lacewing 1.0.0

package/dist/src/jwks/local.js

@@ -0,0 +1,85 @@
+/**
+ * Static (local) JWK Sets.
+ *
+ * Selection is registry-driven: entries whose `kty`/`alg`/`crv` fall
+ * outside what the token's (already allowlisted) algorithm requires are
+ * never candidates. `kid` values arriving here have already been
+ * sanitized by header validation (§3.10).
+ */
+import { importJWK } from "jose";
+import { EntropyCheckFailed, JWKSNoMatchingKey, KeyImportFailed, } from "../util/errors.js";
+import { getAlgorithmProperties, isValidAlgorithm } from "../lib/algorithms.js";
+import { decodeBase64url } from "../lib/base64url.js";
+import { validateHMACSecret } from "../lib/entropy.js";
+function isCandidate(jwk, header) {
+    const info = getAlgorithmProperties(header.alg);
+    if (jwk.kty !== info.kty)
+        return false;
+    if (jwk.use !== undefined && jwk.use !== "sig")
+        return false;
+    if (jwk.alg !== undefined && jwk.alg !== header.alg)
+        return false;
+    if (info.crv !== undefined && jwk.crv !== info.crv)
+        return false;
+    if (header.kid !== undefined && jwk.kid !== header.kid)
+        return false;
+    return true;
+}
+/** Shared selection + import used by both local and remote sets. */
+export async function resolveFromJwks(keys, header) {
+    const candidates = keys.filter((jwk) => isCandidate(jwk, header));
+    if (candidates.length === 0) {
+        throw new JWKSNoMatchingKey("No key in the JWKS matches this token");
+    }
+    if (candidates.length > 1) {
+        throw new JWKSNoMatchingKey("Multiple keys in the JWKS match this token - issue tokens with a kid");
+    }
+    const jwk = candidates[0];
+    try {
+        if (jwk.kty === "oct") {
+            if (typeof jwk.k !== "string") {
+                throw new KeyImportFailed("oct JWK is missing its key material");
+            }
+            const secret = decodeBase64url(jwk.k);
+            validateHMACSecret(secret, header.alg);
+            return { alg: header.alg, key: secret };
+        }
+        const key = await importJWK(jwk, header.alg);
+        return { alg: header.alg, key };
+    }
+    catch (cause) {
+        if (cause instanceof KeyImportFailed || cause instanceof EntropyCheckFailed) {
+            throw cause;
+        }
+        throw new KeyImportFailed("JWKS key could not be imported", { cause });
+    }
+}
+/** Validate the developer-supplied JWKS document shape (config error -> TypeError). */
+export function validateJwksShape(jwks) {
+    if (typeof jwks !== "object" ||
+        jwks === null ||
+        !Array.isArray(jwks.keys)) {
+        throw new TypeError("A JWKS must be an object with a keys array");
+    }
+    const keys = jwks.keys;
+    if (keys.length > 1000) {
+        throw new TypeError("JWKS has an unreasonable number of keys");
+    }
+    // Entries outside the registry are dropped, not fatal: real-world JWKS
+    // documents routinely carry keys for algorithms we refuse to speak.
+    return keys.filter((jwk) => typeof jwk === "object" &&
+        jwk !== null &&
+        typeof jwk.kty === "string" &&
+        (jwk.alg === undefined ||
+            (typeof jwk.alg === "string" && isValidAlgorithm(jwk.alg))));
+}
+/** Create a {@link KeySource} backed by a static JWKS document. */
+export function createLocalJWKSet(jwks) {
+    const keys = validateJwksShape(jwks);
+    return {
+        getVerificationKey(header) {
+            return resolveFromJwks(keys, header);
+        },
+    };
+}
+//# sourceMappingURL=local.js.map

package/dist/src/jwks/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/jwks/local.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EACN,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AASvD,SAAS,WAAW,CAAC,GAAc,EAAE,MAAiB;IACrD,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAM,MAAM,CAAC,GAAc;QAAE,OAAO,KAAK,CAAC;IAC9E,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,IAAI,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,IAA0B,EAC1B,MAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CAC1B,sEAAsE,CACtE,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAc,CAAC;IACvC,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACvB,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtC,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAC1B,GAAsC,EACtC,MAAM,CAAC,GAAG,CACV,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YAC7E,MAAM,KAAK,CAAC;QACb,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;AACF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC9C,IACC,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,CAAC,KAAK,CAAC,OAAO,CAAE,IAAmB,CAAC,IAAI,CAAC,EACxC,CAAC;QACF,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAI,IAAmB,CAAC,IAAI,CAAC;IACvC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAChE,CAAC;IACD,uEAAuE;IACvE,oEAAoE;IACpE,OAAO,IAAI,CAAC,MAAM,CACjB,CAAC,GAAG,EAAE,EAAE,CACP,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS;YACrB,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAC7D,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IACjD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO;QACN,kBAAkB,CAAC,MAAiB;YACnC,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/src/jwks/remote.js

@@ -0,0 +1,121 @@
+/**
+ * Remote JWK Sets with caching and rotation.
+ *
+ * - HTTPS-only URLs; redirects are never followed
+ * - caches with a configurable TTL and honors `Cache-Control: max-age`
+ * - cooldown between refetches (no attacker-driven fetch storms)
+ * - refetches once on unknown `kid` (key rotation), then fails closed
+ * - response size is capped; entries outside the registry are dropped
+ */
+import { JWKSFetchFailed, JWKSNoMatchingKey } from "../util/errors.js";
+import { resolveFromJwks, validateJwksShape } from "./local.js";
+const DEFAULT_CACHE_TTL_SECONDS = 300;
+const DEFAULT_COOLDOWN_SECONDS = 30;
+const DEFAULT_TIMEOUT_MS = 5000;
+const MAX_CACHE_TTL_SECONDS = 86400;
+const MAX_RESPONSE_BYTES = 1_048_576;
+function cacheTtlFrom(response, fallbackSeconds) {
+    const cacheControl = response.headers.get("cache-control");
+    const match = cacheControl === null ? null : /max-age\s*=\s*(\d{1,8})/.exec(cacheControl);
+    const ttl = match === null ? fallbackSeconds : Number(match[1]);
+    return Math.min(Math.max(ttl, 0), MAX_CACHE_TTL_SECONDS);
+}
+/** Create a {@link KeySource} that fetches and caches a remote JWKS. */
+export function createRemoteJWKSet(url, options = {}) {
+    const jwksUrl = new URL(url);
+    if (jwksUrl.protocol !== "https:") {
+        throw new TypeError("JWKS URLs must use https");
+    }
+    const fetchImpl = options.fetch ?? fetch;
+    const fallbackTtl = options.cacheTtlSeconds ?? DEFAULT_CACHE_TTL_SECONDS;
+    const cooldownMs = (options.cooldownSeconds ?? DEFAULT_COOLDOWN_SECONDS) * 1000;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    let cachedKeys;
+    let expiresAtMs = 0;
+    let lastAttemptMs = 0;
+    let inflight;
+    async function fetchJwks() {
+        lastAttemptMs = Date.now();
+        let response;
+        try {
+            response = await fetchImpl(jwksUrl, {
+                redirect: "error",
+                headers: { accept: "application/jwk-set+json, application/json" },
+                signal: AbortSignal.timeout(timeoutMs),
+            });
+        }
+        catch (cause) {
+            throw new JWKSFetchFailed("JWKS endpoint could not be reached", { cause });
+        }
+        if (!response.ok) {
+            throw new JWKSFetchFailed(`JWKS endpoint responded with status ${response.status}`);
+        }
+        const body = await response.text();
+        if (body.length > MAX_RESPONSE_BYTES) {
+            throw new JWKSFetchFailed("JWKS response exceeds the size cap");
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(body);
+        }
+        catch (cause) {
+            throw new JWKSFetchFailed("JWKS response is not valid JSON", { cause });
+        }
+        let keys;
+        try {
+            keys = validateJwksShape(parsed);
+        }
+        catch (cause) {
+            throw new JWKSFetchFailed("JWKS response is not a valid key set", { cause });
+        }
+        cachedKeys = keys;
+        expiresAtMs = Date.now() + cacheTtlFrom(response, fallbackTtl) * 1000;
+    }
+    function refresh() {
+        // Concurrent verifications share one fetch.
+        inflight ??= fetchJwks().finally(() => {
+            inflight = undefined;
+        });
+        return inflight;
+    }
+    async function ensureFresh() {
+        const now = Date.now();
+        if (cachedKeys !== undefined && now < expiresAtMs) {
+            return;
+        }
+        if (now - lastAttemptMs < cooldownMs && inflight === undefined) {
+            // In cooldown: serve stale keys if we have them, else fail.
+            if (cachedKeys !== undefined)
+                return;
+            throw new JWKSFetchFailed("JWKS fetch is cooling down after a recent failure");
+        }
+        try {
+            await refresh();
+        }
+        catch (error) {
+            // Stale-while-error: an unreachable endpoint must not take down
+            // verification while we still hold previously good keys.
+            if (cachedKeys === undefined)
+                throw error;
+        }
+    }
+    return {
+        async getVerificationKey(header) {
+            await ensureFresh();
+            try {
+                return await resolveFromJwks(cachedKeys, header);
+            }
+            catch (error) {
+                // Unknown kid may mean the signer rotated keys: refetch once
+                // (respecting the cooldown), then fail closed.
+                const canRetry = error instanceof JWKSNoMatchingKey &&
+                    Date.now() - lastAttemptMs >= cooldownMs;
+                if (!canRetry)
+                    throw error;
+                await refresh();
+                return resolveFromJwks(cachedKeys, header);
+            }
+        },
+    };
+}
+//# sourceMappingURL=remote.js.map

package/dist/src/jwks/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../../src/jwks/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQhE,MAAM,yBAAyB,GAAG,GAAG,CAAC;AACtC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AACpC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAarC,SAAS,YAAY,CAAC,QAAkB,EAAE,eAAuB;IAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;AAC1D,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CACjC,GAAiB,EACjB,UAA+B,EAAE;IAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;IACzE,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,wBAAwB,CAAC,GAAG,IAAI,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAE1D,IAAI,UAAmC,CAAC;IACxC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,QAAmC,CAAC;IAExC,KAAK,UAAU,SAAS;QACvB,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;gBACnC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE;gBACjE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;aACtC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACtC,MAAM,IAAI,eAAe,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,UAAU,GAAG,IAAI,CAAC;QAClB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC;IACvE,CAAC;IAED,SAAS,OAAO;QACf,4CAA4C;QAC5C,QAAQ,KAAK,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACrC,QAAQ,GAAG,SAAS,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,KAAK,UAAU,WAAW;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,UAAU,KAAK,SAAS,IAAI,GAAG,GAAG,WAAW,EAAE,CAAC;YACnD,OAAO;QACR,CAAC;QACD,IAAI,GAAG,GAAG,aAAa,GAAG,UAAU,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChE,4DAA4D;YAC5D,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO;YACrC,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,OAAO,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,gEAAgE;YAChE,yDAAyD;YACzD,IAAI,UAAU,KAAK,SAAS;gBAAE,MAAM,KAAK,CAAC;QAC3C,CAAC;IACF,CAAC;IAED,OAAO;QACN,KAAK,CAAC,kBAAkB,CAAC,MAAiB;YACzC,MAAM,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC;gBACJ,OAAO,MAAM,eAAe,CAAC,UAAyB,EAAE,MAAM,CAAC,CAAC;YACjE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,6DAA6D;gBAC7D,+CAA+C;gBAC/C,MAAM,QAAQ,GACb,KAAK,YAAY,iBAAiB;oBAClC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,IAAI,UAAU,CAAC;gBAC1C,IAAI,CAAC,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBAC3B,MAAM,OAAO,EAAE,CAAC;gBAChB,OAAO,eAAe,CAAC,UAAyB,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/src/jwt/decrypt.js

@@ -0,0 +1,126 @@
+/**
+ * The one and only decryption path (the JWE analogue of `jwtVerify`).
+ *
+ * Order of operations, fail-fast, all-or-nothing:
+ *   1. structural parse (5 segments, length cap, strict base64url/UTF-8/JSON)
+ *   2. header validation (alg + enc allowlists, typ, kid hygiene, forbidden
+ *      params - including `zip`, the JWE decompression-bomb vector)
+ *   3. decryption with the profile's key, restricted to the allowlisted alg+enc
+ *   4. claims validation
+ *   5. revocation check - last, so unauthenticated input can never drive the
+ *      store (LW-rev.3)
+ *
+ * A JWS (three segments) handed here is rejected at step 1, and a JWE handed to
+ * `jwtVerify` is rejected there in turn - the two formats never cross over.
+ */
+import { compactDecrypt } from "jose";
+import { AlgorithmNotAllowed, JWTClaimValidationFailed, JWTInvalid, JWTRevoked, MissingClaim, RevocationCheckFailed, } from "../util/errors.js";
+import { decodeBase64url } from "../lib/base64url.js";
+import { decodeUTF8 } from "../lib/utf8.js";
+import { parseJsonObject } from "../lib/json.js";
+import { sanitizeKid, normalizeTyp } from "../lib/headers.js";
+import { getContentEncryptionProperties, getKeyManagementProperties, } from "../lib/jwe_algorithms.js";
+import { validateClaims } from "../lib/claims.js";
+import { buildRevocationContext } from "../revocation/store.js";
+import { SetAlg, } from "../types.js";
+const MAX_TOKEN_LENGTH = 16384;
+// Never honored on a JWE header. `zip` is here for the same reason as on the
+// JWS side and then some: an attacker-set `zip: DEF` is a decompression bomb.
+const FORBIDDEN_PARAMS = ["jku", "x5u", "jwk", "x5c", "x5t", "zip", "crit"];
+function validateJweHeader(raw, profile) {
+    for (const param of FORBIDDEN_PARAMS) {
+        if (param in raw)
+            throw new JWTInvalid(`Token header parameter "${param}" is not supported`);
+    }
+    const alg = raw.alg;
+    if (typeof alg !== "string" || alg.toLowerCase() === "none") {
+        throw new AlgorithmNotAllowed("Key-management algorithm 'none' (or a missing alg) is not allowed");
+    }
+    if (!profile.keyManagementAlgorithms.some((allowed) => allowed === alg)) {
+        throw new AlgorithmNotAllowed("Token key-management algorithm is not in this profile's allowlist");
+    }
+    getKeyManagementProperties(alg); // defense in depth
+    const enc = raw.enc;
+    if (typeof enc !== "string" || enc.toLowerCase() === "none") {
+        throw new AlgorithmNotAllowed("Content-encryption algorithm 'none' (or a missing enc) is not allowed");
+    }
+    if (!profile.contentEncryptionAlgorithms.some((allowed) => allowed === enc)) {
+        throw new AlgorithmNotAllowed("Token content-encryption algorithm is not in this profile's allowlist");
+    }
+    getContentEncryptionProperties(enc);
+    const typ = raw.typ;
+    if (typeof typ !== "string" || typ.length === 0) {
+        throw new JWTInvalid("Token header is missing a typ (explicit typing is mandatory)");
+    }
+    if (normalizeTyp(typ) !== normalizeTyp(profile.typ)) {
+        throw new JWTClaimValidationFailed("typ", "Unexpected token type for this profile");
+    }
+    const header = { alg: SetAlg(alg), enc: SetAlg(enc), typ };
+    if (raw.kid !== undefined)
+        header.kid = sanitizeKid(raw.kid);
+    if (raw.cty !== undefined) {
+        if (typeof raw.cty !== "string")
+            throw new JWTInvalid("Token header cty must be a string");
+        header.cty = raw.cty;
+    }
+    return header;
+}
+/**
+ * Decrypt and validate a compact JWE against a profile. The returned
+ * {@link DecryptedJwt} is the only way to obtain one - there is no backdoor,
+ * and it is a distinct type from a `VerifiedJwt` (the signed-token proof).
+ */
+export async function jwtDecrypt(token, profile) {
+    if (typeof token !== "string" || token.length === 0) {
+        throw new JWTInvalid("Token must be a non-empty string");
+    }
+    if (token.length > MAX_TOKEN_LENGTH) {
+        throw new JWTInvalid("Token exceeds the maximum length");
+    }
+    const segments = token.split(".");
+    if (segments.length !== 5) {
+        // A JWS has three segments; anything but five is not a compact JWE.
+        throw new JWTInvalid("Token is not a compact JWE (expected five segments)");
+    }
+    const rawHeader = segments[0];
+    if (rawHeader === "")
+        throw new JWTInvalid("Token has an empty header segment");
+    const header = validateJweHeader(parseJsonObject(decodeUTF8(decodeBase64url(rawHeader)), "header"), profile);
+    if (profile.key.algorithm !== header.alg) {
+        throw new AlgorithmNotAllowed("Token key-management algorithm does not match the profile's key");
+    }
+    let plaintext;
+    try {
+        const result = await compactDecrypt(token, profile.key.key, {
+            keyManagementAlgorithms: [header.alg],
+            contentEncryptionAlgorithms: [header.enc],
+        });
+        plaintext = result.plaintext;
+    }
+    catch (cause) {
+        throw new JWTInvalid("Token decryption failed", { cause });
+    }
+    const payload = parseJsonObject(decodeUTF8(plaintext), "payload");
+    await validateClaims(payload, profile);
+    if (profile.revocation !== undefined) {
+        if (typeof payload.jti !== "string") {
+            throw new MissingClaim("jti", "This profile has a revocation store but the token carries no jti");
+        }
+        let revoked;
+        try {
+            revoked = await profile.revocation.isRevoked(buildRevocationContext(payload));
+        }
+        catch (cause) {
+            if (profile.unsafeFailOpenOnRevocationError === true) {
+                revoked = false;
+            }
+            else {
+                throw new RevocationCheckFailed("Revocation store errored - failing closed (LW-rev.4)", { cause });
+            }
+        }
+        if (revoked)
+            throw new JWTRevoked("Token has been revoked");
+    }
+    return { header, payload: payload };
+}
+//# sourceMappingURL=decrypt.js.map

package/dist/src/jwt/decrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decrypt.js","sourceRoot":"","sources":["../../../src/jwt/decrypt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AACtC,OAAO,EACN,mBAAmB,EACnB,wBAAwB,EACxB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EACN,MAAM,GAKN,MAAM,aAAa,CAAC;AAErB,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,6EAA6E;AAC7E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAErF,SAAS,iBAAiB,CAAC,GAA4B,EAAE,OAAkC;IAC1F,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACtC,IAAI,KAAK,IAAI,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,KAAK,oBAAoB,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,mBAAmB,CAAC,mEAAmE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,OAAkB,KAAK,GAAG,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,mBAAmB,CAAC,mEAAmE,CAAC,CAAC;IACpG,CAAC;IACD,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB;IAEpD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,IAAI,mBAAmB,CAAC,uEAAuE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,OAAkB,KAAK,GAAG,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,mBAAmB,CAAC,uEAAuE,CAAC,CAAC;IACxG,CAAC;IACD,8BAA8B,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,wBAAwB,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACtE,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,KAAa,EACb,OAAkC;IAElC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,oEAAoE;QACpE,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAW,CAAC;IACxC,IAAI,SAAS,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAEhF,MAAM,MAAM,GAAG,iBAAiB,CAC/B,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,EACjE,OAAO,CACP,CAAC;IAEF,IAAK,OAAO,CAAC,GAAG,CAAC,SAAoB,KAAM,MAAM,CAAC,GAAc,EAAE,CAAC;QAClE,MAAM,IAAI,mBAAmB,CAAC,iEAAiE,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,cAAc,CAClC,KAAK,EACL,OAAO,CAAC,GAAG,CAAC,GAA2C,EACvD;YACC,uBAAuB,EAAE,CAAC,MAAM,CAAC,GAAa,CAAC;YAC/C,2BAA2B,EAAE,CAAC,MAAM,CAAC,GAAa,CAAC;SACnD,CACD,CAAC;QACF,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvC,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,kEAAkE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,+BAA+B,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,qBAAqB,CAAC,sDAAsD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACpG,CAAC;QACF,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAqB,EAAkB,CAAC;AACnE,CAAC"}

package/dist/src/jwt/decryption_profile.js

@@ -0,0 +1,78 @@
+/**
+ * Decryption profiles - the JWE analogue of `defineProfile`. A profile is the
+ * only argument shape `jwtDecrypt` accepts, which makes `typ`, issuer,
+ * audience, the two algorithm allowlists, and the decrypting key structurally
+ * mandatory. The key belongs to the profile, which belongs to an issuer.
+ */
+import { parseDuration } from "../lib/duration.js";
+import { toValidContentEncryptionAlg, toValidKeyManagementAlg, } from "../lib/jwe_algorithms.js";
+import { isLacewingEncryptionKey, toSeconds, } from "../types.js";
+const DEFAULT_CLOCK_SKEW_SECONDS = 5;
+const MAX_CLOCK_SKEW_SECONDS = 120;
+function requireNonEmptyString(value, field) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError(`Decryption profile "${field}" must be a non-empty string`);
+    }
+    return value;
+}
+/** Build the security boundary that `jwtDecrypt` enforces. */
+export function defineDecryptionProfile(options) {
+    const typ = requireNonEmptyString(options.typ, "typ");
+    const iss = requireNonEmptyString(options.issuer, "issuer");
+    const aud = requireNonEmptyString(options.audience, "audience");
+    if (!Array.isArray(options.keyManagementAlgorithms) || options.keyManagementAlgorithms.length === 0) {
+        throw new TypeError("Decryption profile requires a non-empty keyManagementAlgorithms allowlist");
+    }
+    if (!Array.isArray(options.contentEncryptionAlgorithms) || options.contentEncryptionAlgorithms.length === 0) {
+        throw new TypeError("Decryption profile requires a non-empty contentEncryptionAlgorithms allowlist");
+    }
+    const keyManagementAlgorithms = Object.freeze(options.keyManagementAlgorithms.map(toValidKeyManagementAlg));
+    const contentEncryptionAlgorithms = Object.freeze(options.contentEncryptionAlgorithms.map(toValidContentEncryptionAlg));
+    if (!isLacewingEncryptionKey(options.key)) {
+        throw new TypeError("Decryption profile key must be imported through importEncryptionKey()/generate*");
+    }
+    if (options.key.keyType === "public") {
+        throw new TypeError("Decryption needs the private/secret key, not the public key");
+    }
+    if (!keyManagementAlgorithms.some((allowed) => allowed === options.key.algorithm)) {
+        throw new TypeError("The profile key's algorithm is not in the keyManagementAlgorithms allowlist");
+    }
+    const maxTokenAge = parseDuration(options.maxTokenAge);
+    if (maxTokenAge < 1)
+        throw new TypeError("Decryption profile maxTokenAge must be at least one second");
+    const maxClockSkew = parseDuration(options.maxClockSkew ?? DEFAULT_CLOCK_SKEW_SECONDS);
+    if (maxClockSkew > MAX_CLOCK_SKEW_SECONDS) {
+        throw new TypeError(`Decryption profile maxClockSkew is capped at ${MAX_CLOCK_SKEW_SECONDS} seconds`);
+    }
+    if (options.revocation !== undefined && typeof options.revocation.isRevoked !== "function") {
+        throw new TypeError("Decryption profile revocation store must implement isRevoked()");
+    }
+    if (options.claimValidators !== undefined) {
+        for (const [claim, validator] of Object.entries(options.claimValidators)) {
+            if (typeof validator !== "function")
+                throw new TypeError(`Claim validator for "${claim}" must be a function`);
+        }
+    }
+    if (options.subject !== undefined)
+        requireNonEmptyString(options.subject, "subject");
+    const profile = {
+        typ,
+        iss,
+        aud,
+        keyManagementAlgorithms,
+        contentEncryptionAlgorithms,
+        key: options.key,
+        maxTokenAge: toSeconds(maxTokenAge),
+        maxClockSkew: toSeconds(maxClockSkew),
+    };
+    if (options.revocation !== undefined)
+        profile.revocation = options.revocation;
+    if (options.claimValidators !== undefined)
+        profile.claimValidators = { ...options.claimValidators };
+    if (options.subject !== undefined)
+        profile.subject = options.subject;
+    if (options.unsafeFailOpenOnRevocationError === true)
+        profile.unsafeFailOpenOnRevocationError = true;
+    return Object.freeze(profile);
+}
+//# sourceMappingURL=decryption_profile.js.map

package/dist/src/jwt/decryption_profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryption_profile.js","sourceRoot":"","sources":["../../../src/jwt/decryption_profile.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACN,2BAA2B,EAC3B,uBAAuB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACN,uBAAuB,EACvB,SAAS,GAKT,MAAM,aAAa,CAAC;AAErB,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAyBnC,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,uBAAuB,KAAK,8BAA8B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACxE,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEhE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,IAAI,OAAO,CAAC,2BAA2B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7G,MAAM,IAAI,SAAS,CAAC,+EAA+E,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC5G,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAExH,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,iFAAiF,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,OAAkB,KAAK,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,WAAW,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAC;IACvG,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACvF,IAAI,YAAY,GAAG,sBAAsB,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,gDAAgD,sBAAsB,UAAU,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC5F,MAAM,IAAI,SAAS,CAAC,gEAAgE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1E,IAAI,OAAO,SAAS,KAAK,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,sBAAsB,CAAC,CAAC;QAC/G,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAErF,MAAM,OAAO,GAA8B;QAC1C,GAAG;QACH,GAAG;QACH,GAAG;QACH,uBAAuB;QACvB,2BAA2B;QAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC;QACnC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC;KACrC,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAC9E,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,CAAC,eAAe,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IACpG,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACrE,IAAI,OAAO,CAAC,+BAA+B,KAAK,IAAI;QAAE,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;IACrG,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}

package/dist/src/jwt/encrypt.js

@@ -0,0 +1,149 @@
+/**
+ * The encrypted-JWT builder - the JWE counterpart of `SignJWT`.
+ *
+ * Same claim discipline: `typ` is a constructor argument, `.encrypt()` refuses
+ * to run without `iss`, `aud` and `exp` (each waivable only via a grep-loud
+ * `unsafeAllowMissing*`), every token gets a unique `jti`, and lifetimes are
+ * capped. The one deliberate difference from signing: there is **no** payload
+ * hygiene scanner - the whole point of encryption is that the payload is not
+ * readable plaintext, so embedding a secret is exactly the supported use.
+ */
+import { CompactEncrypt } from "jose";
+import { KeyTypeMismatch, MaxLifetimeExceeded, MissingClaim } from "../util/errors.js";
+import { parseDuration } from "../lib/duration.js";
+import { encodeUTF8 } from "../lib/utf8.js";
+import { getContentEncryptionProperties, getKeyManagementProperties } from "../lib/jwe_algorithms.js";
+import { isLacewingEncryptionKey } from "../types.js";
+const DEFAULT_MAX_LIFETIME_SECONDS = 3600;
+const DEFAULT_CONTENT_ENCRYPTION = "A256GCM";
+const RESERVED_CLAIMS = new Set(["iss", "sub", "aud", "exp", "nbf", "iat", "jti"]);
+export class EncryptJWT {
+    #typ;
+    #maxLifetime;
+    #enc;
+    #claims = new Map();
+    #iss;
+    #aud;
+    #sub;
+    #jti;
+    #expiresIn;
+    #notBefore;
+    #waiveIssuer = false;
+    #waiveAudience = false;
+    #waiveExpiration = false;
+    constructor(typ, options = {}) {
+        if (typeof typ !== "string" || typ.length === 0) {
+            throw new TypeError("EncryptJWT requires an explicit token typ, e.g. new EncryptJWT(\"at+jwt\")");
+        }
+        this.#typ = typ;
+        this.#maxLifetime = parseDuration(options.maxLifetime ?? DEFAULT_MAX_LIFETIME_SECONDS);
+        this.#enc = options.contentEncryption ?? DEFAULT_CONTENT_ENCRYPTION;
+        // Fail fast on an unknown enc rather than at .encrypt() time.
+        getContentEncryptionProperties(this.#enc);
+    }
+    issuer(iss) {
+        if (typeof iss !== "string" || iss.length === 0)
+            throw new TypeError("issuer must be a non-empty string");
+        this.#iss = iss;
+        return this;
+    }
+    audience(aud) {
+        const values = Array.isArray(aud) ? aud : [aud];
+        if (values.length === 0 || values.some((v) => typeof v !== "string" || v.length === 0)) {
+            throw new TypeError("audience must be a non-empty string or array of them");
+        }
+        this.#aud = aud;
+        return this;
+    }
+    subject(sub) {
+        if (typeof sub !== "string" || sub.length === 0)
+            throw new TypeError("subject must be a non-empty string");
+        this.#sub = sub;
+        return this;
+    }
+    /** Override the auto-assigned `jti`. Uniqueness is then your problem. */
+    jwtId(jti) {
+        if (typeof jti !== "string" || jti.length === 0)
+            throw new TypeError("jwtId must be a non-empty string");
+        this.#jti = jti;
+        return this;
+    }
+    expiresIn(duration) {
+        const seconds = parseDuration(duration);
+        if (seconds < 1)
+            throw new TypeError("expiresIn must be at least one second");
+        this.#expiresIn = seconds;
+        return this;
+    }
+    notBefore(duration) {
+        this.#notBefore = parseDuration(duration);
+        return this;
+    }
+    claim(name, value) {
+        if (typeof name !== "string" || name.length === 0)
+            throw new TypeError("claim name must be a non-empty string");
+        if (RESERVED_CLAIMS.has(name)) {
+            throw new TypeError(`"${name}" is a registered claim - use the dedicated builder method`);
+        }
+        this.#claims.set(name, value);
+        return this;
+    }
+    unsafeAllowMissingIssuer() {
+        this.#waiveIssuer = true;
+        return this;
+    }
+    unsafeAllowMissingAudience() {
+        this.#waiveAudience = true;
+        return this;
+    }
+    unsafeAllowMissingExpiration() {
+        this.#waiveExpiration = true;
+        return this;
+    }
+    async encrypt(key) {
+        if (!isLacewingEncryptionKey(key)) {
+            throw new TypeError("encrypt() only accepts keys imported through importEncryptionKey()/generate*");
+        }
+        if (key.keyType === "private") {
+            throw new KeyTypeMismatch("Encrypt to the recipient's public (or shared secret) key, not a private key");
+        }
+        const info = getKeyManagementProperties(key.algorithm);
+        // A `dir` key IS the content-encryption key, so its size fixes the enc.
+        if (info.kind === "dir") {
+            const need = getContentEncryptionProperties(this.#enc).cekBytes;
+            if (key.key.length !== need) {
+                throw new KeyTypeMismatch(`This dir key is not sized for ${this.#enc} (needs ${need} bytes)`);
+            }
+        }
+        if (this.#iss === undefined && !this.#waiveIssuer) {
+            throw new MissingClaim("iss", "Tokens must name their issuer - call .issuer() (or .unsafeAllowMissingIssuer())");
+        }
+        if (this.#aud === undefined && !this.#waiveAudience) {
+            throw new MissingClaim("aud", "Tokens must name their audience - call .audience() (or .unsafeAllowMissingAudience())");
+        }
+        if (this.#expiresIn === undefined && !this.#waiveExpiration) {
+            throw new MissingClaim("exp", "Tokens must expire - call .expiresIn() (or .unsafeAllowMissingExpiration())");
+        }
+        if (this.#expiresIn !== undefined && this.#expiresIn > this.#maxLifetime) {
+            throw new MaxLifetimeExceeded(`Requested lifetime exceeds the ${this.#maxLifetime}s cap - long-lived tokens need an explicit maxLifetime option`);
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const payload = Object.fromEntries(this.#claims);
+        if (this.#iss !== undefined)
+            payload.iss = this.#iss;
+        if (this.#sub !== undefined)
+            payload.sub = this.#sub;
+        if (this.#aud !== undefined)
+            payload.aud = this.#aud;
+        payload.jti = this.#jti ?? globalThis.crypto.randomUUID();
+        if (this.#notBefore !== undefined)
+            payload.nbf = now + this.#notBefore;
+        if (this.#expiresIn !== undefined)
+            payload.exp = now + this.#expiresIn;
+        payload.iat = now;
+        return new CompactEncrypt(encodeUTF8(JSON.stringify(payload)))
+            .setProtectedHeader({ alg: key.algorithm, enc: this.#enc, typ: this.#typ })
+            .encrypt(key.key);
+    }
+}
+//# sourceMappingURL=encrypt.js.map

package/dist/src/jwt/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sourceRoot":"","sources":["../../../src/jwt/encrypt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,8BAA8B,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtG,OAAO,EAAE,uBAAuB,EAAoD,MAAM,aAAa,CAAC;AAExG,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAC1C,MAAM,0BAA0B,GAAG,SAAS,CAAC;AAC7C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AASnF,MAAM,OAAO,UAAU;IACb,IAAI,CAAS;IACb,YAAY,CAAkB;IAC9B,IAAI,CAAS;IACb,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,IAAI,CAAU;IACd,IAAI,CAAqB;IACzB,IAAI,CAAU;IACd,IAAI,CAAU;IACd,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,YAAY,GAAG,KAAK,CAAC;IACrB,cAAc,GAAG,KAAK,CAAC;IACvB,gBAAgB,GAAG,KAAK,CAAC;IAEzB,YAAY,GAAW,EAAE,UAA6B,EAAE;QACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,4EAA4E,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,4BAA4B,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;QACpE,8DAA8D;QAC9D,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,GAAW;QACjB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC1G,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,QAAQ,CAAC,GAAsB;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,CAAC,GAAW;QAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3G,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,GAAW;QAChB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QACzG,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,SAAS,CAAC,QAAyB;QAClC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC9E,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,SAAS,CAAC,QAAyB;QAClC,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,KAAc;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAChH,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CAAC,IAAI,IAAI,4DAA4D,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,wBAAwB;QACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,0BAA0B;QACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,4BAA4B;QAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAA0B;QACvC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,8EAA8E,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,6EAA6E,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,IAAI,GAAG,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,wEAAwE;QACxE,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAChE,IAAK,GAAG,CAAC,GAAkB,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC7C,MAAM,IAAI,eAAe,CAAC,iCAAiC,IAAI,CAAC,IAAI,WAAW,IAAI,SAAS,CAAC,CAAC;YAC/F,CAAC;QACF,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,iFAAiF,CAAC,CAAC;QAClH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,uFAAuF,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7D,MAAM,IAAI,YAAY,CAAC,KAAK,EAAE,6EAA6E,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1E,MAAM,IAAI,mBAAmB,CAC5B,kCAAkC,IAAI,CAAC,YAAY,+DAA+D,CAClH,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAA4B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QACvE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QACvE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;QAElB,OAAO,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;aAC5D,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1E,OAAO,CAAC,GAAG,CAAC,GAA+C,CAAC,CAAC;IAChE,CAAC;CACD"}