inray 0.0.9 → 0.0.10

package/dist/jose/src/lib/validate.js

@@ -0,0 +1,161 @@
+/**
+ * Original library: jose (v6.2.15)
+ * - Copyright (c) 2018 Filip Skokan
+ *
+ * Modified and integrated in "Inray":
+ * - Evgeniy Bushin
+ */
+/***/
+import { JOSENotSupported, JWEInvalid, JWSInvalid } from '../util/errors.js';
+import { decode } from '../util/base64url.js';
+import { encode, strictDecoder } from './buffer_utils.js';
+export function assertUint8Array(input, label) {
+    if (!(input instanceof Uint8Array)) {
+        throw new TypeError(`${label} must be an instance of Uint8Array`);
+    }
+}
+export function isObject(input) {
+    if (typeof input !== 'object' || input === null || Object.prototype.toString.call(input) !== '[object Object]') {
+        return false;
+    }
+    const prototype = Object.getPrototypeOf(input);
+    return prototype === null || Object.getPrototypeOf(prototype) === null;
+}
+// RFC 7517, Section 5: a JWK Set is an object whose "keys" member is an array of JWKs.
+export function isJwkSet(input) {
+    return isObject(input) && Array.isArray(input.keys) && Array.from(input.keys).every(isObject);
+}
+export function isDisjoint(...headers) {
+    const parameters = new Set();
+    for (const header of headers) {
+        if (!header)
+            continue;
+        for (const parameter of Object.keys(header)) {
+            if (parameters.has(parameter)) {
+                return false;
+            }
+            parameters.add(parameter);
+        }
+    }
+    return true;
+}
+export function assertNotSet(value, name) {
+    if (value !== undefined) {
+        throw new TypeError(`${name} can only be called once`);
+    }
+}
+export function decodeBase64url(value, label, ErrorClass) {
+    try {
+        return decode(value);
+    }
+    catch (cause) {
+        throw new ErrorClass(`Failed to base64url decode the ${label}`, { cause });
+    }
+}
+/**
+ * Encodes the ASCII octets of a token member that is used as-is when recomputing the JWS Signing
+ * Input or the Additional Authenticated Data encryption parameter for a JWE, rather than being
+ * base64url decoded first.
+ */
+export function encodeAsciiMember(value, label, ErrorClass) {
+    try {
+        return encode(value);
+    }
+    catch (cause) {
+        throw new ErrorClass(`The ${label} is not a valid base64url string`, { cause });
+    }
+}
+/** Base64url decode, UTF-8 decode, JSON parse, and require a JSON object - in one place. */
+export function parseJoseHeader(encodedProtectedHeader, ErrorClass, message) {
+    let parsed;
+    try {
+        parsed = JSON.parse(strictDecoder.decode(decode(encodedProtectedHeader)));
+    }
+    catch (cause) {
+        throw new ErrorClass(message, { cause });
+    }
+    if (!isObject(parsed)) {
+        throw new ErrorClass(message);
+    }
+    return parsed;
+}
+/** Extension Header Parameters a JWS implementation recognizes without being asked to. */
+export const JWS_RECOGNIZED = { __proto__: null, b64: true };
+/** JWE defines no Extension Header Parameters that are recognized by default. */
+export const JWE_RECOGNIZED = { __proto__: null };
+export function validateAlgorithms(option, algorithms) {
+    if (algorithms !== undefined && (!Array.isArray(algorithms) || algorithms.some((s) => typeof s !== 'string'))) {
+        throw new TypeError(`"${option}" option must be an array of strings`);
+    }
+    return algorithms === undefined ? undefined : new Set(algorithms);
+}
+/**
+ * RFC 7515 Section 4.1.11 forbids producers from listing duplicate names in "crit". A recipient
+ * only MAY consider such a header invalid, so this is enforced when producing and not when
+ * consuming.
+ */
+export function validateCritDuplicates(Err, protectedHeader) {
+    const { crit } = protectedHeader ?? {};
+    if (Array.isArray(crit) && new Set(crit).size !== crit.length) {
+        throw new Err('"crit" (Critical) Header Parameter MUST NOT contain duplicate values');
+    }
+}
+// RFC 7515, Section 4.1.11; RFC 7516, Section 4.1.13: protected, nonempty crit,
+// understood extensions, and presence of each listed Header Parameter.
+export function validateCrit(Err, recognizedDefault, recognizedOption, protectedHeader, joseHeader) {
+    if (joseHeader.crit !== undefined && protectedHeader?.crit === undefined) {
+        throw new Err('"crit" (Critical) Header Parameter MUST be integrity protected');
+    }
+    if (!protectedHeader || protectedHeader.crit === undefined) {
+        return [];
+    }
+    if (!Array.isArray(protectedHeader.crit) ||
+        protectedHeader.crit.length === 0 ||
+        protectedHeader.crit.some((input) => typeof input !== 'string' || input.length === 0)) {
+        throw new Err('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
+    }
+    const recognized = recognizedOption === undefined
+        ? recognizedDefault
+        : { __proto__: null, ...recognizedOption, ...recognizedDefault };
+    for (const parameter of protectedHeader.crit) {
+        if (!(parameter in recognized)) {
+            throw new JOSENotSupported(`Extension Header Parameter "${parameter}" is not recognized`);
+        }
+        if (!Object.hasOwn(joseHeader, parameter) || joseHeader[parameter] === undefined) {
+            throw new Err(`Extension Header Parameter "${parameter}" is missing`);
+        }
+        if (recognized[parameter] &&
+            (!Object.hasOwn(protectedHeader, parameter) || protectedHeader[parameter] === undefined)) {
+            throw new Err(`Extension Header Parameter "${parameter}" MUST be integrity protected`);
+        }
+    }
+    return protectedHeader.crit;
+}
+// RFC 7797, Sections 3 and 6: b64 defaults to true; an explicit value is protected
+// and listed in crit. Recognition of an extension does not validate its application semantics.
+export function validateB64(protectedHeader, extensions) {
+    if (extensions.includes('b64')) {
+        const b64 = protectedHeader.b64;
+        if (typeof b64 !== 'boolean') {
+            throw new JWSInvalid('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+        }
+        return b64;
+    }
+    return true;
+}
+export function serializeJoseHeader(Err, header) {
+    let serialized;
+    let parsed;
+    try {
+        serialized = JSON.stringify(header);
+        parsed = JSON.parse(serialized);
+    }
+    catch (cause) {
+        throw new Err('JOSE Header is not valid JSON', { cause });
+    }
+    if (!isObject(parsed)) {
+        throw new Err('JOSE Header is not a JSON object');
+    }
+    return [parsed, serialized];
+}
+//# sourceMappingURL=validate.js.map

package/dist/jose/src/lib/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../../src/jose/src/lib/validate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAGL,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,KAAa;IAC5D,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAa,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,iBAAiB,EAAE,CAAC;QAC/G,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;AACzE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAsB,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAG,OAAkC;IAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,IAAY;IACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,KAAa,EACb,UAAyE;IAEzE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,kCAAkC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,KAAa,EACb,UAAyE;IAEzE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,OAAO,KAAK,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAC7B,sBAA8B,EAC9B,UAAyE,EACzE,OAAe;IAEf,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,MAAW,CAAC;AACrB,CAAC;AAQD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAwC,CAAC;AAEnG,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,SAAS,EAAE,IAAI,EAAwC,CAAC;AAExF,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,UAAqB;IACtE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAI,SAAS,CAAC,IAAI,MAAM,sCAAsC,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAA0C,EAC1C,eAA4C;IAE5C,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,IAAI,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,sEAAsE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAC1B,GAA0C,EAC1C,iBAA0C,EAC1C,gBAA6D,EAC7D,eAA4C,EAC5C,UAA2B;IAE3B,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,eAAe,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC;QACpC,eAAe,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACjC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAC7F,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,UAAU,GACd,gBAAgB,KAAK,SAAS;QAC5B,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAE,GAAG,iBAAiB,EAAyC,CAAC;IAE7G,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,gBAAgB,CAAC,+BAA+B,SAAS,qBAAqB,CAAC,CAAC;QAC5F,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,SAAS,EAAE,CAAC;YACjF,MAAM,IAAI,GAAG,CAAC,+BAA+B,SAAS,cAAc,CAAC,CAAC;QACxE,CAAC;QACD,IACE,UAAU,CAAC,SAAS,CAAC;YACrB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,EACxF,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,+BAA+B,SAAS,+BAA+B,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,mFAAmF;AACnF,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAAC,eAA4C,EAAE,UAAoB;IAC5F,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,eAAgB,CAAC,GAAG,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,yEAAyE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAA0C,EAC1C,MAAS;IAET,IAAI,UAAkB,CAAC;IACvB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAE,CAAC;QACrC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,QAAQ,CAAI,MAAM,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC9B,CAAC"}

package/dist/jose/src/util/base64url.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,7 +7,7 @@
  */
 /***/
 /**
- * Decodes a Base64URL encoded input.
+ * Decodes base64url text or its UTF-8 bytes.
  *
  * These functions are exported (as the `base64url` namespace) from the main `'jose'` module entry
  * point as well as from its subpath export `'jose/base64url'`.
@@ -18,16 +18,16 @@
  * const decoded = jose.base64url.decode('SGVsbG8gV29ybGQh')
  * ```
  *
- * @param input Base64URL encoded input, as a string or its UTF-8 bytes.
+ * @param input Base64url-encoded string or its UTF-8 bytes.
  *
  * @returns The decoded bytes.
  *
- * @throws {!TypeError} When the input is not correctly Base64URL encoded. Standard Base64 input
- *   (i.e. containing `+` or `/`) is rejected.
+ * @throws {TypeError} If the input is not valid base64url. Standard Base64 `+` and `/` are
+ *   rejected.
  */
 export declare function decode(input: Uint8Array | string): Uint8Array;
 /**
- * Encodes an input using Base64URL with no padding.
+ * Encodes unpadded base64url; strings are first encoded as UTF-8.
  *
  * These functions are exported (as the `base64url` namespace) from the main `'jose'` module entry
  * point as well as from its subpath export `'jose/base64url'`.
@@ -38,9 +38,9 @@ export declare function decode(input: Uint8Array | string): Uint8Array;
  * const encoded = jose.base64url.encode('Hello World!')
  * ```
  *
- * @param input Input to encode, as a string or as bytes. Strings are encoded as UTF-8 first.
+ * @param input Bytes or a string to encode. Strings are first encoded as UTF-8.
  *
- * @returns The Base64URL encoded, unpadded, representation of the input.
+ * @returns The unpadded base64url representation of the input.
  */
 export declare function encode(input: Uint8Array | string): string;
 //# sourceMappingURL=base64url.d.ts.map

package/dist/jose/src/util/base64url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base64url.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/util/base64url.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAaL;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CA2B7D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAazD"}
+{"version":3,"file":"base64url.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/util/base64url.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAeL;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAM7D;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAEzD"}

package/dist/jose/src/util/base64url.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,15 +7,17 @@
  */
 /***/
 /**
- * Base64URL encoding and decoding utilities
+ * Base64url encoding and decoding utilities
  *
  * @module
+ *
+ * @see {@link https://www.rfc-editor.org/info/rfc4648/#section-5 RFC 4648, Section 5}
+ * @see {@link https://www.rfc-editor.org/info/rfc7515/#section-2 RFC 7515, Section 2: unpadded base64url}
  */
-import { encoder, decoder } from '../lib/buffer_utils.js';
-import { encodeBase64, decodeBase64 } from '../lib/base64.js';
+import { encoder, decoder, encodeBase64, decodeBase64 } from '../lib/buffer_utils.js';
 const invalid = 'The input to be decoded is not correctly encoded.';
 /**
- * Decodes a Base64URL encoded input.
+ * Decodes base64url text or its UTF-8 bytes.
  *
  * These functions are exported (as the `base64url` namespace) from the main `'jose'` module entry
  * point as well as from its subpath export `'jose/base64url'`.
@@ -26,44 +28,23 @@ const invalid = 'The input to be decoded is not correctly encoded.';
  * const decoded = jose.base64url.decode('SGVsbG8gV29ybGQh')
  * ```
  *
- * @param input Base64URL encoded input, as a string or its UTF-8 bytes.
+ * @param input Base64url-encoded string or its UTF-8 bytes.
  *
  * @returns The decoded bytes.
  *
- * @throws {!TypeError} When the input is not correctly Base64URL encoded. Standard Base64 input
- *   (i.e. containing `+` or `/`) is rejected.
+ * @throws {TypeError} If the input is not valid base64url. Standard Base64 `+` and `/` are
+ *   rejected.
  */
 export function decode(input) {
-    // @ts-ignore
-    if (Uint8Array.fromBase64) {
-        try {
-            // @ts-ignore
-            return Uint8Array.fromBase64(typeof input === 'string' ? input : decoder.decode(input), {
-                alphabet: 'base64url',
-            });
-        }
-        catch (cause) {
-            throw new TypeError(invalid, { cause });
-        }
-    }
-    let encoded = input;
-    if (encoded instanceof Uint8Array) {
-        encoded = decoder.decode(encoded);
-    }
-    // Aligns the fallback path with the Uint8Array base64 methods.
-    if (encoded.includes('+') || encoded.includes('/')) {
-        throw new TypeError(invalid);
-    }
-    encoded = encoded.replace(/-/g, '+').replace(/_/g, '/');
     try {
-        return decodeBase64(encoded);
+        return decodeBase64(typeof input === 'string' ? input : decoder.decode(input), true);
     }
-    catch {
-        throw new TypeError(invalid);
+    catch (cause) {
+        throw new TypeError(invalid, { cause });
     }
 }
 /**
- * Encodes an input using Base64URL with no padding.
+ * Encodes unpadded base64url; strings are first encoded as UTF-8.
  *
  * These functions are exported (as the `base64url` namespace) from the main `'jose'` module entry
  * point as well as from its subpath export `'jose/base64url'`.
@@ -74,20 +55,11 @@ export function decode(input) {
  * const encoded = jose.base64url.encode('Hello World!')
  * ```
  *
- * @param input Input to encode, as a string or as bytes. Strings are encoded as UTF-8 first.
+ * @param input Bytes or a string to encode. Strings are first encoded as UTF-8.
  *
- * @returns The Base64URL encoded, unpadded, representation of the input.
+ * @returns The unpadded base64url representation of the input.
  */
 export function encode(input) {
-    let unencoded = input;
-    if (typeof unencoded === 'string') {
-        unencoded = encoder.encode(unencoded);
-    }
-    // @ts-ignore
-    if (Uint8Array.prototype.toBase64) {
-        // @ts-ignore
-        return unencoded.toBase64({ alphabet: 'base64url', omitPadding: true });
-    }
-    return encodeBase64(unencoded).replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+    return encodeBase64(typeof input === 'string' ? encoder.encode(input) : input, true);
 }
 //# sourceMappingURL=base64url.js.map

package/dist/jose/src/util/base64url.js.map

@@ -1 +1 @@
-{"version":3,"file":"base64url.js","sourceRoot":"","sources":["../../../../src/jose/src/util/base64url.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE7D,MAAM,OAAO,GAAG,mDAAmD,CAAA;AAEnE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,MAAM,CAAC,KAA0B;IAC/C,aAAa;IACb,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa;YACb,OAAO,UAAU,CAAC,UAAU,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACtF,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,OAAO,YAAY,UAAU,EAAE,CAAC;QAClC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACnC,CAAC;IACD,+DAA+D;IAC/D,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACvD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,MAAM,CAAC,KAA0B;IAC/C,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,aAAa;IACb,IAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAClC,aAAa;QACb,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AAC1F,CAAC"}
+{"version":3,"file":"base64url.js","sourceRoot":"","sources":["../../../../src/jose/src/util/base64url.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtF,MAAM,OAAO,GAAG,mDAAmD,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,MAAM,CAAC,KAA0B;IAC/C,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,MAAM,CAAC,KAA0B;IAC/C,OAAO,YAAY,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC"}

package/dist/jose/src/util/decode_jwt.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,11 +7,14 @@
  */
 /***/
 import type * as types from '../types.d.ts';
+/** @ignore */
+export declare function decodeJwt<PayloadType, InferredPayloadType>(jwt: string): InferredPayloadType & types.JWTPayload & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never);
 /**
- * Decodes a signed JSON Web Token payload. This does not validate the JWT Claims Set types or
- * values. This does not validate the JWS Signature. For a proper Signed JWT Claims Set validation
- * and JWS signature verification use `jose.jwtVerify()`. For an encrypted JWT Claims Set validation
- * and JWE decryption use `jose.jwtDecrypt()`.
+ * Decodes the Claims Set of a JWT in JWS Compact Serialization without validating its JWS Signature
+ * (digital signature or MAC) or claim types and values.
+ *
+ * Use {@link "jwt/verify".jwtVerify jwtVerify} to verify signed JWTs or
+ * {@link "jwt/decrypt".jwtDecrypt jwtDecrypt} to decrypt and validate encrypted JWTs.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/jwt/decode'`.
@@ -25,7 +28,9 @@ import type * as types from '../types.d.ts';
  *
  * @typeParam PayloadType Type definition of the JWT Claims Set the token is expected to carry.
  *
- * @param jwt JWT token in compact JWS serialization.
+ * @param jwt JWT token in JWS Compact Serialization.
+ *
+ * @returns The parsed JWT Claims Set.
  */
 export declare function decodeJwt<PayloadType = types.JWTPayload>(jwt: string): PayloadType & types.JWTPayload & ([PayloadType] extends [object] ? unknown : unknown extends PayloadType ? unknown : never);
 //# sourceMappingURL=decode_jwt.d.ts.map

package/dist/jose/src/util/decode_jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decode_jwt.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_jwt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAWL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAA;AAG3C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,SAAS,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,EACtD,GAAG,EAAE,MAAM,GACV,WAAW,GACZ,KAAK,CAAC,UAAU,GAChB,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,GAAG,OAAO,SAAS,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC,CA6B3F"}
+{"version":3,"file":"decode_jwt.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_jwt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAYL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAI5C,cAAc;AACd,wBAAgB,SAAS,CAAC,WAAW,EAAE,mBAAmB,EACxD,GAAG,EAAE,MAAM,GACV,mBAAmB,GACpB,KAAK,CAAC,UAAU,GAChB,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,GAAG,OAAO,SAAS,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC;AAE7F;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,SAAS,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,EACtD,GAAG,EAAE,MAAM,GACV,WAAW,GACZ,KAAK,CAAC,UAAU,GAChB,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,OAAO,GAAG,OAAO,SAAS,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC"}

package/dist/jose/src/util/decode_jwt.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,60 +7,41 @@
  */
 /***/
 /**
- * JSON Web Token (JWT) Claims Set Decoding (no validation, no signature checking)
+ * JSON Web Token (JWT) Claims Set Decoding (no signature, MAC, or claims validation)
  *
  * @module
  */
 import { decode as b64u } from './base64url.js';
 import { strictDecoder } from '../lib/buffer_utils.js';
-import { isObject } from '../lib/type_checks.js';
+import { isObject } from '../lib/validate.js';
 import { JWTInvalid } from './errors.js';
-/**
- * Decodes a signed JSON Web Token payload. This does not validate the JWT Claims Set types or
- * values. This does not validate the JWS Signature. For a proper Signed JWT Claims Set validation
- * and JWS signature verification use `jose.jwtVerify()`. For an encrypted JWT Claims Set validation
- * and JWE decryption use `jose.jwtDecrypt()`.
- *
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
- * as from its subpath export `'jose/jwt/decode'`.
- *
- * @example
- *
- * ```js
- * const claims = jose.decodeJwt(token)
- * console.log(claims)
- * ```
- *
- * @typeParam PayloadType Type definition of the JWT Claims Set the token is expected to carry.
- *
- * @param jwt JWT token in compact JWS serialization.
- */
 export function decodeJwt(jwt) {
     if (typeof jwt !== 'string')
         throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');
-    const { 1: payload, length } = jwt.split('.');
+    const { 1: encodedPayload, length } = jwt.split('.');
     if (length === 5)
         throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');
     if (length !== 3)
         throw new JWTInvalid('Invalid JWT');
-    if (!payload)
+    if (!encodedPayload)
         throw new JWTInvalid('JWTs must contain a payload');
-    let decoded;
+    let claimsSetBytes;
     try {
-        decoded = b64u(payload);
+        claimsSetBytes = b64u(encodedPayload);
     }
-    catch {
-        throw new JWTInvalid('Failed to base64url decode the payload');
+    catch (cause) {
+        throw new JWTInvalid('Failed to base64url decode the payload', { cause });
     }
-    let result;
+    // RFC 7519, Section 7.2, step 10 only: UTF-8 and JSON Claims Set parsing.
+    let claimsSet;
     try {
-        result = JSON.parse(strictDecoder.decode(decoded));
+        claimsSet = JSON.parse(strictDecoder.decode(claimsSetBytes));
     }
-    catch {
-        throw new JWTInvalid('Failed to parse the decoded payload as JSON');
+    catch (cause) {
+        throw new JWTInvalid('Failed to parse the decoded payload as JSON', { cause });
     }
-    if (!isObject(result))
+    if (!isObject(claimsSet))
         throw new JWTInvalid('Invalid JWT Claims Set');
-    return result;
+    return claimsSet;
 }
 //# sourceMappingURL=decode_jwt.js.map

package/dist/jose/src/util/decode_jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"decode_jwt.js","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_jwt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,SAAS,CACvB,GAAW;IAIX,IAAI,OAAO,GAAG,KAAK,QAAQ;QACzB,MAAM,IAAI,UAAU,CAAC,+DAA+D,CAAC,CAAA;IAEvF,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAE7C,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAA;IAClG,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,CAAC,CAAA;IACrD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAA;IAEjE,IAAI,OAAmB,CAAA;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAA;IACrE,CAAC;IAED,IAAI,CAAC,QAAQ,CAAmB,MAAM,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAA;IAEvF,OAAO,MAEqF,CAAA;AAC9F,CAAC"}
+{"version":3,"file":"decode_jwt.js","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_jwt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwCzC,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,+DAA+D,CAAC,CAAC;IAEnH,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAErD,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAC;IACnG,IAAI,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;IAEzE,IAAI,cAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,0EAA0E;IAC1E,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,UAAU,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,QAAQ,CAAmB,SAAS,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAE3F,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/jose/src/util/decode_protected_header.d.ts

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,10 +7,10 @@
  */
 /***/
 import type * as types from '../types.d.ts';
-/** JWE and JWS Header Parameters */
+/** JWE and JWS Header Parameters returned by {@link decodeProtectedHeader}. */
 export type ProtectedHeaderParameters = types.JWSHeaderParameters & types.JWEHeaderParameters;
 /**
- * Decodes the Protected Header of a JWE/JWS/JWT token utilizing any JOSE serialization.
+ * Decodes the Protected Header of a JWE, JWS, or JWT without authenticating the token.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/decode/protected_header'`.
@@ -22,7 +22,9 @@ export type ProtectedHeaderParameters = types.JWSHeaderParameters & types.JWEHea
  * console.log(protectedHeader)
  * ```
  *
- * @param token JWE/JWS/JWT token in any JOSE serialization.
+ * @param token Compact token or JSON serialization object with a `protected` member.
+ *
+ * @returns The parsed Protected Header.
  */
 export declare function decodeProtectedHeader(token: string | object): ProtectedHeaderParameters;
 //# sourceMappingURL=decode_protected_header.d.ts.map

package/dist/jose/src/util/decode_protected_header.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decode_protected_header.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_protected_header.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAA;AAE3C,oCAAoC;AACpC,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAA;AAE7F;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,yBAAyB,CAuBvF"}
+{"version":3,"file":"decode_protected_header.d.ts","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_protected_header.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AASL,OAAO,KAAK,KAAK,KAAK,MAAM,eAAe,CAAC;AAE5C,+EAA+E;AAC/E,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAC;AAE9F;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,yBAAyB,CAyBvF"}

package/dist/jose/src/util/decode_protected_header.js

@@ -1,5 +1,5 @@
 /**
- * Original library: jose (v6.2.8)
+ * Original library: jose (v6.2.15)
  * - Copyright (c) 2018 Filip Skokan
  *
  * Modified and integrated in "Inray":
@@ -7,13 +7,13 @@
  */
 /***/
 /**
- * JOSE Protected Header Decoding (JWE, JWS, all serialization syntaxes)
+ * JWE and JWS Protected Header Decoding (JWE, JWS, all serialization syntaxes)
  *
  * @module
  */
-import { parseJoseHeader } from '../lib/helpers.js';
+import { parseJoseHeader } from '../lib/validate.js';
 /**
- * Decodes the Protected Header of a JWE/JWS/JWT token utilizing any JOSE serialization.
+ * Decodes the Protected Header of a JWE, JWS, or JWT without authenticating the token.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/decode/protected_header'`.
@@ -25,29 +25,32 @@ import { parseJoseHeader } from '../lib/helpers.js';
  * console.log(protectedHeader)
  * ```
  *
- * @param token JWE/JWS/JWT token in any JOSE serialization.
+ * @param token Compact token or JSON serialization object with a `protected` member.
+ *
+ * @returns The parsed Protected Header.
  */
 export function decodeProtectedHeader(token) {
-    let protectedB64u;
+    let encodedProtectedHeader;
     if (typeof token === 'string') {
         const parts = token.split('.');
         if (parts.length === 3 || parts.length === 5) {
-            ;
-            [protectedB64u] = parts;
+            [encodedProtectedHeader] = parts;
         }
     }
     else if (typeof token === 'object' && token) {
         if ('protected' in token) {
-            protectedB64u = token.protected;
+            encodedProtectedHeader = token.protected;
         }
         else {
             throw new TypeError('Token does not contain a Protected Header');
         }
     }
     const invalid = 'Invalid Token or Protected Header formatting';
-    if (typeof protectedB64u !== 'string' || !protectedB64u) {
+    if (typeof encodedProtectedHeader !== 'string' || !encodedProtectedHeader) {
         throw new TypeError(invalid);
     }
-    return parseJoseHeader(protectedB64u, TypeError, invalid);
+    // Decoding only: RFC 7515, Section 5.2, steps 2-3;
+    // draft-ietf-jose-hpke-encrypt-22, Section 7.2, steps 2-3.
+    return parseJoseHeader(encodedProtectedHeader, TypeError, invalid);
 }
 //# sourceMappingURL=decode_protected_header.js.map

package/dist/jose/src/util/decode_protected_header.js.map

@@ -1 +1 @@
-{"version":3,"file":"decode_protected_header.js","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_protected_header.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAMnD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IAC1D,IAAI,aAAuB,CAAA;IAE3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,CAAC;YAAA,CAAC,aAAa,CAAC,GAAG,KAAK,CAAA;QAC1B,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC9C,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YACzB,aAAa,GAAG,KAAK,CAAC,SAAS,CAAA;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,8CAA8C,CAAA;IAE9D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAA;IAC9B,CAAC;IAED,OAAO,eAAe,CAA4B,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;AACtF,CAAC"}
+{"version":3,"file":"decode_protected_header.js","sourceRoot":"","sources":["../../../../src/jose/src/util/decode_protected_header.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,KAAK;AAEL;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAMrD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IAC1D,IAAI,sBAAgC,CAAC;IAErC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC;QACnC,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC9C,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YACzB,sBAAsB,GAAG,KAAK,CAAC,SAAS,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,8CAA8C,CAAC;IAE/D,IAAI,OAAO,sBAAsB,KAAK,QAAQ,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,mDAAmD;IACnD,2DAA2D;IAC3D,OAAO,eAAe,CAA4B,sBAAsB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAChG,CAAC"}