jose 5.9.2 → 5.9.4

package/dist/types/key/export.d.ts

@@ -1,7 +1,7 @@
 import type { JWK, KeyLike } from '../types';
 /**
- * Exports a runtime-specific public key representation (KeyObject or CryptoKey) to a PEM-encoded
- * SPKI string format.
+ * Exports a runtime-specific public key representation ({@link !KeyObject} or {@link !CryptoKey}) to
+ * a PEM-encoded SPKI string format.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/key/export'`.
@@ -10,8 +10,8 @@ import type { JWK, KeyLike } from '../types';
  */
 export declare function exportSPKI(key: KeyLike): Promise<string>;
 /**
- * Exports a runtime-specific private key representation (KeyObject or CryptoKey) to a PEM-encoded
- * PKCS8 string format.
+ * Exports a runtime-specific private key representation ({@link !KeyObject} or {@link !CryptoKey}) to
+ * a PEM-encoded PKCS8 string format.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/key/export'`.

package/dist/types/key/generate_key_pair.d.ts

@@ -18,8 +18,7 @@ export interface GenerateKeyPairOptions {
     modulusLength?: number;
     /**
      * (Only effective in Web Crypto API runtimes) The value to use as
-     * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey SubtleCrypto.generateKey()}
-     * `extractable` argument. Default is false.
+     * {@link !SubtleCrypto.generateKey} `extractable` argument. Default is false.
      *
      */
     extractable?: boolean;

package/dist/types/key/generate_secret.d.ts

@@ -2,8 +2,7 @@ import type { KeyLike } from '../types';
 export interface GenerateSecretOptions {
     /**
      * (Only effective in Web Crypto API runtimes) The value to use as
-     * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/generateKey SubtleCrypto.generateKey()}
-     * `extractable` argument. Default is false.
+     * {@link !SubtleCrypto.generateKey} `extractable` argument. Default is false.
      */
     extractable?: boolean;
 }

package/dist/types/key/import.d.ts

@@ -1,15 +1,14 @@
 import type { JWK, KeyLike } from '../types';
 export interface PEMImportOptions {
     /**
-     * (Only effective in Web Crypto API runtimes) The value to use as
-     * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey SubtleCrypto.importKey()}
+     * (Only effective in Web Crypto API runtimes) The value to use as {@link !SubtleCrypto.importKey}
      * `extractable` argument. Default is false.
      */
     extractable?: boolean;
 }
 /**
- * Imports a PEM-encoded SPKI string as a runtime-specific public key representation (KeyObject or
- * CryptoKey).
+ * Imports a PEM-encoded SPKI string as a runtime-specific public key representation
+ * ({@link !KeyObject} or {@link !CryptoKey}).
  *
  * Note: The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
  * {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
@@ -26,7 +25,7 @@ export interface PEMImportOptions {
 export declare function importSPKI<KeyLikeType extends KeyLike = KeyLike>(spki: string, alg: string, options?: PEMImportOptions): Promise<KeyLikeType>;
 /**
  * Imports the SPKI from an X.509 string certificate as a runtime-specific public key representation
- * (KeyObject or CryptoKey).
+ * ({@link !KeyObject} or {@link !CryptoKey}).
  *
  * Note: The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
  * {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
@@ -42,8 +41,8 @@ export declare function importSPKI<KeyLikeType extends KeyLike = KeyLike>(spki:
  */
 export declare function importX509<KeyLikeType extends KeyLike = KeyLike>(x509: string, alg: string, options?: PEMImportOptions): Promise<KeyLikeType>;
 /**
- * Imports a PEM-encoded PKCS#8 string as a runtime-specific private key representation (KeyObject
- * or CryptoKey).
+ * Imports a PEM-encoded PKCS#8 string as a runtime-specific private key representation
+ * ({@link !KeyObject} or {@link !CryptoKey}).
  *
  * Note: The OID id-RSASSA-PSS (1.2.840.113549.1.1.10) is not supported in
  * {@link https://w3c.github.io/webcrypto/ Web Cryptography API}, use the OID rsaEncryption
@@ -63,7 +62,7 @@ export declare function importPKCS8<KeyLikeType extends KeyLike = KeyLike>(pkcs8
  * (Algorithm) Parameter, or the optional "alg" argument, must be present.
  *
  * Note: When the runtime is using {@link https://w3c.github.io/webcrypto/ Web Cryptography API} the
- * jwk parameters "use", "key_ops", and "ext" are also used in the resulting `CryptoKey`.
+ * jwk parameters "use", "key_ops", and "ext" are also used in the resulting {@link !CryptoKey}.
  *
  * This function is exported (as a named export) from the main `'jose'` module entry point as well
  * as from its subpath export `'jose/key/import'`.

package/dist/types/types.d.ts

@@ -1,121 +1,122 @@
 /**
  * KeyLike are runtime-specific classes representing asymmetric keys or symmetric secrets. These are
- * instances of {@link https://developer.mozilla.org/en-US/docs/Web/API/CryptoKey CryptoKey} and
- * additionally {@link https://nodejs.org/api/crypto.html#class-keyobject KeyObject} in Node.js
- * runtime.
- * {@link https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array Uint8Array}
- * instances are also accepted as symmetric secret representation only.
+ * instances of {@link !CryptoKey} and additionally {@link !KeyObject} in Node.js runtime.
+ * {@link !Uint8Array} instances are also accepted as symmetric secret representation only.
  *
- * [Key Import Functions](../modules/key_import.md) can be used to import PEM, or JWK formatted
- * asymmetric keys and certificates to these runtime-specific representations.
+ * {@link key/import Key Import Functions} can be used to import PEM, or JWK formatted asymmetric
+ * keys and certificates to these runtime-specific representations.
  *
- * In Node.js the {@link https://nodejs.org/api/buffer.html#buffer Buffer} class is a subclass of
- * Uint8Array and so Buffer can be provided for symmetric secrets as well.
+ * In Node.js the {@link !Buffer} class is a subclass of {@link !Uint8Array} and so {@link !Buffer} can
+ * be provided for symmetric secrets as well.
  *
- * {@link https://nodejs.org/api/crypto.html#class-keyobject KeyObject} is a representation of a
- * key/secret available in the Node.js runtime. In addition to the import functions of this library
- * you may use the runtime APIs
- * {@link https://nodejs.org/api/crypto.html#cryptocreatepublickeykey crypto.createPublicKey},
- * {@link https://nodejs.org/api/crypto.html#cryptocreateprivatekeykey crypto.createPrivateKey}, and
- * {@link https://nodejs.org/api/crypto.html#cryptocreatesecretkeykey-encoding crypto.createSecretKey}
- * to obtain a `KeyObject` from your existing key material.
+ * {@link !KeyObject} is a representation of a key/secret available in the Node.js runtime. In
+ * addition to the {@link key/import Key Import Functions} you may use the runtime APIs
+ * {@link !createPublicKey}, {@link !createPrivateKey}, and {@link !createSecretKey} to obtain a
+ * {@link !KeyObject} from your existing key material.
  *
- * {@link https://developer.mozilla.org/en-US/docs/Web/API/CryptoKey CryptoKey} is a representation
- * of a key/secret available in the Browser and Web-interoperable runtimes. In addition to the
- * import functions of this library you may use the
- * {@link https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/importKey SubtleCrypto.importKey}
- * API to obtain a CryptoKey from your existing key material.
+ * {@link !CryptoKey} is a representation of a key/secret available in the Browser and
+ * Web-interoperable runtimes. In addition to the {@link key/import Key Import Functions} you may use
+ * the {@link !SubtleCrypto.importKey} API to obtain a {@link !CryptoKey} from your existing key
+ * material.
  *
  */
 export type KeyLike = { type: string }
 
 /** Generic JSON Web Key Parameters. */
 export interface JWKParameters {
-  /** JWK "kty" (Key Type) Parameter. */
+  /** JWK "kty" (Key Type) Parameter */
   kty: string
-  /** JWK "alg" (Algorithm) Parameter. */
+  /**
+   * JWK "alg" (Algorithm) Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+   */
   alg?: string
-  /** JWK "key_ops" (Key Operations) Parameter. */
+  /** JWK "key_ops" (Key Operations) Parameter */
   key_ops?: string[]
-  /** JWK "ext" (Extractable) Parameter. */
+  /** JWK "ext" (Extractable) Parameter */
   ext?: boolean
-  /** JWK "use" (Public Key Use) Parameter. */
+  /** JWK "use" (Public Key Use) Parameter */
   use?: string
-  /** JWK "x5c" (X.509 Certificate Chain) Parameter. */
+  /** JWK "x5c" (X.509 Certificate Chain) Parameter */
   x5c?: string[]
-  /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter. */
+  /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
   x5t?: string
-  /** "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter. */
+  /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
   'x5t#S256'?: string
-  /** JWK "x5u" (X.509 URL) Parameter. */
+  /** JWK "x5u" (X.509 URL) Parameter */
   x5u?: string
-  /** JWK "kid" (Key ID) Parameter. */
+  /** JWK "kid" (Key ID) Parameter */
   kid?: string
 }
 
 /** Convenience interface for Public OKP JSON Web Keys */
 export interface JWK_OKP_Public extends JWKParameters {
-  /** The Subtype of Key Pair */
+  /** OKP JWK "crv" (The Subtype of Key Pair) Parameter */
   crv: string
-  /** The public key */
+  /** OKP JWK "x" (The public key) Parameter */
   x: string
 }
 
 /** Convenience interface for Private OKP JSON Web Keys */
 export interface JWK_OKP_Private extends JWK_OKP_Public, JWKParameters {
-  /** The Private Key */
+  /** OKP JWK "d" (The Private Key) Parameter */
   d: string
 }
 
 /** Convenience interface for Public EC JSON Web Keys */
 export interface JWK_EC_Public extends JWKParameters {
-  /** Curve */
+  /** EC JWK "crv" (Curve) Parameter */
   crv: string
-  /** X Coordinate */
+  /** EC JWK "x" (X Coordinate) Parameter */
   x: string
-  /** Y Coordinate */
+  /** EC JWK "y" (Y Coordinate) Parameter */
   y: string
 }
 
 /** Convenience interface for Private EC JSON Web Keys */
 export interface JWK_EC_Private extends JWK_EC_Public, JWKParameters {
-  /** ECC Private Key */
+  /** EC JWK "d" (ECC Private Key) Parameter */
   d: string
 }
 
 /** Convenience interface for Public RSA JSON Web Keys */
 export interface JWK_RSA_Public extends JWKParameters {
-  /** Exponent */
+  /** RSA JWK "e" (Exponent) Parameter */
   e: string
-  /** Modulus */
+  /** RSA JWK "n" (Modulus) Parameter */
   n: string
 }
 
 /** Convenience interface for Private RSA JSON Web Keys */
 export interface JWK_RSA_Private extends JWK_RSA_Public, JWKParameters {
-  /** Private Exponent */
+  /** RSA JWK "d" (Private Exponent) Parameter */
   d: string
-  /** First Factor CRT Exponent */
+  /** RSA JWK "dp" (First Factor CRT Exponent) Parameter */
   dp: string
-  /** Second Factor CRT Exponent */
+  /** RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
   dq: string
-  /** Other Primes Info. This parameter is not supported. */
+  /**
+   * RSA JWK "oth" (Other Primes Info) Parameter
+   *
+   * This parameter is not supported
+   */
   oth?: Array<{
     d?: string
     r?: string
     t?: string
   }>
-  /** First Prime Factor */
+  /** RSA JWK "p" (First Prime Factor) Parameter */
   p: string
-  /** Second Prime Factor */
+  /** RSA JWK "q" (Second Prime Factor) Parameter */
   q: string
-  /** First CRT Coefficient */
+  /** RSA JWK "qi" (First CRT Coefficient) Parameter */
   qi: string
 }
 
 /** Convenience interface for oct JSON Web Keys */
 export interface JWK_oct extends JWKParameters {
-  /** Key Value */
+  /** Oct JWK "k" (Key Value) Parameter */
   k: string
 }
 
@@ -133,44 +134,48 @@ export interface JWK_oct extends JWKParameters {
  */
 export interface JWK extends JWKParameters {
   /**
-   * - (EC) Curve
-   * - (OKP) The Subtype of Key Pair
+   * - EC JWK "crv" (Curve) Parameter
+   * - OKP JWK "crv" (The Subtype of Key Pair) Parameter
    */
   crv?: string
   /**
-   * - (Private RSA) Private Exponent
-   * - (Private EC) ECC Private Key
-   * - (Private OKP) The Private Key
+   * - Private RSA JWK "d" (Private Exponent) Parameter
+   * - Private EC JWK "d" (ECC Private Key) Parameter
+   * - Private OKP JWK "d" (The Private Key) Parameter
    */
   d?: string
-  /** (Private RSA) First Factor CRT Exponent */
+  /** Private RSA JWK "dp" (First Factor CRT Exponent) Parameter */
   dp?: string
-  /** (Private RSA) Second Factor CRT Exponent */
+  /** Private RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
   dq?: string
-  /** (RSA) Exponent */
+  /** RSA JWK "e" (Exponent) Parameter */
   e?: string
-  /** (oct) Key Value */
+  /** Oct JWK "k" (Key Value) Parameter */
   k?: string
-  /** (RSA) Modulus */
+  /** RSA JWK "n" (Modulus) Parameter */
   n?: string
-  /** (Private RSA) Other Primes Info. This parameter is not supported. */
+  /**
+   * Private RSA JWK "oth" (Other Primes Info) Parameter
+   *
+   * This parameter is not supported
+   */
   oth?: Array<{
     d?: string
     r?: string
     t?: string
   }>
-  /** (Private RSA) First Prime Factor */
+  /** Private RSA JWK "p" (First Prime Factor) Parameter */
   p?: string
-  /** (Private RSA) Second Prime Factor */
+  /** Private RSA JWK "q" (Second Prime Factor) Parameter */
   q?: string
-  /** (Private RSA) First CRT Coefficient */
+  /** Private RSA JWK "qi" (First CRT Coefficient) Parameter */
   qi?: string
   /**
-   * - (EC) X Coordinate
-   * - (OKP) The public key
+   * - EC JWK "x" (X Coordinate) Parameter
+   * - OKP JWK "x" (The public key) Parameter
    */
   x?: string
-  /** (EC) Y Coordinate */
+  /** EC JWK "y" (Y Coordinate) Parameter */
   y?: string
 }
 
@@ -202,8 +207,8 @@ export interface GetKeyFunction<IProtectedHeader, IToken>
   extends GenericGetKeyFunction<IProtectedHeader, IToken, KeyLike | Uint8Array> {}
 
 /**
- * Flattened JWS definition for verify function inputs, allows payload as Uint8Array for detached
- * signature validation.
+ * Flattened JWS definition for verify function inputs, allows payload as {@link !Uint8Array} for
+ * detached signature validation.
  */
 export interface FlattenedJWSInput {
   /**
@@ -216,7 +221,7 @@ export interface FlattenedJWSInput {
 
   /**
    * The "payload" member MUST be present and contain the value BASE64URL(JWS Payload). When RFC7797
-   * "b64": false is used the value passed may also be a Uint8Array.
+   * "b64": false is used the value passed may also be a {@link !Uint8Array}.
    */
   payload: string | Uint8Array
 
@@ -232,14 +237,14 @@ export interface FlattenedJWSInput {
 }
 
 /**
- * General JWS definition for verify function inputs, allows payload as Uint8Array for detached
- * signature validation.
+ * General JWS definition for verify function inputs, allows payload as {@link !Uint8Array} for
+ * detached signature validation.
  */
 export interface GeneralJWSInput {
   /**
    * The "payload" member MUST be present and contain the value BASE64URL(JWS Payload). When when
    * JWS Unencoded Payload ({@link https://www.rfc-editor.org/rfc/rfc7797 RFC7797}) "b64": false is
-   * used the value passed may also be a Uint8Array.
+   * used the value passed may also be a {@link !Uint8Array}.
    */
   payload: string | Uint8Array
 
@@ -269,34 +274,38 @@ export interface GeneralJWS {
 }
 
 export interface JoseHeaderParameters {
-  /** "kid" (Key ID) Header Parameter. */
+  /** "kid" (Key ID) Header Parameter */
   kid?: string
 
-  /** "x5t" (X.509 Certificate SHA-1 Thumbprint) Header Parameter. */
+  /** "x5t" (X.509 Certificate SHA-1 Thumbprint) Header Parameter */
   x5t?: string
 
-  /** "x5c" (X.509 Certificate Chain) Header Parameter. */
+  /** "x5c" (X.509 Certificate Chain) Header Parameter */
   x5c?: string[]
 
-  /** "x5u" (X.509 URL) Header Parameter. */
+  /** "x5u" (X.509 URL) Header Parameter */
   x5u?: string
 
-  /** "jku" (JWK Set URL) Header Parameter. */
+  /** "jku" (JWK Set URL) Header Parameter */
   jku?: string
 
-  /** "jwk" (JSON Web Key) Header Parameter. */
+  /** "jwk" (JSON Web Key) Header Parameter */
   jwk?: Pick<JWK, 'kty' | 'crv' | 'x' | 'y' | 'e' | 'n'>
 
-  /** "typ" (Type) Header Parameter. */
+  /** "typ" (Type) Header Parameter */
   typ?: string
 
-  /** "cty" (Content Type) Header Parameter. */
+  /** "cty" (Content Type) Header Parameter */
   cty?: string
 }
 
 /** Recognized JWS Header Parameters, any other Header Members may also be present. */
 export interface JWSHeaderParameters extends JoseHeaderParameters {
-  /** JWS "alg" (Algorithm) Header Parameter. */
+  /**
+   * JWS "alg" (Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}
+   */
   alg?: string
 
   /**
@@ -305,7 +314,7 @@ export interface JWSHeaderParameters extends JoseHeaderParameters {
    */
   b64?: boolean
 
-  /** JWS "crit" (Critical) Header Parameter. */
+  /** JWS "crit" (Critical) Header Parameter */
   crit?: string[]
 
   /** Any other JWS Header member. */
@@ -398,13 +407,21 @@ export interface GeneralJWE extends Omit<FlattenedJWE, 'encrypted_key' | 'header
 
 /** Recognized JWE Header Parameters, any other Header members may also be present. */
 export interface JWEHeaderParameters extends JoseHeaderParameters {
-  /** JWE "alg" (Algorithm) Header Parameter. */
+  /**
+   * JWE "alg" (Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}
+   */
   alg?: string
 
-  /** JWE "enc" (Encryption Algorithm) Header Parameter. */
+  /**
+   * JWE "enc" (Encryption Algorithm) Header Parameter
+   *
+   * @see {@link https://github.com/panva/jose/issues/210#jwe-alg Algorithm Key Requirements}
+   */
   enc?: string
 
-  /** JWE "crit" (Critical) Header Parameter. */
+  /** JWE "crit" (Critical) Header Parameter */
   crit?: string[]
 
   /**

package/dist/types/util/base64url.d.ts

@@ -1,5 +1,5 @@
 /**
- * Utility function to encode a string or Uint8Array as a base64url string.
+ * Utility function to encode a string or {@link !Uint8Array} as a base64url string.
  *
  * @param input Value that will be base64url-encoded.
  */

package/dist/types/util/errors.d.ts

@@ -9,11 +9,13 @@ export declare class JOSEError extends Error {
      *
      * @ignore
      */
-    static get code(): string;
+    static code: string;
     /** A unique error code for this particular error subclass. */
     code: string;
     /** @ignore */
-    constructor(message?: string);
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
 }
 /**
  * An error subclass thrown when a JWT Claim Set member validation fails.
@@ -21,7 +23,7 @@ export declare class JOSEError extends Error {
  */
 export declare class JWTClaimValidationFailed extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWT_CLAIM_VALIDATION_FAILED';
+    static code: string;
     code: string;
     /** The Claim for which the validation failed. */
     claim: string;
@@ -43,7 +45,7 @@ export declare class JWTClaimValidationFailed extends JOSEError {
  */
 export declare class JWTExpired extends JOSEError implements JWTClaimValidationFailed {
     /** @ignore */
-    static get code(): 'ERR_JWT_EXPIRED';
+    static code: string;
     code: string;
     /** The Claim for which the validation failed. */
     claim: string;
@@ -65,7 +67,7 @@ export declare class JWTExpired extends JOSEError implements JWTClaimValidationF
  */
 export declare class JOSEAlgNotAllowed extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JOSE_ALG_NOT_ALLOWED';
+    static code: string;
     code: string;
 }
 /**
@@ -75,7 +77,7 @@ export declare class JOSEAlgNotAllowed extends JOSEError {
  */
 export declare class JOSENotSupported extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JOSE_NOT_SUPPORTED';
+    static code: string;
     code: string;
 }
 /**
@@ -84,9 +86,12 @@ export declare class JOSENotSupported extends JOSEError {
  */
 export declare class JWEDecryptionFailed extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWE_DECRYPTION_FAILED';
+    static code: string;
     code: string;
-    message: string;
+    /** @ignore */
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
 }
 /**
  * An error subclass thrown when a JWE is invalid.
@@ -94,7 +99,7 @@ export declare class JWEDecryptionFailed extends JOSEError {
  */
 export declare class JWEInvalid extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWE_INVALID';
+    static code: string;
     code: string;
 }
 /**
@@ -103,7 +108,7 @@ export declare class JWEInvalid extends JOSEError {
  */
 export declare class JWSInvalid extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWS_INVALID';
+    static code: string;
     code: string;
 }
 /**
@@ -112,7 +117,7 @@ export declare class JWSInvalid extends JOSEError {
  */
 export declare class JWTInvalid extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWT_INVALID';
+    static code: string;
     code: string;
 }
 /**
@@ -121,7 +126,7 @@ export declare class JWTInvalid extends JOSEError {
  */
 export declare class JWKInvalid extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWK_INVALID';
+    static code: string;
     code: string;
 }
 /**
@@ -130,7 +135,7 @@ export declare class JWKInvalid extends JOSEError {
  */
 export declare class JWKSInvalid extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWKS_INVALID';
+    static code: string;
     code: string;
 }
 /**
@@ -139,9 +144,12 @@ export declare class JWKSInvalid extends JOSEError {
  */
 export declare class JWKSNoMatchingKey extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWKS_NO_MATCHING_KEY';
+    static code: string;
     code: string;
-    message: string;
+    /** @ignore */
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
 }
 /**
  * An error subclass thrown when multiple keys match from a JWKS.
@@ -150,9 +158,13 @@ export declare class JWKSNoMatchingKey extends JOSEError {
 export declare class JWKSMultipleMatchingKeys extends JOSEError {
     /** @ignore */
     [Symbol.asyncIterator]: () => AsyncIterableIterator<KeyLike>;
-    static get code(): 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
+    /** @ignore */
+    static code: string;
     code: string;
-    message: string;
+    /** @ignore */
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
 }
 /**
  * Timeout was reached when retrieving the JWKS response.
@@ -160,9 +172,12 @@ export declare class JWKSMultipleMatchingKeys extends JOSEError {
  */
 export declare class JWKSTimeout extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWKS_TIMEOUT';
+    static code: string;
     code: string;
-    message: string;
+    /** @ignore */
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
 }
 /**
  * An error subclass thrown when JWS signature verification fails.
@@ -170,7 +185,10 @@ export declare class JWKSTimeout extends JOSEError {
  */
 export declare class JWSSignatureVerificationFailed extends JOSEError {
     /** @ignore */
-    static get code(): 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
+    static code: string;
     code: string;
-    message: string;
+    /** @ignore */
+    constructor(message?: string, options?: {
+        cause?: unknown;
+    });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "5.9.2",
+  "version": "5.9.4",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "browser",