jose 6.2.10 → 6.2.12

package/dist/webapi/util/decode_jwt.js

@@ -1,32 +1,33 @@
-import { decode as b64u } from './base64url.js';
-import { strictDecoder } from '../lib/buffer_utils.js';
-import { isObject } from '../lib/type_checks.js';
-import { JWTInvalid } from './errors.js';
-export function decodeJwt(jwt) {
-    if (typeof jwt !== 'string')
-        throw new JWTInvalid('JWTs must use Compact JWS serialization, JWT must be a string');
-    const { 1: payload, length } = jwt.split('.');
-    if (length === 5)
-        throw new JWTInvalid('Only JWTs using Compact JWS serialization can be decoded');
-    if (length !== 3)
-        throw new JWTInvalid('Invalid JWT');
-    if (!payload)
-        throw new JWTInvalid('JWTs must contain a payload');
-    let decoded;
-    try {
-        decoded = b64u(payload);
-    }
-    catch {
-        throw new JWTInvalid('Failed to base64url decode the payload');
-    }
-    let result;
-    try {
-        result = JSON.parse(strictDecoder.decode(decoded));
-    }
-    catch {
-        throw new JWTInvalid('Failed to parse the decoded payload as JSON');
-    }
-    if (!isObject(result))
-        throw new JWTInvalid('Invalid JWT Claims Set');
-    return result;
+import { decode as b64u } from "./base64url.js";
+import { strictDecoder } from "../lib/buffer_utils.js";
+import { isObject } from "../lib/validate.js";
+import { JWTInvalid } from "./errors.js";
+function decodeJwt(jwt) {
+  if (typeof jwt != "string")
+    throw new JWTInvalid("JWTs must use Compact JWS serialization, JWT must be a string");
+  const { 1: payload, length } = jwt.split(".");
+  if (length === 5)
+    throw new JWTInvalid("Only JWTs using Compact JWS serialization can be decoded");
+  if (length !== 3)
+    throw new JWTInvalid("Invalid JWT");
+  if (!payload)
+    throw new JWTInvalid("JWTs must contain a payload");
+  let decoded;
+  try {
+    decoded = b64u(payload);
+  } catch {
+    throw new JWTInvalid("Failed to base64url decode the payload");
+  }
+  let result;
+  try {
+    result = JSON.parse(strictDecoder.decode(decoded));
+  } catch {
+    throw new JWTInvalid("Failed to parse the decoded payload as JSON");
+  }
+  if (!isObject(result))
+    throw new JWTInvalid("Invalid JWT Claims Set");
+  return result;
 }
+export {
+  decodeJwt
+};

package/dist/webapi/util/decode_protected_header.js

@@ -1,24 +1,19 @@
-import { parseJoseHeader } from '../lib/helpers.js';
-export function decodeProtectedHeader(token) {
-    let protectedB64u;
-    if (typeof token === 'string') {
-        const parts = token.split('.');
-        if (parts.length === 3 || parts.length === 5) {
-            ;
-            [protectedB64u] = parts;
-        }
-    }
-    else if (typeof token === 'object' && token) {
-        if ('protected' in token) {
-            protectedB64u = token.protected;
-        }
-        else {
-            throw new TypeError('Token does not contain a Protected Header');
-        }
-    }
-    const invalid = 'Invalid Token or Protected Header formatting';
-    if (typeof protectedB64u !== 'string' || !protectedB64u) {
-        throw new TypeError(invalid);
-    }
-    return parseJoseHeader(protectedB64u, TypeError, invalid);
+import { parseJoseHeader } from "../lib/validate.js";
+function decodeProtectedHeader(token) {
+  let protectedB64u;
+  if (typeof token == "string") {
+    const parts = token.split(".");
+    (parts.length === 3 || parts.length === 5) && ([protectedB64u] = parts);
+  } else if (typeof token == "object" && token)
+    if ("protected" in token)
+      protectedB64u = token.protected;
+    else
+      throw new TypeError("Token does not contain a Protected Header");
+  const invalid = "Invalid Token or Protected Header formatting";
+  if (typeof protectedB64u != "string" || !protectedB64u)
+    throw new TypeError(invalid);
+  return parseJoseHeader(protectedB64u, TypeError, invalid);
 }
+export {
+  decodeProtectedHeader
+};

package/dist/webapi/util/errors.js

@@ -1,99 +1,109 @@
-export class JOSEError extends Error {
-    static code = 'ERR_JOSE_GENERIC';
-    code = 'ERR_JOSE_GENERIC';
-    constructor(message, options) {
-        super(message, options);
-        this.name = this.constructor.name;
-        Error.captureStackTrace?.(this, this.constructor);
-    }
+class JOSEError extends Error {
+  static code = "ERR_JOSE_GENERIC";
+  code = "ERR_JOSE_GENERIC";
+  constructor(message, options) {
+    super(message, options), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
+  }
 }
-export class JWTClaimValidationFailed extends JOSEError {
-    static code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';
-    code = 'ERR_JWT_CLAIM_VALIDATION_FAILED';
-    claim;
-    reason;
-    payload;
-    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {
-        super(message, { cause: { claim, reason, payload } });
-        this.claim = claim;
-        this.reason = reason;
-        this.payload = payload;
-    }
+class JWTClaimValidationFailed extends JOSEError {
+  static code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+  code = "ERR_JWT_CLAIM_VALIDATION_FAILED";
+  claim;
+  reason;
+  payload;
+  constructor(message, payload, claim = "unspecified", reason = "unspecified") {
+    super(message, { cause: { claim, reason, payload } }), this.claim = claim, this.reason = reason, this.payload = payload;
+  }
 }
-export class JWTExpired extends JOSEError {
-    static code = 'ERR_JWT_EXPIRED';
-    code = 'ERR_JWT_EXPIRED';
-    claim;
-    reason;
-    payload;
-    constructor(message, payload, claim = 'unspecified', reason = 'unspecified') {
-        super(message, { cause: { claim, reason, payload } });
-        this.claim = claim;
-        this.reason = reason;
-        this.payload = payload;
-    }
+class JWTExpired extends JOSEError {
+  static code = "ERR_JWT_EXPIRED";
+  code = "ERR_JWT_EXPIRED";
+  claim;
+  reason;
+  payload;
+  constructor(message, payload, claim = "unspecified", reason = "unspecified") {
+    super(message, { cause: { claim, reason, payload } }), this.claim = claim, this.reason = reason, this.payload = payload;
+  }
 }
-export class JOSEAlgNotAllowed extends JOSEError {
-    static code = 'ERR_JOSE_ALG_NOT_ALLOWED';
-    code = 'ERR_JOSE_ALG_NOT_ALLOWED';
+class JOSEAlgNotAllowed extends JOSEError {
+  static code = "ERR_JOSE_ALG_NOT_ALLOWED";
+  code = "ERR_JOSE_ALG_NOT_ALLOWED";
 }
-export class JOSENotSupported extends JOSEError {
-    static code = 'ERR_JOSE_NOT_SUPPORTED';
-    code = 'ERR_JOSE_NOT_SUPPORTED';
+class JOSENotSupported extends JOSEError {
+  static code = "ERR_JOSE_NOT_SUPPORTED";
+  code = "ERR_JOSE_NOT_SUPPORTED";
 }
-export class JWEDecryptionFailed extends JOSEError {
-    static code = 'ERR_JWE_DECRYPTION_FAILED';
-    code = 'ERR_JWE_DECRYPTION_FAILED';
-    constructor(message = 'decryption operation failed', options) {
-        super(message, options);
-    }
+class JWEDecryptionFailed extends JOSEError {
+  static code = "ERR_JWE_DECRYPTION_FAILED";
+  code = "ERR_JWE_DECRYPTION_FAILED";
+  constructor(message = "decryption operation failed", options) {
+    super(message, options);
+  }
 }
-export class JWEInvalid extends JOSEError {
-    static code = 'ERR_JWE_INVALID';
-    code = 'ERR_JWE_INVALID';
+class JWEInvalid extends JOSEError {
+  static code = "ERR_JWE_INVALID";
+  code = "ERR_JWE_INVALID";
 }
-export class JWSInvalid extends JOSEError {
-    static code = 'ERR_JWS_INVALID';
-    code = 'ERR_JWS_INVALID';
+class JWSInvalid extends JOSEError {
+  static code = "ERR_JWS_INVALID";
+  code = "ERR_JWS_INVALID";
 }
-export class JWTInvalid extends JOSEError {
-    static code = 'ERR_JWT_INVALID';
-    code = 'ERR_JWT_INVALID';
+class JWTInvalid extends JOSEError {
+  static code = "ERR_JWT_INVALID";
+  code = "ERR_JWT_INVALID";
 }
-export class JWKInvalid extends JOSEError {
-    static code = 'ERR_JWK_INVALID';
-    code = 'ERR_JWK_INVALID';
+class JWKInvalid extends JOSEError {
+  static code = "ERR_JWK_INVALID";
+  code = "ERR_JWK_INVALID";
 }
-export class JWKSInvalid extends JOSEError {
-    static code = 'ERR_JWKS_INVALID';
-    code = 'ERR_JWKS_INVALID';
+class JWKSInvalid extends JOSEError {
+  static code = "ERR_JWKS_INVALID";
+  code = "ERR_JWKS_INVALID";
 }
-export class JWKSNoMatchingKey extends JOSEError {
-    static code = 'ERR_JWKS_NO_MATCHING_KEY';
-    code = 'ERR_JWKS_NO_MATCHING_KEY';
-    constructor(message = 'no applicable key found in the JSON Web Key Set', options) {
-        super(message, options);
-    }
+class JWKSNoMatchingKey extends JOSEError {
+  static code = "ERR_JWKS_NO_MATCHING_KEY";
+  code = "ERR_JWKS_NO_MATCHING_KEY";
+  constructor(message = "no applicable key found in the JSON Web Key Set", options) {
+    super(message, options);
+  }
 }
-export class JWKSMultipleMatchingKeys extends JOSEError {
-    [Symbol.asyncIterator] = async function* () { };
-    static code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
-    code = 'ERR_JWKS_MULTIPLE_MATCHING_KEYS';
-    constructor(message = 'multiple matching keys found in the JSON Web Key Set', options) {
-        super(message, options);
-    }
+class JWKSMultipleMatchingKeys extends JOSEError {
+  [Symbol.asyncIterator] = async function* () {
+  };
+  static code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+  code = "ERR_JWKS_MULTIPLE_MATCHING_KEYS";
+  constructor(message = "multiple matching keys found in the JSON Web Key Set", options) {
+    super(message, options);
+  }
 }
-export class JWKSTimeout extends JOSEError {
-    static code = 'ERR_JWKS_TIMEOUT';
-    code = 'ERR_JWKS_TIMEOUT';
-    constructor(message = 'request timed out', options) {
-        super(message, options);
-    }
+class JWKSTimeout extends JOSEError {
+  static code = "ERR_JWKS_TIMEOUT";
+  code = "ERR_JWKS_TIMEOUT";
+  constructor(message = "request timed out", options) {
+    super(message, options);
+  }
 }
-export class JWSSignatureVerificationFailed extends JOSEError {
-    static code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
-    code = 'ERR_JWS_SIGNATURE_VERIFICATION_FAILED';
-    constructor(message = 'signature verification failed', options) {
-        super(message, options);
-    }
+class JWSSignatureVerificationFailed extends JOSEError {
+  static code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+  code = "ERR_JWS_SIGNATURE_VERIFICATION_FAILED";
+  constructor(message = "signature verification failed", options) {
+    super(message, options);
+  }
 }
+export {
+  JOSEAlgNotAllowed,
+  JOSEError,
+  JOSENotSupported,
+  JWEDecryptionFailed,
+  JWEInvalid,
+  JWKInvalid,
+  JWKSInvalid,
+  JWKSMultipleMatchingKeys,
+  JWKSNoMatchingKey,
+  JWKSTimeout,
+  JWSInvalid,
+  JWSSignatureVerificationFailed,
+  JWTClaimValidationFailed,
+  JWTExpired,
+  JWTInvalid
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jose",
-  "version": "6.2.10",
+  "version": "6.2.12",
   "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
   "keywords": [
     "akp",
@@ -67,13 +67,9 @@
       "types": "./dist/types/index.d.ts",
       "default": "./dist/webapi/index.js"
     },
-    "./jwk/embedded": {
-      "types": "./dist/types/jwk/embedded.d.ts",
-      "default": "./dist/webapi/jwk/embedded.js"
-    },
-    "./jwk/thumbprint": {
-      "types": "./dist/types/jwk/thumbprint.d.ts",
-      "default": "./dist/webapi/jwk/thumbprint.js"
+    "./jwk/*": {
+      "types": "./dist/types/jwk/*.d.ts",
+      "default": "./dist/webapi/jwk/*.js"
     },
     "./key/import": {
       "types": "./dist/types/key/import.d.ts",
@@ -91,89 +87,29 @@
       "types": "./dist/types/key/generate_secret.d.ts",
       "default": "./dist/webapi/key/generate_secret.js"
     },
-    "./jwks/remote": {
-      "types": "./dist/types/jwks/remote.d.ts",
-      "default": "./dist/webapi/jwks/remote.js"
-    },
-    "./jwks/local": {
-      "types": "./dist/types/jwks/local.d.ts",
-      "default": "./dist/webapi/jwks/local.js"
-    },
-    "./jwt/sign": {
-      "types": "./dist/types/jwt/sign.d.ts",
-      "default": "./dist/webapi/jwt/sign.js"
-    },
-    "./jwt/verify": {
-      "types": "./dist/types/jwt/verify.d.ts",
-      "default": "./dist/webapi/jwt/verify.js"
-    },
-    "./jwt/encrypt": {
-      "types": "./dist/types/jwt/encrypt.d.ts",
-      "default": "./dist/webapi/jwt/encrypt.js"
-    },
-    "./jwt/decrypt": {
-      "types": "./dist/types/jwt/decrypt.d.ts",
-      "default": "./dist/webapi/jwt/decrypt.js"
-    },
-    "./jwt/unsecured": {
-      "types": "./dist/types/jwt/unsecured.d.ts",
-      "default": "./dist/webapi/jwt/unsecured.js"
+    "./jwks/*": {
+      "types": "./dist/types/jwks/*.d.ts",
+      "default": "./dist/webapi/jwks/*.js"
     },
     "./jwt/decode": {
       "types": "./dist/types/util/decode_jwt.d.ts",
       "default": "./dist/webapi/util/decode_jwt.js"
     },
+    "./jwt/*": {
+      "types": "./dist/types/jwt/*.d.ts",
+      "default": "./dist/webapi/jwt/*.js"
+    },
     "./decode/protected_header": {
       "types": "./dist/types/util/decode_protected_header.d.ts",
       "default": "./dist/webapi/util/decode_protected_header.js"
     },
-    "./jws/compact/sign": {
-      "types": "./dist/types/jws/compact/sign.d.ts",
-      "default": "./dist/webapi/jws/compact/sign.js"
-    },
-    "./jws/compact/verify": {
-      "types": "./dist/types/jws/compact/verify.d.ts",
-      "default": "./dist/webapi/jws/compact/verify.js"
-    },
-    "./jws/flattened/sign": {
-      "types": "./dist/types/jws/flattened/sign.d.ts",
-      "default": "./dist/webapi/jws/flattened/sign.js"
-    },
-    "./jws/flattened/verify": {
-      "types": "./dist/types/jws/flattened/verify.d.ts",
-      "default": "./dist/webapi/jws/flattened/verify.js"
-    },
-    "./jws/general/sign": {
-      "types": "./dist/types/jws/general/sign.d.ts",
-      "default": "./dist/webapi/jws/general/sign.js"
-    },
-    "./jws/general/verify": {
-      "types": "./dist/types/jws/general/verify.d.ts",
-      "default": "./dist/webapi/jws/general/verify.js"
-    },
-    "./jwe/compact/encrypt": {
-      "types": "./dist/types/jwe/compact/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/compact/encrypt.js"
-    },
-    "./jwe/compact/decrypt": {
-      "types": "./dist/types/jwe/compact/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/compact/decrypt.js"
-    },
-    "./jwe/flattened/encrypt": {
-      "types": "./dist/types/jwe/flattened/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/flattened/encrypt.js"
-    },
-    "./jwe/flattened/decrypt": {
-      "types": "./dist/types/jwe/flattened/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/flattened/decrypt.js"
-    },
-    "./jwe/general/encrypt": {
-      "types": "./dist/types/jwe/general/encrypt.d.ts",
-      "default": "./dist/webapi/jwe/general/encrypt.js"
+    "./jws/*": {
+      "types": "./dist/types/jws/*.d.ts",
+      "default": "./dist/webapi/jws/*.js"
     },
-    "./jwe/general/decrypt": {
-      "types": "./dist/types/jwe/general/decrypt.d.ts",
-      "default": "./dist/webapi/jwe/general/decrypt.js"
+    "./jwe/*": {
+      "types": "./dist/types/jwe/*.d.ts",
+      "default": "./dist/webapi/jwe/*.js"
     },
     "./errors": {
       "types": "./dist/types/util/errors.d.ts",

package/dist/webapi/lib/base64.js

@@ -1,22 +0,0 @@
-export function encodeBase64(input) {
-    if (Uint8Array.prototype.toBase64) {
-        return input.toBase64();
-    }
-    const CHUNK_SIZE = 0x8000;
-    const arr = [];
-    for (let i = 0; i < input.length; i += CHUNK_SIZE) {
-        arr.push(String.fromCharCode.apply(null, input.subarray(i, i + CHUNK_SIZE)));
-    }
-    return btoa(arr.join(''));
-}
-export function decodeBase64(encoded) {
-    if (Uint8Array.fromBase64) {
-        return Uint8Array.fromBase64(encoded);
-    }
-    const binary = atob(encoded);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
-}

package/dist/webapi/lib/crypto_key.js

@@ -1,28 +0,0 @@
-const unusable = (name, prop = 'algorithm.name') => new TypeError(`CryptoKey does not support this operation, its ${prop} must be ${name}`);
-export function checkUsage(key, usage) {
-    if (usage && !key.usages.includes(usage)) {
-        throw new TypeError(`CryptoKey does not support this operation, its usages must include ${usage}.`);
-    }
-}
-export function checkModulusLength(alg, key) {
-    const { modulusLength } = key.algorithm;
-    if (typeof modulusLength !== 'number' || modulusLength < 2048) {
-        throw new TypeError(`${alg} requires key modulusLength to be 2048 bits or larger`);
-    }
-}
-export function checkCryptoKey(key, expected, usage) {
-    const algorithm = key.algorithm;
-    if (algorithm.name !== expected.name) {
-        throw unusable(expected.name);
-    }
-    if (expected.hash && algorithm.hash?.name !== expected.hash) {
-        throw unusable(expected.hash, 'algorithm.hash');
-    }
-    if (expected.namedCurve && algorithm.namedCurve !== expected.namedCurve) {
-        throw unusable(expected.namedCurve, 'algorithm.namedCurve');
-    }
-    if (expected.length !== undefined && algorithm.length !== expected.length) {
-        throw unusable(expected.length, 'algorithm.length');
-    }
-    checkUsage(key, usage);
-}

package/dist/webapi/lib/helpers.js

@@ -1,42 +0,0 @@
-import { decode } from '../util/base64url.js';
-import { encode, strictDecoder } from './buffer_utils.js';
-import { isObject } from './type_checks.js';
-export const unprotected = Symbol();
-export function assertNotSet(value, name) {
-    if (value !== undefined) {
-        throw new TypeError(`${name} can only be called once`);
-    }
-}
-export function decodeBase64url(value, label, ErrorClass) {
-    try {
-        return decode(value);
-    }
-    catch {
-        throw new ErrorClass(`Failed to base64url decode the ${label}`);
-    }
-}
-export function encodeBase64url(value, label, ErrorClass) {
-    try {
-        return encode(value);
-    }
-    catch {
-        throw new ErrorClass(`The ${label} is not a valid base64url string`);
-    }
-}
-export async function digest(algorithm, data) {
-    const subtleDigest = `SHA-${algorithm.slice(-3)}`;
-    return new Uint8Array(await crypto.subtle.digest(subtleDigest, data));
-}
-export function parseJoseHeader(b64, ErrorClass, message) {
-    let parsed;
-    try {
-        parsed = JSON.parse(strictDecoder.decode(decode(b64)));
-    }
-    catch {
-        throw new ErrorClass(message);
-    }
-    if (!isObject(parsed)) {
-        throw new ErrorClass(message);
-    }
-    return parsed;
-}

package/dist/webapi/lib/invalid_key_input.js

@@ -1,26 +0,0 @@
-function message(msg, actual, ...types) {
-    if (types.length > 2) {
-        const last = types.pop();
-        msg += `one of type ${types.join(', ')}, or ${last}.`;
-    }
-    else if (types.length === 2) {
-        msg += `one of type ${types[0]} or ${types[1]}.`;
-    }
-    else {
-        msg += `of type ${types[0]}.`;
-    }
-    if (actual == null) {
-        msg += ` Received ${actual}`;
-    }
-    else if (typeof actual === 'function' && actual.name) {
-        msg += ` Received function ${actual.name}`;
-    }
-    else if (typeof actual === 'object' && actual != null) {
-        if (actual.constructor?.name) {
-            msg += ` Received an instance of ${actual.constructor.name}`;
-        }
-    }
-    return msg;
-}
-export const invalidKeyInput = (actual, ...types) => message('Key must be ', actual, ...types);
-export const withAlg = (alg, actual, ...types) => message(`Key for the ${alg} algorithm must be `, actual, ...types);

package/dist/webapi/lib/is_key_like.js

@@ -1,17 +0,0 @@
-export function assertCryptoKey(key) {
-    if (!isCryptoKey(key)) {
-        throw new Error('CryptoKey instance expected');
-    }
-}
-export const isCryptoKey = (key) => {
-    if (key?.[Symbol.toStringTag] === 'CryptoKey')
-        return true;
-    try {
-        return key instanceof CryptoKey;
-    }
-    catch {
-        return false;
-    }
-};
-export const isKeyObject = (key) => key?.[Symbol.toStringTag] === 'KeyObject';
-export const isKeyLike = (key) => isCryptoKey(key) || isKeyObject(key);

package/dist/webapi/lib/jwk_metadata.js

@@ -1,20 +0,0 @@
-export function snapshotJwk(jwk) {
-    return { __proto__: null, ...jwk };
-}
-export function normalizeJwk(jwk) {
-    const normalized = snapshotJwk(jwk);
-    if (normalized.ext !== undefined && typeof normalized.ext !== 'boolean') {
-        throw new TypeError('"ext" (Extractable) Parameter must be a boolean');
-    }
-    if (normalized.key_ops !== undefined) {
-        const value = normalized.key_ops;
-        const keyOps = Array.isArray(value) ? [...value] : undefined;
-        if (!keyOps ||
-            keyOps.some((operation) => typeof operation !== 'string') ||
-            new Set(keyOps).size !== keyOps.length) {
-            throw new TypeError('"key_ops" (Key Operations) Parameter must be an array of unique strings');
-        }
-        normalized.key_ops = keyOps;
-    }
-    return normalized;
-}

package/dist/webapi/lib/jwk_to_key.js

@@ -1,17 +0,0 @@
-import { JOSENotSupported } from '../util/errors.js';
-export async function jwkToKey(entry, jwk) {
-    if (jwk.kty === 'RSA' && 'oth' in jwk && jwk.oth !== undefined) {
-        throw new JOSENotSupported('RSA JWK "oth" (Other Primes Info) Parameter value is not supported');
-    }
-    if (!entry.kty.includes(jwk.kty)) {
-        throw new JOSENotSupported('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
-    }
-    const algorithm = entry.resolve?.({ kty: jwk.kty, crv: jwk.crv }) ?? entry.subtle;
-    const isPrivate = !!(jwk.d || jwk.priv);
-    const keyData = { ...jwk };
-    if (keyData.kty !== 'AKP') {
-        delete keyData.alg;
-    }
-    delete keyData.use;
-    return crypto.subtle.importKey('jwk', keyData, algorithm, jwk.ext ?? !isPrivate, jwk.key_ops ?? entry.usages[isPrivate ? 1 : 0]);
-}

package/dist/webapi/lib/key_options.js

@@ -1,6 +0,0 @@
-export function validateExtractableOption(extractable) {
-    if (extractable !== undefined && typeof extractable !== 'boolean') {
-        throw new TypeError('"extractable" option must be a boolean');
-    }
-    return extractable;
-}