unjwt 0.5.20 → 0.5.22

package/dist/h3.mjs

@@ -0,0 +1,510 @@
+export { k as deriveJWKFromPassword, h as exportJWKToPEM, c as generateJWK, f as importJWKFromPEM } from './shared/unjwt.Vg02PZWw.mjs';
+import { isEvent, setCookie } from 'h3';
+import { parse } from 'cookie-es';
+import { e as encrypt, d as decrypt } from './shared/unjwt.CXl9FD-V.mjs';
+import { p as isSymmetricJWK, q as isPrivateJWK, u as isAsymmetricJWK } from './shared/unjwt.DCiTNyCM.mjs';
+import { s as sign, v as verify } from './shared/unjwt.DmRAjMp8.mjs';
+
+/**
+ * This is a fork of h3 library's session utility functions.
+ * @source https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/test/session.test.ts
+ * @license MIT https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/LICENSE
+ */
+const kGetSessionPromise$1 = Symbol("h3_jwe_getSession");
+const DEFAULT_NAME$1 = "h3-jwe";
+const DEFAULT_COOKIE$1 = {
+  path: "/",
+  secure: true,
+  httpOnly: true
+};
+async function useJWESession(event, config) {
+  const sessionName = config.name || DEFAULT_NAME$1;
+  await getJWESession(event, config);
+  const sessionManager = {
+    get id() {
+      return event.context.sessions?.[sessionName]?.id;
+    },
+    get createdAt() {
+      return event.context.sessions?.[sessionName]?.createdAt || Date.now();
+    },
+    get expiresAt() {
+      return event.context.sessions?.[sessionName]?.expiresAt;
+    },
+    get data() {
+      return event.context.sessions?.[sessionName]?.data || {};
+    },
+    update: async (update) => {
+      if (!isEvent(event)) {
+        throw new Error("[h3] Cannot update read-only session.");
+      }
+      await updateJWESession(event, config, update);
+      return sessionManager;
+    },
+    clear: () => {
+      if (!isEvent(event)) {
+        throw new Error("[h3] Cannot clear read-only session.");
+      }
+      clearJWESession(event, config);
+      return Promise.resolve(sessionManager);
+    }
+  };
+  return sessionManager;
+}
+async function getJWESession(event, config) {
+  const sessionName = config.name || DEFAULT_NAME$1;
+  if (!event.context.sessions) {
+    event.context.sessions = /* @__PURE__ */ Object.create(null);
+  }
+  const existingSession = event.context.sessions[sessionName];
+  if (existingSession) {
+    if (existingSession.expiresAt === void 0) {
+      const session2 = existingSession[kGetSessionPromise$1] || existingSession;
+      await config.hooks?.onRead?.(await session2, event);
+      return session2;
+    } else {
+      if (existingSession.expiresAt < Date.now() && isEvent(event)) {
+        await config.hooks?.onExpire?.(event, void 0);
+        return clearJWESession(event, config).then(
+          () => getJWESession(event, config)
+        );
+      } else {
+        const session2 = existingSession[kGetSessionPromise$1] || existingSession;
+        await config.hooks?.onRead?.(await session2, event);
+        return session2;
+      }
+    }
+  }
+  const session = {
+    id: "",
+    createdAt: 0,
+    expiresAt: void 0,
+    data: /* @__PURE__ */ Object.create(null)
+  };
+  event.context.sessions[sessionName] = session;
+  let jweToken;
+  if (config.sessionHeader !== false) {
+    const headerName = typeof config.sessionHeader === "string" ? config.sessionHeader.toLowerCase() : `x-${sessionName.toLowerCase()}-session`;
+    const headerValue = _getReqHeader$1(event, headerName);
+    if (typeof headerValue === "string") {
+      jweToken = headerValue;
+    }
+  }
+  if (!jweToken) {
+    const cookieHeader = _getReqHeader$1(event, "cookie");
+    if (cookieHeader) {
+      jweToken = parse(String(cookieHeader))[sessionName];
+    }
+  }
+  if (jweToken) {
+    const promise = unsealJWESession(event, config, jweToken).catch(async (error_) => {
+      if (error_ instanceof Error) {
+        const message = error_.message;
+        if (message.includes("Token has expired") || message.includes("Token is too old")) {
+          await config.hooks?.onExpire?.(event, error_);
+          return void 0;
+        }
+      }
+      await config.hooks?.onError?.(event, error_);
+      return void 0;
+    }).then((unsealed) => {
+      if (unsealed) {
+        Object.assign(session, unsealed);
+      }
+      delete event.context.sessions[sessionName][kGetSessionPromise$1];
+      return session;
+    });
+    event.context.sessions[sessionName][kGetSessionPromise$1] = promise;
+    await promise;
+  }
+  if (!session.id) {
+    if (!isEvent(event)) {
+      throw new Error(
+        "Cannot initialize a new session. Use `useSession(event)` within the main handler."
+      );
+    }
+    session.id = config.generateId?.() ?? (config.crypto || crypto).randomUUID();
+    session.createdAt = config.jwe?.encryptOptions?.currentDate === void 0 ? Date.now() : config.jwe.encryptOptions.currentDate.getTime();
+    session.expiresAt = config.maxAge ? session.createdAt + config.maxAge * 1e3 : void 0;
+    session.data = /* @__PURE__ */ Object.create(null);
+    await updateJWESession(event, config);
+  }
+  await config.hooks?.onRead?.(session, event);
+  return session;
+}
+function _getReqHeader$1(event, name) {
+  if (event.node) {
+    return event.node?.req.headers[name];
+  }
+  if (event.request) {
+    return event.request.headers?.get(name);
+  }
+  if (event.headers) {
+    return event.headers.get(name);
+  }
+}
+async function updateJWESession(event, config, update) {
+  const sessionName = config.name || DEFAULT_NAME$1;
+  const session = event.context.sessions?.[sessionName] || await getJWESession(event, config);
+  if (typeof update === "function") {
+    update = update(session.data);
+  }
+  if (update) {
+    Object.assign(session.data, update);
+    await config.hooks?.onUpdate?.(session, event);
+  }
+  if (config.cookie !== false) {
+    const sealed = await sealJWESession(event, config);
+    setCookie(event, sessionName, sealed, {
+      ...DEFAULT_COOKIE$1,
+      ...config.cookie,
+      expires: config.maxAge ? new Date(
+        // createdAt is ms, maxAge is seconds
+        session.createdAt + config.maxAge * 1e3
+      ) : void 0
+    });
+  }
+  return session;
+}
+async function sealJWESession(event, config) {
+  const key = getEncryptKey(config.secret);
+  if (typeof key !== "string" && !isSymmetricJWK(key) && !isPrivateJWK(key)) {
+    throw new Error(
+      "Session: JWE secret must be a password string or a private JWK."
+    );
+  }
+  const sessionName = config.name || DEFAULT_NAME$1;
+  const session = event.context.sessions?.[sessionName] || await getJWESession(event, config);
+  const iatSeconds = Math.floor(session.createdAt / 1e3);
+  const expSeconds = config.maxAge == null ? void 0 : iatSeconds + config.maxAge;
+  const payload = {
+    ...session.data,
+    jti: session.id,
+    iat: iatSeconds
+  };
+  if (expSeconds) {
+    payload.exp = expSeconds;
+  }
+  const token = await encrypt(payload, key, {
+    ...config.jwe?.encryptOptions,
+    protectedHeader: {
+      ...config.jwe?.encryptOptions?.protectedHeader,
+      typ: "JWT",
+      cty: "application/json"
+    }
+  });
+  return token;
+}
+async function unsealJWESession(_event, config, sealed) {
+  const key = getDecryptKey(config.secret);
+  if (typeof key !== "string" && !isSymmetricJWK(key) && !isPrivateJWK(key)) {
+    throw new Error(
+      "Session: JWE secret must be a password string or a private JWK."
+    );
+  }
+  const alg = config.jwe?.encryptOptions?.alg;
+  const enc = config.jwe?.encryptOptions?.enc;
+  const { payload } = await decrypt(sealed, key, {
+    ...config.jwe?.decryptOptions,
+    requiredClaims: [
+      ...config.jwe?.decryptOptions?.requiredClaims?.filter(
+        (claim) => claim !== "jti" && claim !== "iat"
+      ) || [],
+      "jti",
+      "iat"
+    ],
+    maxTokenAge: config.maxAge,
+    algorithms: alg ? [alg] : void 0,
+    encryptionAlgorithms: enc ? [enc] : void 0,
+    unwrappedKeyAlgorithm: void 0,
+    keyUsage: void 0,
+    forceUint8Array: false,
+    validateJWT: true
+  }).catch((error_) => {
+    if (error_ instanceof Error) {
+      const message = error_.message;
+      throw new Error(`Invalid session token: ${message}`);
+    }
+    throw new Error(error_);
+  });
+  const { jti, iat, ...data } = payload;
+  return {
+    id: jti,
+    createdAt: iat * 1e3,
+    // Convert back to ms
+    expiresAt: payload.exp ? payload.exp * 1e3 : void 0,
+    data: data && typeof data === "object" ? data : /* @__PURE__ */ Object.create(null)
+  };
+}
+async function clearJWESession(event, config) {
+  const sessionName = config.name || DEFAULT_NAME$1;
+  if (event.context.sessions?.[sessionName]) {
+    delete event.context.sessions[sessionName];
+  }
+  setCookie(event, sessionName, "", {
+    ...DEFAULT_COOKIE$1,
+    ...config.cookie,
+    // Optionally set expires in the past
+    expires: /* @__PURE__ */ new Date(0),
+    maxAge: void 0
+  });
+  await config.hooks?.onClear?.(event);
+}
+function getEncryptKey(secret) {
+  if (typeof secret === "string") {
+    return secret;
+  } else if (isSymmetricJWK(secret)) {
+    return secret;
+  }
+  return secret.publicKey || secret.privateKey;
+}
+function getDecryptKey(secret) {
+  if (typeof secret === "string") {
+    return secret;
+  } else if ("privateKey" in secret) {
+    return secret.privateKey;
+  }
+  return secret;
+}
+
+/**
+ * This is a fork of h3 library's session utility functions.
+ * @source https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/test/session.test.ts
+ * @license MIT https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/LICENSE
+ */
+const kGetSessionPromise = Symbol("h3_jws_getSession");
+const DEFAULT_NAME = "h3-jws";
+const DEFAULT_COOKIE = {
+  path: "/",
+  secure: true,
+  httpOnly: false
+};
+async function useJWSSession(event, config) {
+  const sessionName = config.name || DEFAULT_NAME;
+  await getJWSSession(event, config);
+  const sessionManager = {
+    get id() {
+      return event.context.sessions?.[sessionName]?.id;
+    },
+    get createdAt() {
+      return event.context.sessions?.[sessionName]?.createdAt || Date.now();
+    },
+    get expiresAt() {
+      return event.context.sessions?.[sessionName]?.expiresAt;
+    },
+    get data() {
+      return event.context.sessions?.[sessionName]?.data || {};
+    },
+    update: async (update) => {
+      if (!isEvent(event)) {
+        throw new Error("[h3] Cannot update read-only session.");
+      }
+      await updateJWSSession(event, config, update);
+      return sessionManager;
+    },
+    clear: () => {
+      if (!isEvent(event)) {
+        throw new Error("[h3] Cannot clear read-only session.");
+      }
+      clearJWSSession(event, config);
+      return Promise.resolve(sessionManager);
+    }
+  };
+  return sessionManager;
+}
+async function getJWSSession(event, config) {
+  const sessionName = config.name || DEFAULT_NAME;
+  if (!event.context.sessions) {
+    event.context.sessions = /* @__PURE__ */ Object.create(null);
+  }
+  const existingSession = event.context.sessions[sessionName];
+  if (existingSession) {
+    if (existingSession.expiresAt === void 0) {
+      const session2 = existingSession[kGetSessionPromise] || existingSession;
+      await config.hooks?.onRead?.(await session2, event);
+      return session2;
+    } else {
+      if (existingSession.expiresAt < Date.now() && isEvent(event)) {
+        await config.hooks?.onExpire?.(event, void 0);
+        return clearJWSSession(event, config).then(
+          () => getJWSSession(event, config)
+        );
+      } else {
+        const session2 = existingSession[kGetSessionPromise] || existingSession;
+        await config.hooks?.onRead?.(await session2, event);
+        return session2;
+      }
+    }
+  }
+  const session = {
+    id: "",
+    createdAt: 0,
+    expiresAt: void 0,
+    data: /* @__PURE__ */ Object.create(null)
+  };
+  event.context.sessions[sessionName] = session;
+  let token;
+  if (config.sessionHeader !== false) {
+    const headerName = typeof config.sessionHeader === "string" ? config.sessionHeader.toLowerCase() : `x-${sessionName.toLowerCase()}-session`;
+    const headerValue = _getReqHeader(event, headerName);
+    if (typeof headerValue === "string") {
+      token = headerValue;
+    }
+  }
+  if (!token) {
+    const cookieHeader = _getReqHeader(event, "cookie");
+    if (cookieHeader) {
+      token = parse(String(cookieHeader))[sessionName];
+    }
+  }
+  if (token) {
+    const promise = verifyJWSSession(event, config, token).catch(async (error_) => {
+      if (error_ instanceof Error) {
+        const message = error_.message;
+        if (message.includes("Token has expired") || message.includes("Token is too old")) {
+          await config.hooks?.onExpire?.(event, error_);
+          return void 0;
+        }
+      }
+      await config.hooks?.onError?.(event, error_);
+      return void 0;
+    }).then((unsealed) => {
+      if (unsealed) {
+        Object.assign(session, unsealed);
+      }
+      delete event.context.sessions[sessionName][kGetSessionPromise];
+      return session;
+    });
+    session[kGetSessionPromise] = promise;
+    await promise;
+  }
+  if (!session.id) {
+    if (!isEvent(event)) {
+      throw new Error(
+        "Cannot initialize a new session outside main handler. Use `useJWSSession(event)` properly."
+      );
+    }
+    session.id = config.generateId?.() ?? (config.crypto || globalThis.crypto).randomUUID();
+    session.createdAt = config.jws?.signOptions?.currentDate === void 0 ? Date.now() : config.jws.signOptions.currentDate.getTime();
+    session.expiresAt = config.maxAge ? session.createdAt + config.maxAge * 1e3 : void 0;
+    session.data = /* @__PURE__ */ Object.create(null);
+    await updateJWSSession(event, config);
+  }
+  await config.hooks?.onRead?.(session, event);
+  return session;
+}
+function _getReqHeader(event, name) {
+  if (event.node) {
+    return event.node.req.headers[name];
+  }
+  if (event.request) {
+    return event.request.headers.get(name);
+  }
+  if (event.headers) {
+    return event.headers.get(name);
+  }
+}
+async function updateJWSSession(event, config, update) {
+  const sessionName = config.name || DEFAULT_NAME;
+  const session = event.context.sessions?.[sessionName] || await getJWSSession(event, config);
+  if (typeof update === "function") {
+    update = update(session.data);
+  }
+  if (update) {
+    Object.assign(session.data, update);
+    await config.hooks?.onUpdate?.(session, event);
+  }
+  if (config.cookie !== false) {
+    const token = await signJWSSession(event, config);
+    setCookie(event, sessionName, token, {
+      ...DEFAULT_COOKIE,
+      ...config.cookie,
+      expires: config.maxAge ? new Date(session.createdAt + config.maxAge * 1e3) : void 0
+    });
+  }
+  return session;
+}
+async function signJWSSession(event, config) {
+  const key = getSignKey(config.key);
+  if (isAsymmetricJWK(key) && !isPrivateJWK(key)) {
+    throw new Error("Session: JWS key cannot be a public asymmetric JWK.");
+  }
+  const sessionName = config.name || DEFAULT_NAME;
+  const session = event.context.sessions?.[sessionName] || await getJWSSession(event, config);
+  const iatSeconds = Math.floor(session.createdAt / 1e3);
+  const expSeconds = config.maxAge == null ? void 0 : iatSeconds + config.maxAge;
+  const payload = {
+    ...session.data,
+    jti: session.id,
+    iat: iatSeconds
+  };
+  if (expSeconds) {
+    payload.exp = expSeconds;
+  }
+  const token = await sign(payload, key, {
+    ...config.jws?.signOptions,
+    protectedHeader: {
+      ...config.jws?.signOptions?.protectedHeader,
+      typ: "JWT"
+    }
+  });
+  return token;
+}
+async function verifyJWSSession(_event, config, token) {
+  const alg = config.jws?.signOptions?.alg;
+  const jwk = getVerifyKey(config.key);
+  if (isAsymmetricJWK(jwk) && isPrivateJWK(jwk)) {
+    throw new Error("Session: JWS key cannot be a private asymmetric JWK.");
+  }
+  const { payload } = await verify(token, jwk, {
+    ...config.jws?.verifyOptions,
+    requiredClaims: [
+      ...config.jws?.verifyOptions?.requiredClaims?.filter(
+        (claim) => claim !== "jti" && claim !== "iat"
+      ) || [],
+      "jti",
+      "iat"
+    ],
+    typ: "JWT",
+    algorithms: alg ? [alg] : void 0,
+    forceUint8Array: false,
+    validateJWT: true
+  }).catch((error_) => {
+    const message = error_ instanceof Error ? error_.message : String(error_);
+    throw new Error(`Invalid session token: ${message}`);
+  });
+  const { jti, iat, ...data } = payload;
+  return {
+    id: jti,
+    createdAt: iat * 1e3,
+    // Convert back to ms
+    expiresAt: payload.exp ? payload.exp * 1e3 : void 0,
+    data: data && typeof data === "object" ? data : /* @__PURE__ */ Object.create(null)
+  };
+}
+async function clearJWSSession(event, config) {
+  const sessionName = config.name || DEFAULT_NAME;
+  if (event.context.sessions?.[sessionName]) {
+    delete event.context.sessions[sessionName];
+  }
+  setCookie(event, sessionName, "", {
+    ...DEFAULT_COOKIE,
+    ...config.cookie,
+    expires: /* @__PURE__ */ new Date(0),
+    maxAge: void 0
+  });
+  await config.hooks?.onClear?.(event);
+}
+function getSignKey(key) {
+  if ("privateKey" in key) {
+    return key.privateKey;
+  }
+  return key;
+}
+function getVerifyKey(key) {
+  if ("publicKey" in key) {
+    return Array.isArray(key.publicKey) ? { keys: key.publicKey } : key.publicKey;
+  }
+  return key;
+}
+
+export { clearJWESession, clearJWSSession, getJWESession, getJWSSession, sealJWESession, signJWSSession, unsealJWESession, updateJWESession, updateJWSSession, useJWESession, useJWSSession, verifyJWSSession };

package/dist/index.d.mts

@@ -1,5 +1,7 @@
-export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, E as ExpiresIn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, t as JWK, Q as JWKAlgorithm, R as JWKPEMAlgorithm, J as JWKParameters, u as JWKSet, F as JWK_AES_CBC_HMAC, H as JWK_AES_GCM, B as JWK_AES_GCM_KW, A as JWK_AES_KW, P as JWK_Asymmetric_Algorithm, j as JWK_EC, L as JWK_ECDH_ES, y as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, v as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, N as JWK_OKP_SIGN, I as JWK_PBES2, s as JWK_Private, r as JWK_Public, m as JWK_RSA, z as JWK_RSA_ENC, x as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, w as JWK_RSA_SIGN, O as JWK_Symmetric_Algorithm, q as JWK_oct, V as JWT, X as JWTClaimValidationOptions, T as JWTClaims, S as JoseHeaderParameters, K as KeyManagementAlgorithm, M as MaxTokenAge, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.Dy68jE0N.mjs';
-export { i as utils } from './shared/unjwt.BuQdWrN5.mjs';
-export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.BFtNZVqt.mjs';
-export { j as jwk } from './shared/unjwt.ChCsF4q6.mjs';
-export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.DANsaNYC.mjs';
+export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, E as ExpiresIn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, v as JWK, S as JWKAlgorithm, T as JWKPEMAlgorithm, J as JWKParameters, w as JWKSet, I as JWK_AES_CBC_HMAC, L as JWK_AES_GCM, H as JWK_AES_GCM_KW, F as JWK_AES_KW, s as JWK_Asymmetric, R as JWK_Asymmetric_Algorithm, j as JWK_EC, O as JWK_ECDH_ES, A as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, x as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, P as JWK_OKP_SIGN, N as JWK_PBES2, u as JWK_Private, t as JWK_Public, m as JWK_RSA, B as JWK_RSA_ENC, z as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, y as JWK_RSA_SIGN, r as JWK_Symmetric, Q as JWK_Symmetric_Algorithm, q as JWK_oct, Y as JWT, Z as JWTClaimValidationOptions, X as JWTClaims, V as JoseHeaderParameters, K as KeyManagementAlgorithm, M as MaxTokenAge, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.CtHrClHc.mjs';
+export { i as utils } from './shared/unjwt.BrNGm4On.mjs';
+export { j as jwe } from './shared/unjwt.VUfJDcCJ.mjs';
+export { j as jwk } from './shared/unjwt.BjP_dGnX.mjs';
+export { j as jws } from './shared/unjwt.C5jNR_1K.mjs';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult } from './shared/unjwt.BsLgL0DQ.mjs';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters } from './shared/unjwt.9mL1vSFP.mjs';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { i as utils } from './shared/unjwt.K_6rgVTy.mjs';
-export { j as jwe } from './shared/unjwt.CaZJRuRa.mjs';
-export { j as jwk } from './shared/unjwt.D7ya3PwS.mjs';
-export { j as jws } from './shared/unjwt.Dc_YDjvO.mjs';
+export { i as utils } from './shared/unjwt.DCiTNyCM.mjs';
+export { j as jwe } from './shared/unjwt.CXl9FD-V.mjs';
+export { j as jwk } from './shared/unjwt.Vg02PZWw.mjs';
+export { j as jws } from './shared/unjwt.DmRAjMp8.mjs';

package/dist/jwe.d.mts

@@ -1,2 +1,3 @@
-export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, t as JWK, Q as JWKAlgorithm, R as JWKPEMAlgorithm, J as JWKParameters, u as JWKSet, F as JWK_AES_CBC_HMAC, H as JWK_AES_GCM, B as JWK_AES_GCM_KW, A as JWK_AES_KW, P as JWK_Asymmetric_Algorithm, j as JWK_EC, L as JWK_ECDH_ES, y as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, v as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, N as JWK_OKP_SIGN, I as JWK_PBES2, s as JWK_Private, r as JWK_Public, m as JWK_RSA, z as JWK_RSA_ENC, x as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, w as JWK_RSA_SIGN, O as JWK_Symmetric_Algorithm, q as JWK_oct, V as JWT, X as JWTClaimValidationOptions, T as JWTClaims, S as JoseHeaderParameters, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.Dy68jE0N.mjs';
-export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.BFtNZVqt.mjs';
+export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, v as JWK, S as JWKAlgorithm, T as JWKPEMAlgorithm, J as JWKParameters, w as JWKSet, I as JWK_AES_CBC_HMAC, L as JWK_AES_GCM, H as JWK_AES_GCM_KW, F as JWK_AES_KW, s as JWK_Asymmetric, R as JWK_Asymmetric_Algorithm, j as JWK_EC, O as JWK_ECDH_ES, A as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, x as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, P as JWK_OKP_SIGN, N as JWK_PBES2, u as JWK_Private, t as JWK_Public, m as JWK_RSA, B as JWK_RSA_ENC, z as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, y as JWK_RSA_SIGN, r as JWK_Symmetric, Q as JWK_Symmetric_Algorithm, q as JWK_oct, Y as JWT, Z as JWTClaimValidationOptions, X as JWTClaims, V as JoseHeaderParameters, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.CtHrClHc.mjs';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters } from './shared/unjwt.9mL1vSFP.mjs';
+export { d as decrypt, e as encrypt } from './shared/unjwt.VUfJDcCJ.mjs';

package/dist/jwe.mjs

@@ -1,3 +1,3 @@
-import './shared/unjwt.D7ya3PwS.mjs';
-import './shared/unjwt.K_6rgVTy.mjs';
-export { d as decrypt, e as encrypt } from './shared/unjwt.CaZJRuRa.mjs';
+import './shared/unjwt.Vg02PZWw.mjs';
+import './shared/unjwt.DCiTNyCM.mjs';
+export { d as decrypt, e as encrypt } from './shared/unjwt.CXl9FD-V.mjs';

package/dist/jwk.d.mts

@@ -1,2 +1,2 @@
-export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, t as JWK, Q as JWKAlgorithm, R as JWKPEMAlgorithm, J as JWKParameters, u as JWKSet, F as JWK_AES_CBC_HMAC, H as JWK_AES_GCM, B as JWK_AES_GCM_KW, A as JWK_AES_KW, P as JWK_Asymmetric_Algorithm, j as JWK_EC, L as JWK_ECDH_ES, y as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, v as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, N as JWK_OKP_SIGN, I as JWK_PBES2, s as JWK_Private, r as JWK_Public, m as JWK_RSA, z as JWK_RSA_ENC, x as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, w as JWK_RSA_SIGN, O as JWK_Symmetric_Algorithm, q as JWK_oct, V as JWT, X as JWTClaimValidationOptions, T as JWTClaims, S as JoseHeaderParameters, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.Dy68jE0N.mjs';
-export { b as deriveJWKFromPassword, d as deriveKeyFromPassword, f as exportJWKToPEM, e as exportKey, a as generateJWK, g as generateKey, h as getJWKFromSet, c as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.ChCsF4q6.mjs';
+export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, v as JWK, S as JWKAlgorithm, T as JWKPEMAlgorithm, J as JWKParameters, w as JWKSet, I as JWK_AES_CBC_HMAC, L as JWK_AES_GCM, H as JWK_AES_GCM_KW, F as JWK_AES_KW, s as JWK_Asymmetric, R as JWK_Asymmetric_Algorithm, j as JWK_EC, O as JWK_ECDH_ES, A as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, x as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, P as JWK_OKP_SIGN, N as JWK_PBES2, u as JWK_Private, t as JWK_Public, m as JWK_RSA, B as JWK_RSA_ENC, z as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, y as JWK_RSA_SIGN, r as JWK_Symmetric, Q as JWK_Symmetric_Algorithm, q as JWK_oct, Y as JWT, Z as JWTClaimValidationOptions, X as JWTClaims, V as JoseHeaderParameters, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.CtHrClHc.mjs';
+export { d as deriveJWKFromPassword, b as deriveKeyFromPassword, e as exportJWKToPEM, f as exportKey, g as generateJWK, a as generateKey, h as getJWKFromSet, i as importJWKFromPEM, c as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.BjP_dGnX.mjs';

package/dist/jwk.mjs

@@ -1,2 +1,2 @@
-import './shared/unjwt.K_6rgVTy.mjs';
-export { k as deriveJWKFromPassword, h as deriveKeyFromPassword, n as exportJWKToPEM, l as exportKey, f as generateJWK, c as generateKey, b as getJWKFromSet, m as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.D7ya3PwS.mjs';
+import './shared/unjwt.DCiTNyCM.mjs';
+export { k as deriveJWKFromPassword, m as deriveKeyFromPassword, h as exportJWKToPEM, n as exportKey, c as generateJWK, l as generateKey, b as getJWKFromSet, f as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.Vg02PZWw.mjs';

package/dist/jws.d.mts

@@ -1,2 +1,3 @@
-export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, t as JWK, Q as JWKAlgorithm, R as JWKPEMAlgorithm, J as JWKParameters, u as JWKSet, F as JWK_AES_CBC_HMAC, H as JWK_AES_GCM, B as JWK_AES_GCM_KW, A as JWK_AES_KW, P as JWK_Asymmetric_Algorithm, j as JWK_EC, L as JWK_ECDH_ES, y as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, v as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, N as JWK_OKP_SIGN, I as JWK_PBES2, s as JWK_Private, r as JWK_Public, m as JWK_RSA, z as JWK_RSA_ENC, x as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, w as JWK_RSA_SIGN, O as JWK_Symmetric_Algorithm, q as JWK_oct, V as JWT, X as JWTClaimValidationOptions, T as JWTClaims, S as JoseHeaderParameters, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.Dy68jE0N.mjs';
-export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.DANsaNYC.mjs';
+export { C as CompositeKey, f as ContentEncryptionAlgorithm, D as DeriveKeyOptions, e as DeriveKeyReturn, c as GenerateJWKOptions, d as GenerateJWKReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, v as JWK, S as JWKAlgorithm, T as JWKPEMAlgorithm, J as JWKParameters, w as JWKSet, I as JWK_AES_CBC_HMAC, L as JWK_AES_GCM, H as JWK_AES_GCM_KW, F as JWK_AES_KW, s as JWK_Asymmetric, R as JWK_Asymmetric_Algorithm, j as JWK_EC, O as JWK_ECDH_ES, A as JWK_ECDSA, i as JWK_EC_Private, h as JWK_EC_Public, x as JWK_HMAC, p as JWK_OKP, o as JWK_OKP_Private, n as JWK_OKP_Public, P as JWK_OKP_SIGN, N as JWK_PBES2, u as JWK_Private, t as JWK_Public, m as JWK_RSA, B as JWK_RSA_ENC, z as JWK_RSA_PSS, l as JWK_RSA_Private, k as JWK_RSA_Public, y as JWK_RSA_SIGN, r as JWK_Symmetric, Q as JWK_Symmetric_Algorithm, q as JWK_oct, Y as JWT, Z as JWTClaimValidationOptions, X as JWTClaims, V as JoseHeaderParameters, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, g as WrapKeyResult } from './shared/unjwt.CtHrClHc.mjs';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult } from './shared/unjwt.BsLgL0DQ.mjs';
+export { s as sign, v as verify } from './shared/unjwt.C5jNR_1K.mjs';

package/dist/jws.mjs

@@ -1,3 +1,3 @@
-import './shared/unjwt.D7ya3PwS.mjs';
-import './shared/unjwt.K_6rgVTy.mjs';
-export { s as sign, v as verify } from './shared/unjwt.Dc_YDjvO.mjs';
+import './shared/unjwt.Vg02PZWw.mjs';
+import './shared/unjwt.DCiTNyCM.mjs';
+export { s as sign, v as verify } from './shared/unjwt.DmRAjMp8.mjs';