jose 4.15.4 → 5.0.1

package/dist/types/jwt/produce.d.ts

@@ -2,53 +2,53 @@ import type { JWTPayload } from '../types';
 /** Generic class for JWT producing. */
 export declare class ProduceJWT {
     protected _payload: JWTPayload;
-    /** @param payload The JWT Claims Set object. */
-    constructor(payload: JWTPayload);
+    /** @param payload The JWT Claims Set object. Defaults to an empty object. */
+    constructor(payload?: JWTPayload);
     /**
-     * Set "iss" (Issuer) Claim.
+     * Set the "iss" (Issuer) Claim.
      *
      * @param issuer "Issuer" Claim value to set on the JWT Claims Set.
      */
     setIssuer(issuer: string): this;
     /**
-     * Set "sub" (Subject) Claim.
+     * Set the "sub" (Subject) Claim.
      *
      * @param subject "sub" (Subject) Claim value to set on the JWT Claims Set.
      */
     setSubject(subject: string): this;
     /**
-     * Set "aud" (Audience) Claim.
+     * Set the "aud" (Audience) Claim.
      *
      * @param audience "aud" (Audience) Claim value to set on the JWT Claims Set.
      */
     setAudience(audience: string | string[]): this;
     /**
-     * Set "jti" (JWT ID) Claim.
+     * Set the "jti" (JWT ID) Claim.
      *
      * @param jwtId "jti" (JWT ID) Claim value to set on the JWT Claims Set.
      */
     setJti(jwtId: string): this;
     /**
-     * Set "nbf" (Not Before) Claim.
+     * Set the "nbf" (Not Before) Claim.
      *
      * @param input "nbf" (Not Before) Claim value to set on the JWT Claims Set. When number is passed
      *   that is used as a value, when string is passed it is resolved to a time span and added to the
      *   current timestamp.
      */
-    setNotBefore(input: number | string): this;
+    setNotBefore(input: number | string | Date): this;
     /**
-     * Set "exp" (Expiration Time) Claim.
+     * Set the "exp" (Expiration Time) Claim.
      *
      * @param input "exp" (Expiration Time) Claim value to set on the JWT Claims Set. When number is
      *   passed that is used as a value, when string is passed it is resolved to a time span and added
      *   to the current timestamp.
      */
-    setExpirationTime(input: number | string): this;
+    setExpirationTime(input: number | string | Date): this;
     /**
-     * Set "iat" (Issued At) Claim.
+     * Set the "iat" (Issued At) Claim.
      *
      * @param input "iat" (Issued At) Claim value to set on the JWT Claims Set. Default is current
      *   timestamp.
      */
-    setIssuedAt(input?: number): this;
+    setIssuedAt(input?: number | Date): this;
 }

package/dist/types/jwt/unsecured.d.ts

@@ -1,7 +1,7 @@
 import type { JWSHeaderParameters, JWTClaimVerificationOptions, JWTPayload } from '../types';
 import { ProduceJWT } from './produce';
-export interface UnsecuredResult {
-    payload: JWTPayload;
+export interface UnsecuredResult<PayloadType = JWTPayload> {
+    payload: PayloadType & JWTPayload;
     header: JWSHeaderParameters;
 }
 /**
@@ -17,5 +17,5 @@ export declare class UnsecuredJWT extends ProduceJWT {
      * @param jwt Unsecured JWT to decode the payload of.
      * @param options JWT Claims Set validation options.
      */
-    static decode(jwt: string, options?: JWTClaimVerificationOptions): UnsecuredResult;
+    static decode<PayloadType = JWTPayload>(jwt: string, options?: JWTClaimVerificationOptions): UnsecuredResult<PayloadType>;
 }

package/dist/types/jwt/verify.d.ts

@@ -1,4 +1,4 @@
-import type { KeyLike, VerifyOptions, JWTClaimVerificationOptions, JWTHeaderParameters, GetKeyFunction, FlattenedJWSInput, JWTVerifyResult, ResolvedKey } from '../types';
+import type { JWTPayload, KeyLike, VerifyOptions, JWTClaimVerificationOptions, JWTHeaderParameters, GetKeyFunction, FlattenedJWSInput, JWTVerifyResult, ResolvedKey } from '../types';
 /** Combination of JWS Verification options and JWT Claims Set verification options. */
 export interface JWTVerifyOptions extends VerifyOptions, JWTClaimVerificationOptions {
 }
@@ -19,11 +19,11 @@ export interface JWTVerifyGetKey extends GetKeyFunction<JWTHeaderParameters, Fla
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtVerify(jwt: string | Uint8Array, key: KeyLike | Uint8Array, options?: JWTVerifyOptions): Promise<JWTVerifyResult>;
+export declare function jwtVerify<PayloadType = JWTPayload>(jwt: string | Uint8Array, key: KeyLike | Uint8Array, options?: JWTVerifyOptions): Promise<JWTVerifyResult<PayloadType>>;
 /**
  * @param jwt JSON Web Token value (encoded as JWS).
  * @param getKey Function resolving a key to verify the JWT with. See
  *   {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}.
  * @param options JWT Decryption and JWT Claims Set validation options.
  */
-export declare function jwtVerify<T extends KeyLike = KeyLike>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<JWTVerifyResult & ResolvedKey<T>>;
+export declare function jwtVerify<PayloadType = JWTPayload, KeyLikeType extends KeyLike = KeyLike>(jwt: string | Uint8Array, getKey: JWTVerifyGetKey, options?: JWTVerifyOptions): Promise<JWTVerifyResult<PayloadType> & ResolvedKey<KeyLikeType>>;

package/dist/types/key/generate_key_pair.d.ts

@@ -1,9 +1,9 @@
 import type { KeyLike } from '../types';
-export interface GenerateKeyPairResult<T extends KeyLike = KeyLike> {
+export interface GenerateKeyPairResult<KeyLikeType extends KeyLike = KeyLike> {
     /** The generated Private Key. */
-    privateKey: T;
+    privateKey: KeyLikeType;
     /** Public Key corresponding to the generated Private Key. */
-    publicKey: T;
+    publicKey: KeyLikeType;
 }
 export interface GenerateKeyPairOptions {
     /**
@@ -20,6 +20,7 @@ export interface GenerateKeyPairOptions {
      * (Only effective in Web Crypto API runtimes) The value to use as
      * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey SubtleCrypto.generateKey()}
      * `extractable` argument. Default is false.
+     *
      */
     extractable?: boolean;
 }
@@ -28,9 +29,10 @@ export interface GenerateKeyPairOptions {
  * asymmetric key pairs. For symmetric secrets use the `generateSecret` function.
  *
  * Note: Under Web Crypto API runtime the `privateKey` is generated with `extractable` set to
- * `false` by default.
+ * `false` by default. See {@link GenerateKeyPairOptions.extractable} to generate an extractable
+ * `privateKey`.
  *
  * @param alg JWA Algorithm Identifier to be used with the generated key pair.
  * @param options Additional options passed down to the key pair generation.
  */
-export declare function generateKeyPair<T extends KeyLike = KeyLike>(alg: string, options?: GenerateKeyPairOptions): Promise<GenerateKeyPairResult<T>>;
+export declare function generateKeyPair<KeyLikeType extends KeyLike = KeyLike>(alg: string, options?: GenerateKeyPairOptions): Promise<GenerateKeyPairResult<KeyLikeType>>;

package/dist/types/key/generate_secret.d.ts

@@ -16,4 +16,4 @@ export interface GenerateSecretOptions {
  * @param alg JWA Algorithm Identifier to be used with the generated secret.
  * @param options Additional options passed down to the secret generation.
  */
-export declare function generateSecret<T extends KeyLike = KeyLike>(alg: string, options?: GenerateSecretOptions): Promise<T | Uint8Array>;
+export declare function generateSecret<KeyLikeType extends KeyLike = KeyLike>(alg: string, options?: GenerateSecretOptions): Promise<KeyLikeType | Uint8Array>;

package/dist/types/key/import.d.ts

@@ -16,7 +16,7 @@ export interface PEMImportOptions {
  *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
  */
-export declare function importSPKI<T extends KeyLike = KeyLike>(spki: string, alg: string, options?: PEMImportOptions): Promise<T>;
+export declare function importSPKI<KeyLikeType extends KeyLike = KeyLike>(spki: string, alg: string, options?: PEMImportOptions): Promise<KeyLikeType>;
 /**
  * Imports the SPKI from an X.509 string certificate as a runtime-specific public key representation
  * (KeyObject or CryptoKey).
@@ -26,7 +26,7 @@ export declare function importSPKI<T extends KeyLike = KeyLike>(spki: string, al
  *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
  */
-export declare function importX509<T extends KeyLike = KeyLike>(x509: string, alg: string, options?: PEMImportOptions): Promise<T>;
+export declare function importX509<KeyLikeType extends KeyLike = KeyLike>(x509: string, alg: string, options?: PEMImportOptions): Promise<KeyLikeType>;
 /**
  * Imports a PEM-encoded PKCS#8 string as a runtime-specific private key representation (KeyObject
  * or CryptoKey).
@@ -36,7 +36,7 @@ export declare function importX509<T extends KeyLike = KeyLike>(x509: string, al
  *   with the imported key, its presence is only enforced in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
  */
-export declare function importPKCS8<T extends KeyLike = KeyLike>(pkcs8: string, alg: string, options?: PEMImportOptions): Promise<T>;
+export declare function importPKCS8<KeyLikeType extends KeyLike = KeyLike>(pkcs8: string, alg: string, options?: PEMImportOptions): Promise<KeyLikeType>;
 /**
  * Imports a JWK to a runtime-specific key representation (KeyLike). Either JWK "alg" (Algorithm)
  * Parameter must be present or the optional "alg" argument. When running on a runtime using
@@ -48,7 +48,5 @@ export declare function importPKCS8<T extends KeyLike = KeyLike>(pkcs8: string,
  *   with the imported key. Default is the "alg" property on the JWK, its presence is only enforced
  *   in Web Crypto API runtimes. See
  *   {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}.
- * @param octAsKeyObject Forces a symmetric key to be imported to a KeyObject or CryptoKey. Default
- *   is true unless JWK "ext" (Extractable) is true.
  */
-export declare function importJWK<T extends KeyLike = KeyLike>(jwk: JWK, alg?: string, octAsKeyObject?: boolean): Promise<T | Uint8Array>;
+export declare function importJWK<KeyLikeType extends KeyLike = KeyLike>(jwk: JWK, alg?: string): Promise<KeyLikeType | Uint8Array>;

package/dist/types/types.d.ts

@@ -304,7 +304,7 @@ export interface JWEHeaderParameters extends JoseHeaderParameters {
   crit?: string[]
 
   /**
-   * JWE "zip" (Compression Algorithm) Header Parameter.
+   * JWE "zip" (Compression Algorithm) Header Parameter. This parameter is not supported anymore.
    *
    * @deprecated Compression of data SHOULD NOT be done before encryption, because such compressed
    *   data often reveals information about the plaintext.
@@ -344,7 +344,11 @@ export interface CritOption {
 
 /** JWE Decryption options. */
 export interface DecryptOptions extends CritOption {
-  /** A list of accepted JWE "alg" (Algorithm) Header Parameter values. */
+  /**
+   * A list of accepted JWE "alg" (Algorithm) Header Parameter values. By default all "alg"
+   * (Algorithm) Header Parameter values applicable for the used key/secret are allowed except for
+   * all PBES2 Key Management Algorithms, these need to be explicitly allowed using this option.
+   */
   keyManagementAlgorithms?: string[]
 
   /**
@@ -353,12 +357,6 @@ export interface DecryptOptions extends CritOption {
    */
   contentEncryptionAlgorithms?: string[]
 
-  /**
-   * In a browser runtime you have to provide an implementation for Inflate Raw when you expect JWEs
-   * with compressed plaintext.
-   */
-  inflateRaw?: InflateFunction
-
   /**
    * (PBES2 Key Management Algorithms only) Maximum allowed "p2c" (PBES2 Count) Header Parameter
    * value. The PBKDF2 iteration count defines the algorithm's computational expense. By default
@@ -367,17 +365,8 @@ export interface DecryptOptions extends CritOption {
   maxPBES2Count?: number
 }
 
-/** JWE Deflate option. */
-export interface DeflateOption {
-  /**
-   * In a browser runtime you have to provide an implementation for Deflate Raw when you will be
-   * producing JWEs with compressed plaintext.
-   */
-  deflateRaw?: DeflateFunction
-}
-
 /** JWE Encryption options. */
-export interface EncryptOptions extends CritOption, DeflateOption {}
+export interface EncryptOptions extends CritOption {}
 
 /** JWT Claims Set verification options. */
 export interface JWTClaimVerificationOptions {
@@ -491,32 +480,6 @@ export interface JWTPayload {
   [propName: string]: unknown
 }
 
-/**
- * Deflate Raw implementation, e.g. promisified
- * {@link https://nodejs.org/api/zlib.html#zlibdeflaterawbuffer-options-callback zlib.deflateRaw}.
- *
- * @deprecated Compression of data SHOULD NOT be done before encryption, because such compressed
- *   data often reveals information about the plaintext.
- *
- * @see {@link https://www.rfc-editor.org/rfc/rfc8725#name-avoid-compression-of-encryp Avoid Compression of Encryption Inputs}
- */
-export interface DeflateFunction {
-  (input: Uint8Array): Promise<Uint8Array>
-}
-
-/**
- * Inflate Raw implementation, e.g. promisified
- * {@link https://nodejs.org/api/zlib.html#zlibinflaterawbuffer-options-callback zlib.inflateRaw}.
- *
- * @deprecated Compression of data SHOULD NOT be done before encryption, because such compressed
- *   data often reveals information about the plaintext.
- *
- * @see {@link https://www.rfc-editor.org/rfc/rfc8725#name-avoid-compression-of-encryp Avoid Compression of Encryption Inputs}
- */
-export interface InflateFunction {
-  (input: Uint8Array): Promise<Uint8Array>
-}
-
 export interface FlattenedDecryptResult {
   /** JWE AAD. */
   additionalAuthenticatedData?: Uint8Array
@@ -565,25 +528,25 @@ export interface CompactVerifyResult {
   protectedHeader: CompactJWSHeaderParameters
 }
 
-export interface JWTVerifyResult {
+export interface JWTVerifyResult<PayloadType = JWTPayload> {
   /** JWT Claims Set. */
-  payload: JWTPayload
+  payload: PayloadType & JWTPayload
 
   /** JWS Protected Header. */
   protectedHeader: JWTHeaderParameters
 }
 
-export interface JWTDecryptResult {
+export interface JWTDecryptResult<PayloadType = JWTPayload> {
   /** JWT Claims Set. */
-  payload: JWTPayload
+  payload: PayloadType & JWTPayload
 
   /** JWE Protected Header. */
   protectedHeader: CompactJWEHeaderParameters
 }
 
-export interface ResolvedKey<T extends KeyLike = KeyLike> {
+export interface ResolvedKey<KeyLikeType extends KeyLike = KeyLike> {
   /** Key resolved from the key resolver function. */
-  key: T | Uint8Array
+  key: KeyLikeType | Uint8Array
 }
 
 /** Recognized Compact JWS Header Parameters, any other Header Members may also be present. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "4.15.4",
+  "version": "5.0.1",
   "description": "'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "browser",

package/dist/browser/runtime/zlib.js

@@ -1,7 +0,0 @@
-import { JOSENotSupported } from '../util/errors.js';
-export const inflate = async () => {
-    throw new JOSENotSupported('JWE "zip" (Compression Algorithm) Header Parameter is not supported by your javascript runtime. You need to use the `inflateRaw` decrypt option to provide Inflate Raw implementation.');
-};
-export const deflate = async () => {
-    throw new JOSENotSupported('JWE "zip" (Compression Algorithm) Header Parameter is not supported by your javascript runtime. You need to use the `deflateRaw` encrypt option to provide Deflate Raw implementation.');
-};

package/dist/node/cjs/runtime/asn1_sequence_decoder.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const tagInteger = 0x02;
-const tagSequence = 0x30;
-class Asn1SequenceDecoder {
-    constructor(buffer) {
-        if (buffer[0] !== tagSequence) {
-            throw new TypeError();
-        }
-        this.buffer = buffer;
-        this.offset = 1;
-        const len = this.decodeLength();
-        if (len !== buffer.length - this.offset) {
-            throw new TypeError();
-        }
-    }
-    decodeLength() {
-        let length = this.buffer[this.offset++];
-        if (length & 0x80) {
-            const nBytes = length & ~0x80;
-            length = 0;
-            for (let i = 0; i < nBytes; i++)
-                length = (length << 8) | this.buffer[this.offset + i];
-            this.offset += nBytes;
-        }
-        return length;
-    }
-    unsignedInteger() {
-        if (this.buffer[this.offset++] !== tagInteger) {
-            throw new TypeError();
-        }
-        let length = this.decodeLength();
-        if (this.buffer[this.offset] === 0) {
-            this.offset++;
-            length--;
-        }
-        const result = this.buffer.slice(this.offset, this.offset + length);
-        this.offset += length;
-        return result;
-    }
-    end() {
-        if (this.offset !== this.buffer.length) {
-            throw new TypeError();
-        }
-    }
-}
-exports.default = Asn1SequenceDecoder;

package/dist/node/cjs/runtime/asn1_sequence_encoder.js

@@ -1,91 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const buffer_1 = require("buffer");
-const errors_js_1 = require("../util/errors.js");
-const tagInteger = 0x02;
-const tagBitStr = 0x03;
-const tagOctStr = 0x04;
-const tagSequence = 0x30;
-const bZero = buffer_1.Buffer.from([0x00]);
-const bTagInteger = buffer_1.Buffer.from([tagInteger]);
-const bTagBitStr = buffer_1.Buffer.from([tagBitStr]);
-const bTagSequence = buffer_1.Buffer.from([tagSequence]);
-const bTagOctStr = buffer_1.Buffer.from([tagOctStr]);
-const encodeLength = (len) => {
-    if (len < 128)
-        return buffer_1.Buffer.from([len]);
-    const buffer = buffer_1.Buffer.alloc(5);
-    buffer.writeUInt32BE(len, 1);
-    let offset = 1;
-    while (buffer[offset] === 0)
-        offset++;
-    buffer[offset - 1] = 0x80 | (5 - offset);
-    return buffer.slice(offset - 1);
-};
-const oids = new Map([
-    ['P-256', buffer_1.Buffer.from('06 08 2A 86 48 CE 3D 03 01 07'.replace(/ /g, ''), 'hex')],
-    ['secp256k1', buffer_1.Buffer.from('06 05 2B 81 04 00 0A'.replace(/ /g, ''), 'hex')],
-    ['P-384', buffer_1.Buffer.from('06 05 2B 81 04 00 22'.replace(/ /g, ''), 'hex')],
-    ['P-521', buffer_1.Buffer.from('06 05 2B 81 04 00 23'.replace(/ /g, ''), 'hex')],
-    ['ecPublicKey', buffer_1.Buffer.from('06 07 2A 86 48 CE 3D 02 01'.replace(/ /g, ''), 'hex')],
-    ['X25519', buffer_1.Buffer.from('06 03 2B 65 6E'.replace(/ /g, ''), 'hex')],
-    ['X448', buffer_1.Buffer.from('06 03 2B 65 6F'.replace(/ /g, ''), 'hex')],
-    ['Ed25519', buffer_1.Buffer.from('06 03 2B 65 70'.replace(/ /g, ''), 'hex')],
-    ['Ed448', buffer_1.Buffer.from('06 03 2B 65 71'.replace(/ /g, ''), 'hex')],
-]);
-class DumbAsn1Encoder {
-    constructor() {
-        this.length = 0;
-        this.elements = [];
-    }
-    oidFor(oid) {
-        const bOid = oids.get(oid);
-        if (!bOid) {
-            throw new errors_js_1.JOSENotSupported('Invalid or unsupported OID');
-        }
-        this.elements.push(bOid);
-        this.length += bOid.length;
-    }
-    zero() {
-        this.elements.push(bTagInteger, buffer_1.Buffer.from([0x01]), bZero);
-        this.length += 3;
-    }
-    one() {
-        this.elements.push(bTagInteger, buffer_1.Buffer.from([0x01]), buffer_1.Buffer.from([0x01]));
-        this.length += 3;
-    }
-    unsignedInteger(integer) {
-        if (integer[0] & 0x80) {
-            const len = encodeLength(integer.length + 1);
-            this.elements.push(bTagInteger, len, bZero, integer);
-            this.length += 2 + len.length + integer.length;
-        }
-        else {
-            let i = 0;
-            while (integer[i] === 0 && (integer[i + 1] & 0x80) === 0)
-                i++;
-            const len = encodeLength(integer.length - i);
-            this.elements.push(bTagInteger, encodeLength(integer.length - i), integer.slice(i));
-            this.length += 1 + len.length + integer.length - i;
-        }
-    }
-    octStr(octStr) {
-        const len = encodeLength(octStr.length);
-        this.elements.push(bTagOctStr, encodeLength(octStr.length), octStr);
-        this.length += 1 + len.length + octStr.length;
-    }
-    bitStr(bitS) {
-        const len = encodeLength(bitS.length + 1);
-        this.elements.push(bTagBitStr, encodeLength(bitS.length + 1), bZero, bitS);
-        this.length += 1 + len.length + bitS.length + 1;
-    }
-    add(seq) {
-        this.elements.push(seq);
-        this.length += seq.length;
-    }
-    end(tag = bTagSequence) {
-        const len = encodeLength(this.length);
-        return buffer_1.Buffer.concat([tag, len, ...this.elements], 1 + len.length + this.length);
-    }
-}
-exports.default = DumbAsn1Encoder;

package/dist/node/cjs/runtime/check_modulus_length.js

@@ -1,52 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.setModulusLength = exports.weakMap = void 0;
-exports.weakMap = new WeakMap();
-const getLength = (buf, index) => {
-    let len = buf.readUInt8(1);
-    if ((len & 0x80) === 0) {
-        if (index === 0) {
-            return len;
-        }
-        return getLength(buf.subarray(2 + len), index - 1);
-    }
-    const num = len & 0x7f;
-    len = 0;
-    for (let i = 0; i < num; i++) {
-        len <<= 8;
-        const j = buf.readUInt8(2 + i);
-        len |= j;
-    }
-    if (index === 0) {
-        return len;
-    }
-    return getLength(buf.subarray(2 + len), index - 1);
-};
-const getLengthOfSeqIndex = (sequence, index) => {
-    const len = sequence.readUInt8(1);
-    if ((len & 0x80) === 0) {
-        return getLength(sequence.subarray(2), index);
-    }
-    const num = len & 0x7f;
-    return getLength(sequence.subarray(2 + num), index);
-};
-const getModulusLength = (key) => {
-    var _a, _b;
-    if (exports.weakMap.has(key)) {
-        return exports.weakMap.get(key);
-    }
-    const modulusLength = (_b = (_a = key.asymmetricKeyDetails) === null || _a === void 0 ? void 0 : _a.modulusLength) !== null && _b !== void 0 ? _b : (getLengthOfSeqIndex(key.export({ format: 'der', type: 'pkcs1' }), key.type === 'private' ? 1 : 0) -
-        1) <<
-        3;
-    exports.weakMap.set(key, modulusLength);
-    return modulusLength;
-};
-const setModulusLength = (keyObject, modulusLength) => {
-    exports.weakMap.set(keyObject, modulusLength);
-};
-exports.setModulusLength = setModulusLength;
-exports.default = (key, alg) => {
-    if (getModulusLength(key) < 2048) {
-        throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);
-    }
-};

package/dist/node/cjs/runtime/flags.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.jwkImport = exports.jwkExport = exports.rsaPssParams = exports.oneShotCallback = void 0;
-const [major, minor] = process.versions.node.split('.').map((str) => parseInt(str, 10));
-exports.oneShotCallback = major >= 16 || (major === 15 && minor >= 13);
-exports.rsaPssParams = !('electron' in process.versions) && (major >= 17 || (major === 16 && minor >= 9));
-exports.jwkExport = major >= 16 || (major === 15 && minor >= 9);
-exports.jwkImport = major >= 16 || (major === 15 && minor >= 12);

package/dist/node/cjs/runtime/zlib.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.deflate = exports.inflate = void 0;
-const util_1 = require("util");
-const zlib_1 = require("zlib");
-const inflateRaw = (0, util_1.promisify)(zlib_1.inflateRaw);
-const deflateRaw = (0, util_1.promisify)(zlib_1.deflateRaw);
-const inflate = (input) => inflateRaw(input);
-exports.inflate = inflate;
-const deflate = (input) => deflateRaw(input);
-exports.deflate = deflate;

package/dist/node/esm/runtime/asn1_sequence_decoder.js

@@ -1,44 +0,0 @@
-const tagInteger = 0x02;
-const tagSequence = 0x30;
-export default class Asn1SequenceDecoder {
-    constructor(buffer) {
-        if (buffer[0] !== tagSequence) {
-            throw new TypeError();
-        }
-        this.buffer = buffer;
-        this.offset = 1;
-        const len = this.decodeLength();
-        if (len !== buffer.length - this.offset) {
-            throw new TypeError();
-        }
-    }
-    decodeLength() {
-        let length = this.buffer[this.offset++];
-        if (length & 0x80) {
-            const nBytes = length & ~0x80;
-            length = 0;
-            for (let i = 0; i < nBytes; i++)
-                length = (length << 8) | this.buffer[this.offset + i];
-            this.offset += nBytes;
-        }
-        return length;
-    }
-    unsignedInteger() {
-        if (this.buffer[this.offset++] !== tagInteger) {
-            throw new TypeError();
-        }
-        let length = this.decodeLength();
-        if (this.buffer[this.offset] === 0) {
-            this.offset++;
-            length--;
-        }
-        const result = this.buffer.slice(this.offset, this.offset + length);
-        this.offset += length;
-        return result;
-    }
-    end() {
-        if (this.offset !== this.buffer.length) {
-            throw new TypeError();
-        }
-    }
-}

package/dist/node/esm/runtime/asn1_sequence_encoder.js

@@ -1,88 +0,0 @@
-import { Buffer } from 'buffer';
-import { JOSENotSupported } from '../util/errors.js';
-const tagInteger = 0x02;
-const tagBitStr = 0x03;
-const tagOctStr = 0x04;
-const tagSequence = 0x30;
-const bZero = Buffer.from([0x00]);
-const bTagInteger = Buffer.from([tagInteger]);
-const bTagBitStr = Buffer.from([tagBitStr]);
-const bTagSequence = Buffer.from([tagSequence]);
-const bTagOctStr = Buffer.from([tagOctStr]);
-const encodeLength = (len) => {
-    if (len < 128)
-        return Buffer.from([len]);
-    const buffer = Buffer.alloc(5);
-    buffer.writeUInt32BE(len, 1);
-    let offset = 1;
-    while (buffer[offset] === 0)
-        offset++;
-    buffer[offset - 1] = 0x80 | (5 - offset);
-    return buffer.slice(offset - 1);
-};
-const oids = new Map([
-    ['P-256', Buffer.from('06 08 2A 86 48 CE 3D 03 01 07'.replace(/ /g, ''), 'hex')],
-    ['secp256k1', Buffer.from('06 05 2B 81 04 00 0A'.replace(/ /g, ''), 'hex')],
-    ['P-384', Buffer.from('06 05 2B 81 04 00 22'.replace(/ /g, ''), 'hex')],
-    ['P-521', Buffer.from('06 05 2B 81 04 00 23'.replace(/ /g, ''), 'hex')],
-    ['ecPublicKey', Buffer.from('06 07 2A 86 48 CE 3D 02 01'.replace(/ /g, ''), 'hex')],
-    ['X25519', Buffer.from('06 03 2B 65 6E'.replace(/ /g, ''), 'hex')],
-    ['X448', Buffer.from('06 03 2B 65 6F'.replace(/ /g, ''), 'hex')],
-    ['Ed25519', Buffer.from('06 03 2B 65 70'.replace(/ /g, ''), 'hex')],
-    ['Ed448', Buffer.from('06 03 2B 65 71'.replace(/ /g, ''), 'hex')],
-]);
-export default class DumbAsn1Encoder {
-    constructor() {
-        this.length = 0;
-        this.elements = [];
-    }
-    oidFor(oid) {
-        const bOid = oids.get(oid);
-        if (!bOid) {
-            throw new JOSENotSupported('Invalid or unsupported OID');
-        }
-        this.elements.push(bOid);
-        this.length += bOid.length;
-    }
-    zero() {
-        this.elements.push(bTagInteger, Buffer.from([0x01]), bZero);
-        this.length += 3;
-    }
-    one() {
-        this.elements.push(bTagInteger, Buffer.from([0x01]), Buffer.from([0x01]));
-        this.length += 3;
-    }
-    unsignedInteger(integer) {
-        if (integer[0] & 0x80) {
-            const len = encodeLength(integer.length + 1);
-            this.elements.push(bTagInteger, len, bZero, integer);
-            this.length += 2 + len.length + integer.length;
-        }
-        else {
-            let i = 0;
-            while (integer[i] === 0 && (integer[i + 1] & 0x80) === 0)
-                i++;
-            const len = encodeLength(integer.length - i);
-            this.elements.push(bTagInteger, encodeLength(integer.length - i), integer.slice(i));
-            this.length += 1 + len.length + integer.length - i;
-        }
-    }
-    octStr(octStr) {
-        const len = encodeLength(octStr.length);
-        this.elements.push(bTagOctStr, encodeLength(octStr.length), octStr);
-        this.length += 1 + len.length + octStr.length;
-    }
-    bitStr(bitS) {
-        const len = encodeLength(bitS.length + 1);
-        this.elements.push(bTagBitStr, encodeLength(bitS.length + 1), bZero, bitS);
-        this.length += 1 + len.length + bitS.length + 1;
-    }
-    add(seq) {
-        this.elements.push(seq);
-        this.length += seq.length;
-    }
-    end(tag = bTagSequence) {
-        const len = encodeLength(this.length);
-        return Buffer.concat([tag, len, ...this.elements], 1 + len.length + this.length);
-    }
-}