jose 5.9.5 → 5.10.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (25) hide show
  1. package/README.md +12 -10
  2. package/dist/browser/jwks/local.js +6 -3
  3. package/dist/browser/jwks/remote.js +1 -1
  4. package/dist/browser/key/import.js +1 -1
  5. package/dist/browser/lib/crypto_key.js +5 -0
  6. package/dist/browser/runtime/asn1.js +4 -0
  7. package/dist/browser/runtime/generate.js +4 -0
  8. package/dist/browser/runtime/jwk_to_key.js +4 -0
  9. package/dist/browser/runtime/subtle_dsa.js +2 -0
  10. package/dist/node/cjs/jwks/local.js +6 -3
  11. package/dist/node/cjs/jwks/remote.js +1 -1
  12. package/dist/node/cjs/key/import.js +1 -1
  13. package/dist/node/cjs/lib/crypto_key.js +5 -0
  14. package/dist/node/cjs/runtime/dsa_digest.js +1 -0
  15. package/dist/node/cjs/runtime/generate.js +2 -0
  16. package/dist/node/cjs/runtime/node_key.js +5 -0
  17. package/dist/node/esm/jwks/local.js +6 -3
  18. package/dist/node/esm/jwks/remote.js +1 -1
  19. package/dist/node/esm/key/import.js +1 -1
  20. package/dist/node/esm/lib/crypto_key.js +5 -0
  21. package/dist/node/esm/runtime/dsa_digest.js +1 -0
  22. package/dist/node/esm/runtime/generate.js +2 -0
  23. package/dist/node/esm/runtime/node_key.js +5 -0
  24. package/dist/types/types.d.ts +11 -30
  25. package/package.json +211 -151
package/README.md CHANGED
@@ -5,9 +5,9 @@
5
5
  ## Sponsor
6
6
 
7
7
  <picture>
8
- <source media="(prefers-color-scheme: dark)" srcset="./sponsor/Auth0byOkta_dark.png">
9
- <source media="(prefers-color-scheme: light)" srcset="./sponsor/Auth0byOkta_light.png">
10
- <img height="65" align="left" alt="Auth0 by Okta" src="./sponsor/Auth0byOkta_light.png">
8
+ <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/panva/jose/HEAD/sponsor/Auth0byOkta_dark.png">
9
+ <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/panva/jose/HEAD/sponsor/Auth0byOkta_light.png">
10
+ <img height="65" align="left" alt="Auth0 by Okta" src="https://raw.githubusercontent.com/panva/jose/HEAD/sponsor/Auth0byOkta_light.png">
11
11
  </picture>
12
12
 
13
13
  If you want to quickly add JWT authentication to JavaScript apps, feel free to check out Auth0's JavaScript SDK and free plan. [Create an Auth0 account; it's free!][sponsor-auth0]<br><br>
@@ -25,11 +25,13 @@ Support from the community to continue maintaining and improving this module is
25
25
  `jose` is distributed via [npmjs.com](https://www.npmjs.com/package/jose), [deno.land/x](https://deno.land/x/jose), [cdnjs.com](https://cdnjs.com/libraries/jose), [jsdelivr.com](https://www.jsdelivr.com/package/npm/jose), and [github.com](https://github.com/panva/jose).
26
26
 
27
27
  **`example`** ESM import
28
+
28
29
  ```js
29
30
  import * as jose from 'jose'
30
31
  ```
31
32
 
32
33
  **`example`** CJS require
34
+
33
35
  ```js
34
36
  const jose = require('jose')
35
37
  ```
@@ -107,6 +109,7 @@ The following are additional features and utilities provided by the `jose` modul
107
109
  The `jose` module is compatible with JavaScript runtimes that support the utilized Web API globals and standard built-in objects or are Node.js.
108
110
 
109
111
  The following runtimes are supported _(this is not an exhaustive list)_:
112
+
110
113
  - [Bun](https://github.com/panva/jose/issues/471)
111
114
  - [Browsers](https://github.com/panva/jose/issues/263)
112
115
  - [Cloudflare Workers](https://github.com/panva/jose/issues/265)
@@ -119,11 +122,11 @@ Please note that certain algorithms may not be available depending on the runtim
119
122
 
120
123
  ## Supported Versions
121
124
 
122
- | Version | Security Fixes 🔑 | Other Bug Fixes 🐞 | New Features ⭐ |
123
- | ------- | --------- | -------- | -------- |
124
- | [v5.x](https://github.com/panva/jose/tree/v5.x) | ✅ | ✅ | ✅ |
125
- | [v4.x](https://github.com/panva/jose/tree/v4.x) | ✅ | ❌ | ❌ |
126
- | [v2.x](https://github.com/panva/jose/tree/v2.x) | ✅ | ❌ | ❌ |
125
+ | Version | Security Fixes 🔑 | Other Bug Fixes 🐞 | New Features ⭐ |
126
+ | ----------------------------------------------- | ----------------- | ------------------ | --------------- |
127
+ | [v5.x](https://github.com/panva/jose/tree/v5.x) | ✅ | ✅ | ✅ |
128
+ | [v4.x](https://github.com/panva/jose/tree/v4.x) | ✅ | ❌ | ❌ |
129
+ | [v2.x](https://github.com/panva/jose/tree/v2.x) | ✅ | ❌ | ❌ |
127
130
 
128
131
  ## Specifications
129
132
 
@@ -143,7 +146,6 @@ Please note that certain algorithms may not be available depending on the runtim
143
146
 
144
147
  The algorithm implementations in `jose` have been tested using test vectors from their respective specifications as well as [RFC7520](https://www.rfc-editor.org/rfc/rfc7520).
145
148
 
146
-
147
149
  </details>
148
150
 
149
- [sponsor-auth0]: https://auth0.com/signup?utm_source=external_sites&utm_medium=panva&utm_campaign=devn_signup
151
+ [sponsor-auth0]: https://a0.to/signup/panva
package/dist/browser/jwks/local.js CHANGED
@@ -54,9 +54,6 @@ class LocalJWKSet {
54
54
  if (candidate && Array.isArray(jwk.key_ops)) {
55
55
  candidate = jwk.key_ops.includes('verify');
56
56
  }
57
- if (candidate && alg === 'EdDSA') {
58
- candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';
59
- }
60
57
  if (candidate) {
61
58
  switch (alg) {
62
59
  case 'ES256':
@@ -71,6 +68,12 @@ class LocalJWKSet {
71
68
  case 'ES512':
72
69
  candidate = jwk.crv === 'P-521';
73
70
  break;
71
+ case 'Ed25519':
72
+ candidate = jwk.crv === 'Ed25519';
73
+ break;
74
+ case 'EdDSA':
75
+ candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';
76
+ break;
74
77
  }
75
78
  }
76
79
  return candidate;
package/dist/browser/jwks/remote.js CHANGED
@@ -10,7 +10,7 @@ function isCloudflareWorkers() {
10
10
  let USER_AGENT;
11
11
  if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
12
12
  const NAME = 'jose';
13
- const VERSION = 'v5.9.5';
13
+ const VERSION = 'v5.10.0';
14
14
  USER_AGENT = `${NAME}/${VERSION}`;
15
15
  }
16
16
  export const jwksCache = Symbol();
package/dist/browser/key/import.js CHANGED
@@ -33,7 +33,7 @@ export async function importJWK(jwk, alg) {
33
33
  }
34
34
  return decodeBase64URL(jwk.k);
35
35
  case 'RSA':
36
- if (jwk.oth !== undefined) {
36
+ if ('oth' in jwk && jwk.oth !== undefined) {
37
37
  throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
38
38
  }
39
39
  case 'EC':
package/dist/browser/lib/crypto_key.js CHANGED
@@ -76,6 +76,11 @@ export function checkSigCryptoKey(key, alg, ...usages) {
76
76
  }
77
77
  break;
78
78
  }
79
+ case 'Ed25519': {
80
+ if (!isAlgorithm(key.algorithm, 'Ed25519'))
81
+ throw unusable('Ed25519');
82
+ break;
83
+ }
79
84
  case 'ES256':
80
85
  case 'ES384':
81
86
  case 'ES512': {
package/dist/browser/runtime/asn1.js CHANGED
@@ -106,6 +106,10 @@ const genericImport = async (replace, keyFormat, pem, alg, options) => {
106
106
  keyUsages = isPublic ? [] : ['deriveBits'];
107
107
  break;
108
108
  }
109
+ case 'Ed25519':
110
+ algorithm = { name: 'Ed25519' };
111
+ keyUsages = isPublic ? ['verify'] : ['sign'];
112
+ break;
109
113
  case 'EdDSA':
110
114
  algorithm = { name: getNamedCurve(keyData) };
111
115
  keyUsages = isPublic ? ['verify'] : ['sign'];
package/dist/browser/runtime/generate.js CHANGED
@@ -97,6 +97,10 @@ export async function generateKeyPair(alg, options) {
97
97
  algorithm = { name: 'ECDSA', namedCurve: 'P-521' };
98
98
  keyUsages = ['sign', 'verify'];
99
99
  break;
100
+ case 'Ed25519':
101
+ algorithm = { name: 'Ed25519' };
102
+ keyUsages = ['sign', 'verify'];
103
+ break;
100
104
  case 'EdDSA': {
101
105
  keyUsages = ['sign', 'verify'];
102
106
  const crv = options?.crv ?? 'Ed25519';
package/dist/browser/runtime/jwk_to_key.js CHANGED
@@ -61,6 +61,10 @@ function subtleMapping(jwk) {
61
61
  }
62
62
  case 'OKP': {
63
63
  switch (jwk.alg) {
64
+ case 'Ed25519':
65
+ algorithm = { name: 'Ed25519' };
66
+ keyUsages = jwk.d ? ['sign'] : ['verify'];
67
+ break;
64
68
  case 'EdDSA':
65
69
  algorithm = { name: jwk.crv };
66
70
  keyUsages = jwk.d ? ['sign'] : ['verify'];
package/dist/browser/runtime/subtle_dsa.js CHANGED
@@ -18,6 +18,8 @@ export default function subtleDsa(alg, algorithm) {
18
18
  case 'ES384':
19
19
  case 'ES512':
20
20
  return { hash, name: 'ECDSA', namedCurve: algorithm.namedCurve };
21
+ case 'Ed25519':
22
+ return { name: 'Ed25519' };
21
23
  case 'EdDSA':
22
24
  return { name: algorithm.name };
23
25
  default:
package/dist/node/cjs/jwks/local.js CHANGED
@@ -58,9 +58,6 @@ class LocalJWKSet {
58
58
  if (candidate && Array.isArray(jwk.key_ops)) {
59
59
  candidate = jwk.key_ops.includes('verify');
60
60
  }
61
- if (candidate && alg === 'EdDSA') {
62
- candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';
63
- }
64
61
  if (candidate) {
65
62
  switch (alg) {
66
63
  case 'ES256':
@@ -75,6 +72,12 @@ class LocalJWKSet {
75
72
  case 'ES512':
76
73
  candidate = jwk.crv === 'P-521';
77
74
  break;
75
+ case 'Ed25519':
76
+ candidate = jwk.crv === 'Ed25519';
77
+ break;
78
+ case 'EdDSA':
79
+ candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';
80
+ break;
78
81
  }
79
82
  }
80
83
  return candidate;
package/dist/node/cjs/jwks/remote.js CHANGED
@@ -14,7 +14,7 @@ function isCloudflareWorkers() {
14
14
  let USER_AGENT;
15
15
  if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
16
16
  const NAME = 'jose';
17
- const VERSION = 'v5.9.5';
17
+ const VERSION = 'v5.10.0';
18
18
  USER_AGENT = `${NAME}/${VERSION}`;
19
19
  }
20
20
  exports.jwksCache = Symbol();
package/dist/node/cjs/key/import.js CHANGED
@@ -39,7 +39,7 @@ async function importJWK(jwk, alg) {
39
39
  }
40
40
  return (0, base64url_js_1.decode)(jwk.k);
41
41
  case 'RSA':
42
- if (jwk.oth !== undefined) {
42
+ if ('oth' in jwk && jwk.oth !== undefined) {
43
43
  throw new errors_js_1.JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
44
44
  }
45
45
  case 'EC':
package/dist/node/cjs/lib/crypto_key.js CHANGED
@@ -80,6 +80,11 @@ function checkSigCryptoKey(key, alg, ...usages) {
80
80
  }
81
81
  break;
82
82
  }
83
+ case 'Ed25519': {
84
+ if (!isAlgorithm(key.algorithm, 'Ed25519'))
85
+ throw unusable('Ed25519');
86
+ break;
87
+ }
83
88
  case 'ES256':
84
89
  case 'ES384':
85
90
  case 'ES512': {
package/dist/node/cjs/runtime/dsa_digest.js CHANGED
@@ -17,6 +17,7 @@ function dsaDigest(alg) {
17
17
  case 'RS512':
18
18
  case 'ES512':
19
19
  return 'sha512';
20
+ case 'Ed25519':
20
21
  case 'EdDSA':
21
22
  return undefined;
22
23
  default:
package/dist/node/cjs/runtime/generate.js CHANGED
@@ -65,6 +65,8 @@ async function generateKeyPair(alg, options) {
65
65
  return generate('ec', { namedCurve: 'P-384' });
66
66
  case 'ES512':
67
67
  return generate('ec', { namedCurve: 'P-521' });
68
+ case 'Ed25519':
69
+ return generate('ed25519');
68
70
  case 'EdDSA': {
69
71
  switch (options?.crv) {
70
72
  case undefined:
package/dist/node/cjs/runtime/node_key.js CHANGED
@@ -45,6 +45,11 @@ function keyForCrypto(alg, key) {
45
45
  }
46
46
  let options;
47
47
  switch (alg) {
48
+ case 'Ed25519':
49
+ if (asymmetricKeyType !== 'ed25519') {
50
+ throw new TypeError(`Invalid key for this operation, its asymmetricKeyType must be ed25519`);
51
+ }
52
+ break;
48
53
  case 'EdDSA':
49
54
  if (!['ed25519', 'ed448'].includes(asymmetricKeyType)) {
50
55
  throw new TypeError('Invalid key for this operation, its asymmetricKeyType must be ed25519 or ed448');
package/dist/node/esm/jwks/local.js CHANGED
@@ -55,9 +55,6 @@ class LocalJWKSet {
55
55
  if (candidate && Array.isArray(jwk.key_ops)) {
56
56
  candidate = jwk.key_ops.includes('verify');
57
57
  }
58
- if (candidate && alg === 'EdDSA') {
59
- candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';
60
- }
61
58
  if (candidate) {
62
59
  switch (alg) {
63
60
  case 'ES256':
@@ -72,6 +69,12 @@ class LocalJWKSet {
72
69
  case 'ES512':
73
70
  candidate = jwk.crv === 'P-521';
74
71
  break;
72
+ case 'Ed25519':
73
+ candidate = jwk.crv === 'Ed25519';
74
+ break;
75
+ case 'EdDSA':
76
+ candidate = jwk.crv === 'Ed25519' || jwk.crv === 'Ed448';
77
+ break;
75
78
  }
76
79
  }
77
80
  return candidate;
package/dist/node/esm/jwks/remote.js CHANGED
@@ -10,7 +10,7 @@ function isCloudflareWorkers() {
10
10
  let USER_AGENT;
11
11
  if (typeof navigator === 'undefined' || !navigator.userAgent?.startsWith?.('Mozilla/5.0 ')) {
12
12
  const NAME = 'jose';
13
- const VERSION = 'v5.9.5';
13
+ const VERSION = 'v5.10.0';
14
14
  USER_AGENT = `${NAME}/${VERSION}`;
15
15
  }
16
16
  export const jwksCache = Symbol();
package/dist/node/esm/key/import.js CHANGED
@@ -33,7 +33,7 @@ export async function importJWK(jwk, alg) {
33
33
  }
34
34
  return decodeBase64URL(jwk.k);
35
35
  case 'RSA':
36
- if (jwk.oth !== undefined) {
36
+ if ('oth' in jwk && jwk.oth !== undefined) {
37
37
  throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
38
38
  }
39
39
  case 'EC':
package/dist/node/esm/lib/crypto_key.js CHANGED
@@ -76,6 +76,11 @@ export function checkSigCryptoKey(key, alg, ...usages) {
76
76
  }
77
77
  break;
78
78
  }
79
+ case 'Ed25519': {
80
+ if (!isAlgorithm(key.algorithm, 'Ed25519'))
81
+ throw unusable('Ed25519');
82
+ break;
83
+ }
79
84
  case 'ES256':
80
85
  case 'ES384':
81
86
  case 'ES512': {
package/dist/node/esm/runtime/dsa_digest.js CHANGED
@@ -14,6 +14,7 @@ export default function dsaDigest(alg) {
14
14
  case 'RS512':
15
15
  case 'ES512':
16
16
  return 'sha512';
17
+ case 'Ed25519':
17
18
  case 'EdDSA':
18
19
  return undefined;
19
20
  default:
package/dist/node/esm/runtime/generate.js CHANGED
@@ -61,6 +61,8 @@ export async function generateKeyPair(alg, options) {
61
61
  return generate('ec', { namedCurve: 'P-384' });
62
62
  case 'ES512':
63
63
  return generate('ec', { namedCurve: 'P-521' });
64
+ case 'Ed25519':
65
+ return generate('ed25519');
64
66
  case 'EdDSA': {
65
67
  switch (options?.crv) {
66
68
  case undefined:
package/dist/node/esm/runtime/node_key.js CHANGED
@@ -42,6 +42,11 @@ export default function keyForCrypto(alg, key) {
42
42
  }
43
43
  let options;
44
44
  switch (alg) {
45
+ case 'Ed25519':
46
+ if (asymmetricKeyType !== 'ed25519') {
47
+ throw new TypeError(`Invalid key for this operation, its asymmetricKeyType must be ed25519`);
48
+ }
49
+ break;
45
50
  case 'EdDSA':
46
51
  if (!['ed25519', 'ed448'].includes(asymmetricKeyType)) {
47
52
  throw new TypeError('Invalid key for this operation, its asymmetricKeyType must be ed25519 or ed448');
package/dist/types/types.d.ts CHANGED
@@ -96,16 +96,6 @@ export interface JWK_RSA_Private extends JWK_RSA_Public, JWKParameters {
96
96
  dp: string
97
97
  /** RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
98
98
  dq: string
99
- /**
100
- * RSA JWK "oth" (Other Primes Info) Parameter
101
- *
102
- * This parameter is not supported
103
- */
104
- oth?: Array<{
105
- d?: string
106
- r?: string
107
- t?: string
108
- }>
109
99
  /** RSA JWK "p" (First Prime Factor) Parameter */
110
100
  p: string
111
101
  /** RSA JWK "q" (Second Prime Factor) Parameter */
@@ -154,16 +144,6 @@ export interface JWK extends JWKParameters {
154
144
  k?: string
155
145
  /** RSA JWK "n" (Modulus) Parameter */
156
146
  n?: string
157
- /**
158
- * Private RSA JWK "oth" (Other Primes Info) Parameter
159
- *
160
- * This parameter is not supported
161
- */
162
- oth?: Array<{
163
- d?: string
164
- r?: string
165
- t?: string
166
- }>
167
147
  /** Private RSA JWK "p" (First Prime Factor) Parameter */
168
148
  p?: string
169
149
  /** Private RSA JWK "q" (Second Prime Factor) Parameter */
@@ -499,10 +479,13 @@ export interface JWTClaimVerificationOptions {
499
479
  audience?: string | string[]
500
480
 
501
481
  /**
502
- * Expected clock tolerance
482
+ * Clock skew tolerance
503
483
  *
504
484
  * - In seconds when number (e.g. 5)
505
- * - Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
485
+ * - Resolved into a number of seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
486
+ *
487
+ * Used when validating the JWT "nbf" (Not Before) and "exp" (Expiration Time) claims, and when
488
+ * validating the "iat" (Issued At) claim if the {@link maxTokenAge `maxTokenAge` option} is set.
506
489
  */
507
490
  clockTolerance?: string | number
508
491
 
@@ -517,7 +500,7 @@ export interface JWTClaimVerificationOptions {
517
500
  * Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.
518
501
  *
519
502
  * - In seconds when number (e.g. 5)
520
- * - Parsed as seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
503
+ * - Resolved into a number of seconds when a string (e.g. "5 seconds", "10 minutes", "2 hours").
521
504
  *
522
505
  * This option makes the JWT "iat" (Issued At) Claim presence required.
523
506
  */
@@ -542,13 +525,11 @@ export interface JWTClaimVerificationOptions {
542
525
 
543
526
  /**
544
527
  * Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if
545
- * the {@link JWTClaimVerificationOptions.issuer `issuer` option} is set, then JWT "iss" (Issuer)
546
- * Claim must be present; if the {@link JWTClaimVerificationOptions.audience `audience` option} is
547
- * set, then JWT "aud" (Audience) Claim must be present; if the
548
- * {@link JWTClaimVerificationOptions.subject `subject` option} is set, then JWT "sub" (Subject)
549
- * Claim must be present; if the
550
- * {@link JWTClaimVerificationOptions.maxTokenAge `maxTokenAge` option} is set, then JWT "iat"
551
- * (Issued At) Claim must be present.
528
+ * the {@link issuer `issuer` option} is set, then JWT "iss" (Issuer) Claim must be present; if the
529
+ * {@link audience `audience` option} is set, then JWT "aud" (Audience) Claim must be present; if
530
+ * the {@link subject `subject` option} is set, then JWT "sub" (Subject) Claim must be present; if
531
+ * the {@link maxTokenAge `maxTokenAge` option} is set, then JWT "iat" (Issued At) Claim must be
532
+ * present.
552
533
  */
553
534
  requiredClaims?: string[]
554
535
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "jose",
3
- "version": "5.9.5",
3
+ "version": "5.10.0",
4
4
  "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
5
5
  "keywords": [
6
6
  "browser",
@@ -62,243 +62,303 @@
62
62
  "exports": {
63
63
  ".": {
64
64
  "types": "./dist/types/index.d.ts",
65
- "node": {
66
- "import": "./dist/node/esm/index.js",
67
- "require": "./dist/node/cjs/index.js"
68
- },
69
- "default": "./dist/browser/index.js"
65
+ "bun": "./dist/browser/index.js",
66
+ "deno": "./dist/browser/index.js",
67
+ "browser": "./dist/browser/index.js",
68
+ "worker": "./dist/browser/index.js",
69
+ "workerd": "./dist/browser/index.js",
70
+ "import": "./dist/node/esm/index.js",
71
+ "require": "./dist/node/cjs/index.js"
70
72
  },
71
73
  "./jwk/embedded": {
72
74
  "types": "./dist/types/jwk/embedded.d.ts",
73
- "node": {
74
- "import": "./dist/node/esm/jwk/embedded.js",
75
- "require": "./dist/node/cjs/jwk/embedded.js"
76
- },
77
- "default": "./dist/browser/jwk/embedded.js"
75
+ "bun": "./dist/browser/jwk/embedded.js",
76
+ "deno": "./dist/browser/jwk/embedded.js",
77
+ "browser": "./dist/browser/jwk/embedded.js",
78
+ "worker": "./dist/browser/jwk/embedded.js",
79
+ "workerd": "./dist/browser/jwk/embedded.js",
80
+ "import": "./dist/node/esm/jwk/embedded.js",
81
+ "require": "./dist/node/cjs/jwk/embedded.js"
78
82
  },
79
83
  "./jwk/thumbprint": {
80
84
  "types": "./dist/types/jwk/thumbprint.d.ts",
81
- "node": {
82
- "import": "./dist/node/esm/jwk/thumbprint.js",
83
- "require": "./dist/node/cjs/jwk/thumbprint.js"
84
- },
85
- "default": "./dist/browser/jwk/thumbprint.js"
85
+ "bun": "./dist/browser/jwk/thumbprint.js",
86
+ "deno": "./dist/browser/jwk/thumbprint.js",
87
+ "browser": "./dist/browser/jwk/thumbprint.js",
88
+ "worker": "./dist/browser/jwk/thumbprint.js",
89
+ "workerd": "./dist/browser/jwk/thumbprint.js",
90
+ "import": "./dist/node/esm/jwk/thumbprint.js",
91
+ "require": "./dist/node/cjs/jwk/thumbprint.js"
86
92
  },
87
93
  "./key/import": {
88
94
  "types": "./dist/types/key/import.d.ts",
89
- "node": {
90
- "import": "./dist/node/esm/key/import.js",
91
- "require": "./dist/node/cjs/key/import.js"
92
- },
93
- "default": "./dist/browser/key/import.js"
95
+ "bun": "./dist/browser/key/import.js",
96
+ "deno": "./dist/browser/key/import.js",
97
+ "browser": "./dist/browser/key/import.js",
98
+ "worker": "./dist/browser/key/import.js",
99
+ "workerd": "./dist/browser/key/import.js",
100
+ "import": "./dist/node/esm/key/import.js",
101
+ "require": "./dist/node/cjs/key/import.js"
94
102
  },
95
103
  "./key/export": {
96
104
  "types": "./dist/types/key/export.d.ts",
97
- "node": {
98
- "import": "./dist/node/esm/key/export.js",
99
- "require": "./dist/node/cjs/key/export.js"
100
- },
101
- "default": "./dist/browser/key/export.js"
105
+ "bun": "./dist/browser/key/export.js",
106
+ "deno": "./dist/browser/key/export.js",
107
+ "browser": "./dist/browser/key/export.js",
108
+ "worker": "./dist/browser/key/export.js",
109
+ "workerd": "./dist/browser/key/export.js",
110
+ "import": "./dist/node/esm/key/export.js",
111
+ "require": "./dist/node/cjs/key/export.js"
102
112
  },
103
113
  "./key/generate/keypair": {
104
114
  "types": "./dist/types/key/generate_key_pair.d.ts",
105
- "node": {
106
- "import": "./dist/node/esm/key/generate_key_pair.js",
107
- "require": "./dist/node/cjs/key/generate_key_pair.js"
108
- },
109
- "default": "./dist/browser/key/generate_key_pair.js"
115
+ "bun": "./dist/browser/key/generate_key_pair.js",
116
+ "deno": "./dist/browser/key/generate_key_pair.js",
117
+ "browser": "./dist/browser/key/generate_key_pair.js",
118
+ "worker": "./dist/browser/key/generate_key_pair.js",
119
+ "workerd": "./dist/browser/key/generate_key_pair.js",
120
+ "import": "./dist/node/esm/key/generate_key_pair.js",
121
+ "require": "./dist/node/cjs/key/generate_key_pair.js"
110
122
  },
111
123
  "./key/generate/secret": {
112
124
  "types": "./dist/types/key/generate_secret.d.ts",
113
- "node": {
114
- "import": "./dist/node/esm/key/generate_secret.js",
115
- "require": "./dist/node/cjs/key/generate_secret.js"
116
- },
117
- "default": "./dist/browser/key/generate_secret.js"
125
+ "bun": "./dist/browser/key/generate_secret.js",
126
+ "deno": "./dist/browser/key/generate_secret.js",
127
+ "browser": "./dist/browser/key/generate_secret.js",
128
+ "worker": "./dist/browser/key/generate_secret.js",
129
+ "workerd": "./dist/browser/key/generate_secret.js",
130
+ "import": "./dist/node/esm/key/generate_secret.js",
131
+ "require": "./dist/node/cjs/key/generate_secret.js"
118
132
  },
119
133
  "./jwks/remote": {
120
134
  "types": "./dist/types/jwks/remote.d.ts",
121
- "node": {
122
- "import": "./dist/node/esm/jwks/remote.js",
123
- "require": "./dist/node/cjs/jwks/remote.js"
124
- },
125
- "default": "./dist/browser/jwks/remote.js"
135
+ "bun": "./dist/browser/jwks/remote.js",
136
+ "deno": "./dist/browser/jwks/remote.js",
137
+ "browser": "./dist/browser/jwks/remote.js",
138
+ "worker": "./dist/browser/jwks/remote.js",
139
+ "workerd": "./dist/browser/jwks/remote.js",
140
+ "import": "./dist/node/esm/jwks/remote.js",
141
+ "require": "./dist/node/cjs/jwks/remote.js"
126
142
  },
127
143
  "./jwks/local": {
128
144
  "types": "./dist/types/jwks/local.d.ts",
129
- "node": {
130
- "import": "./dist/node/esm/jwks/local.js",
131
- "require": "./dist/node/cjs/jwks/local.js"
132
- },
133
- "default": "./dist/browser/jwks/local.js"
145
+ "bun": "./dist/browser/jwks/local.js",
146
+ "deno": "./dist/browser/jwks/local.js",
147
+ "browser": "./dist/browser/jwks/local.js",
148
+ "worker": "./dist/browser/jwks/local.js",
149
+ "workerd": "./dist/browser/jwks/local.js",
150
+ "import": "./dist/node/esm/jwks/local.js",
151
+ "require": "./dist/node/cjs/jwks/local.js"
134
152
  },
135
153
  "./jwt/sign": {
136
154
  "types": "./dist/types/jwt/sign.d.ts",
137
- "node": {
138
- "import": "./dist/node/esm/jwt/sign.js",
139
- "require": "./dist/node/cjs/jwt/sign.js"
140
- },
141
- "default": "./dist/browser/jwt/sign.js"
155
+ "bun": "./dist/browser/jwt/sign.js",
156
+ "deno": "./dist/browser/jwt/sign.js",
157
+ "browser": "./dist/browser/jwt/sign.js",
158
+ "worker": "./dist/browser/jwt/sign.js",
159
+ "workerd": "./dist/browser/jwt/sign.js",
160
+ "import": "./dist/node/esm/jwt/sign.js",
161
+ "require": "./dist/node/cjs/jwt/sign.js"
142
162
  },
143
163
  "./jwt/verify": {
144
164
  "types": "./dist/types/jwt/verify.d.ts",
145
- "node": {
146
- "import": "./dist/node/esm/jwt/verify.js",
147
- "require": "./dist/node/cjs/jwt/verify.js"
148
- },
149
- "default": "./dist/browser/jwt/verify.js"
165
+ "bun": "./dist/browser/jwt/verify.js",
166
+ "deno": "./dist/browser/jwt/verify.js",
167
+ "browser": "./dist/browser/jwt/verify.js",
168
+ "worker": "./dist/browser/jwt/verify.js",
169
+ "workerd": "./dist/browser/jwt/verify.js",
170
+ "import": "./dist/node/esm/jwt/verify.js",
171
+ "require": "./dist/node/cjs/jwt/verify.js"
150
172
  },
151
173
  "./jwt/encrypt": {
152
174
  "types": "./dist/types/jwt/encrypt.d.ts",
153
- "node": {
154
- "import": "./dist/node/esm/jwt/encrypt.js",
155
- "require": "./dist/node/cjs/jwt/encrypt.js"
156
- },
157
- "default": "./dist/browser/jwt/encrypt.js"
175
+ "bun": "./dist/browser/jwt/encrypt.js",
176
+ "deno": "./dist/browser/jwt/encrypt.js",
177
+ "browser": "./dist/browser/jwt/encrypt.js",
178
+ "worker": "./dist/browser/jwt/encrypt.js",
179
+ "workerd": "./dist/browser/jwt/encrypt.js",
180
+ "import": "./dist/node/esm/jwt/encrypt.js",
181
+ "require": "./dist/node/cjs/jwt/encrypt.js"
158
182
  },
159
183
  "./jwt/decrypt": {
160
184
  "types": "./dist/types/jwt/decrypt.d.ts",
161
- "node": {
162
- "import": "./dist/node/esm/jwt/decrypt.js",
163
- "require": "./dist/node/cjs/jwt/decrypt.js"
164
- },
165
- "default": "./dist/browser/jwt/decrypt.js"
185
+ "bun": "./dist/browser/jwt/decrypt.js",
186
+ "deno": "./dist/browser/jwt/decrypt.js",
187
+ "browser": "./dist/browser/jwt/decrypt.js",
188
+ "worker": "./dist/browser/jwt/decrypt.js",
189
+ "workerd": "./dist/browser/jwt/decrypt.js",
190
+ "import": "./dist/node/esm/jwt/decrypt.js",
191
+ "require": "./dist/node/cjs/jwt/decrypt.js"
166
192
  },
167
193
  "./jwt/unsecured": {
168
194
  "types": "./dist/types/jwt/unsecured.d.ts",
169
- "node": {
170
- "import": "./dist/node/esm/jwt/unsecured.js",
171
- "require": "./dist/node/cjs/jwt/unsecured.js"
172
- },
173
- "default": "./dist/browser/jwt/unsecured.js"
195
+ "bun": "./dist/browser/jwt/unsecured.js",
196
+ "deno": "./dist/browser/jwt/unsecured.js",
197
+ "browser": "./dist/browser/jwt/unsecured.js",
198
+ "worker": "./dist/browser/jwt/unsecured.js",
199
+ "workerd": "./dist/browser/jwt/unsecured.js",
200
+ "import": "./dist/node/esm/jwt/unsecured.js",
201
+ "require": "./dist/node/cjs/jwt/unsecured.js"
174
202
  },
175
203
  "./jwt/decode": {
176
204
  "types": "./dist/types/util/decode_jwt.d.ts",
177
- "node": {
178
- "import": "./dist/node/esm/util/decode_jwt.js",
179
- "require": "./dist/node/cjs/util/decode_jwt.js"
180
- },
181
- "default": "./dist/browser/util/decode_jwt.js"
205
+ "bun": "./dist/browser/util/decode_jwt.js",
206
+ "deno": "./dist/browser/util/decode_jwt.js",
207
+ "browser": "./dist/browser/util/decode_jwt.js",
208
+ "worker": "./dist/browser/util/decode_jwt.js",
209
+ "workerd": "./dist/browser/util/decode_jwt.js",
210
+ "import": "./dist/node/esm/util/decode_jwt.js",
211
+ "require": "./dist/node/cjs/util/decode_jwt.js"
182
212
  },
183
213
  "./decode/protected_header": {
184
214
  "types": "./dist/types/util/decode_protected_header.d.ts",
185
- "node": {
186
- "import": "./dist/node/esm/util/decode_protected_header.js",
187
- "require": "./dist/node/cjs/util/decode_protected_header.js"
188
- },
189
- "default": "./dist/browser/util/decode_protected_header.js"
215
+ "bun": "./dist/browser/util/decode_protected_header.js",
216
+ "deno": "./dist/browser/util/decode_protected_header.js",
217
+ "browser": "./dist/browser/util/decode_protected_header.js",
218
+ "worker": "./dist/browser/util/decode_protected_header.js",
219
+ "workerd": "./dist/browser/util/decode_protected_header.js",
220
+ "import": "./dist/node/esm/util/decode_protected_header.js",
221
+ "require": "./dist/node/cjs/util/decode_protected_header.js"
190
222
  },
191
223
  "./jws/compact/sign": {
192
224
  "types": "./dist/types/jws/compact/sign.d.ts",
193
- "node": {
194
- "import": "./dist/node/esm/jws/compact/sign.js",
195
- "require": "./dist/node/cjs/jws/compact/sign.js"
196
- },
197
- "default": "./dist/browser/jws/compact/sign.js"
225
+ "bun": "./dist/browser/jws/compact/sign.js",
226
+ "deno": "./dist/browser/jws/compact/sign.js",
227
+ "browser": "./dist/browser/jws/compact/sign.js",
228
+ "worker": "./dist/browser/jws/compact/sign.js",
229
+ "workerd": "./dist/browser/jws/compact/sign.js",
230
+ "import": "./dist/node/esm/jws/compact/sign.js",
231
+ "require": "./dist/node/cjs/jws/compact/sign.js"
198
232
  },
199
233
  "./jws/compact/verify": {
200
234
  "types": "./dist/types/jws/compact/verify.d.ts",
201
- "node": {
202
- "import": "./dist/node/esm/jws/compact/verify.js",
203
- "require": "./dist/node/cjs/jws/compact/verify.js"
204
- },
205
- "default": "./dist/browser/jws/compact/verify.js"
235
+ "bun": "./dist/browser/jws/compact/verify.js",
236
+ "deno": "./dist/browser/jws/compact/verify.js",
237
+ "browser": "./dist/browser/jws/compact/verify.js",
238
+ "worker": "./dist/browser/jws/compact/verify.js",
239
+ "workerd": "./dist/browser/jws/compact/verify.js",
240
+ "import": "./dist/node/esm/jws/compact/verify.js",
241
+ "require": "./dist/node/cjs/jws/compact/verify.js"
206
242
  },
207
243
  "./jws/flattened/sign": {
208
244
  "types": "./dist/types/jws/flattened/sign.d.ts",
209
- "node": {
210
- "import": "./dist/node/esm/jws/flattened/sign.js",
211
- "require": "./dist/node/cjs/jws/flattened/sign.js"
212
- },
213
- "default": "./dist/browser/jws/flattened/sign.js"
245
+ "bun": "./dist/browser/jws/flattened/sign.js",
246
+ "deno": "./dist/browser/jws/flattened/sign.js",
247
+ "browser": "./dist/browser/jws/flattened/sign.js",
248
+ "worker": "./dist/browser/jws/flattened/sign.js",
249
+ "workerd": "./dist/browser/jws/flattened/sign.js",
250
+ "import": "./dist/node/esm/jws/flattened/sign.js",
251
+ "require": "./dist/node/cjs/jws/flattened/sign.js"
214
252
  },
215
253
  "./jws/flattened/verify": {
216
254
  "types": "./dist/types/jws/flattened/verify.d.ts",
217
- "node": {
218
- "import": "./dist/node/esm/jws/flattened/verify.js",
219
- "require": "./dist/node/cjs/jws/flattened/verify.js"
220
- },
221
- "default": "./dist/browser/jws/flattened/verify.js"
255
+ "bun": "./dist/browser/jws/flattened/verify.js",
256
+ "deno": "./dist/browser/jws/flattened/verify.js",
257
+ "browser": "./dist/browser/jws/flattened/verify.js",
258
+ "worker": "./dist/browser/jws/flattened/verify.js",
259
+ "workerd": "./dist/browser/jws/flattened/verify.js",
260
+ "import": "./dist/node/esm/jws/flattened/verify.js",
261
+ "require": "./dist/node/cjs/jws/flattened/verify.js"
222
262
  },
223
263
  "./jws/general/sign": {
224
264
  "types": "./dist/types/jws/general/sign.d.ts",
225
- "node": {
226
- "import": "./dist/node/esm/jws/general/sign.js",
227
- "require": "./dist/node/cjs/jws/general/sign.js"
228
- },
229
- "default": "./dist/browser/jws/general/sign.js"
265
+ "bun": "./dist/browser/jws/general/sign.js",
266
+ "deno": "./dist/browser/jws/general/sign.js",
267
+ "browser": "./dist/browser/jws/general/sign.js",
268
+ "worker": "./dist/browser/jws/general/sign.js",
269
+ "workerd": "./dist/browser/jws/general/sign.js",
270
+ "import": "./dist/node/esm/jws/general/sign.js",
271
+ "require": "./dist/node/cjs/jws/general/sign.js"
230
272
  },
231
273
  "./jws/general/verify": {
232
274
  "types": "./dist/types/jws/general/verify.d.ts",
233
- "node": {
234
- "import": "./dist/node/esm/jws/general/verify.js",
235
- "require": "./dist/node/cjs/jws/general/verify.js"
236
- },
237
- "default": "./dist/browser/jws/general/verify.js"
275
+ "bun": "./dist/browser/jws/general/verify.js",
276
+ "deno": "./dist/browser/jws/general/verify.js",
277
+ "browser": "./dist/browser/jws/general/verify.js",
278
+ "worker": "./dist/browser/jws/general/verify.js",
279
+ "workerd": "./dist/browser/jws/general/verify.js",
280
+ "import": "./dist/node/esm/jws/general/verify.js",
281
+ "require": "./dist/node/cjs/jws/general/verify.js"
238
282
  },
239
283
  "./jwe/compact/encrypt": {
240
284
  "types": "./dist/types/jwe/compact/encrypt.d.ts",
241
- "node": {
242
- "import": "./dist/node/esm/jwe/compact/encrypt.js",
243
- "require": "./dist/node/cjs/jwe/compact/encrypt.js"
244
- },
245
- "default": "./dist/browser/jwe/compact/encrypt.js"
285
+ "bun": "./dist/browser/jwe/compact/encrypt.js",
286
+ "deno": "./dist/browser/jwe/compact/encrypt.js",
287
+ "browser": "./dist/browser/jwe/compact/encrypt.js",
288
+ "worker": "./dist/browser/jwe/compact/encrypt.js",
289
+ "workerd": "./dist/browser/jwe/compact/encrypt.js",
290
+ "import": "./dist/node/esm/jwe/compact/encrypt.js",
291
+ "require": "./dist/node/cjs/jwe/compact/encrypt.js"
246
292
  },
247
293
  "./jwe/compact/decrypt": {
248
294
  "types": "./dist/types/jwe/compact/decrypt.d.ts",
249
- "node": {
250
- "import": "./dist/node/esm/jwe/compact/decrypt.js",
251
- "require": "./dist/node/cjs/jwe/compact/decrypt.js"
252
- },
253
- "default": "./dist/browser/jwe/compact/decrypt.js"
295
+ "bun": "./dist/browser/jwe/compact/decrypt.js",
296
+ "deno": "./dist/browser/jwe/compact/decrypt.js",
297
+ "browser": "./dist/browser/jwe/compact/decrypt.js",
298
+ "worker": "./dist/browser/jwe/compact/decrypt.js",
299
+ "workerd": "./dist/browser/jwe/compact/decrypt.js",
300
+ "import": "./dist/node/esm/jwe/compact/decrypt.js",
301
+ "require": "./dist/node/cjs/jwe/compact/decrypt.js"
254
302
  },
255
303
  "./jwe/flattened/encrypt": {
256
304
  "types": "./dist/types/jwe/flattened/encrypt.d.ts",
257
- "node": {
258
- "import": "./dist/node/esm/jwe/flattened/encrypt.js",
259
- "require": "./dist/node/cjs/jwe/flattened/encrypt.js"
260
- },
261
- "default": "./dist/browser/jwe/flattened/encrypt.js"
305
+ "bun": "./dist/browser/jwe/flattened/encrypt.js",
306
+ "deno": "./dist/browser/jwe/flattened/encrypt.js",
307
+ "browser": "./dist/browser/jwe/flattened/encrypt.js",
308
+ "worker": "./dist/browser/jwe/flattened/encrypt.js",
309
+ "workerd": "./dist/browser/jwe/flattened/encrypt.js",
310
+ "import": "./dist/node/esm/jwe/flattened/encrypt.js",
311
+ "require": "./dist/node/cjs/jwe/flattened/encrypt.js"
262
312
  },
263
313
  "./jwe/flattened/decrypt": {
264
314
  "types": "./dist/types/jwe/flattened/decrypt.d.ts",
265
- "node": {
266
- "import": "./dist/node/esm/jwe/flattened/decrypt.js",
267
- "require": "./dist/node/cjs/jwe/flattened/decrypt.js"
268
- },
269
- "default": "./dist/browser/jwe/flattened/decrypt.js"
315
+ "bun": "./dist/browser/jwe/flattened/decrypt.js",
316
+ "deno": "./dist/browser/jwe/flattened/decrypt.js",
317
+ "browser": "./dist/browser/jwe/flattened/decrypt.js",
318
+ "worker": "./dist/browser/jwe/flattened/decrypt.js",
319
+ "workerd": "./dist/browser/jwe/flattened/decrypt.js",
320
+ "import": "./dist/node/esm/jwe/flattened/decrypt.js",
321
+ "require": "./dist/node/cjs/jwe/flattened/decrypt.js"
270
322
  },
271
323
  "./jwe/general/encrypt": {
272
324
  "types": "./dist/types/jwe/general/encrypt.d.ts",
273
- "node": {
274
- "import": "./dist/node/esm/jwe/general/encrypt.js",
275
- "require": "./dist/node/cjs/jwe/general/encrypt.js"
276
- },
277
- "default": "./dist/browser/jwe/general/encrypt.js"
325
+ "bun": "./dist/browser/jwe/general/encrypt.js",
326
+ "deno": "./dist/browser/jwe/general/encrypt.js",
327
+ "browser": "./dist/browser/jwe/general/encrypt.js",
328
+ "worker": "./dist/browser/jwe/general/encrypt.js",
329
+ "workerd": "./dist/browser/jwe/general/encrypt.js",
330
+ "import": "./dist/node/esm/jwe/general/encrypt.js",
331
+ "require": "./dist/node/cjs/jwe/general/encrypt.js"
278
332
  },
279
333
  "./jwe/general/decrypt": {
280
334
  "types": "./dist/types/jwe/general/decrypt.d.ts",
281
- "node": {
282
- "import": "./dist/node/esm/jwe/general/decrypt.js",
283
- "require": "./dist/node/cjs/jwe/general/decrypt.js"
284
- },
285
- "default": "./dist/browser/jwe/general/decrypt.js"
335
+ "bun": "./dist/browser/jwe/general/decrypt.js",
336
+ "deno": "./dist/browser/jwe/general/decrypt.js",
337
+ "browser": "./dist/browser/jwe/general/decrypt.js",
338
+ "worker": "./dist/browser/jwe/general/decrypt.js",
339
+ "workerd": "./dist/browser/jwe/general/decrypt.js",
340
+ "import": "./dist/node/esm/jwe/general/decrypt.js",
341
+ "require": "./dist/node/cjs/jwe/general/decrypt.js"
286
342
  },
287
343
  "./errors": {
288
344
  "types": "./dist/types/util/errors.d.ts",
289
- "node": {
290
- "import": "./dist/node/esm/util/errors.js",
291
- "require": "./dist/node/cjs/util/errors.js"
292
- },
293
- "default": "./dist/browser/util/errors.js"
345
+ "bun": "./dist/browser/util/errors.js",
346
+ "deno": "./dist/browser/util/errors.js",
347
+ "browser": "./dist/browser/util/errors.js",
348
+ "worker": "./dist/browser/util/errors.js",
349
+ "workerd": "./dist/browser/util/errors.js",
350
+ "import": "./dist/node/esm/util/errors.js",
351
+ "require": "./dist/node/cjs/util/errors.js"
294
352
  },
295
353
  "./base64url": {
296
354
  "types": "./dist/types/util/base64url.d.ts",
297
- "node": {
298
- "import": "./dist/node/esm/util/base64url.js",
299
- "require": "./dist/node/cjs/util/base64url.js"
300
- },
301
- "default": "./dist/browser/util/base64url.js"
355
+ "bun": "./dist/browser/util/base64url.js",
356
+ "deno": "./dist/browser/util/base64url.js",
357
+ "browser": "./dist/browser/util/base64url.js",
358
+ "worker": "./dist/browser/util/base64url.js",
359
+ "workerd": "./dist/browser/util/base64url.js",
360
+ "import": "./dist/node/esm/util/base64url.js",
361
+ "require": "./dist/node/cjs/util/base64url.js"
302
362
  },
303
363
  "./package.json": "./package.json"
304
364
  },