unjwt 0.3.0 → 0.5.0

package/dist/shared/unjwt.C0bBN0AC.d.mts

@@ -0,0 +1,200 @@
+/** Structure returned for composite AES-CBC + HMAC keys. */
+type CompositeKey = {
+    /** The AES-CBC encryption/decryption key. */
+    encryptionKey: CryptoKey;
+    /** The HMAC key for integrity/authentication. */
+    macKey: CryptoKey;
+};
+type GenerateKeyAlgorithm = Exclude<JWKAlgorithm, "none" | "dir" | JWK_PBES2 | JWK_ECDH_ES>;
+/** Options for the generateKey function. */
+interface GenerateKeyOptions {
+    /** Key usages for the generated key(s). Note: For composite keys (CBC), default usages are applied separately. */
+    keyUsage?: KeyUsage[];
+    /** Mark the key(s) as extractable. Defaults to true. */
+    extractable?: boolean;
+    /** RSA modulus length. Defaults to 2048. */
+    modulusLength?: number;
+    /** RSA public exponent. Defaults to 65537 (0x010001). */
+    publicExponent?: Uint8Array;
+    /** Export the generated key(s) as JWK. If true, the key(s) will be returned in JWK format. */
+    toJWK?: boolean | undefined;
+}
+type GenerateKeyReturnJWK<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_Asymmetric_Algorithm ? {
+    privateKey: JWK;
+    publicKey: JWK;
+} : JWK;
+type GenerateKeyReturnCrypto<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_AES_CBC_HMAC ? Uint8Array : TAlg extends JWK_Asymmetric_Algorithm ? CryptoKeyPair : CryptoKey;
+type GenerateKeyReturn<TAlg extends GenerateKeyAlgorithm, TOptions extends GenerateKeyOptions> = TOptions["toJWK"] extends true ? GenerateKeyReturnJWK<TAlg> : GenerateKeyReturnCrypto<TAlg>;
+/** Options for the deriveKeyFromPassword function. */
+interface DeriveKeyOptions {
+    /** Salt value (p2s). Must be at least 8 bytes. */
+    salt: Uint8Array;
+    /** Iteration count (p2c). Must be a positive integer. */
+    iterations: number;
+    /** Key usages for the derived key. Defaults to ["wrapKey", "unwrapKey"]. */
+    keyUsage?: KeyUsage[];
+    /** Mark the derived key as extractable. Defaults to false. */
+    extractable?: boolean;
+    /** Export the derived key as JWK. If true, the key will be returned in JWK_oct format. */
+    toJWK?: boolean | undefined;
+}
+type DeriveKeyReturn<TOptions extends DeriveKeyOptions> = TOptions["toJWK"] extends true ? JWK_oct : CryptoKey;
+type KeyManagementAlgorithm = JWK_RSA_ENC | JWK_AES_KW | JWK_AES_GCM | JWK_AES_GCM_KW | JWK_PBES2 | JWK_ECDH_ES;
+type ContentEncryptionAlgorithm = JWK_AES_GCM | JWK_AES_CBC_HMAC;
+/** Options for the wrapKey function. */
+interface WrapKeyOptions {
+    /** Initialization Vector for AES-GCMKW. Generated if not provided. */
+    iv?: Uint8Array;
+    /** PBES2 Salt value (p2s). Required for PBES2 algorithms. */
+    p2s?: Uint8Array;
+    /** PBES2 Iteration count (p2c). Required for PBES2 algorithms. */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key. Generated if not provided for ECDH-ES. */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. */
+    apu?: Uint8Array;
+    /** ECDH-ES Agreement PartyVInfo. */
+    apv?: Uint8Array;
+}
+/** Result of the wrapKey function. */
+interface WrapKeyResult {
+    /** The wrapped key (Ciphertext). */
+    encryptedKey: Uint8Array;
+    /** Initialization Vector used (only for AES-GCMKW). Base64URL encoded. */
+    iv?: string;
+    /** Authentication Tag generated (only for AES-GCMKW). Base64URL encoded. */
+    tag?: string;
+    /** PBES2 Salt value used (only for PBES2). Base64URL encoded. */
+    p2s?: string;
+    /** PBES2 Iteration count used (only for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key used (only for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo used (only for ECDH-ES). Base64URL encoded. */
+    apu?: string;
+    /** ECDH-ES Agreement PartyVInfo used (only for ECDH-ES). Base64URL encoded. */
+    apv?: string;
+}
+/** Options for the unwrapKey function. */
+interface UnwrapKeyOptions {
+    /** Initialization Vector (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    iv?: Uint8Array | string;
+    /** Authentication Tag (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    tag?: Uint8Array | string;
+    /** PBES2 Salt value (required for PBES2). Base64URL encoded or Uint8Array. */
+    p2s?: Uint8Array | string;
+    /** PBES2 Iteration count (required for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key (required for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. Base64URL encoded or Uint8Array. */
+    apu?: Uint8Array | string;
+    /** ECDH-ES Agreement PartyVInfo. Base64URL encoded or Uint8Array. */
+    apv?: Uint8Array | string;
+    /** Expected unwrapped key algorithm (e.g., 'AES-GCM', 'AES-CBC'). Used by crypto.subtle.unwrapKey. */
+    unwrappedKeyAlgorithm?: string | Algorithm | RsaOaepParams | AesCtrParams | AesCbcParams | AesGcmParams;
+    /** Expected key usages for the unwrapped key. */
+    keyUsage?: KeyUsage[];
+    /** Mark the unwrapped key as extractable. Defaults to true. */
+    extractable?: boolean;
+    returnAs?: boolean | undefined;
+}
+/**
+ * Forked from https://github.com/panva/jose/tree/v6.0.10
+ * Copyright (c) 2018 Filip Skokan.
+ * LICENSE: https://github.com/panva/jose/blob/v6.0.10/LICENSE.md
+ */
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters {
+    /** JWK "kty" (Key Type) Parameter */
+    kty: string;
+    /**
+     * JWK "alg" (Algorithm) Parameter
+     *
+     * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+     */
+    alg?: string;
+    /** JWK "key_ops" (Key Operations) Parameter */
+    key_ops?: KeyUsage[];
+    /** JWK "ext" (Extractable) Parameter */
+    ext?: boolean;
+    /** JWK "use" (Public Key Use) Parameter */
+    use?: string;
+    /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+    x5c?: string[];
+    /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+    x5t?: string;
+    /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+    "x5t#S256"?: string;
+    /** JWK "x5u" (X.509 URL) Parameter */
+    x5u?: string;
+    /** JWK "kid" (Key ID) Parameter */
+    kid?: string;
+}
+/** Public EC JSON Web Keys */
+interface JWK_EC_Public extends JWKParameters {
+    /** EC JWK "crv" (Curve) Parameter */
+    crv: string;
+    /** EC JWK "x" (X Coordinate) Parameter */
+    x: string;
+    /** EC JWK "y" (Y Coordinate) Parameter */
+    y: string;
+}
+/** Private EC JSON Web Keys */
+interface JWK_EC_Private extends JWK_EC_Public, JWKParameters {
+    /** EC JWK "d" (ECC Private Key) Parameter */
+    d: string;
+}
+/** EC JSON Web Keys */
+type JWK_EC = JWK_EC_Public | JWK_EC_Private;
+/** Public RSA JSON Web Keys */
+interface JWK_RSA_Public extends JWKParameters {
+    /** RSA JWK "e" (Exponent) Parameter */
+    e: string;
+    /** RSA JWK "n" (Modulus) Parameter */
+    n: string;
+    oth?: RsaOtherPrimesInfo[];
+}
+/** Private RSA JSON Web Keys */
+interface JWK_RSA_Private extends JWK_RSA_Public, JWKParameters {
+    /** RSA JWK "d" (Private Exponent) Parameter */
+    d: string;
+    /** RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+    dp: string;
+    /** RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+    dq: string;
+    /** RSA JWK "p" (First Prime Factor) Parameter */
+    p: string;
+    /** RSA JWK "q" (Second Prime Factor) Parameter */
+    q: string;
+    /** RSA JWK "qi" (First CRT Coefficient) Parameter */
+    qi: string;
+}
+/** RSA JSON Web Keys */
+type JWK_RSA = JWK_RSA_Public | JWK_RSA_Private;
+/** oct JSON Web Keys */
+interface JWK_oct extends JWKParameters {
+    /** Oct JWK "k" (Key Value) Parameter */
+    k: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA" and "oct" key types are supported.
+ */
+type JWK = JWK_oct | JWK_RSA | JWK_EC;
+/** JWK Key Algorithms */
+type JWK_HMAC = "HS256" | "HS384" | "HS512";
+type JWK_RSA_SIGN = "RS256" | "RS384" | "RS512";
+type JWK_RSA_PSS = "PS256" | "PS384" | "PS512";
+type JWK_ECDSA = "ES256" | "ES384" | "ES512";
+type JWK_RSA_ENC = "RSA-OAEP" | "RSA-OAEP-256" | "RSA-OAEP-384" | "RSA-OAEP-512";
+type JWK_AES_KW = "A128KW" | "A192KW" | "A256KW";
+type JWK_AES_GCM_KW = "A128GCMKW" | "A192GCMKW" | "A256GCMKW";
+type JWK_AES_CBC_HMAC = "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512";
+type JWK_AES_GCM = "A128GCM" | "A192GCM" | "A256GCM";
+type JWK_PBES2 = "PBES2-HS256+A128KW" | "PBES2-HS384+A192KW" | "PBES2-HS512+A256KW";
+type JWK_ECDH_ES = "ECDH-ES" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW";
+type JWK_Symmetric_Algorithm = JWK_HMAC | JWK_AES_KW | JWK_AES_GCM;
+type JWK_Asymmetric_Algorithm = JWK_RSA_SIGN | JWK_RSA_PSS | JWK_ECDSA | JWK_RSA_ENC;
+type JWKAlgorithm = JWK_Symmetric_Algorithm | JWK_Asymmetric_Algorithm | JWK_AES_CBC_HMAC | JWK_PBES2 | JWK_ECDH_ES | ("none" | "dir");
+
+export type { JWKAlgorithm as A, CompositeKey as C, DeriveKeyOptions as D, GenerateKeyAlgorithm as G, JWKParameters as J, KeyManagementAlgorithm as K, UnwrapKeyOptions as U, WrapKeyOptions as W, GenerateKeyOptions as a, GenerateKeyReturn as b, DeriveKeyReturn as c, ContentEncryptionAlgorithm as d, WrapKeyResult as e, JWK_EC_Public as f, JWK_EC_Private as g, JWK_EC as h, JWK_RSA_Public as i, JWK_RSA_Private as j, JWK_RSA as k, JWK_oct as l, JWK as m, JWK_HMAC as n, JWK_RSA_SIGN as o, JWK_RSA_PSS as p, JWK_ECDSA as q, JWK_RSA_ENC as r, JWK_AES_KW as s, JWK_AES_GCM_KW as t, JWK_AES_CBC_HMAC as u, JWK_AES_GCM as v, JWK_PBES2 as w, JWK_ECDH_ES as x, JWK_Symmetric_Algorithm as y, JWK_Asymmetric_Algorithm as z };

package/dist/shared/unjwt.C0bBN0AC.d.ts

@@ -0,0 +1,200 @@
+/** Structure returned for composite AES-CBC + HMAC keys. */
+type CompositeKey = {
+    /** The AES-CBC encryption/decryption key. */
+    encryptionKey: CryptoKey;
+    /** The HMAC key for integrity/authentication. */
+    macKey: CryptoKey;
+};
+type GenerateKeyAlgorithm = Exclude<JWKAlgorithm, "none" | "dir" | JWK_PBES2 | JWK_ECDH_ES>;
+/** Options for the generateKey function. */
+interface GenerateKeyOptions {
+    /** Key usages for the generated key(s). Note: For composite keys (CBC), default usages are applied separately. */
+    keyUsage?: KeyUsage[];
+    /** Mark the key(s) as extractable. Defaults to true. */
+    extractable?: boolean;
+    /** RSA modulus length. Defaults to 2048. */
+    modulusLength?: number;
+    /** RSA public exponent. Defaults to 65537 (0x010001). */
+    publicExponent?: Uint8Array;
+    /** Export the generated key(s) as JWK. If true, the key(s) will be returned in JWK format. */
+    toJWK?: boolean | undefined;
+}
+type GenerateKeyReturnJWK<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_Asymmetric_Algorithm ? {
+    privateKey: JWK;
+    publicKey: JWK;
+} : JWK;
+type GenerateKeyReturnCrypto<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_AES_CBC_HMAC ? Uint8Array : TAlg extends JWK_Asymmetric_Algorithm ? CryptoKeyPair : CryptoKey;
+type GenerateKeyReturn<TAlg extends GenerateKeyAlgorithm, TOptions extends GenerateKeyOptions> = TOptions["toJWK"] extends true ? GenerateKeyReturnJWK<TAlg> : GenerateKeyReturnCrypto<TAlg>;
+/** Options for the deriveKeyFromPassword function. */
+interface DeriveKeyOptions {
+    /** Salt value (p2s). Must be at least 8 bytes. */
+    salt: Uint8Array;
+    /** Iteration count (p2c). Must be a positive integer. */
+    iterations: number;
+    /** Key usages for the derived key. Defaults to ["wrapKey", "unwrapKey"]. */
+    keyUsage?: KeyUsage[];
+    /** Mark the derived key as extractable. Defaults to false. */
+    extractable?: boolean;
+    /** Export the derived key as JWK. If true, the key will be returned in JWK_oct format. */
+    toJWK?: boolean | undefined;
+}
+type DeriveKeyReturn<TOptions extends DeriveKeyOptions> = TOptions["toJWK"] extends true ? JWK_oct : CryptoKey;
+type KeyManagementAlgorithm = JWK_RSA_ENC | JWK_AES_KW | JWK_AES_GCM | JWK_AES_GCM_KW | JWK_PBES2 | JWK_ECDH_ES;
+type ContentEncryptionAlgorithm = JWK_AES_GCM | JWK_AES_CBC_HMAC;
+/** Options for the wrapKey function. */
+interface WrapKeyOptions {
+    /** Initialization Vector for AES-GCMKW. Generated if not provided. */
+    iv?: Uint8Array;
+    /** PBES2 Salt value (p2s). Required for PBES2 algorithms. */
+    p2s?: Uint8Array;
+    /** PBES2 Iteration count (p2c). Required for PBES2 algorithms. */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key. Generated if not provided for ECDH-ES. */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. */
+    apu?: Uint8Array;
+    /** ECDH-ES Agreement PartyVInfo. */
+    apv?: Uint8Array;
+}
+/** Result of the wrapKey function. */
+interface WrapKeyResult {
+    /** The wrapped key (Ciphertext). */
+    encryptedKey: Uint8Array;
+    /** Initialization Vector used (only for AES-GCMKW). Base64URL encoded. */
+    iv?: string;
+    /** Authentication Tag generated (only for AES-GCMKW). Base64URL encoded. */
+    tag?: string;
+    /** PBES2 Salt value used (only for PBES2). Base64URL encoded. */
+    p2s?: string;
+    /** PBES2 Iteration count used (only for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key used (only for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo used (only for ECDH-ES). Base64URL encoded. */
+    apu?: string;
+    /** ECDH-ES Agreement PartyVInfo used (only for ECDH-ES). Base64URL encoded. */
+    apv?: string;
+}
+/** Options for the unwrapKey function. */
+interface UnwrapKeyOptions {
+    /** Initialization Vector (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    iv?: Uint8Array | string;
+    /** Authentication Tag (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    tag?: Uint8Array | string;
+    /** PBES2 Salt value (required for PBES2). Base64URL encoded or Uint8Array. */
+    p2s?: Uint8Array | string;
+    /** PBES2 Iteration count (required for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key (required for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. Base64URL encoded or Uint8Array. */
+    apu?: Uint8Array | string;
+    /** ECDH-ES Agreement PartyVInfo. Base64URL encoded or Uint8Array. */
+    apv?: Uint8Array | string;
+    /** Expected unwrapped key algorithm (e.g., 'AES-GCM', 'AES-CBC'). Used by crypto.subtle.unwrapKey. */
+    unwrappedKeyAlgorithm?: string | Algorithm | RsaOaepParams | AesCtrParams | AesCbcParams | AesGcmParams;
+    /** Expected key usages for the unwrapped key. */
+    keyUsage?: KeyUsage[];
+    /** Mark the unwrapped key as extractable. Defaults to true. */
+    extractable?: boolean;
+    returnAs?: boolean | undefined;
+}
+/**
+ * Forked from https://github.com/panva/jose/tree/v6.0.10
+ * Copyright (c) 2018 Filip Skokan.
+ * LICENSE: https://github.com/panva/jose/blob/v6.0.10/LICENSE.md
+ */
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters {
+    /** JWK "kty" (Key Type) Parameter */
+    kty: string;
+    /**
+     * JWK "alg" (Algorithm) Parameter
+     *
+     * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+     */
+    alg?: string;
+    /** JWK "key_ops" (Key Operations) Parameter */
+    key_ops?: KeyUsage[];
+    /** JWK "ext" (Extractable) Parameter */
+    ext?: boolean;
+    /** JWK "use" (Public Key Use) Parameter */
+    use?: string;
+    /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+    x5c?: string[];
+    /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+    x5t?: string;
+    /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+    "x5t#S256"?: string;
+    /** JWK "x5u" (X.509 URL) Parameter */
+    x5u?: string;
+    /** JWK "kid" (Key ID) Parameter */
+    kid?: string;
+}
+/** Public EC JSON Web Keys */
+interface JWK_EC_Public extends JWKParameters {
+    /** EC JWK "crv" (Curve) Parameter */
+    crv: string;
+    /** EC JWK "x" (X Coordinate) Parameter */
+    x: string;
+    /** EC JWK "y" (Y Coordinate) Parameter */
+    y: string;
+}
+/** Private EC JSON Web Keys */
+interface JWK_EC_Private extends JWK_EC_Public, JWKParameters {
+    /** EC JWK "d" (ECC Private Key) Parameter */
+    d: string;
+}
+/** EC JSON Web Keys */
+type JWK_EC = JWK_EC_Public | JWK_EC_Private;
+/** Public RSA JSON Web Keys */
+interface JWK_RSA_Public extends JWKParameters {
+    /** RSA JWK "e" (Exponent) Parameter */
+    e: string;
+    /** RSA JWK "n" (Modulus) Parameter */
+    n: string;
+    oth?: RsaOtherPrimesInfo[];
+}
+/** Private RSA JSON Web Keys */
+interface JWK_RSA_Private extends JWK_RSA_Public, JWKParameters {
+    /** RSA JWK "d" (Private Exponent) Parameter */
+    d: string;
+    /** RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+    dp: string;
+    /** RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+    dq: string;
+    /** RSA JWK "p" (First Prime Factor) Parameter */
+    p: string;
+    /** RSA JWK "q" (Second Prime Factor) Parameter */
+    q: string;
+    /** RSA JWK "qi" (First CRT Coefficient) Parameter */
+    qi: string;
+}
+/** RSA JSON Web Keys */
+type JWK_RSA = JWK_RSA_Public | JWK_RSA_Private;
+/** oct JSON Web Keys */
+interface JWK_oct extends JWKParameters {
+    /** Oct JWK "k" (Key Value) Parameter */
+    k: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA" and "oct" key types are supported.
+ */
+type JWK = JWK_oct | JWK_RSA | JWK_EC;
+/** JWK Key Algorithms */
+type JWK_HMAC = "HS256" | "HS384" | "HS512";
+type JWK_RSA_SIGN = "RS256" | "RS384" | "RS512";
+type JWK_RSA_PSS = "PS256" | "PS384" | "PS512";
+type JWK_ECDSA = "ES256" | "ES384" | "ES512";
+type JWK_RSA_ENC = "RSA-OAEP" | "RSA-OAEP-256" | "RSA-OAEP-384" | "RSA-OAEP-512";
+type JWK_AES_KW = "A128KW" | "A192KW" | "A256KW";
+type JWK_AES_GCM_KW = "A128GCMKW" | "A192GCMKW" | "A256GCMKW";
+type JWK_AES_CBC_HMAC = "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512";
+type JWK_AES_GCM = "A128GCM" | "A192GCM" | "A256GCM";
+type JWK_PBES2 = "PBES2-HS256+A128KW" | "PBES2-HS384+A192KW" | "PBES2-HS512+A256KW";
+type JWK_ECDH_ES = "ECDH-ES" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW";
+type JWK_Symmetric_Algorithm = JWK_HMAC | JWK_AES_KW | JWK_AES_GCM;
+type JWK_Asymmetric_Algorithm = JWK_RSA_SIGN | JWK_RSA_PSS | JWK_ECDSA | JWK_RSA_ENC;
+type JWKAlgorithm = JWK_Symmetric_Algorithm | JWK_Asymmetric_Algorithm | JWK_AES_CBC_HMAC | JWK_PBES2 | JWK_ECDH_ES | ("none" | "dir");
+
+export type { JWKAlgorithm as A, CompositeKey as C, DeriveKeyOptions as D, GenerateKeyAlgorithm as G, JWKParameters as J, KeyManagementAlgorithm as K, UnwrapKeyOptions as U, WrapKeyOptions as W, GenerateKeyOptions as a, GenerateKeyReturn as b, DeriveKeyReturn as c, ContentEncryptionAlgorithm as d, WrapKeyResult as e, JWK_EC_Public as f, JWK_EC_Private as g, JWK_EC as h, JWK_RSA_Public as i, JWK_RSA_Private as j, JWK_RSA as k, JWK_oct as l, JWK as m, JWK_HMAC as n, JWK_RSA_SIGN as o, JWK_RSA_PSS as p, JWK_ECDSA as q, JWK_RSA_ENC as r, JWK_AES_KW as s, JWK_AES_GCM_KW as t, JWK_AES_CBC_HMAC as u, JWK_AES_GCM as v, JWK_PBES2 as w, JWK_ECDH_ES as x, JWK_Symmetric_Algorithm as y, JWK_Asymmetric_Algorithm as z };

package/dist/shared/unjwt.CJ_ohCFC.d.mts

@@ -0,0 +1,46 @@
+import { m as JWK } from './unjwt.C0bBN0AC.mjs';
+
+declare const textEncoder: TextEncoder;
+declare const textDecoder: TextDecoder;
+declare function base64UrlEncode(data: Uint8Array | string): string;
+declare function base64UrlDecode(): string;
+declare function base64UrlDecode(str?: string | undefined): string;
+declare function base64UrlDecode<T extends boolean | undefined>(str?: string | undefined, toString?: T): T extends false ? Uint8Array : string;
+declare function randomBytes(length: Readonly<number>): Uint8Array;
+/**
+ * Concatenates multiple Uint8Arrays
+ * @param arrays Arrays to concatenate
+ * @returns Concatenated array
+ */
+declare function concatUint8Arrays(...arrays: Readonly<Uint8Array[]>): Uint8Array;
+declare function isJWK(key: any): key is JWK;
+declare function assertCryptoKey(key: unknown): asserts key is CryptoKey;
+declare function isCryptoKey(key: unknown): key is CryptoKey;
+declare const isCryptoKeyPair: (key: any) => key is CryptoKeyPair;
+
+declare const index_assertCryptoKey: typeof assertCryptoKey;
+declare const index_base64UrlDecode: typeof base64UrlDecode;
+declare const index_base64UrlEncode: typeof base64UrlEncode;
+declare const index_concatUint8Arrays: typeof concatUint8Arrays;
+declare const index_isCryptoKey: typeof isCryptoKey;
+declare const index_isCryptoKeyPair: typeof isCryptoKeyPair;
+declare const index_isJWK: typeof isJWK;
+declare const index_randomBytes: typeof randomBytes;
+declare const index_textDecoder: typeof textDecoder;
+declare const index_textEncoder: typeof textEncoder;
+declare namespace index {
+  export {
+    index_assertCryptoKey as assertCryptoKey,
+    index_base64UrlDecode as base64UrlDecode,
+    index_base64UrlEncode as base64UrlEncode,
+    index_concatUint8Arrays as concatUint8Arrays,
+    index_isCryptoKey as isCryptoKey,
+    index_isCryptoKeyPair as isCryptoKeyPair,
+    index_isJWK as isJWK,
+    index_randomBytes as randomBytes,
+    index_textDecoder as textDecoder,
+    index_textEncoder as textEncoder,
+  };
+}
+
+export { textDecoder as a, base64UrlEncode as b, base64UrlDecode as c, concatUint8Arrays as d, isJWK as e, assertCryptoKey as f, isCryptoKey as g, isCryptoKeyPair as h, index as i, randomBytes as r, textEncoder as t };

package/dist/shared/unjwt.CjHZv3F3.mjs

@@ -0,0 +1,57 @@
+const textEncoder = /* @__PURE__ */ new TextEncoder();
+const textDecoder = /* @__PURE__ */ new TextDecoder();
+function base64UrlEncode(data) {
+  const encodedData = data instanceof Uint8Array ? data : textEncoder.encode(data);
+  return btoa(String.fromCodePoint(...encodedData)).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function base64UrlDecode(str, toString) {
+  const decodeToString = toString !== false;
+  if (!str) {
+    return decodeToString ? "" : new Uint8Array(0);
+  }
+  str = str.replace(/-/g, "+").replace(/_/g, "/");
+  while (str.length % 4) str += "=";
+  const data = Uint8Array.from(atob(str), (b) => b.codePointAt(0));
+  return decodeToString ? textDecoder.decode(data) : data;
+}
+function randomBytes(length) {
+  return crypto.getRandomValues(new Uint8Array(length));
+}
+function concatUint8Arrays(...arrays) {
+  const totalLength = arrays.reduce((length, arr) => length + arr.length, 0);
+  const result = new Uint8Array(totalLength);
+  let offset = 0;
+  for (const arr of arrays) {
+    result.set(arr, offset);
+    offset += arr.length;
+  }
+  return result;
+}
+function isJWK(key) {
+  return typeof key === "object" && key !== null && "kty" in key && typeof key.kty === "string";
+}
+function assertCryptoKey(key) {
+  if (!isCryptoKey(key)) {
+    throw new Error("CryptoKey instance expected");
+  }
+}
+function isCryptoKey(key) {
+  return key?.[Symbol.toStringTag] === "CryptoKey";
+}
+const isCryptoKeyPair = (key) => key && typeof key === "object" && isCryptoKey(key.publicKey) && isCryptoKey(key.privateKey);
+
+const index = {
+  __proto__: null,
+  assertCryptoKey: assertCryptoKey,
+  base64UrlDecode: base64UrlDecode,
+  base64UrlEncode: base64UrlEncode,
+  concatUint8Arrays: concatUint8Arrays,
+  isCryptoKey: isCryptoKey,
+  isCryptoKeyPair: isCryptoKeyPair,
+  isJWK: isJWK,
+  randomBytes: randomBytes,
+  textDecoder: textDecoder,
+  textEncoder: textEncoder
+};
+
+export { isJWK as a, base64UrlEncode as b, textDecoder as c, base64UrlDecode as d, concatUint8Arrays as e, assertCryptoKey as f, isCryptoKey as g, isCryptoKeyPair as h, index as i, randomBytes as r, textEncoder as t };

package/dist/shared/unjwt.D90BbcE1.d.mts

@@ -0,0 +1,52 @@
+import { i as JWK_RSA_Public } from './unjwt.C0bBN0AC.mjs';
+
+/** Header Parameters common to JWE and JWS */
+interface JoseHeaderParameters {
+    /** "kid" (Key ID) Header Parameter */
+    kid?: string;
+    /** "x5t" (X.509 Certificate SHA-1 Thumbprint) Header Parameter */
+    x5t?: string;
+    /** "x5c" (X.509 Certificate Chain) Header Parameter */
+    x5c?: string[];
+    /** "x5u" (X.509 URL) Header Parameter */
+    x5u?: string;
+    /** "jku" (JWK Set URL) Header Parameter */
+    jku?: string;
+    /** "jwk" (JSON Web Key) Header Parameter */
+    jwk?: JWK_RSA_Public;
+    /** "typ" (Type) Header Parameter */
+    typ?: string;
+    /** "cty" (Content Type) Header Parameter */
+    cty?: string;
+    /** "crit" (Critical) Header Parameter */
+    crit?: string[];
+    /** Any other JWS/JWE Header member. */
+    [propName: string]: unknown;
+}
+interface JWTClaims {
+    /** "iss" (Issuer) Claim */
+    iss?: string;
+    /** "sub" (Subject) Claim */
+    sub?: string;
+    /** "aud" (Audience) Claim */
+    aud?: string | string[];
+    /** "exp" (Expiration Time) Claim */
+    exp?: number;
+    /** "nbf" (Not Before) Claim */
+    nbf?: number;
+    /** "iat" (Issued At) Claim */
+    iat?: number;
+    /** "jti" (JWT ID) Claim */
+    jti?: string;
+    /** Any other JWT member. */
+    [propName: string]: unknown;
+}
+interface JWT<T = JWTClaims> {
+    header: JoseHeaderParameters & {
+        /** "alg" (Algorithm) Header Parameter */
+        alg: string;
+    };
+    claims: T;
+}
+
+export type { JoseHeaderParameters as J, JWTClaims as a, JWT as b };