unjwt 0.5.0 → 0.5.2

package/dist/shared/{unjwt.BOEZHxi_.d.ts → unjwt.D1J1DelP.d.mts}

@@ -1,4 +1,18 @@
-import { G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, w as JWK_PBES2, D as DeriveKeyOptions, c as DeriveKeyReturn, l as JWK_oct, m as JWK, K as KeyManagementAlgorithm, W as WrapKeyOptions, e as WrapKeyResult, U as UnwrapKeyOptions, C as CompositeKey, d as ContentEncryptionAlgorithm, A as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, z as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, n as JWK_HMAC, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, y as JWK_Symmetric_Algorithm } from './unjwt.C0bBN0AC.js';
+import { G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, w as JWK_PBES2, D as DeriveKeyOptions, c as DeriveKeyReturn, l as JWK_oct, m as JWK, K as KeyManagementAlgorithm, W as WrapKeyOptions, e as WrapKeyResult, U as UnwrapKeyOptions, E as JWKPEMAlgorithm, C as CompositeKey, d as ContentEncryptionAlgorithm, B as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, A as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, y as JWK_ED, n as JWK_HMAC, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, z as JWK_Symmetric_Algorithm } from './unjwt.CxhGjEAX.mjs';
+
+/**
+ * This is a fork of Jose library's utility functions.
+ * @source https://github.com/panva/jose/tree/69b7960c67e05be55fa2ec31c74b987696c20c60/src/lib/asn1.ts
+ * @license MIT https://github.com/panva/jose/blob/69b7960c67e05be55fa2ec31c74b987696c20c60/LICENSE.md
+ */
+/** Key Import Function options. */
+interface KeyImportOptions {
+    /**
+     * The value to use as {@link !SubtleCrypto.importKey} `extractable` argument. Default is false for
+     * private keys, true otherwise.
+     */
+    extractable?: boolean;
+}
 
 /**
  * Generates a cryptographic key for the specified algorithm.
@@ -65,6 +79,28 @@ declare function wrapKey(alg: KeyManagementAlgorithm, keyToWrap: CryptoKey | Uin
 declare function unwrapKey<T extends boolean | undefined = undefined>(alg: KeyManagementAlgorithm, wrappedKey: Uint8Array, unwrappingKey: CryptoKey | JWK | string | Uint8Array, options?: UnwrapKeyOptions & {
     returnAs?: T;
 }): Promise<T extends false ? Uint8Array : CryptoKey>;
+/**
+ * Imports a key from a PEM-encoded string and converts it to a JWK.
+ *
+ * @param pem The PEM-encoded string.
+ * @param pemType The type of PEM encoding ('pkcs8' for private keys, 'spki' for public keys, 'x509' for certificates).
+ * @param alg The JWA algorithm identifier. This is crucial for `crypto.subtle.importKey`
+ *            to understand the key's intended algorithm and for setting the 'alg' field in the resulting JWK.
+ * @param importOptions Options for the PEM import process (e.g., extractable for the CryptoKey).
+ * @param jwkExtras Additional properties to merge into the resulting JWK.
+ * @returns A Promise resolving to the imported key as a JWK.
+ */
+declare function importJWKFromPEM(pem: string, pemType: "pkcs8" | "spki" | "x509", alg: JWKPEMAlgorithm, importOptions?: KeyImportOptions, jwkExtras?: Partial<JWK>): Promise<JWK>;
+/**
+ * Exports a JWK to a PEM-encoded string.
+ *
+ * @param jwk The JWK to export.
+ * @param pemFormat The desired PEM format ('pkcs8' for private keys, 'spki' for public keys).
+ * @param algForCryptoKeyImport If the JWK does not have an 'alg' property, this algorithm hint is
+ *                              required to correctly convert it to a CryptoKey first.
+ * @returns A Promise resolving to the PEM-encoded key string.
+ */
+declare function exportJWKToPEM(jwk: JWK, pemFormat: "pkcs8" | "spki", algForCryptoKeyImport?: JWKPEMAlgorithm): Promise<string>;
 
 declare const jwk_CompositeKey: typeof CompositeKey;
 declare const jwk_ContentEncryptionAlgorithm: typeof ContentEncryptionAlgorithm;
@@ -75,6 +111,7 @@ declare const jwk_GenerateKeyOptions: typeof GenerateKeyOptions;
 declare const jwk_GenerateKeyReturn: typeof GenerateKeyReturn;
 declare const jwk_JWK: typeof JWK;
 declare const jwk_JWKAlgorithm: typeof JWKAlgorithm;
+declare const jwk_JWKPEMAlgorithm: typeof JWKPEMAlgorithm;
 declare const jwk_JWKParameters: typeof JWKParameters;
 declare const jwk_JWK_AES_CBC_HMAC: typeof JWK_AES_CBC_HMAC;
 declare const jwk_JWK_AES_GCM: typeof JWK_AES_GCM;
@@ -86,6 +123,7 @@ declare const jwk_JWK_ECDH_ES: typeof JWK_ECDH_ES;
 declare const jwk_JWK_ECDSA: typeof JWK_ECDSA;
 declare const jwk_JWK_EC_Private: typeof JWK_EC_Private;
 declare const jwk_JWK_EC_Public: typeof JWK_EC_Public;
+declare const jwk_JWK_ED: typeof JWK_ED;
 declare const jwk_JWK_HMAC: typeof JWK_HMAC;
 declare const jwk_JWK_PBES2: typeof JWK_PBES2;
 declare const jwk_JWK_RSA: typeof JWK_RSA;
@@ -101,8 +139,10 @@ declare const jwk_UnwrapKeyOptions: typeof UnwrapKeyOptions;
 declare const jwk_WrapKeyOptions: typeof WrapKeyOptions;
 declare const jwk_WrapKeyResult: typeof WrapKeyResult;
 declare const jwk_deriveKeyFromPassword: typeof deriveKeyFromPassword;
+declare const jwk_exportJWKToPEM: typeof exportJWKToPEM;
 declare const jwk_exportKey: typeof exportKey;
 declare const jwk_generateKey: typeof generateKey;
+declare const jwk_importJWKFromPEM: typeof importJWKFromPEM;
 declare const jwk_importKey: typeof importKey;
 declare const jwk_unwrapKey: typeof unwrapKey;
 declare const jwk_wrapKey: typeof wrapKey;
@@ -117,6 +157,7 @@ declare namespace jwk {
     jwk_GenerateKeyReturn as GenerateKeyReturn,
     jwk_JWK as JWK,
     jwk_JWKAlgorithm as JWKAlgorithm,
+    jwk_JWKPEMAlgorithm as JWKPEMAlgorithm,
     jwk_JWKParameters as JWKParameters,
     jwk_JWK_AES_CBC_HMAC as JWK_AES_CBC_HMAC,
     jwk_JWK_AES_GCM as JWK_AES_GCM,
@@ -128,6 +169,7 @@ declare namespace jwk {
     jwk_JWK_ECDSA as JWK_ECDSA,
     jwk_JWK_EC_Private as JWK_EC_Private,
     jwk_JWK_EC_Public as JWK_EC_Public,
+    jwk_JWK_ED as JWK_ED,
     jwk_JWK_HMAC as JWK_HMAC,
     jwk_JWK_PBES2 as JWK_PBES2,
     jwk_JWK_RSA as JWK_RSA,
@@ -143,12 +185,14 @@ declare namespace jwk {
     jwk_WrapKeyOptions as WrapKeyOptions,
     jwk_WrapKeyResult as WrapKeyResult,
     jwk_deriveKeyFromPassword as deriveKeyFromPassword,
+    jwk_exportJWKToPEM as exportJWKToPEM,
     jwk_exportKey as exportKey,
     jwk_generateKey as generateKey,
+    jwk_importJWKFromPEM as importJWKFromPEM,
     jwk_importKey as importKey,
     jwk_unwrapKey as unwrapKey,
     jwk_wrapKey as wrapKey,
   };
 }
 
-export { deriveKeyFromPassword as d, exportKey as e, generateKey as g, importKey as i, jwk as j, unwrapKey as u, wrapKey as w };
+export { importJWKFromPEM as a, exportJWKToPEM as b, deriveKeyFromPassword as d, exportKey as e, generateKey as g, importKey as i, jwk as j, unwrapKey as u, wrapKey as w };

package/dist/shared/{unjwt.CjHZv3F3.mjs → unjwt.DOI5UE8K.mjs}

@@ -1,14 +1,38 @@
 const textEncoder = /* @__PURE__ */ new TextEncoder();
 const textDecoder = /* @__PURE__ */ new TextDecoder();
+function base64Encode(data) {
+  const encodedData = data instanceof Uint8Array ? data : textEncoder.encode(data);
+  if (Uint8Array.prototype.toBase64) {
+    return encodedData.toBase64();
+  }
+  return btoa(String.fromCodePoint(...encodedData));
+}
 function base64UrlEncode(data) {
   const encodedData = data instanceof Uint8Array ? data : textEncoder.encode(data);
-  return btoa(String.fromCodePoint(...encodedData)).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+  if (Uint8Array.prototype.toBase64) {
+    return encodedData.toBase64({ alphabet: "base64url", omitPadding: true });
+  }
+  return btoa(String.fromCodePoint(...encodedData)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+function base64Decode(str, toString) {
+  const decodeToString = toString !== false;
+  if (!str) {
+    return decodeToString ? "" : new Uint8Array(0);
+  }
+  if (Uint8Array.fromBase64) {
+    return Uint8Array.fromBase64(str);
+  }
+  const data = Uint8Array.from(atob(str), (b) => b.codePointAt(0));
+  return decodeToString ? textDecoder.decode(data) : data;
 }
 function base64UrlDecode(str, toString) {
   const decodeToString = toString !== false;
   if (!str) {
     return decodeToString ? "" : new Uint8Array(0);
   }
+  if (Uint8Array.fromBase64) {
+    return Uint8Array.fromBase64(str, { alphabet: "base64url" });
+  }
   str = str.replace(/-/g, "+").replace(/_/g, "/");
   while (str.length % 4) str += "=";
   const data = Uint8Array.from(atob(str), (b) => b.codePointAt(0));
@@ -27,6 +51,9 @@ function concatUint8Arrays(...arrays) {
   }
   return result;
 }
+function maybeArray(item) {
+  return Array.isArray(item) ? item : [item];
+}
 function isJWK(key) {
   return typeof key === "object" && key !== null && "kty" in key && typeof key.kty === "string";
 }
@@ -43,15 +70,18 @@ const isCryptoKeyPair = (key) => key && typeof key === "object" && isCryptoKey(k
 const index = {
   __proto__: null,
   assertCryptoKey: assertCryptoKey,
+  base64Decode: base64Decode,
+  base64Encode: base64Encode,
   base64UrlDecode: base64UrlDecode,
   base64UrlEncode: base64UrlEncode,
   concatUint8Arrays: concatUint8Arrays,
   isCryptoKey: isCryptoKey,
   isCryptoKeyPair: isCryptoKeyPair,
   isJWK: isJWK,
+  maybeArray: maybeArray,
   randomBytes: randomBytes,
   textDecoder: textDecoder,
   textEncoder: textEncoder
 };
 
-export { isJWK as a, base64UrlEncode as b, textDecoder as c, base64UrlDecode as d, concatUint8Arrays as e, assertCryptoKey as f, isCryptoKey as g, isCryptoKeyPair as h, index as i, randomBytes as r, textEncoder as t };
+export { isJWK as a, base64UrlEncode as b, textDecoder as c, base64UrlDecode as d, concatUint8Arrays as e, assertCryptoKey as f, isCryptoKey as g, base64Decode as h, index as i, base64Encode as j, isCryptoKeyPair as k, maybeArray as m, randomBytes as r, textEncoder as t };

package/dist/shared/{unjwt.Dz5Oe9BG.d.mts → unjwt.DQIYSlHj.d.mts}

@@ -1,5 +1,5 @@
-import { K as KeyManagementAlgorithm, d as ContentEncryptionAlgorithm, f as JWK_EC_Public, m as JWK } from './unjwt.C0bBN0AC.mjs';
-import { J as JoseHeaderParameters, a as JWTClaims } from './unjwt.D90BbcE1.mjs';
+import { K as KeyManagementAlgorithm, d as ContentEncryptionAlgorithm, f as JWK_EC_Public, m as JWK } from './unjwt.CxhGjEAX.mjs';
+import { J as JoseHeaderParameters, a as JWTClaims } from './unjwt.Cd9nTEWg.mjs';
 
 /** Recognized JWE Header Parameters, any other Header Members may also be present. */
 interface JWEHeaderParameters extends JoseHeaderParameters {

package/dist/shared/{unjwt.ppm5Y0k7.d.ts → unjwt.TbszLNOP.d.ts}

@@ -1,5 +1,5 @@
-import { n as JWK_HMAC, o as JWK_RSA_SIGN, p as JWK_RSA_PSS, q as JWK_ECDSA, m as JWK } from './unjwt.C0bBN0AC.js';
-import { J as JoseHeaderParameters, a as JWTClaims } from './unjwt.DoVzOnty.js';
+import { n as JWK_HMAC, o as JWK_RSA_SIGN, p as JWK_RSA_PSS, q as JWK_ECDSA, m as JWK } from './unjwt.CxhGjEAX.js';
+import { J as JoseHeaderParameters, a as JWTClaims } from './unjwt.BISJ5yt1.js';
 
 type JWS_SIGN_EXTRA = "Ed25519" | "EdDSA";
 /** JWS Signing Algorithm Identifier. */
@@ -43,10 +43,63 @@ interface JWSVerifyResult<T = JWTClaims | Uint8Array | string> {
 interface JWSVerifyOptions {
     /** List of allowed algorithms. If provided, the JWS `alg` must be in this list. */
     algorithms?: JWSAlgorithm[];
-    /** List of critical header parameters that must be understood and processed. */
-    critical?: string[];
     /** If true, forces the payload to be returned as a Uint8Array, otherwise type is inferred. */
     forceUint8Array?: boolean;
+    /** List of critical header parameters that must be understood and processed. */
+    requiredHeaders?: string[];
+    /**
+     * Expected JWT "aud" (Audience) Claim value(s).
+     *
+     * This option makes the JWT "aud" (Audience) Claim presence required.
+     */
+    audience?: string | string[];
+    /**
+     * Clock skew tolerance (in seconds) for validating JWT claims.
+     *
+     * Used when validating the JWT "nbf" (Not Before) and "exp" (Expiration Time) claims, and when
+     * validating the "iat" (Issued At) claim if the {@link maxTokenAge `maxTokenAge` option} is set.
+     */
+    clockTolerance?: number;
+    /**
+     * Expected JWT "iss" (Issuer) Claim value(s).
+     *
+     * This option makes the JWT "iss" (Issuer) Claim presence required.
+     */
+    issuer?: string | string[];
+    /**
+     * Maximum time elapsed (in seconds) from the JWT "iat" (Issued At) Claim value.
+     *
+     * This option makes the JWT "iat" (Issued At) Claim presence required.
+     */
+    maxTokenAge?: number;
+    /**
+     * Expected JWT "sub" (Subject) Claim value.
+     *
+     * This option makes the JWT "sub" (Subject) Claim presence required.
+     */
+    subject?: string;
+    /**
+     * Expected JWT "typ" (Type) Header Parameter value.
+     *
+     * This option makes the JWT "typ" (Type) Header Parameter presence required.
+     */
+    typ?: string;
+    /** Date to use when comparing NumericDate claims, defaults to `new Date()`. */
+    currentDate?: Date;
+    /**
+     * Array of required Claim Names that must be present in the JWT Claims Set. Default is that: if
+     * the {@link issuer `issuer` option} is set, then JWT "iss" (Issuer) Claim must be present; if the
+     * {@link audience `audience` option} is set, then JWT "aud" (Audience) Claim must be present; if
+     * the {@link subject `subject` option} is set, then JWT "sub" (Subject) Claim must be present; if
+     * the {@link maxTokenAge `maxTokenAge` option} is set, then JWT "iat" (Issued At) Claim must be
+     * present.
+     */
+    requiredClaims?: string[];
+    /**
+     * List of critical header parameters that must be understood and processed.
+     * @deprecated use {@link requiredHeaders `recognizedHeaders` option} instead.
+     */
+    critical?: string[];
 }
 
 /**

package/dist/shared/{unjwt.B9uGngq-.d.mts → unjwt.WvWb2zNM.d.ts}

@@ -1,4 +1,18 @@
-import { G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, w as JWK_PBES2, D as DeriveKeyOptions, c as DeriveKeyReturn, l as JWK_oct, m as JWK, K as KeyManagementAlgorithm, W as WrapKeyOptions, e as WrapKeyResult, U as UnwrapKeyOptions, C as CompositeKey, d as ContentEncryptionAlgorithm, A as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, z as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, n as JWK_HMAC, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, y as JWK_Symmetric_Algorithm } from './unjwt.C0bBN0AC.mjs';
+import { G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, w as JWK_PBES2, D as DeriveKeyOptions, c as DeriveKeyReturn, l as JWK_oct, m as JWK, K as KeyManagementAlgorithm, W as WrapKeyOptions, e as WrapKeyResult, U as UnwrapKeyOptions, E as JWKPEMAlgorithm, C as CompositeKey, d as ContentEncryptionAlgorithm, B as JWKAlgorithm, J as JWKParameters, u as JWK_AES_CBC_HMAC, v as JWK_AES_GCM, t as JWK_AES_GCM_KW, s as JWK_AES_KW, A as JWK_Asymmetric_Algorithm, h as JWK_EC, x as JWK_ECDH_ES, q as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, y as JWK_ED, n as JWK_HMAC, k as JWK_RSA, r as JWK_RSA_ENC, p as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, o as JWK_RSA_SIGN, z as JWK_Symmetric_Algorithm } from './unjwt.CxhGjEAX.js';
+
+/**
+ * This is a fork of Jose library's utility functions.
+ * @source https://github.com/panva/jose/tree/69b7960c67e05be55fa2ec31c74b987696c20c60/src/lib/asn1.ts
+ * @license MIT https://github.com/panva/jose/blob/69b7960c67e05be55fa2ec31c74b987696c20c60/LICENSE.md
+ */
+/** Key Import Function options. */
+interface KeyImportOptions {
+    /**
+     * The value to use as {@link !SubtleCrypto.importKey} `extractable` argument. Default is false for
+     * private keys, true otherwise.
+     */
+    extractable?: boolean;
+}
 
 /**
  * Generates a cryptographic key for the specified algorithm.
@@ -65,6 +79,28 @@ declare function wrapKey(alg: KeyManagementAlgorithm, keyToWrap: CryptoKey | Uin
 declare function unwrapKey<T extends boolean | undefined = undefined>(alg: KeyManagementAlgorithm, wrappedKey: Uint8Array, unwrappingKey: CryptoKey | JWK | string | Uint8Array, options?: UnwrapKeyOptions & {
     returnAs?: T;
 }): Promise<T extends false ? Uint8Array : CryptoKey>;
+/**
+ * Imports a key from a PEM-encoded string and converts it to a JWK.
+ *
+ * @param pem The PEM-encoded string.
+ * @param pemType The type of PEM encoding ('pkcs8' for private keys, 'spki' for public keys, 'x509' for certificates).
+ * @param alg The JWA algorithm identifier. This is crucial for `crypto.subtle.importKey`
+ *            to understand the key's intended algorithm and for setting the 'alg' field in the resulting JWK.
+ * @param importOptions Options for the PEM import process (e.g., extractable for the CryptoKey).
+ * @param jwkExtras Additional properties to merge into the resulting JWK.
+ * @returns A Promise resolving to the imported key as a JWK.
+ */
+declare function importJWKFromPEM(pem: string, pemType: "pkcs8" | "spki" | "x509", alg: JWKPEMAlgorithm, importOptions?: KeyImportOptions, jwkExtras?: Partial<JWK>): Promise<JWK>;
+/**
+ * Exports a JWK to a PEM-encoded string.
+ *
+ * @param jwk The JWK to export.
+ * @param pemFormat The desired PEM format ('pkcs8' for private keys, 'spki' for public keys).
+ * @param algForCryptoKeyImport If the JWK does not have an 'alg' property, this algorithm hint is
+ *                              required to correctly convert it to a CryptoKey first.
+ * @returns A Promise resolving to the PEM-encoded key string.
+ */
+declare function exportJWKToPEM(jwk: JWK, pemFormat: "pkcs8" | "spki", algForCryptoKeyImport?: JWKPEMAlgorithm): Promise<string>;
 
 declare const jwk_CompositeKey: typeof CompositeKey;
 declare const jwk_ContentEncryptionAlgorithm: typeof ContentEncryptionAlgorithm;
@@ -75,6 +111,7 @@ declare const jwk_GenerateKeyOptions: typeof GenerateKeyOptions;
 declare const jwk_GenerateKeyReturn: typeof GenerateKeyReturn;
 declare const jwk_JWK: typeof JWK;
 declare const jwk_JWKAlgorithm: typeof JWKAlgorithm;
+declare const jwk_JWKPEMAlgorithm: typeof JWKPEMAlgorithm;
 declare const jwk_JWKParameters: typeof JWKParameters;
 declare const jwk_JWK_AES_CBC_HMAC: typeof JWK_AES_CBC_HMAC;
 declare const jwk_JWK_AES_GCM: typeof JWK_AES_GCM;
@@ -86,6 +123,7 @@ declare const jwk_JWK_ECDH_ES: typeof JWK_ECDH_ES;
 declare const jwk_JWK_ECDSA: typeof JWK_ECDSA;
 declare const jwk_JWK_EC_Private: typeof JWK_EC_Private;
 declare const jwk_JWK_EC_Public: typeof JWK_EC_Public;
+declare const jwk_JWK_ED: typeof JWK_ED;
 declare const jwk_JWK_HMAC: typeof JWK_HMAC;
 declare const jwk_JWK_PBES2: typeof JWK_PBES2;
 declare const jwk_JWK_RSA: typeof JWK_RSA;
@@ -101,8 +139,10 @@ declare const jwk_UnwrapKeyOptions: typeof UnwrapKeyOptions;
 declare const jwk_WrapKeyOptions: typeof WrapKeyOptions;
 declare const jwk_WrapKeyResult: typeof WrapKeyResult;
 declare const jwk_deriveKeyFromPassword: typeof deriveKeyFromPassword;
+declare const jwk_exportJWKToPEM: typeof exportJWKToPEM;
 declare const jwk_exportKey: typeof exportKey;
 declare const jwk_generateKey: typeof generateKey;
+declare const jwk_importJWKFromPEM: typeof importJWKFromPEM;
 declare const jwk_importKey: typeof importKey;
 declare const jwk_unwrapKey: typeof unwrapKey;
 declare const jwk_wrapKey: typeof wrapKey;
@@ -117,6 +157,7 @@ declare namespace jwk {
     jwk_GenerateKeyReturn as GenerateKeyReturn,
     jwk_JWK as JWK,
     jwk_JWKAlgorithm as JWKAlgorithm,
+    jwk_JWKPEMAlgorithm as JWKPEMAlgorithm,
     jwk_JWKParameters as JWKParameters,
     jwk_JWK_AES_CBC_HMAC as JWK_AES_CBC_HMAC,
     jwk_JWK_AES_GCM as JWK_AES_GCM,
@@ -128,6 +169,7 @@ declare namespace jwk {
     jwk_JWK_ECDSA as JWK_ECDSA,
     jwk_JWK_EC_Private as JWK_EC_Private,
     jwk_JWK_EC_Public as JWK_EC_Public,
+    jwk_JWK_ED as JWK_ED,
     jwk_JWK_HMAC as JWK_HMAC,
     jwk_JWK_PBES2 as JWK_PBES2,
     jwk_JWK_RSA as JWK_RSA,
@@ -143,12 +185,14 @@ declare namespace jwk {
     jwk_WrapKeyOptions as WrapKeyOptions,
     jwk_WrapKeyResult as WrapKeyResult,
     jwk_deriveKeyFromPassword as deriveKeyFromPassword,
+    jwk_exportJWKToPEM as exportJWKToPEM,
     jwk_exportKey as exportKey,
     jwk_generateKey as generateKey,
+    jwk_importJWKFromPEM as importJWKFromPEM,
     jwk_importKey as importKey,
     jwk_unwrapKey as unwrapKey,
     jwk_wrapKey as wrapKey,
   };
 }
 
-export { deriveKeyFromPassword as d, exportKey as e, generateKey as g, importKey as i, jwk as j, unwrapKey as u, wrapKey as w };
+export { importJWKFromPEM as a, exportJWKToPEM as b, deriveKeyFromPassword as d, exportKey as e, generateKey as g, importKey as i, jwk as j, unwrapKey as u, wrapKey as w };