unjwt 0.3.0 → 0.5.0

package/dist/index.d.mts

@@ -1,79 +1,6 @@
-/** Recognized JWT Claims Set members */
-interface JWTRegisteredClaims {
-    /**
-     * JWT Issuer
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.1 RFC7519#section-4.1.1}
-     */
-    iss?: string;
-    /**
-     * JWT Subject
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.2 RFC7519#section-4.1.2}
-     */
-    sub?: string;
-    /**
-     * JWT Audience
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.3 RFC7519#section-4.1.3}
-     */
-    aud?: string | string[];
-    /**
-     * JWT ID
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 RFC7519#section-4.1.7}
-     */
-    jti?: string;
-    /**
-     * JWT Not Before
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.5 RFC7519#section-4.1.5}
-     */
-    nbf?: number;
-    /**
-     * JWT Expiration Time
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.4 RFC7519#section-4.1.4}
-     */
-    exp?: number;
-    /**
-     * JWT Issued At
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
-     */
-    iat?: number;
-}
-
-declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
-declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
-
-declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
-    payload?: T;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /**
-     * Expiration time in days
-     * @default 30
-     */
-    expires?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<string>;
-
-declare function verifyJWT(options: {
-    token: string;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /** @default 60 */
-    leeway?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<void>;
-
-export { type JWTRegisteredClaims, _decodeJWT, decodeJWT, signJWT, verifyJWT };
+export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, A as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, z as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, n as JWK_HMAC, w as JWK_PBES2, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, y as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.C0bBN0AC.mjs';
+export { b as JWT, a as JWTClaims, J as JoseHeaderParameters } from './shared/unjwt.D90BbcE1.mjs';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.DYFIh1YE.mjs';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.Dz5Oe9BG.mjs';
+export { i as utils } from './shared/unjwt.CJ_ohCFC.mjs';
+export { j as jwk } from './shared/unjwt.B9uGngq-.mjs';

package/dist/index.d.ts

@@ -1,79 +1,6 @@
-/** Recognized JWT Claims Set members */
-interface JWTRegisteredClaims {
-    /**
-     * JWT Issuer
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.1 RFC7519#section-4.1.1}
-     */
-    iss?: string;
-    /**
-     * JWT Subject
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.2 RFC7519#section-4.1.2}
-     */
-    sub?: string;
-    /**
-     * JWT Audience
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.3 RFC7519#section-4.1.3}
-     */
-    aud?: string | string[];
-    /**
-     * JWT ID
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 RFC7519#section-4.1.7}
-     */
-    jti?: string;
-    /**
-     * JWT Not Before
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.5 RFC7519#section-4.1.5}
-     */
-    nbf?: number;
-    /**
-     * JWT Expiration Time
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.4 RFC7519#section-4.1.4}
-     */
-    exp?: number;
-    /**
-     * JWT Issued At
-     *
-     * @see {@link https://www.rfc-editor.org/rfc/rfc7519#section-4.1.6 RFC7519#section-4.1.6}
-     */
-    iat?: number;
-}
-
-declare function decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): (JWTRegisteredClaims & T) | undefined;
-declare function _decodeJWT<T extends Record<string, any> = Record<string, any>>(token: string): JWTRegisteredClaims & T;
-
-declare function signJWT<T extends Record<string, any> = Record<string, any>>(options: {
-    payload?: T;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /**
-     * Expiration time in days
-     * @default 30
-     */
-    expires?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<string>;
-
-declare function verifyJWT(options: {
-    token: string;
-    secret: string;
-    issuer: string;
-    audience: string;
-    /** @default 60 */
-    leeway?: number;
-    /** @default 'HMAC' */
-    signatureMethod?: string;
-    /** @default 'SHA-256' */
-    hashMethod?: string;
-}): Promise<void>;
-
-export { type JWTRegisteredClaims, _decodeJWT, decodeJWT, signJWT, verifyJWT };
+export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, A as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, z as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, n as JWK_HMAC, w as JWK_PBES2, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, y as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.C0bBN0AC.js';
+export { b as JWT, a as JWTClaims, J as JoseHeaderParameters } from './shared/unjwt.DoVzOnty.js';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.ppm5Y0k7.js';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.BKG_8Y9G.js';
+export { i as utils } from './shared/unjwt.mc4AEAT7.js';
+export { j as jwk } from './shared/unjwt.BOEZHxi_.js';

package/dist/index.mjs

@@ -1,141 +1,5 @@
-import { subtle } from 'unjwt/crypto';
-
-const DEFAULT_SIGNATURE_METHOD = "HMAC";
-const DEFAULT_HASH_METHODS = "SHA-256";
-const textEncoder = new TextEncoder();
-async function createSignature(key, algorithm, data) {
-  const encoded = textEncoder.encode(data);
-  const signature = await subtle.sign(algorithm, key, encoded);
-  return encodeToBase64Url(signature);
-}
-async function importKey(options) {
-  const {
-    secret,
-    usage = "sign",
-    name = DEFAULT_SIGNATURE_METHOD,
-    hash = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const encodedKey = textEncoder.encode(secret);
-  return await subtle.importKey(
-    "raw",
-    encodedKey,
-    { name, hash },
-    false,
-    [usage]
-  );
-}
-function encodeToBase64Url(input) {
-  let data;
-  if (typeof input === "string")
-    data = textEncoder.encode(input);
-  else if (input instanceof ArrayBuffer)
-    data = new Uint8Array(input);
-  else
-    data = textEncoder.encode(JSON.stringify(input));
-  const base64 = btoa(String.fromCodePoint(...data));
-  return base64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function decodeFromBase64Url(base64Url) {
-  const base64 = base64Url.replace(/-/g, "+").replace(/_/g, "/");
-  return atob(base64);
-}
-function decodeFromBase64UrlToBuffer(base64Url) {
-  const bytes = decodeFromBase64Url(base64Url);
-  const buffer = Uint8Array.from(bytes, (c) => c.codePointAt(0));
-  return buffer.buffer;
-}
-
-function decodeJWT(token) {
-  try {
-    return _decodeJWT(token);
-  } catch {
-  }
-}
-function _decodeJWT(token) {
-  const parts = String(token).split(".");
-  if (parts.length !== 3)
-    throw new Error("Invalid token format");
-  const [, payload] = parts;
-  return JSON.parse(decodeFromBase64Url(payload));
-}
-
-const headerAlgMap = {
-  HMAC: "HS",
-  RSA: "RS",
-  ECDSA: "ES"
-};
-async function signJWT(options) {
-  const {
-    payload = {},
-    secret,
-    issuer,
-    audience,
-    expires = 30,
-    signatureMethod = DEFAULT_SIGNATURE_METHOD,
-    hashMethod = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const key = await importKey({
-    secret,
-    name: signatureMethod,
-    hash: hashMethod
-  });
-  const header = {
-    typ: "JWT",
-    alg: `${headerAlgMap[signatureMethod]}${hashMethod.split("-")[1]}`
-  };
-  const iat = Math.floor(Date.now() / 1e3);
-  const exp = iat + expires * 24 * 60 * 60;
-  const jwtPayload = {
-    ...payload,
-    iss: issuer,
-    aud: audience,
-    iat,
-    exp
-  };
-  const signature = await createSignature(
-    key,
-    signatureMethod,
-    `${encodeToBase64Url(header)}.${encodeToBase64Url(jwtPayload)}`
-  );
-  return `${encodeToBase64Url(header)}.${encodeToBase64Url(
-    jwtPayload
-  )}.${signature}`;
-}
-
-async function verifyJWT(options) {
-  const {
-    token,
-    secret,
-    issuer,
-    audience,
-    leeway = 60,
-    signatureMethod = DEFAULT_SIGNATURE_METHOD,
-    hashMethod = DEFAULT_HASH_METHODS
-  } = { ...options };
-  const [header, payload, signature] = String(token).split(".");
-  const key = await importKey({
-    secret,
-    usage: "verify",
-    name: signatureMethod,
-    hash: hashMethod
-  });
-  const isValid = await subtle.verify(
-    signatureMethod,
-    key,
-    decodeFromBase64UrlToBuffer(signature),
-    textEncoder.encode(`${header}.${payload}`)
-  );
-  if (!isValid)
-    throw new Error("Invalid JWT signature");
-  let decodedPayload;
-  try {
-    decodedPayload = JSON.parse(decodeFromBase64Url(payload));
-  } catch {
-    throw new Error("Invalid JWT payload");
-  }
-  const now = Math.floor(Date.now() / 1e3);
-  if (issuer !== decodedPayload.iss || (Array.isArray(decodedPayload.aud) ? !decodedPayload.aud.includes(audience) : audience !== decodedPayload.aud) || decodedPayload.exp && now > decodedPayload.exp + leeway || decodedPayload.nbf && now < decodedPayload.nbf - leeway)
-    throw new Error("Invalid JWT claims");
-}
-
-export { _decodeJWT, decodeJWT, signJWT, verifyJWT };
+export { i as utils } from './shared/unjwt.CjHZv3F3.mjs';
+export { j as jwe } from './shared/unjwt.B4e_rwol.mjs';
+export { j as jwk } from './shared/unjwt.DKq5VF7t.mjs';
+export { j as jws } from './shared/unjwt.Bzcov22m.mjs';
+import './shared/unjwt.sux3_Z19.mjs';

package/dist/jwe.d.mts

@@ -0,0 +1,3 @@
+import './shared/unjwt.C0bBN0AC.mjs';
+import './shared/unjwt.D90BbcE1.mjs';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.Dz5Oe9BG.mjs';

package/dist/jwe.d.ts

@@ -0,0 +1,3 @@
+import './shared/unjwt.C0bBN0AC.js';
+import './shared/unjwt.DoVzOnty.js';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.BKG_8Y9G.js';

package/dist/jwe.mjs

@@ -0,0 +1,4 @@
+import './shared/unjwt.DKq5VF7t.mjs';
+import './shared/unjwt.CjHZv3F3.mjs';
+export { d as decrypt, e as encrypt } from './shared/unjwt.B4e_rwol.mjs';
+import './shared/unjwt.sux3_Z19.mjs';

package/dist/jwk.d.mts

@@ -0,0 +1,2 @@
+export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, A as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, z as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, n as JWK_HMAC, w as JWK_PBES2, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, y as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.C0bBN0AC.mjs';
+export { d as deriveKeyFromPassword, e as exportKey, g as generateKey, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.B9uGngq-.mjs';

package/dist/jwk.d.ts

@@ -0,0 +1,2 @@
+export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, A as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, z as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, n as JWK_HMAC, w as JWK_PBES2, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, y as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.C0bBN0AC.js';
+export { d as deriveKeyFromPassword, e as exportKey, g as generateKey, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.BOEZHxi_.js';

package/dist/jwk.mjs

@@ -0,0 +1,2 @@
+import './shared/unjwt.CjHZv3F3.mjs';
+export { o as deriveKeyFromPassword, p as exportKey, n as generateKey, i as importKey, l as unwrapKey, q as wrapKey } from './shared/unjwt.DKq5VF7t.mjs';

package/dist/jws.d.mts

@@ -0,0 +1,3 @@
+import './shared/unjwt.C0bBN0AC.mjs';
+import './shared/unjwt.D90BbcE1.mjs';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.DYFIh1YE.mjs';

package/dist/jws.d.ts

@@ -0,0 +1,3 @@
+import './shared/unjwt.C0bBN0AC.js';
+import './shared/unjwt.DoVzOnty.js';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.ppm5Y0k7.js';

package/dist/jws.mjs

@@ -0,0 +1,4 @@
+import './shared/unjwt.DKq5VF7t.mjs';
+import './shared/unjwt.CjHZv3F3.mjs';
+import './shared/unjwt.sux3_Z19.mjs';
+export { s as sign, v as verify } from './shared/unjwt.Bzcov22m.mjs';