unjwt 0.4.0 → 0.5.1

package/dist/shared/unjwt.CxhGjEAX.d.mts

@@ -0,0 +1,202 @@
+/** Structure returned for composite AES-CBC + HMAC keys. */
+type CompositeKey = {
+    /** The AES-CBC encryption/decryption key. */
+    encryptionKey: CryptoKey;
+    /** The HMAC key for integrity/authentication. */
+    macKey: CryptoKey;
+};
+type GenerateKeyAlgorithm = Exclude<JWKAlgorithm, "none" | "dir" | JWK_PBES2 | JWK_ECDH_ES>;
+/** Options for the generateKey function. */
+interface GenerateKeyOptions {
+    /** Key usages for the generated key(s). Note: For composite keys (CBC), default usages are applied separately. */
+    keyUsage?: KeyUsage[];
+    /** Mark the key(s) as extractable. Defaults to true. */
+    extractable?: boolean;
+    /** RSA modulus length. Defaults to 2048. */
+    modulusLength?: number;
+    /** RSA public exponent. Defaults to 65537 (0x010001). */
+    publicExponent?: Uint8Array;
+    /** Export the generated key(s) as JWK. If true, the key(s) will be returned in JWK format. */
+    toJWK?: boolean | undefined;
+}
+type GenerateKeyReturnJWK<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_Asymmetric_Algorithm ? {
+    privateKey: JWK;
+    publicKey: JWK;
+} : JWK;
+type GenerateKeyReturnCrypto<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_AES_CBC_HMAC ? Uint8Array : TAlg extends JWK_Asymmetric_Algorithm ? CryptoKeyPair : CryptoKey;
+type GenerateKeyReturn<TAlg extends GenerateKeyAlgorithm, TOptions extends GenerateKeyOptions> = TOptions["toJWK"] extends true ? GenerateKeyReturnJWK<TAlg> : GenerateKeyReturnCrypto<TAlg>;
+/** Options for the deriveKeyFromPassword function. */
+interface DeriveKeyOptions {
+    /** Salt value (p2s). Must be at least 8 bytes. */
+    salt: Uint8Array;
+    /** Iteration count (p2c). Must be a positive integer. */
+    iterations: number;
+    /** Key usages for the derived key. Defaults to ["wrapKey", "unwrapKey"]. */
+    keyUsage?: KeyUsage[];
+    /** Mark the derived key as extractable. Defaults to false. */
+    extractable?: boolean;
+    /** Export the derived key as JWK. If true, the key will be returned in JWK_oct format. */
+    toJWK?: boolean | undefined;
+}
+type DeriveKeyReturn<TOptions extends DeriveKeyOptions> = TOptions["toJWK"] extends true ? JWK_oct : CryptoKey;
+type KeyManagementAlgorithm = JWK_RSA_ENC | JWK_AES_KW | JWK_AES_GCM | JWK_AES_GCM_KW | JWK_PBES2 | JWK_ECDH_ES;
+type ContentEncryptionAlgorithm = JWK_AES_GCM | JWK_AES_CBC_HMAC;
+/** Options for the wrapKey function. */
+interface WrapKeyOptions {
+    /** Initialization Vector for AES-GCMKW. Generated if not provided. */
+    iv?: Uint8Array;
+    /** PBES2 Salt value (p2s). Required for PBES2 algorithms. */
+    p2s?: Uint8Array;
+    /** PBES2 Iteration count (p2c). Required for PBES2 algorithms. */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key. Generated if not provided for ECDH-ES. */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. */
+    apu?: Uint8Array;
+    /** ECDH-ES Agreement PartyVInfo. */
+    apv?: Uint8Array;
+}
+/** Result of the wrapKey function. */
+interface WrapKeyResult {
+    /** The wrapped key (Ciphertext). */
+    encryptedKey: Uint8Array;
+    /** Initialization Vector used (only for AES-GCMKW). Base64URL encoded. */
+    iv?: string;
+    /** Authentication Tag generated (only for AES-GCMKW). Base64URL encoded. */
+    tag?: string;
+    /** PBES2 Salt value used (only for PBES2). Base64URL encoded. */
+    p2s?: string;
+    /** PBES2 Iteration count used (only for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key used (only for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo used (only for ECDH-ES). Base64URL encoded. */
+    apu?: string;
+    /** ECDH-ES Agreement PartyVInfo used (only for ECDH-ES). Base64URL encoded. */
+    apv?: string;
+}
+/** Options for the unwrapKey function. */
+interface UnwrapKeyOptions {
+    /** Initialization Vector (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    iv?: Uint8Array | string;
+    /** Authentication Tag (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    tag?: Uint8Array | string;
+    /** PBES2 Salt value (required for PBES2). Base64URL encoded or Uint8Array. */
+    p2s?: Uint8Array | string;
+    /** PBES2 Iteration count (required for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key (required for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. Base64URL encoded or Uint8Array. */
+    apu?: Uint8Array | string;
+    /** ECDH-ES Agreement PartyVInfo. Base64URL encoded or Uint8Array. */
+    apv?: Uint8Array | string;
+    /** Expected unwrapped key algorithm (e.g., 'AES-GCM', 'AES-CBC'). Used by crypto.subtle.unwrapKey. */
+    unwrappedKeyAlgorithm?: string | Algorithm | RsaOaepParams | AesCtrParams | AesCbcParams | AesGcmParams;
+    /** Expected key usages for the unwrapped key. */
+    keyUsage?: KeyUsage[];
+    /** Mark the unwrapped key as extractable. Defaults to true. */
+    extractable?: boolean;
+    returnAs?: boolean | undefined;
+}
+/**
+ * Forked from https://github.com/panva/jose/tree/v6.0.10
+ * Copyright (c) 2018 Filip Skokan.
+ * LICENSE: https://github.com/panva/jose/blob/v6.0.10/LICENSE.md
+ */
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters {
+    /** JWK "kty" (Key Type) Parameter */
+    kty: string;
+    /**
+     * JWK "alg" (Algorithm) Parameter
+     *
+     * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+     */
+    alg?: string;
+    /** JWK "key_ops" (Key Operations) Parameter */
+    key_ops?: KeyUsage[];
+    /** JWK "ext" (Extractable) Parameter */
+    ext?: boolean;
+    /** JWK "use" (Public Key Use) Parameter */
+    use?: string;
+    /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+    x5c?: string[];
+    /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+    x5t?: string;
+    /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+    "x5t#S256"?: string;
+    /** JWK "x5u" (X.509 URL) Parameter */
+    x5u?: string;
+    /** JWK "kid" (Key ID) Parameter */
+    kid?: string;
+}
+/** Public EC JSON Web Keys */
+interface JWK_EC_Public extends JWKParameters {
+    /** EC JWK "crv" (Curve) Parameter */
+    crv: string;
+    /** EC JWK "x" (X Coordinate) Parameter */
+    x: string;
+    /** EC JWK "y" (Y Coordinate) Parameter */
+    y: string;
+}
+/** Private EC JSON Web Keys */
+interface JWK_EC_Private extends JWK_EC_Public, JWKParameters {
+    /** EC JWK "d" (ECC Private Key) Parameter */
+    d: string;
+}
+/** EC JSON Web Keys */
+type JWK_EC = JWK_EC_Public | JWK_EC_Private;
+/** Public RSA JSON Web Keys */
+interface JWK_RSA_Public extends JWKParameters {
+    /** RSA JWK "e" (Exponent) Parameter */
+    e: string;
+    /** RSA JWK "n" (Modulus) Parameter */
+    n: string;
+    oth?: RsaOtherPrimesInfo[];
+}
+/** Private RSA JSON Web Keys */
+interface JWK_RSA_Private extends JWK_RSA_Public, JWKParameters {
+    /** RSA JWK "d" (Private Exponent) Parameter */
+    d: string;
+    /** RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+    dp: string;
+    /** RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+    dq: string;
+    /** RSA JWK "p" (First Prime Factor) Parameter */
+    p: string;
+    /** RSA JWK "q" (Second Prime Factor) Parameter */
+    q: string;
+    /** RSA JWK "qi" (First CRT Coefficient) Parameter */
+    qi: string;
+}
+/** RSA JSON Web Keys */
+type JWK_RSA = JWK_RSA_Public | JWK_RSA_Private;
+/** oct JSON Web Keys */
+interface JWK_oct extends JWKParameters {
+    /** Oct JWK "k" (Key Value) Parameter */
+    k: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA" and "oct" key types are supported.
+ */
+type JWK = JWK_oct | JWK_RSA | JWK_EC;
+/** JWK Key Algorithms */
+type JWK_HMAC = "HS256" | "HS384" | "HS512";
+type JWK_RSA_SIGN = "RS256" | "RS384" | "RS512";
+type JWK_RSA_PSS = "PS256" | "PS384" | "PS512";
+type JWK_ECDSA = "ES256" | "ES384" | "ES512";
+type JWK_RSA_ENC = "RSA-OAEP" | "RSA-OAEP-256" | "RSA-OAEP-384" | "RSA-OAEP-512";
+type JWK_AES_KW = "A128KW" | "A192KW" | "A256KW";
+type JWK_AES_GCM_KW = "A128GCMKW" | "A192GCMKW" | "A256GCMKW";
+type JWK_AES_CBC_HMAC = "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512";
+type JWK_AES_GCM = "A128GCM" | "A192GCM" | "A256GCM";
+type JWK_PBES2 = "PBES2-HS256+A128KW" | "PBES2-HS384+A192KW" | "PBES2-HS512+A256KW";
+type JWK_ECDH_ES = "ECDH-ES" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW";
+type JWK_ED = "Ed25519" | "EdDSA";
+type JWK_Symmetric_Algorithm = JWK_HMAC | JWK_AES_KW | JWK_AES_GCM;
+type JWK_Asymmetric_Algorithm = JWK_RSA_SIGN | JWK_RSA_PSS | JWK_ECDSA | JWK_RSA_ENC;
+type JWKAlgorithm = JWK_Symmetric_Algorithm | JWK_Asymmetric_Algorithm | JWK_AES_CBC_HMAC | JWK_PBES2 | JWK_ECDH_ES | ("none" | "dir");
+type JWKPEMAlgorithm = JWK_RSA_PSS | JWK_RSA_SIGN | JWK_RSA_ENC | JWK_ECDSA | JWK_ECDH_ES | JWK_ED;
+
+export type { JWK_Asymmetric_Algorithm as A, JWKAlgorithm as B, CompositeKey as C, DeriveKeyOptions as D, JWKPEMAlgorithm as E, GenerateKeyAlgorithm as G, JWKParameters as J, KeyManagementAlgorithm as K, UnwrapKeyOptions as U, WrapKeyOptions as W, GenerateKeyOptions as a, GenerateKeyReturn as b, DeriveKeyReturn as c, ContentEncryptionAlgorithm as d, WrapKeyResult as e, JWK_EC_Public as f, JWK_EC_Private as g, JWK_EC as h, JWK_RSA_Public as i, JWK_RSA_Private as j, JWK_RSA as k, JWK_oct as l, JWK as m, JWK_HMAC as n, JWK_RSA_SIGN as o, JWK_RSA_PSS as p, JWK_ECDSA as q, JWK_RSA_ENC as r, JWK_AES_KW as s, JWK_AES_GCM_KW as t, JWK_AES_CBC_HMAC as u, JWK_AES_GCM as v, JWK_PBES2 as w, JWK_ECDH_ES as x, JWK_ED as y, JWK_Symmetric_Algorithm as z };

package/dist/shared/unjwt.CxhGjEAX.d.ts

@@ -0,0 +1,202 @@
+/** Structure returned for composite AES-CBC + HMAC keys. */
+type CompositeKey = {
+    /** The AES-CBC encryption/decryption key. */
+    encryptionKey: CryptoKey;
+    /** The HMAC key for integrity/authentication. */
+    macKey: CryptoKey;
+};
+type GenerateKeyAlgorithm = Exclude<JWKAlgorithm, "none" | "dir" | JWK_PBES2 | JWK_ECDH_ES>;
+/** Options for the generateKey function. */
+interface GenerateKeyOptions {
+    /** Key usages for the generated key(s). Note: For composite keys (CBC), default usages are applied separately. */
+    keyUsage?: KeyUsage[];
+    /** Mark the key(s) as extractable. Defaults to true. */
+    extractable?: boolean;
+    /** RSA modulus length. Defaults to 2048. */
+    modulusLength?: number;
+    /** RSA public exponent. Defaults to 65537 (0x010001). */
+    publicExponent?: Uint8Array;
+    /** Export the generated key(s) as JWK. If true, the key(s) will be returned in JWK format. */
+    toJWK?: boolean | undefined;
+}
+type GenerateKeyReturnJWK<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_Asymmetric_Algorithm ? {
+    privateKey: JWK;
+    publicKey: JWK;
+} : JWK;
+type GenerateKeyReturnCrypto<TAlg extends GenerateKeyAlgorithm> = TAlg extends JWK_AES_CBC_HMAC ? Uint8Array : TAlg extends JWK_Asymmetric_Algorithm ? CryptoKeyPair : CryptoKey;
+type GenerateKeyReturn<TAlg extends GenerateKeyAlgorithm, TOptions extends GenerateKeyOptions> = TOptions["toJWK"] extends true ? GenerateKeyReturnJWK<TAlg> : GenerateKeyReturnCrypto<TAlg>;
+/** Options for the deriveKeyFromPassword function. */
+interface DeriveKeyOptions {
+    /** Salt value (p2s). Must be at least 8 bytes. */
+    salt: Uint8Array;
+    /** Iteration count (p2c). Must be a positive integer. */
+    iterations: number;
+    /** Key usages for the derived key. Defaults to ["wrapKey", "unwrapKey"]. */
+    keyUsage?: KeyUsage[];
+    /** Mark the derived key as extractable. Defaults to false. */
+    extractable?: boolean;
+    /** Export the derived key as JWK. If true, the key will be returned in JWK_oct format. */
+    toJWK?: boolean | undefined;
+}
+type DeriveKeyReturn<TOptions extends DeriveKeyOptions> = TOptions["toJWK"] extends true ? JWK_oct : CryptoKey;
+type KeyManagementAlgorithm = JWK_RSA_ENC | JWK_AES_KW | JWK_AES_GCM | JWK_AES_GCM_KW | JWK_PBES2 | JWK_ECDH_ES;
+type ContentEncryptionAlgorithm = JWK_AES_GCM | JWK_AES_CBC_HMAC;
+/** Options for the wrapKey function. */
+interface WrapKeyOptions {
+    /** Initialization Vector for AES-GCMKW. Generated if not provided. */
+    iv?: Uint8Array;
+    /** PBES2 Salt value (p2s). Required for PBES2 algorithms. */
+    p2s?: Uint8Array;
+    /** PBES2 Iteration count (p2c). Required for PBES2 algorithms. */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key. Generated if not provided for ECDH-ES. */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. */
+    apu?: Uint8Array;
+    /** ECDH-ES Agreement PartyVInfo. */
+    apv?: Uint8Array;
+}
+/** Result of the wrapKey function. */
+interface WrapKeyResult {
+    /** The wrapped key (Ciphertext). */
+    encryptedKey: Uint8Array;
+    /** Initialization Vector used (only for AES-GCMKW). Base64URL encoded. */
+    iv?: string;
+    /** Authentication Tag generated (only for AES-GCMKW). Base64URL encoded. */
+    tag?: string;
+    /** PBES2 Salt value used (only for PBES2). Base64URL encoded. */
+    p2s?: string;
+    /** PBES2 Iteration count used (only for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key used (only for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo used (only for ECDH-ES). Base64URL encoded. */
+    apu?: string;
+    /** ECDH-ES Agreement PartyVInfo used (only for ECDH-ES). Base64URL encoded. */
+    apv?: string;
+}
+/** Options for the unwrapKey function. */
+interface UnwrapKeyOptions {
+    /** Initialization Vector (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    iv?: Uint8Array | string;
+    /** Authentication Tag (required for AES-GCMKW). Base64URL encoded or Uint8Array. */
+    tag?: Uint8Array | string;
+    /** PBES2 Salt value (required for PBES2). Base64URL encoded or Uint8Array. */
+    p2s?: Uint8Array | string;
+    /** PBES2 Iteration count (required for PBES2). */
+    p2c?: number;
+    /** ECDH-ES Ephemeral Public Key (required for ECDH-ES). */
+    epk?: JWK_EC_Public;
+    /** ECDH-ES Agreement PartyUInfo. Base64URL encoded or Uint8Array. */
+    apu?: Uint8Array | string;
+    /** ECDH-ES Agreement PartyVInfo. Base64URL encoded or Uint8Array. */
+    apv?: Uint8Array | string;
+    /** Expected unwrapped key algorithm (e.g., 'AES-GCM', 'AES-CBC'). Used by crypto.subtle.unwrapKey. */
+    unwrappedKeyAlgorithm?: string | Algorithm | RsaOaepParams | AesCtrParams | AesCbcParams | AesGcmParams;
+    /** Expected key usages for the unwrapped key. */
+    keyUsage?: KeyUsage[];
+    /** Mark the unwrapped key as extractable. Defaults to true. */
+    extractable?: boolean;
+    returnAs?: boolean | undefined;
+}
+/**
+ * Forked from https://github.com/panva/jose/tree/v6.0.10
+ * Copyright (c) 2018 Filip Skokan.
+ * LICENSE: https://github.com/panva/jose/blob/v6.0.10/LICENSE.md
+ */
+/** Generic JSON Web Key Parameters. */
+interface JWKParameters {
+    /** JWK "kty" (Key Type) Parameter */
+    kty: string;
+    /**
+     * JWK "alg" (Algorithm) Parameter
+     *
+     * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
+     */
+    alg?: string;
+    /** JWK "key_ops" (Key Operations) Parameter */
+    key_ops?: KeyUsage[];
+    /** JWK "ext" (Extractable) Parameter */
+    ext?: boolean;
+    /** JWK "use" (Public Key Use) Parameter */
+    use?: string;
+    /** JWK "x5c" (X.509 Certificate Chain) Parameter */
+    x5c?: string[];
+    /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
+    x5t?: string;
+    /** JWK "x5t#S256" (X.509 Certificate SHA-256 Thumbprint) Parameter */
+    "x5t#S256"?: string;
+    /** JWK "x5u" (X.509 URL) Parameter */
+    x5u?: string;
+    /** JWK "kid" (Key ID) Parameter */
+    kid?: string;
+}
+/** Public EC JSON Web Keys */
+interface JWK_EC_Public extends JWKParameters {
+    /** EC JWK "crv" (Curve) Parameter */
+    crv: string;
+    /** EC JWK "x" (X Coordinate) Parameter */
+    x: string;
+    /** EC JWK "y" (Y Coordinate) Parameter */
+    y: string;
+}
+/** Private EC JSON Web Keys */
+interface JWK_EC_Private extends JWK_EC_Public, JWKParameters {
+    /** EC JWK "d" (ECC Private Key) Parameter */
+    d: string;
+}
+/** EC JSON Web Keys */
+type JWK_EC = JWK_EC_Public | JWK_EC_Private;
+/** Public RSA JSON Web Keys */
+interface JWK_RSA_Public extends JWKParameters {
+    /** RSA JWK "e" (Exponent) Parameter */
+    e: string;
+    /** RSA JWK "n" (Modulus) Parameter */
+    n: string;
+    oth?: RsaOtherPrimesInfo[];
+}
+/** Private RSA JSON Web Keys */
+interface JWK_RSA_Private extends JWK_RSA_Public, JWKParameters {
+    /** RSA JWK "d" (Private Exponent) Parameter */
+    d: string;
+    /** RSA JWK "dp" (First Factor CRT Exponent) Parameter */
+    dp: string;
+    /** RSA JWK "dq" (Second Factor CRT Exponent) Parameter */
+    dq: string;
+    /** RSA JWK "p" (First Prime Factor) Parameter */
+    p: string;
+    /** RSA JWK "q" (Second Prime Factor) Parameter */
+    q: string;
+    /** RSA JWK "qi" (First CRT Coefficient) Parameter */
+    qi: string;
+}
+/** RSA JSON Web Keys */
+type JWK_RSA = JWK_RSA_Public | JWK_RSA_Private;
+/** oct JSON Web Keys */
+interface JWK_oct extends JWKParameters {
+    /** Oct JWK "k" (Key Value) Parameter */
+    k: string;
+}
+/**
+ * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA" and "oct" key types are supported.
+ */
+type JWK = JWK_oct | JWK_RSA | JWK_EC;
+/** JWK Key Algorithms */
+type JWK_HMAC = "HS256" | "HS384" | "HS512";
+type JWK_RSA_SIGN = "RS256" | "RS384" | "RS512";
+type JWK_RSA_PSS = "PS256" | "PS384" | "PS512";
+type JWK_ECDSA = "ES256" | "ES384" | "ES512";
+type JWK_RSA_ENC = "RSA-OAEP" | "RSA-OAEP-256" | "RSA-OAEP-384" | "RSA-OAEP-512";
+type JWK_AES_KW = "A128KW" | "A192KW" | "A256KW";
+type JWK_AES_GCM_KW = "A128GCMKW" | "A192GCMKW" | "A256GCMKW";
+type JWK_AES_CBC_HMAC = "A128CBC-HS256" | "A192CBC-HS384" | "A256CBC-HS512";
+type JWK_AES_GCM = "A128GCM" | "A192GCM" | "A256GCM";
+type JWK_PBES2 = "PBES2-HS256+A128KW" | "PBES2-HS384+A192KW" | "PBES2-HS512+A256KW";
+type JWK_ECDH_ES = "ECDH-ES" | "ECDH-ES+A128KW" | "ECDH-ES+A192KW" | "ECDH-ES+A256KW";
+type JWK_ED = "Ed25519" | "EdDSA";
+type JWK_Symmetric_Algorithm = JWK_HMAC | JWK_AES_KW | JWK_AES_GCM;
+type JWK_Asymmetric_Algorithm = JWK_RSA_SIGN | JWK_RSA_PSS | JWK_ECDSA | JWK_RSA_ENC;
+type JWKAlgorithm = JWK_Symmetric_Algorithm | JWK_Asymmetric_Algorithm | JWK_AES_CBC_HMAC | JWK_PBES2 | JWK_ECDH_ES | ("none" | "dir");
+type JWKPEMAlgorithm = JWK_RSA_PSS | JWK_RSA_SIGN | JWK_RSA_ENC | JWK_ECDSA | JWK_ECDH_ES | JWK_ED;
+
+export type { JWK_Asymmetric_Algorithm as A, JWKAlgorithm as B, CompositeKey as C, DeriveKeyOptions as D, JWKPEMAlgorithm as E, GenerateKeyAlgorithm as G, JWKParameters as J, KeyManagementAlgorithm as K, UnwrapKeyOptions as U, WrapKeyOptions as W, GenerateKeyOptions as a, GenerateKeyReturn as b, DeriveKeyReturn as c, ContentEncryptionAlgorithm as d, WrapKeyResult as e, JWK_EC_Public as f, JWK_EC_Private as g, JWK_EC as h, JWK_RSA_Public as i, JWK_RSA_Private as j, JWK_RSA as k, JWK_oct as l, JWK as m, JWK_HMAC as n, JWK_RSA_SIGN as o, JWK_RSA_PSS as p, JWK_ECDSA as q, JWK_RSA_ENC as r, JWK_AES_KW as s, JWK_AES_GCM_KW as t, JWK_AES_CBC_HMAC as u, JWK_AES_GCM as v, JWK_PBES2 as w, JWK_ECDH_ES as x, JWK_ED as y, JWK_Symmetric_Algorithm as z };

package/dist/shared/unjwt.D1J1DelP.d.mts

@@ -0,0 +1,198 @@
+import { G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, w as JWK_PBES2, D as DeriveKeyOptions, c as DeriveKeyReturn, l as JWK_oct, m as JWK, K as KeyManagementAlgorithm, W as WrapKeyOptions, e as WrapKeyResult, U as UnwrapKeyOptions, E as JWKPEMAlgorithm, C as CompositeKey, d as ContentEncryptionAlgorithm, B as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, A as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, y as JWK_ED, n as JWK_HMAC, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, z as JWK_Symmetric_Algorithm } from './unjwt.CxhGjEAX.mjs';
+
+/**
+ * This is a fork of Jose library's utility functions.
+ * @source https://github.com/panva/jose/tree/69b7960c67e05be55fa2ec31c74b987696c20c60/src/lib/asn1.ts
+ * @license MIT https://github.com/panva/jose/blob/69b7960c67e05be55fa2ec31c74b987696c20c60/LICENSE.md
+ */
+/** Key Import Function options. */
+interface KeyImportOptions {
+    /**
+     * The value to use as {@link !SubtleCrypto.importKey} `extractable` argument. Default is false for
+     * private keys, true otherwise.
+     */
+    extractable?: boolean;
+}
+
+/**
+ * Generates a cryptographic key for the specified algorithm.
+ *
+ * @param alg The JWA algorithm identifier (e.g., "HS256", "RS256", "A128GCM").
+ * @param options Configuration options for key generation.
+ * @returns A Promise resolving to the generated key (CryptoKey, CryptoKeyPair, or Uint8Array) or its JWK representation.
+ */
+declare function generateKey<TAlg extends GenerateKeyAlgorithm, TOptions extends GenerateKeyOptions>(alg: TAlg, options?: TOptions): Promise<GenerateKeyReturn<TAlg, TOptions>>;
+/**
+ * Derives a key from a password using PBKDF2 as specified by PBES2 algorithms.
+ *
+ * @param password The password to derive the key from (string or Uint8Array).
+ * @param alg The PBES2 algorithm identifier (e.g., "PBES2-HS256+A128KW").
+ * @param options Configuration options including salt and iterations.
+ * @returns A Promise resolving to the derived key (CryptoKey) or its JWK_oct representation.
+ */
+declare function deriveKeyFromPassword<TAlg extends JWK_PBES2, TOptions extends DeriveKeyOptions>(password: string | Uint8Array, alg: TAlg, options: TOptions): Promise<DeriveKeyReturn<TOptions>>;
+/**
+ * Imports a key from various formats (CryptoKey, JWK, Uint8Array).
+ *
+ * - If `key` is a CryptoKey, it's returned directly.
+ * - If `key` is a Uint8Array, it's returned directly.
+ * - If `key` is a JWK_oct (symmetric key with 'k'), the raw key bytes are returned as Uint8Array.
+ * - If `key` is any other JWK type (asymmetric), the `alg` parameter is required, and a CryptoKey is returned.
+ *
+ * @param key The key to import.
+ * @param alg The algorithm hint, required when importing asymmetric JWKs.
+ * @returns A Promise resolving to the imported key as CryptoKey or Uint8Array.
+ */
+declare function importKey(key: string): Promise<Uint8Array>;
+declare function importKey(key: Uint8Array): Promise<Uint8Array>;
+declare function importKey(key: CryptoKey): Promise<CryptoKey>;
+declare function importKey(key: JWK_oct): Promise<Uint8Array>;
+declare function importKey(key: Exclude<JWK, JWK_oct>, alg: string): Promise<CryptoKey>;
+declare function importKey(key: CryptoKey | JWK | Uint8Array | string, alg?: string): Promise<CryptoKey | Uint8Array>;
+/**
+ * Exports a CryptoKey to a JWK (JSON Web Key) format.
+ *
+ * @param key The CryptoKey to export.
+ * @param jwk Optional partial JWK to merge with the exported key, allowing overrides.
+ * @returns A Promise resolving to the exported JWK.
+ */
+declare function exportKey(key: CryptoKey, jwk?: Partial<JWK>): Promise<JWK>;
+/**
+ * Wraps a Content Encryption Key (CEK) using the specified algorithm and wrapping key.
+ *
+ * @param alg The JWA key management algorithm (e.g., "A128KW", "RSA-OAEP", "PBES2-HS256+A128KW").
+ * @param keyToWrap The key to be wrapped (CEK), typically a symmetric key as Uint8Array or CryptoKey.
+ * @param wrappingKey The key used to wrap the CEK (CryptoKey, JWK, or password string/Uint8Array for PBES2).
+ * @param options Additional options required by certain algorithms (e.g., p2s, p2c for PBES2).
+ * @returns A Promise resolving to an object containing the wrapped key and any necessary parameters (iv, tag, epk, etc.).
+ */
+declare function wrapKey(alg: KeyManagementAlgorithm, keyToWrap: CryptoKey | Uint8Array, wrappingKey: CryptoKey | JWK | string | Uint8Array, options?: WrapKeyOptions): Promise<WrapKeyResult>;
+/**
+ * Unwraps a Content Encryption Key (CEK) using the specified algorithm and unwrapping key.
+ *
+ * @param alg The JWA key management algorithm (e.g., "A128KW", "RSA-OAEP", "PBES2-HS256+A128KW").
+ * @param wrappedKey The wrapped key (ciphertext) as Uint8Array.
+ * @param unwrappingKey The key used to unwrap the CEK (CryptoKey, JWK, or password string/Uint8Array for PBES2).
+ * @param options Additional options required by certain algorithms (e.g., iv, tag, p2s, p2c, epk).
+ * @returns A Promise resolving to the unwrapped key (CEK) as a CryptoKey or Uint8Array.
+ */
+declare function unwrapKey<T extends boolean | undefined = undefined>(alg: KeyManagementAlgorithm, wrappedKey: Uint8Array, unwrappingKey: CryptoKey | JWK | string | Uint8Array, options?: UnwrapKeyOptions & {
+    returnAs?: T;
+}): Promise<T extends false ? Uint8Array : CryptoKey>;
+/**
+ * Imports a key from a PEM-encoded string and converts it to a JWK.
+ *
+ * @param pem The PEM-encoded string.
+ * @param pemType The type of PEM encoding ('pkcs8' for private keys, 'spki' for public keys, 'x509' for certificates).
+ * @param alg The JWA algorithm identifier. This is crucial for `crypto.subtle.importKey`
+ *            to understand the key's intended algorithm and for setting the 'alg' field in the resulting JWK.
+ * @param importOptions Options for the PEM import process (e.g., extractable for the CryptoKey).
+ * @param jwkExtras Additional properties to merge into the resulting JWK.
+ * @returns A Promise resolving to the imported key as a JWK.
+ */
+declare function importJWKFromPEM(pem: string, pemType: "pkcs8" | "spki" | "x509", alg: JWKPEMAlgorithm, importOptions?: KeyImportOptions, jwkExtras?: Partial<JWK>): Promise<JWK>;
+/**
+ * Exports a JWK to a PEM-encoded string.
+ *
+ * @param jwk The JWK to export.
+ * @param pemFormat The desired PEM format ('pkcs8' for private keys, 'spki' for public keys).
+ * @param algForCryptoKeyImport If the JWK does not have an 'alg' property, this algorithm hint is
+ *                              required to correctly convert it to a CryptoKey first.
+ * @returns A Promise resolving to the PEM-encoded key string.
+ */
+declare function exportJWKToPEM(jwk: JWK, pemFormat: "pkcs8" | "spki", algForCryptoKeyImport?: JWKPEMAlgorithm): Promise<string>;
+
+declare const jwk_CompositeKey: typeof CompositeKey;
+declare const jwk_ContentEncryptionAlgorithm: typeof ContentEncryptionAlgorithm;
+declare const jwk_DeriveKeyOptions: typeof DeriveKeyOptions;
+declare const jwk_DeriveKeyReturn: typeof DeriveKeyReturn;
+declare const jwk_GenerateKeyAlgorithm: typeof GenerateKeyAlgorithm;
+declare const jwk_GenerateKeyOptions: typeof GenerateKeyOptions;
+declare const jwk_GenerateKeyReturn: typeof GenerateKeyReturn;
+declare const jwk_JWK: typeof JWK;
+declare const jwk_JWKAlgorithm: typeof JWKAlgorithm;
+declare const jwk_JWKPEMAlgorithm: typeof JWKPEMAlgorithm;
+declare const jwk_JWKParameters: typeof JWKParameters;
+declare const jwk_JWK_AES_CBC_HMAC: typeof JWK_AES_CBC_HMAC;
+declare const jwk_JWK_AES_GCM: typeof JWK_AES_GCM;
+declare const jwk_JWK_AES_GCM_KW: typeof JWK_AES_GCM_KW;
+declare const jwk_JWK_AES_KW: typeof JWK_AES_KW;
+declare const jwk_JWK_Asymmetric_Algorithm: typeof JWK_Asymmetric_Algorithm;
+declare const jwk_JWK_EC: typeof JWK_EC;
+declare const jwk_JWK_ECDH_ES: typeof JWK_ECDH_ES;
+declare const jwk_JWK_ECDSA: typeof JWK_ECDSA;
+declare const jwk_JWK_EC_Private: typeof JWK_EC_Private;
+declare const jwk_JWK_EC_Public: typeof JWK_EC_Public;
+declare const jwk_JWK_ED: typeof JWK_ED;
+declare const jwk_JWK_HMAC: typeof JWK_HMAC;
+declare const jwk_JWK_PBES2: typeof JWK_PBES2;
+declare const jwk_JWK_RSA: typeof JWK_RSA;
+declare const jwk_JWK_RSA_ENC: typeof JWK_RSA_ENC;
+declare const jwk_JWK_RSA_PSS: typeof JWK_RSA_PSS;
+declare const jwk_JWK_RSA_Private: typeof JWK_RSA_Private;
+declare const jwk_JWK_RSA_Public: typeof JWK_RSA_Public;
+declare const jwk_JWK_RSA_SIGN: typeof JWK_RSA_SIGN;
+declare const jwk_JWK_Symmetric_Algorithm: typeof JWK_Symmetric_Algorithm;
+declare const jwk_JWK_oct: typeof JWK_oct;
+declare const jwk_KeyManagementAlgorithm: typeof KeyManagementAlgorithm;
+declare const jwk_UnwrapKeyOptions: typeof UnwrapKeyOptions;
+declare const jwk_WrapKeyOptions: typeof WrapKeyOptions;
+declare const jwk_WrapKeyResult: typeof WrapKeyResult;
+declare const jwk_deriveKeyFromPassword: typeof deriveKeyFromPassword;
+declare const jwk_exportJWKToPEM: typeof exportJWKToPEM;
+declare const jwk_exportKey: typeof exportKey;
+declare const jwk_generateKey: typeof generateKey;
+declare const jwk_importJWKFromPEM: typeof importJWKFromPEM;
+declare const jwk_importKey: typeof importKey;
+declare const jwk_unwrapKey: typeof unwrapKey;
+declare const jwk_wrapKey: typeof wrapKey;
+declare namespace jwk {
+  export {
+    jwk_CompositeKey as CompositeKey,
+    jwk_ContentEncryptionAlgorithm as ContentEncryptionAlgorithm,
+    jwk_DeriveKeyOptions as DeriveKeyOptions,
+    jwk_DeriveKeyReturn as DeriveKeyReturn,
+    jwk_GenerateKeyAlgorithm as GenerateKeyAlgorithm,
+    jwk_GenerateKeyOptions as GenerateKeyOptions,
+    jwk_GenerateKeyReturn as GenerateKeyReturn,
+    jwk_JWK as JWK,
+    jwk_JWKAlgorithm as JWKAlgorithm,
+    jwk_JWKPEMAlgorithm as JWKPEMAlgorithm,
+    jwk_JWKParameters as JWKParameters,
+    jwk_JWK_AES_CBC_HMAC as JWK_AES_CBC_HMAC,
+    jwk_JWK_AES_GCM as JWK_AES_GCM,
+    jwk_JWK_AES_GCM_KW as JWK_AES_GCM_KW,
+    jwk_JWK_AES_KW as JWK_AES_KW,
+    jwk_JWK_Asymmetric_Algorithm as JWK_Asymmetric_Algorithm,
+    jwk_JWK_EC as JWK_EC,
+    jwk_JWK_ECDH_ES as JWK_ECDH_ES,
+    jwk_JWK_ECDSA as JWK_ECDSA,
+    jwk_JWK_EC_Private as JWK_EC_Private,
+    jwk_JWK_EC_Public as JWK_EC_Public,
+    jwk_JWK_ED as JWK_ED,
+    jwk_JWK_HMAC as JWK_HMAC,
+    jwk_JWK_PBES2 as JWK_PBES2,
+    jwk_JWK_RSA as JWK_RSA,
+    jwk_JWK_RSA_ENC as JWK_RSA_ENC,
+    jwk_JWK_RSA_PSS as JWK_RSA_PSS,
+    jwk_JWK_RSA_Private as JWK_RSA_Private,
+    jwk_JWK_RSA_Public as JWK_RSA_Public,
+    jwk_JWK_RSA_SIGN as JWK_RSA_SIGN,
+    jwk_JWK_Symmetric_Algorithm as JWK_Symmetric_Algorithm,
+    jwk_JWK_oct as JWK_oct,
+    jwk_KeyManagementAlgorithm as KeyManagementAlgorithm,
+    jwk_UnwrapKeyOptions as UnwrapKeyOptions,
+    jwk_WrapKeyOptions as WrapKeyOptions,
+    jwk_WrapKeyResult as WrapKeyResult,
+    jwk_deriveKeyFromPassword as deriveKeyFromPassword,
+    jwk_exportJWKToPEM as exportJWKToPEM,
+    jwk_exportKey as exportKey,
+    jwk_generateKey as generateKey,
+    jwk_importJWKFromPEM as importJWKFromPEM,
+    jwk_importKey as importKey,
+    jwk_unwrapKey as unwrapKey,
+    jwk_wrapKey as wrapKey,
+  };
+}
+
+export { importJWKFromPEM as a, exportJWKToPEM as b, deriveKeyFromPassword as d, exportKey as e, generateKey as g, importKey as i, jwk as j, unwrapKey as u, wrapKey as w };