * as types from '../types.d.ts';
+import { JWEInvalid, JWSInvalid } from '../util/errors.js';
+export declare function assertUint8Array(input: unknown, label: string): asserts input is Uint8Array;
+export declare function isObject<T = object>(input: unknown): input is T;
+export declare function isJwkSet(input: unknown): input is types.JSONWebKeySet;
+export declare function isDisjoint(...headers: Array<object | undefined>): boolean;
+export declare function assertNotSet(value: unknown, name: string): void;
+export declare function decodeBase64url(value: string, label: string, ErrorClass: new (message: string, options?: {
+    cause?: unknown;
+}) => Error): Uint8Array;
+/**
+ * Encodes the ASCII octets of a token member that is used as-is when recomputing the JWS Signing
+ * Input or the Additional Authenticated Data encryption parameter for a JWE, rather than being
+ * base64url decoded first.
+ */
+export declare function encodeAsciiMember(value: string, label: string, ErrorClass: new (message: string, options?: {
+    cause?: unknown;
+}) => Error): Uint8Array;
+/** Base64url decode, UTF-8 decode, JSON parse, and require a JSON object - in one place. */
+export declare function parseJoseHeader<T>(encodedProtectedHeader: string, ErrorClass: new (message: string, options?: {
+    cause?: unknown;
+}) => Error, message: string): T;
+interface CritCheckHeader {
+    b64?: boolean;
+    crit?: string[];
+    [propName: string]: unknown;
+}
+/** Extension Header Parameters a JWS implementation recognizes without being asked to. */
+export declare const JWS_RECOGNIZED: Record<string, boolean>;
+/** JWE defines no Extension Header Parameters that are recognized by default. */
+export declare const JWE_RECOGNIZED: Record<string, boolean>;
+export declare function validateAlgorithms(option: string, algorithms?: string[]): Set<string> | undefined;
+/**
+ * RFC 7515 Section 4.1.11 forbids producers from listing duplicate names in "crit". A recipient
+ * only MAY consider such a header invalid, so this is enforced when producing and not when
+ * consuming.
+ */
+export declare function validateCritDuplicates(Err: typeof JWEInvalid | typeof JWSInvalid, protectedHeader: CritCheckHeader | undefined): void;
+export declare function validateCrit(Err: typeof JWEInvalid | typeof JWSInvalid, recognizedDefault: Record<string, boolean>, recognizedOption: {
+    [propName: string]: boolean;
+} | undefined, protectedHeader: CritCheckHeader | undefined, joseHeader: CritCheckHeader): string[];
+export declare function validateB64(protectedHeader: CritCheckHeader | undefined, extensions: string[]): boolean;
+export declare function serializeJoseHeader<T extends CritCheckHeader>(Err: typeof JWEInvalid | typeof JWSInvalid, header: T): [header: T, serialized: string];
+export {};
+//# sourceMappingURL=validate.d.ts.map

package/dist/jose/src/lib/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/lib/validate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAoB,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAI7E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAI3F;AAED,wBAAgB,QAAQ,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,CAAC,CAM/D;AAGD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,KAAK,CAAC,aAAa,CAErE;AAED,wBAAgB,UAAU,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAazE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAI/D;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,KAAK,GACxE,UAAU,CAMZ;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,KAAK,GACxE,UAAU,CAMZ;AAED,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,CAAC,EAC/B,sBAAsB,EAAE,MAAM,EAC9B,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,KAAK,KAAK,EACzE,OAAO,EAAE,MAAM,GACd,CAAC,CAWH;AAED,UAAU,eAAe;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,0FAA0F;AAC1F,eAAO,MAAM,cAAc,EAAgD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEnG,iFAAiF;AACjF,eAAO,MAAM,cAAc,EAAqC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAExF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAMjG;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,UAAU,GAAG,OAAO,UAAU,EAC1C,eAAe,EAAE,eAAe,GAAG,SAAS,GAC3C,IAAI,CAKN;AAID,wBAAgB,YAAY,CAC1B,GAAG,EAAE,OAAO,UAAU,GAAG,OAAO,UAAU,EAC1C,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1C,gBAAgB,EAAE;IAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,SAAS,EAC7D,eAAe,EAAE,eAAe,GAAG,SAAS,EAC5C,UAAU,EAAE,eAAe,GAC1B,MAAM,EAAE,CAuCV;AAID,wBAAgB,WAAW,CAAC,eAAe,EAAE,eAAe,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAUvG;AAED,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,eAAe,EAC3D,GAAG,EAAE,OAAO,UAAU,GAAG,OAAO,UAAU,EAC1C,MAAM,EAAE,CAAC,GACR,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAejC"}