lacewing 1.0.0

package/dist/src/jwt/profile.js

@@ -0,0 +1,102 @@
+/**
+ * Verification profiles - the RFC 8725 §3.12 mechanism and the library's
+ * signature API.
+ *
+ * A profile is the *only* argument shape `jwtVerify` accepts, which makes
+ * `typ`, issuer, audience, and the algorithm allowlist structurally
+ * mandatory. The key source belongs to the profile, which belongs to an
+ * issuer - that is the §3.8 issuer-to-key binding.
+ */
+import { toValidAlg } from "../lib/algorithms.js";
+import { parseDuration } from "../lib/duration.js";
+import { createLocalJWKSet } from "../jwks/local.js";
+import { createRemoteJWKSet } from "../jwks/remote.js";
+import { isLacewingKey, toSeconds, } from "../types.js";
+const DEFAULT_CLOCK_SKEW_SECONDS = 5;
+const MAX_CLOCK_SKEW_SECONDS = 120;
+function requireNonEmptyString(value, field) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError(`Profile "${field}" must be a non-empty string`);
+    }
+    return value;
+}
+function normalizeKeys(keys, algorithms) {
+    if (isLacewingKey(keys)) {
+        if (keys.keyType === "private") {
+            throw new TypeError("Profiles verify tokens - pass the public key, not the private key");
+        }
+        if (!algorithms.includes(keys.algorithm)) {
+            throw new TypeError("The profile key's algorithm is not in the profile's allowlist");
+        }
+        return keys;
+    }
+    if (typeof keys === "object" && keys !== null) {
+        if (typeof keys.getVerificationKey === "function") {
+            return keys;
+        }
+        if (Array.isArray(keys.keys)) {
+            return createLocalJWKSet(keys);
+        }
+        if (typeof keys.jwksUri === "string") {
+            const remote = keys;
+            return createRemoteJWKSet(remote.jwksUri, {
+                cacheTtlSeconds: remote.cacheTtlSeconds,
+                cooldownSeconds: remote.cooldownSeconds,
+                timeoutMs: remote.timeoutMs,
+            });
+        }
+    }
+    throw new TypeError("Profile keys must be a JWKS document, a { jwksUri } config, a KeySource, or an imported key");
+}
+/** Build the security boundary that `jwtVerify` enforces. */
+export function defineProfile(options) {
+    const typ = requireNonEmptyString(options.typ, "typ");
+    const iss = requireNonEmptyString(options.issuer, "issuer");
+    const aud = requireNonEmptyString(options.audience, "audience");
+    if (!Array.isArray(options.algorithms) || options.algorithms.length === 0) {
+        throw new TypeError("Profile requires a non-empty algorithm allowlist");
+    }
+    const alg = Object.freeze(options.algorithms.map((name) => toValidAlg(name)));
+    const maxTokenAge = parseDuration(options.maxTokenAge);
+    if (maxTokenAge < 1) {
+        throw new TypeError("Profile maxTokenAge must be at least one second");
+    }
+    const maxClockSkew = parseDuration(options.maxClockSkew ?? DEFAULT_CLOCK_SKEW_SECONDS);
+    if (maxClockSkew > MAX_CLOCK_SKEW_SECONDS) {
+        throw new TypeError(`Profile maxClockSkew is capped at ${MAX_CLOCK_SKEW_SECONDS} seconds`);
+    }
+    if (options.revocation !== undefined && typeof options.revocation.isRevoked !== "function") {
+        throw new TypeError("Profile revocation store must implement isRevoked()");
+    }
+    if (options.claimValidators !== undefined) {
+        for (const [claim, validator] of Object.entries(options.claimValidators)) {
+            if (typeof validator !== "function") {
+                throw new TypeError(`Claim validator for "${claim}" must be a function`);
+            }
+        }
+    }
+    if (options.subject !== undefined) {
+        requireNonEmptyString(options.subject, "subject");
+    }
+    const profile = {
+        typ,
+        iss,
+        aud,
+        alg,
+        keys: normalizeKeys(options.keys, options.algorithms),
+        maxTokenAge: toSeconds(maxTokenAge),
+        maxClockSkew: toSeconds(maxClockSkew),
+    };
+    if (options.revocation !== undefined)
+        profile.revocation = options.revocation;
+    if (options.claimValidators !== undefined) {
+        profile.claimValidators = { ...options.claimValidators };
+    }
+    if (options.subject !== undefined)
+        profile.subject = options.subject;
+    if (options.unsafeFailOpenOnRevocationError === true) {
+        profile.unsafeFailOpenOnRevocationError = true;
+    }
+    return Object.freeze(profile);
+}
+//# sourceMappingURL=profile.js.map

package/dist/src/jwt/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../../src/jwt/profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACN,aAAa,EACb,SAAS,GAQT,MAAM,aAAa,CAAC;AAErB,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AA2BnC,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,YAAY,KAAK,8BAA8B,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACrB,IAA4B,EAC5B,UAA6B;IAE7B,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAClB,mEAAmE,CACnE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAClB,+DAA+D,CAC/D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC/C,IAAI,OAAQ,IAAkB,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;YAClE,OAAO,IAAiB,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAE,IAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO,iBAAiB,CAAC,IAAkB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,OAAQ,IAAmB,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,IAAkB,CAAC;YAClC,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE;gBACzC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,SAAS,EAAE,MAAM,CAAC,SAAS;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,MAAM,IAAI,SAAS,CAClB,6FAA6F,CAC7F,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,OAAuB;IACpD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAEhE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9E,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IACvF,IAAI,YAAY,GAAG,sBAAsB,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,qCAAqC,sBAAsB,UAAU,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAC5F,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1E,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;gBACrC,MAAM,IAAI,SAAS,CAAC,wBAAwB,KAAK,sBAAsB,CAAC,CAAC;YAC1E,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,qBAAqB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,OAAO,GAAuB;QACnC,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;QACrD,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC;QACnC,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC;KACrC,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAC9E,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,CAAC,eAAe,GAAG,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACrE,IAAI,OAAO,CAAC,+BAA+B,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,CAAC,+BAA+B,GAAG,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC"}

package/dist/src/jwt/sign.js

@@ -0,0 +1,173 @@
+/**
+ * The sign builder.
+ *
+ * `.sign()` refuses to produce a token unless `typ` (constructor), `iss`,
+ * `aud` and `exp` are set - each requirement individually waivable only
+ * via a grep-loud `unsafeAllowMissing*` call. Every token gets a unique
+ * `jti`, lifetimes are capped, and the payload hygiene scanner runs as
+ * the final step before signing.
+ */
+import { CompactSign } from "jose";
+import { KeyTypeMismatch, MaxLifetimeExceeded, MissingClaim, } from "../util/errors.js";
+import { parseDuration } from "../lib/duration.js";
+import { encodeUTF8 } from "../lib/utf8.js";
+import { scanPayloadForSensitiveData } from "../lib/payload_hygiene.js";
+import { isLacewingKey } from "../types.js";
+const DEFAULT_MAX_LIFETIME_SECONDS = 3600;
+// Set through dedicated methods only, so they can't be smuggled past the
+// requirement checks via .claim().
+const RESERVED_CLAIMS = new Set(["iss", "sub", "aud", "exp", "nbf", "iat", "jti"]);
+/**
+ * Fluent builder for a signed JWT. `typ` is a constructor argument, and
+ * `.sign()` refuses to run without `issuer`, `audience` and `expiresIn`
+ * (each waivable only via a grep-loud `unsafeAllowMissing*` call).
+ *
+ * @example
+ * ```ts
+ * const token = await new SignJWT("at+jwt")
+ *   .issuer("https://auth.example.com")
+ *   .audience("https://api.example.com")
+ *   .subject("user-42")
+ *   .claim("scope", "read")
+ *   .expiresIn("10m")
+ *   .sign(privateKey);
+ * ```
+ */
+export class SignJWT {
+    #typ;
+    #maxLifetime;
+    #claims = new Map();
+    #allowedClaims = new Set();
+    #iss;
+    #aud;
+    #sub;
+    #jti;
+    #expiresIn;
+    #notBefore;
+    #waiveIssuer = false;
+    #waiveAudience = false;
+    #waiveExpiration = false;
+    /** Explicit typing is mandatory (§3.11): the `typ` is a constructor argument. */
+    constructor(typ, options = {}) {
+        if (typeof typ !== "string" || typ.length === 0) {
+            throw new TypeError("SignJWT requires an explicit token typ, e.g. new SignJWT(\"at+jwt\")");
+        }
+        this.#typ = typ;
+        this.#maxLifetime = parseDuration(options.maxLifetime ?? DEFAULT_MAX_LIFETIME_SECONDS);
+    }
+    issuer(iss) {
+        if (typeof iss !== "string" || iss.length === 0) {
+            throw new TypeError("issuer must be a non-empty string");
+        }
+        this.#iss = iss;
+        return this;
+    }
+    audience(aud) {
+        const values = Array.isArray(aud) ? aud : [aud];
+        if (values.length === 0 || values.some((v) => typeof v !== "string" || v.length === 0)) {
+            throw new TypeError("audience must be a non-empty string or array of them");
+        }
+        this.#aud = aud;
+        return this;
+    }
+    subject(sub) {
+        if (typeof sub !== "string" || sub.length === 0) {
+            throw new TypeError("subject must be a non-empty string");
+        }
+        this.#sub = sub;
+        return this;
+    }
+    /** Override the auto-assigned `jti`. Uniqueness is then your problem. */
+    jwtId(jti) {
+        if (typeof jti !== "string" || jti.length === 0) {
+            throw new TypeError("jwtId must be a non-empty string");
+        }
+        this.#jti = jti;
+        return this;
+    }
+    /** Token lifetime from now, e.g. `"10m"` or `600`. Capped by maxLifetime. */
+    expiresIn(duration) {
+        const seconds = parseDuration(duration);
+        if (seconds < 1) {
+            throw new TypeError("expiresIn must be at least one second");
+        }
+        this.#expiresIn = seconds;
+        return this;
+    }
+    /** Delay validity by `duration` from now (`nbf`). */
+    notBefore(duration) {
+        this.#notBefore = parseDuration(duration);
+        return this;
+    }
+    /** Set a custom claim. Registered claims must use their dedicated methods. */
+    claim(name, value) {
+        if (typeof name !== "string" || name.length === 0) {
+            throw new TypeError("claim name must be a non-empty string");
+        }
+        if (RESERVED_CLAIMS.has(name)) {
+            throw new TypeError(`"${name}" is a registered claim - use the dedicated builder method`);
+        }
+        this.#claims.set(name, value);
+        return this;
+    }
+    /** Waive the payload hygiene scanner for one claim (LW-payload). Grep for this in review. */
+    unsafeAllowClaim(name) {
+        this.#allowedClaims.add(name);
+        return this;
+    }
+    /** Waive the mandatory `iss`. Grep for this in review. */
+    unsafeAllowMissingIssuer() {
+        this.#waiveIssuer = true;
+        return this;
+    }
+    /** Waive the mandatory `aud`. Grep for this in review. */
+    unsafeAllowMissingAudience() {
+        this.#waiveAudience = true;
+        return this;
+    }
+    /** Waive the mandatory `exp`. Grep for this in review. */
+    unsafeAllowMissingExpiration() {
+        this.#waiveExpiration = true;
+        return this;
+    }
+    async sign(key) {
+        if (!isLacewingKey(key)) {
+            throw new TypeError("sign() only accepts keys imported through Lacewing");
+        }
+        if (key.keyType === "public") {
+            throw new KeyTypeMismatch("Cannot sign with a public key");
+        }
+        if (this.#iss === undefined && !this.#waiveIssuer) {
+            throw new MissingClaim("iss", "Tokens must name their issuer - call .issuer() (or, deliberately, .unsafeAllowMissingIssuer())");
+        }
+        if (this.#aud === undefined && !this.#waiveAudience) {
+            throw new MissingClaim("aud", "Tokens must name their audience - call .audience() (or, deliberately, .unsafeAllowMissingAudience())");
+        }
+        if (this.#expiresIn === undefined && !this.#waiveExpiration) {
+            throw new MissingClaim("exp", "Tokens must expire - call .expiresIn() (or, deliberately, .unsafeAllowMissingExpiration())");
+        }
+        if (this.#expiresIn !== undefined && this.#expiresIn > this.#maxLifetime) {
+            throw new MaxLifetimeExceeded(`Requested lifetime exceeds the ${this.#maxLifetime}s cap - ` +
+                "long-lived tokens need an explicit maxLifetime option");
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const payload = Object.fromEntries(this.#claims);
+        if (this.#iss !== undefined)
+            payload.iss = this.#iss;
+        if (this.#sub !== undefined)
+            payload.sub = this.#sub;
+        if (this.#aud !== undefined)
+            payload.aud = this.#aud;
+        payload.jti = this.#jti ?? globalThis.crypto.randomUUID();
+        if (this.#notBefore !== undefined)
+            payload.nbf = now + this.#notBefore;
+        if (this.#expiresIn !== undefined)
+            payload.exp = now + this.#expiresIn;
+        payload.iat = now;
+        scanPayloadForSensitiveData(payload, this.#allowedClaims);
+        return new CompactSign(encodeUTF8(JSON.stringify(payload)))
+            .setProtectedHeader({ alg: key.algorithm, typ: this.#typ })
+            .sign(key.key);
+    }
+}
+//# sourceMappingURL=sign.js.map

package/dist/src/jwt/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../src/jwt/sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,EACN,eAAe,EACf,mBAAmB,EACnB,YAAY,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,aAAa,EAA0C,MAAM,aAAa,CAAC;AAEpF,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAE1C,yEAAyE;AACzE,mCAAmC;AACnC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAUnF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,OAAO;IACV,IAAI,CAAS;IACb,YAAY,CAAkB;IAC9B,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,IAAI,CAAU;IACd,IAAI,CAAqB;IACzB,IAAI,CAAU;IACd,IAAI,CAAU;IACd,UAAU,CAAmB;IAC7B,UAAU,CAAmB;IAC7B,YAAY,GAAG,KAAK,CAAC;IACrB,cAAc,GAAG,KAAK,CAAC;IACvB,gBAAgB,GAAG,KAAK,CAAC;IAEzB,iFAAiF;IACjF,YAAY,GAAW,EAAE,UAA0B,EAAE;QACpD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAClB,sEAAsE,CACtE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,CAAC,GAAW;QACjB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,QAAQ,CAAC,GAAsB;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,CAAC,GAAW;QAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,GAAW;QAChB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,6EAA6E;IAC7E,SAAS,CAAC,QAAyB;QAClC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,qDAAqD;IACrD,SAAS,CAAC,QAAyB;QAClC,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACb,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,IAAY,EAAE,KAAc;QACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CAClB,IAAI,IAAI,4DAA4D,CACpE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,6FAA6F;IAC7F,gBAAgB,CAAC,IAAY;QAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,0DAA0D;IAC1D,wBAAwB;QACvB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,0DAA0D;IAC1D,0BAA0B;QACzB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,0DAA0D;IAC1D,4BAA4B;QAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,OAAO,IAAI,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAgB;QAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,IAAI,YAAY,CACrB,KAAK,EACL,gGAAgG,CAChG,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,MAAM,IAAI,YAAY,CACrB,KAAK,EACL,sGAAsG,CACtG,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7D,MAAM,IAAI,YAAY,CACrB,KAAK,EACL,4FAA4F,CAC5F,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1E,MAAM,IAAI,mBAAmB,CAC5B,kCAAkC,IAAI,CAAC,YAAY,UAAU;gBAC5D,uDAAuD,CACxD,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAA4B,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACrD,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QACvE,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;QACvE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;QAElB,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAE1D,OAAO,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;aACzD,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1D,IAAI,CAAC,GAAG,CAAC,GAAyC,CAAC,CAAC;IACvD,CAAC;CACD"}

package/dist/src/jwt/verify.js

@@ -0,0 +1,118 @@
+/**
+ * The one and only verification path (RFC 8725 §3.3).
+ *
+ * Order of operations, fail-fast, all-or-nothing:
+ *   1. structural parse (length cap, strict base64url, strict UTF-8)
+ *   2. header validation (allowlist, typ, kid hygiene, forbidden params)
+ *   3. key resolution from the profile's key source
+ *   4. signature verification
+ *   5. claims validation
+ *   6. custom claim validators
+ *   7. revocation check - last, so unauthenticated input can never
+ *      drive store lookups (LW-rev.3)
+ *
+ * There is no partial result and no decoded-but-unverified escape hatch
+ * here; that lives, loudly branded, in `util/unsafe-decode.ts`.
+ */
+import { compactVerify } from "jose";
+import { AlgorithmNotAllowed, JWTInvalid, JWTRevoked, MissingClaim, RevocationCheckFailed, } from "../util/errors.js";
+import { decodeBase64url } from "../lib/base64url.js";
+import { decodeUTF8 } from "../lib/utf8.js";
+import { parseJsonObject } from "../lib/json.js";
+import { validateHeader } from "../lib/headers.js";
+import { validateClaims } from "../lib/claims.js";
+import { buildRevocationContext } from "../revocation/store.js";
+import { isLacewingKey, } from "../types.js";
+// Bounded before any parsing so garbage can't allocate unboundedly.
+const MAX_TOKEN_LENGTH = 16384;
+function parseSegmentJson(bytes, what) {
+    return parseJsonObject(decodeUTF8(bytes), what);
+}
+async function resolveKey(profile, header) {
+    if (isLacewingKey(profile.keys)) {
+        if (profile.keys.algorithm !== header.alg) {
+            throw new AlgorithmNotAllowed("Token algorithm does not match the profile's key");
+        }
+        return { alg: header.alg, key: profile.keys.key };
+    }
+    return profile.keys.getVerificationKey(header, profile.alg);
+}
+/**
+ * Verify a token against a profile. The returned {@link VerifiedJwt} is
+ * the only way to obtain one - there is no backdoor.
+ *
+ * On any failure it throws a typed error ({@link JWTExpired},
+ * {@link AlgorithmNotAllowed}, {@link JWTClaimValidationFailed}, ...) and yields
+ * no partial result. There is no `decode()` and no `ignoreExpiration`.
+ *
+ * @example
+ * ```ts
+ * const profile = defineProfile({
+ *   typ: "at+jwt",
+ *   issuer: "https://auth.example.com",
+ *   audience: "https://api.example.com",
+ *   algorithms: ["EdDSA"],
+ *   keys: createRemoteJWKSet("https://auth.example.com/jwks"),
+ *   maxTokenAge: "10m",
+ * });
+ *
+ * const { payload } = await jwtVerify(token, profile); // every check passed
+ * ```
+ */
+export async function jwtVerify(token, profile) {
+    if (typeof token !== "string" || token.length === 0) {
+        throw new JWTInvalid("Token must be a non-empty string");
+    }
+    if (token.length > MAX_TOKEN_LENGTH) {
+        throw new JWTInvalid("Token exceeds the maximum length");
+    }
+    const segments = token.split(".");
+    if (segments.length !== 3) {
+        throw new JWTInvalid("Token must have exactly three segments");
+    }
+    const [rawHeader, rawPayload, rawSignature] = segments;
+    if (rawHeader === "" || rawPayload === "" || rawSignature === "") {
+        throw new JWTInvalid("Token has an empty segment");
+    }
+    // Strict decoding is authoritative: Lacewing's canonical base64url and
+    // fatal UTF-8 run before jose ever sees the token, closing parser
+    // differentials (§3.7 and the strictness attack vectors).
+    const header = validateHeader(parseSegmentJson(decodeBase64url(rawHeader), "header"), profile);
+    const payloadBytes = decodeBase64url(rawPayload);
+    decodeBase64url(rawSignature);
+    const resolved = await resolveKey(profile, header);
+    try {
+        await compactVerify(token, resolved.key, {
+            algorithms: [header.alg],
+        });
+    }
+    catch (cause) {
+        throw new JWTInvalid("Token signature verification failed", { cause });
+    }
+    const payload = parseSegmentJson(payloadBytes, "payload");
+    await validateClaims(payload, profile);
+    // Revocation last (LW-rev.3): only signed, claims-valid tokens ever
+    // reach the store, so forged input can't probe or flood it.
+    if (profile.revocation !== undefined) {
+        if (typeof payload.jti !== "string") {
+            throw new MissingClaim("jti", "This profile has a revocation store but the token carries no jti");
+        }
+        let revoked;
+        try {
+            revoked = await profile.revocation.isRevoked(buildRevocationContext(payload));
+        }
+        catch (cause) {
+            if (profile.unsafeFailOpenOnRevocationError === true) {
+                revoked = false;
+            }
+            else {
+                throw new RevocationCheckFailed("Revocation store errored - failing closed (LW-rev.4)", { cause });
+            }
+        }
+        if (revoked) {
+            throw new JWTRevoked("Token has been revoked");
+        }
+    }
+    return { header, payload: payload };
+}
+//# sourceMappingURL=verify.js.map

package/dist/src/jwt/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/jwt/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EACN,mBAAmB,EACnB,UAAU,EACV,UAAU,EACV,YAAY,EACZ,qBAAqB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EACN,aAAa,GAMb,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAE/B,SAAS,gBAAgB,CAAC,KAAiB,EAAE,IAAY;IACxD,OAAO,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,OAA2B,EAC3B,MAAiB;IAEjB,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,IAAK,OAAO,CAAC,IAAI,CAAC,SAAoB,KAAM,MAAM,CAAC,GAAc,EAAE,CAAC;YACnE,MAAM,IAAI,mBAAmB,CAC5B,kDAAkD,CAClD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,KAAa,EACb,OAA2B;IAE3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,QAAoC,CAAC;IACnF,IAAI,SAAS,KAAK,EAAE,IAAI,UAAU,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,UAAU,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC;IAED,uEAAuE;IACvE,kEAAkE;IAClE,0DAA0D;IAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACjD,eAAe,CAAC,YAAY,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACJ,MAAM,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,GAA0C,EAAE;YAC/E,UAAU,EAAE,CAAC,MAAM,CAAC,GAAa,CAAC;SAClC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,UAAU,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvC,oEAAoE;IACpE,4DAA4D;IAC5D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,YAAY,CACrB,KAAK,EACL,kEAAkE,CAClE,CAAC;QACH,CAAC;QACD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,+BAA+B,KAAK,IAAI,EAAE,CAAC;gBACtD,OAAO,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,qBAAqB,CAC9B,sDAAsD,EACtD,EAAE,KAAK,EAAE,CACT,CAAC;YACH,CAAC;QACF,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAqB,EAAiB,CAAC;AAClE,CAAC"}

package/dist/src/key/encryption.js

@@ -0,0 +1,132 @@
+/**
+ * Encryption key import/generation (the JWE counterpart of `key/import.ts` and
+ * `key/generate.ts`). Every encryption key enters here and leaves bound to
+ * exactly one key-management algorithm, carried in the type. `EncryptJWT` and
+ * `jwtDecrypt` never accept a bare `CryptoKey`, so the binding cannot be
+ * bypassed - and a signing key can never be used to encrypt (different brand).
+ */
+import { generateKeyPair as joseGenerateKeyPair, importJWK, importPKCS8, importSPKI } from "jose";
+import { KeyImportFailed, KeyTypeMismatch } from "../util/errors.js";
+import { getContentEncryptionProperties, getKeyManagementProperties, } from "../lib/jwe_algorithms.js";
+import { decodeBase64url } from "../lib/base64url.js";
+import { createLacewingEncryptionKey, SetAlg, } from "../types.js";
+function assertSymmetric(info, algorithm) {
+    if (info.kind !== "aeskw") {
+        throw new KeyTypeMismatch(`${algorithm} is not an AES key-wrapping algorithm - use ` +
+            (info.kind === "dir" ? "generateDirectKey(enc)" : "generateEncryptionKeyPair()"));
+    }
+}
+/**
+ * Generate an asymmetric encryption key pair for `algorithm` (ECDH-ES* or
+ * RSA-OAEP-256). The recipient keeps the private key; senders encrypt to the
+ * public key.
+ */
+export async function generateEncryptionKeyPair(algorithm, options = {}) {
+    const info = getKeyManagementProperties(algorithm);
+    if (info.kind !== "ecdh" && info.kind !== "rsa") {
+        throw new KeyTypeMismatch(`${algorithm} is symmetric - use generateEncryptionSecret()/generateDirectKey()`);
+    }
+    const alg = SetAlg(algorithm);
+    try {
+        const { publicKey, privateKey } = await joseGenerateKeyPair(algorithm, {
+            extractable: options.extractable ?? false,
+        });
+        return {
+            publicKey: createLacewingEncryptionKey(alg, "public", publicKey),
+            privateKey: createLacewingEncryptionKey(alg, "private", privateKey),
+        };
+    }
+    catch (cause) {
+        throw new KeyImportFailed("Encryption key generation failed", { cause });
+    }
+}
+/** Generate a random symmetric key for an AES key-wrapping algorithm (A*KW / A*GCMKW). */
+export function generateEncryptionSecret(algorithm) {
+    const info = getKeyManagementProperties(algorithm);
+    assertSymmetric(info, algorithm);
+    const alg = SetAlg(algorithm);
+    const secret = new Uint8Array(info.secretBytes);
+    globalThis.crypto.getRandomValues(secret);
+    return createLacewingEncryptionKey(alg, "secret", secret);
+}
+/**
+ * Generate a random direct (`alg: "dir"`) key sized to a content-encryption
+ * algorithm. The key *is* the content-encryption key, so it is inseparable
+ * from its `enc`: a 32-byte key is for A256GCM/A128CBC-HS256, and so on.
+ */
+export function generateDirectKey(enc) {
+    const info = getContentEncryptionProperties(enc);
+    const alg = SetAlg("dir");
+    const secret = new Uint8Array(info.cekBytes);
+    globalThis.crypto.getRandomValues(secret);
+    return createLacewingEncryptionKey(alg, "secret", secret);
+}
+function importSymmetric(material, info, algorithm) {
+    let secret;
+    if (material instanceof Uint8Array) {
+        secret = material;
+    }
+    else if (typeof material === "object" &&
+        material !== null &&
+        !(material instanceof CryptoKey) &&
+        material.kty === "oct" &&
+        typeof material.k === "string") {
+        secret = decodeBase64url(material.k);
+    }
+    else {
+        throw new KeyImportFailed(`${algorithm} keys must be a Uint8Array or oct JWK`);
+    }
+    // AES key-wrap keys are a fixed size; `dir` keys must match some valid CEK size.
+    if (info.kind === "aeskw" && secret.length !== info.secretBytes) {
+        throw new KeyTypeMismatch(`${algorithm} requires a ${info.secretBytes}-byte key`);
+    }
+    if (info.kind === "dir" && ![16, 24, 32, 48, 64].includes(secret.length)) {
+        throw new KeyTypeMismatch("A dir key must be 16, 24, 32, 48 or 64 bytes (a valid CEK size)");
+    }
+    return secret;
+}
+async function importAsymmetricEncryption(material, algorithm) {
+    if (material instanceof CryptoKey) {
+        if (material.type !== "public" && material.type !== "private") {
+            throw new KeyTypeMismatch(`A secret key cannot be used with ${algorithm}`);
+        }
+        return { key: material, keyType: material.type };
+    }
+    if (typeof material === "string") {
+        if (material.includes("-----BEGIN PRIVATE KEY-----")) {
+            return { key: await importPKCS8(material, algorithm), keyType: "private" };
+        }
+        if (material.includes("-----BEGIN PUBLIC KEY-----")) {
+            return { key: await importSPKI(material, algorithm), keyType: "public" };
+        }
+        throw new KeyImportFailed("Unsupported PEM - only PKCS#8 private and SPKI public keys are accepted");
+    }
+    if (typeof material === "object" && material !== null) {
+        const jwk = material;
+        const keyType = typeof jwk.d === "string" ? "private" : "public";
+        return { key: await importJWK(jwk, algorithm), keyType };
+    }
+    throw new KeyImportFailed("Unsupported encryption key material");
+}
+/**
+ * Import encryption key material and bind it to `algorithm`. Throws
+ * {@link KeyTypeMismatch} when material and algorithm disagree, and
+ * {@link KeyImportFailed} for anything else.
+ */
+export async function importEncryptionKey(material, algorithm) {
+    const info = getKeyManagementProperties(algorithm);
+    const alg = SetAlg(algorithm);
+    try {
+        if (info.kty === "oct") {
+            return createLacewingEncryptionKey(alg, "secret", importSymmetric(material, info, algorithm));
+        }
+        const { key, keyType } = await importAsymmetricEncryption(material, algorithm);
+        return createLacewingEncryptionKey(alg, keyType, key);
+    }
+    catch (cause) {
+        if (cause instanceof KeyTypeMismatch || cause instanceof KeyImportFailed)
+            throw cause;
+        throw new KeyImportFailed("Encryption key import failed", { cause });
+    }
+}
+//# sourceMappingURL=encryption.js.map

package/dist/src/key/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/key/encryption.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,IAAI,mBAAmB,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EACN,8BAA8B,EAC9B,0BAA0B,GAE1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACN,2BAA2B,EAC3B,MAAM,GAGN,MAAM,aAAa,CAAC;AASrB,SAAS,eAAe,CAAC,IAA0B,EAAE,SAAiB;IACrE,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACxB,GAAG,SAAS,8CAA8C;YACzD,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,6BAA6B,CAAC,CACjF,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,SAAc,EACd,UAA4C,EAAE;IAE9C,MAAM,IAAI,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACjD,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,oEAAoE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAoC,CAAC;IACjE,IAAI,CAAC;QACJ,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE;YACtE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,KAAK;SACzC,CAAC,CAAC;QACH,OAAO;YACN,SAAS,EAAE,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC;YAChE,UAAU,EAAE,2BAA2B,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC;SACnE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,wBAAwB,CACvC,SAAc;IAEd,MAAM,IAAI,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACnD,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAoC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,WAAqB,CAAC,CAAC;IAC1D,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAChC,GAAQ;IAER,MAAM,IAAI,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAsC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,QAA+B,EAAE,IAA0B,EAAE,SAAiB;IACtG,IAAI,MAAkB,CAAC;IACvB,IAAI,QAAQ,YAAY,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,QAAQ,CAAC;IACnB,CAAC;SAAM,IACN,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,CAAC,CAAC,QAAQ,YAAY,SAAS,CAAC;QAChC,QAAQ,CAAC,GAAG,KAAK,KAAK;QACtB,OAAO,QAAQ,CAAC,CAAC,KAAK,QAAQ,EAC7B,CAAC;QACF,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,uCAAuC,CAAC,CAAC;IAChF,CAAC;IACD,iFAAiF;IACjF,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QACjE,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,eAAe,IAAI,CAAC,WAAW,WAAW,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,eAAe,CAAC,iEAAiE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,KAAK,UAAU,0BAA0B,CACxC,QAA+B,EAC/B,SAAiB;IAEjB,IAAI,QAAQ,YAAY,SAAS,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,yEAAyE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,QAAqB,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC,GAAsC,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;IAC7F,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,QAA+B,EAC/B,SAAc;IAEd,MAAM,IAAI,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAoC,CAAC;IACjE,IAAI,CAAC;QACJ,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;YACxB,OAAO,2BAA2B,CAAC,GAAG,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/E,OAAO,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAC;QACtF,MAAM,IAAI,eAAe,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;AACF,CAAC"}

package/dist/src/key/export.js

@@ -0,0 +1,46 @@
+/**
+ * Key export to JWK / PEM. Only works on extractable keys - keys from
+ * `generateKeyPair` are non-extractable unless you asked otherwise.
+ */
+import { exportJWK, exportPKCS8, exportSPKI } from "jose";
+import { KeyExportFailed } from "../util/errors.js";
+import { encodeBase64url } from "../lib/base64url.js";
+/** Export a key as a JWK, with its bound `alg` and `use: "sig"` set. */
+export async function exportKeyJWK(key) {
+    try {
+        if (key.keyType === "secret") {
+            return {
+                kty: "oct",
+                k: encodeBase64url(key.key),
+                alg: key.algorithm,
+                use: "sig",
+            };
+        }
+        const jwk = await exportJWK(key.key);
+        return { ...jwk, alg: key.algorithm, use: "sig" };
+    }
+    catch (cause) {
+        if (cause instanceof KeyExportFailed)
+            throw cause;
+        throw new KeyExportFailed("Key export failed - is the key extractable?", {
+            cause,
+        });
+    }
+}
+/** Export an asymmetric key as PEM (PKCS#8 for private, SPKI for public). */
+export async function exportKeyPEM(key) {
+    if (key.keyType === "secret") {
+        throw new KeyExportFailed("Symmetric secrets have no PEM representation");
+    }
+    try {
+        return key.keyType === "private"
+            ? await exportPKCS8(key.key)
+            : await exportSPKI(key.key);
+    }
+    catch (cause) {
+        throw new KeyExportFailed("Key export failed - is the key extractable?", {
+            cause,
+        });
+    }
+}
+//# sourceMappingURL=export.js.map

package/dist/src/key/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/key/export.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAgB;IAClD,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACN,GAAG,EAAE,KAAK;gBACV,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,GAAiB,CAAC;gBACzC,GAAG,EAAE,GAAG,CAAC,SAAS;gBAClB,GAAG,EAAE,KAAK;aACV,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAgB,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAe,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,6CAA6C,EAAE;YACxE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAgB;IAClD,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,8CAA8C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,GAAgB,CAAC;YACzC,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,GAAgB,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CAAC,6CAA6C,EAAE;YACxE,KAAK;SACL,CAAC,CAAC;IACJ,CAAC;AACF,CAAC"}