unjwt 0.5.3 → 0.5.5

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, E as JWKAlgorithm, F as JWKPEMAlgorithm, J as JWKParameters, n as JWKSet, v as JWK_AES_CBC_HMAC, w as JWK_AES_GCM, u as JWK_AES_GCM_KW, t as JWK_AES_KW, B as JWK_Asymmetric_Algorithm, h as JWK_EC, y as JWK_ECDH_ES, r as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, z as JWK_ED, o as JWK_HMAC, x as JWK_PBES2, k as JWK_RSA, s as JWK_RSA_ENC, q as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, p as JWK_RSA_SIGN, A as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.D9da8HQF.mjs';
 export { b as JWT, a as JWTClaims, J as JoseHeaderParameters } from './shared/unjwt.BvIkEGGz.mjs';
-export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.BvA-8hLQ.mjs';
-export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.DLOO5Rmq.mjs';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.CGkRbYL2.mjs';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.8w7jp2aw.mjs';
 export { i as utils } from './shared/unjwt.CbvzYE-m.mjs';
-export { j as jwk } from './shared/unjwt.DZjogLQk.mjs';
+export { j as jwk } from './shared/unjwt.DH1p_WL8.mjs';

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, E as JWKAlgorithm, F as JWKPEMAlgorithm, J as JWKParameters, n as JWKSet, v as JWK_AES_CBC_HMAC, w as JWK_AES_GCM, u as JWK_AES_GCM_KW, t as JWK_AES_KW, B as JWK_Asymmetric_Algorithm, h as JWK_EC, y as JWK_ECDH_ES, r as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, z as JWK_ED, o as JWK_HMAC, x as JWK_PBES2, k as JWK_RSA, s as JWK_RSA_ENC, q as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, p as JWK_RSA_SIGN, A as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.D9da8HQF.js';
 export { b as JWT, a as JWTClaims, J as JoseHeaderParameters } from './shared/unjwt.c10n3uM8.js';
-export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.C5blWtcA.js';
-export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.BJPVLhUb.js';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, j as jws } from './shared/unjwt.RZpKLLLg.js';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, j as jwe } from './shared/unjwt.CoSilGqk.js';
 export { i as utils } from './shared/unjwt.D4DUiNeM.js';
-export { j as jwk } from './shared/unjwt.B4NFVxpx.js';
+export { j as jwk } from './shared/unjwt.CrcUJklb.js';

package/dist/index.mjs

@@ -1,5 +1,5 @@
-export { i as utils } from './shared/unjwt.X5vzu_l_.mjs';
-export { j as jwe } from './shared/unjwt.BtEHeKmp.mjs';
-export { j as jwk } from './shared/unjwt.BPpolBff.mjs';
-export { j as jws } from './shared/unjwt.Dsh9nxbB.mjs';
-import './shared/unjwt.CauxOPN5.mjs';
+export { i as utils } from './shared/unjwt.BHpknTpg.mjs';
+export { j as jwe } from './shared/unjwt.B2olxeGL.mjs';
+export { j as jwk } from './shared/unjwt.DRUXIabl.mjs';
+export { j as jws } from './shared/unjwt.BY2vKT86.mjs';
+import './shared/unjwt.Ca03jPX3.mjs';

package/dist/jwe.d.mts

@@ -1,3 +1,3 @@
 import './shared/unjwt.D9da8HQF.mjs';
 import './shared/unjwt.BvIkEGGz.mjs';
-export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.DLOO5Rmq.mjs';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.8w7jp2aw.mjs';

package/dist/jwe.d.ts

@@ -1,3 +1,3 @@
 import './shared/unjwt.D9da8HQF.js';
 import './shared/unjwt.c10n3uM8.js';
-export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.BJPVLhUb.js';
+export { d as JWEDecryptOptions, e as JWEDecryptResult, b as JWEEncryptOptions, J as JWEHeaderParameters, c as JWEKeyLookupFunction, a as JWEKeyManagementHeaderParameters, g as decrypt, f as encrypt } from './shared/unjwt.CoSilGqk.js';

package/dist/jwe.mjs

@@ -1,4 +1,4 @@
-import './shared/unjwt.BPpolBff.mjs';
-import './shared/unjwt.X5vzu_l_.mjs';
-export { d as decrypt, e as encrypt } from './shared/unjwt.BtEHeKmp.mjs';
-import './shared/unjwt.CauxOPN5.mjs';
+import './shared/unjwt.DRUXIabl.mjs';
+import './shared/unjwt.BHpknTpg.mjs';
+export { d as decrypt, e as encrypt } from './shared/unjwt.B2olxeGL.mjs';
+import './shared/unjwt.Ca03jPX3.mjs';

package/dist/jwk.d.mts

@@ -1,3 +1,3 @@
 export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, E as JWKAlgorithm, F as JWKPEMAlgorithm, J as JWKParameters, n as JWKSet, v as JWK_AES_CBC_HMAC, w as JWK_AES_GCM, u as JWK_AES_GCM_KW, t as JWK_AES_KW, B as JWK_Asymmetric_Algorithm, h as JWK_EC, y as JWK_ECDH_ES, r as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, z as JWK_ED, o as JWK_HMAC, x as JWK_PBES2, k as JWK_RSA, s as JWK_RSA_ENC, q as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, p as JWK_RSA_SIGN, A as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.D9da8HQF.mjs';
 import './shared/unjwt.BvIkEGGz.mjs';
-export { d as deriveKeyFromPassword, b as exportJWKToPEM, e as exportKey, g as generateKey, c as getJWKFromSet, a as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.DZjogLQk.mjs';
+export { d as deriveKeyFromPassword, b as exportJWKToPEM, e as exportKey, g as generateKey, c as getJWKFromSet, a as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.DH1p_WL8.mjs';

package/dist/jwk.d.ts

@@ -1,3 +1,3 @@
 export { C as CompositeKey, d as ContentEncryptionAlgorithm, D as DeriveKeyOptions, c as DeriveKeyReturn, G as GenerateKeyAlgorithm, a as GenerateKeyOptions, b as GenerateKeyReturn, m as JWK, E as JWKAlgorithm, F as JWKPEMAlgorithm, J as JWKParameters, n as JWKSet, v as JWK_AES_CBC_HMAC, w as JWK_AES_GCM, u as JWK_AES_GCM_KW, t as JWK_AES_KW, B as JWK_Asymmetric_Algorithm, h as JWK_EC, y as JWK_ECDH_ES, r as JWK_ECDSA, g as JWK_EC_Private, f as JWK_EC_Public, z as JWK_ED, o as JWK_HMAC, x as JWK_PBES2, k as JWK_RSA, s as JWK_RSA_ENC, q as JWK_RSA_PSS, j as JWK_RSA_Private, i as JWK_RSA_Public, p as JWK_RSA_SIGN, A as JWK_Symmetric_Algorithm, l as JWK_oct, K as KeyManagementAlgorithm, U as UnwrapKeyOptions, W as WrapKeyOptions, e as WrapKeyResult } from './shared/unjwt.D9da8HQF.js';
 import './shared/unjwt.c10n3uM8.js';
-export { d as deriveKeyFromPassword, b as exportJWKToPEM, e as exportKey, g as generateKey, c as getJWKFromSet, a as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.B4NFVxpx.js';
+export { d as deriveKeyFromPassword, b as exportJWKToPEM, e as exportKey, g as generateKey, c as getJWKFromSet, a as importJWKFromPEM, i as importKey, u as unwrapKey, w as wrapKey } from './shared/unjwt.CrcUJklb.js';

package/dist/jwk.mjs

@@ -1,2 +1,2 @@
-import './shared/unjwt.X5vzu_l_.mjs';
-export { p as deriveKeyFromPassword, t as exportJWKToPEM, q as exportKey, o as generateKey, g as getJWKFromSet, s as importJWKFromPEM, i as importKey, m as unwrapKey, r as wrapKey } from './shared/unjwt.BPpolBff.mjs';
+import './shared/unjwt.BHpknTpg.mjs';
+export { p as deriveKeyFromPassword, t as exportJWKToPEM, q as exportKey, o as generateKey, g as getJWKFromSet, s as importJWKFromPEM, i as importKey, m as unwrapKey, r as wrapKey } from './shared/unjwt.DRUXIabl.mjs';

package/dist/jws.d.mts

@@ -1,3 +1,3 @@
 import './shared/unjwt.D9da8HQF.mjs';
 import './shared/unjwt.BvIkEGGz.mjs';
-export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.BvA-8hLQ.mjs';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.CGkRbYL2.mjs';

package/dist/jws.d.ts

@@ -1,3 +1,3 @@
 import './shared/unjwt.D9da8HQF.js';
 import './shared/unjwt.c10n3uM8.js';
-export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.C5blWtcA.js';
+export { J as JWSAlgorithm, a as JWSHeaderParameters, f as JWSKeyLookupFunction, b as JWSProtectedHeader, c as JWSSignOptions, e as JWSVerifyOptions, d as JWSVerifyResult, s as sign, v as verify } from './shared/unjwt.RZpKLLLg.js';

package/dist/jws.mjs

@@ -1,4 +1,4 @@
-import './shared/unjwt.BPpolBff.mjs';
-import './shared/unjwt.X5vzu_l_.mjs';
-import './shared/unjwt.CauxOPN5.mjs';
-export { s as sign, v as verify } from './shared/unjwt.Dsh9nxbB.mjs';
+import './shared/unjwt.DRUXIabl.mjs';
+import './shared/unjwt.BHpknTpg.mjs';
+import './shared/unjwt.Ca03jPX3.mjs';
+export { s as sign, v as verify } from './shared/unjwt.BY2vKT86.mjs';

package/dist/shared/{unjwt.DLOO5Rmq.d.mts → unjwt.8w7jp2aw.d.mts}

@@ -125,7 +125,7 @@ interface JWEDecryptOptions {
 /**
  * Result of a JWE decryption operation.
  */
-interface JWEDecryptResult<T = JWTClaims | string> {
+interface JWEDecryptResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> {
     /** The decrypted payload. */
     payload: T;
     /** The JWE Protected Header. */
@@ -167,13 +167,13 @@ declare function encrypt(payload: string | Uint8Array | Record<string, any>, key
  * @returns A Promise resolving to an object containing the decrypted plaintext, protected header, CEK, and AAD.
  * @throws If JWE is invalid, decryption fails, or options are not met.
  */
-declare function decrypt<T = JWTClaims | string>(jwe: string, key: CryptoKey | JWK | string | Uint8Array | JWEKeyLookupFunction, options?: JWEDecryptOptions): Promise<JWEDecryptResult<T>>;
+declare function decrypt<T extends JWTClaims | Uint8Array | string>(jwe: string, key: CryptoKey | JWK | string | Uint8Array | JWEKeyLookupFunction, options?: JWEDecryptOptions): Promise<JWEDecryptResult<T>>;
 declare function decrypt(jwe: string, key: CryptoKey | JWK | string | Uint8Array | JWEKeyLookupFunction, options: JWEDecryptOptions & {
     forceUint8Array: true;
 }): Promise<JWEDecryptResult<Uint8Array>>;
 
 type jwe_JWEDecryptOptions = JWEDecryptOptions;
-type jwe_JWEDecryptResult<T = JWTClaims | string> = JWEDecryptResult<T>;
+type jwe_JWEDecryptResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> = JWEDecryptResult<T>;
 type jwe_JWEEncryptOptions = JWEEncryptOptions;
 type jwe_JWEHeaderParameters = JWEHeaderParameters;
 type jwe_JWEKeyLookupFunction = JWEKeyLookupFunction;

package/dist/shared/{unjwt.BtEHeKmp.mjs → unjwt.B2olxeGL.mjs}

@@ -1,6 +1,6 @@
-import { a as checkEncCryptoKey, u as uint32be, b as generateCEK, e as encryptIV, w as wrap, k as keyToJWK, d as bitLengthCEK, f as jwkTokey, i as importKey, h as generateIV, l as encrypt$1, m as unwrapKey, n as decrypt$1 } from './unjwt.BPpolBff.mjs';
-import { f as concatUint8Arrays, t as textEncoder, g as assertCryptoKey, b as base64UrlEncode, h as isCryptoKey, a as isJWK, d as base64UrlDecode, r as randomBytes, c as textDecoder } from './unjwt.X5vzu_l_.mjs';
-import { c as checkKeyLength } from './unjwt.CauxOPN5.mjs';
+import { a as checkEncCryptoKey, u as uint32be, b as generateCEK, e as encryptIV, w as wrap, k as keyToJWK, d as bitLengthCEK, f as jwkTokey, i as importKey, h as generateIV, l as encrypt$1, m as unwrapKey, n as decrypt$1 } from './unjwt.DRUXIabl.mjs';
+import { f as concatUint8Arrays, t as textEncoder, g as assertCryptoKey, b as base64UrlEncode, h as isCryptoKey, a as isJWK, d as base64UrlDecode, r as randomBytes, c as textDecoder } from './unjwt.BHpknTpg.mjs';
+import { c as checkKeyLength } from './unjwt.Ca03jPX3.mjs';
 
 function lengthAndInput(input) {
   return concatUint8Arrays(uint32be(input.length), input);

package/dist/shared/{unjwt.X5vzu_l_.mjs → unjwt.BHpknTpg.mjs}

@@ -19,10 +19,10 @@ function base64Decode(str, toString) {
   if (!str) {
     return decodeToString ? "" : new Uint8Array(0);
   }
-  if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(str);
-  }
-  const data = Uint8Array.from(atob(str), (b) => b.codePointAt(0));
+  const data = Uint8Array.fromBase64 ? (
+    // @ts-expect-error
+    Uint8Array.fromBase64(str)
+  ) : Uint8Array.from(atob(str), (b) => b.codePointAt(0));
   return decodeToString ? textDecoder.decode(data) : data;
 }
 function base64UrlDecode(str, toString) {
@@ -30,12 +30,14 @@ function base64UrlDecode(str, toString) {
   if (!str) {
     return decodeToString ? "" : new Uint8Array(0);
   }
+  let data;
   if (Uint8Array.fromBase64) {
-    return Uint8Array.fromBase64(str, { alphabet: "base64url" });
+    data = Uint8Array.fromBase64(str, { alphabet: "base64url" });
+  } else {
+    str = str.replace(/-/g, "+").replace(/_/g, "/");
+    while (str.length % 4) str += "=";
+    data = Uint8Array.from(atob(str), (b) => b.codePointAt(0));
   }
-  str = str.replace(/-/g, "+").replace(/_/g, "/");
-  while (str.length % 4) str += "=";
-  const data = Uint8Array.from(atob(str), (b) => b.codePointAt(0));
   return decodeToString ? textDecoder.decode(data) : data;
 }
 function randomBytes(length) {

package/dist/shared/{unjwt.Dsh9nxbB.mjs → unjwt.BY2vKT86.mjs}

@@ -1,6 +1,6 @@
-import { i as importKey, g as getJWKFromSet } from './unjwt.BPpolBff.mjs';
-import { a as isJWK, b as base64UrlEncode, t as textEncoder, c as textDecoder, d as base64UrlDecode, e as isJWKSet, m as maybeArray } from './unjwt.X5vzu_l_.mjs';
-import { s as sign$1, v as verify$1 } from './unjwt.CauxOPN5.mjs';
+import { i as importKey, g as getJWKFromSet } from './unjwt.DRUXIabl.mjs';
+import { a as isJWK, b as base64UrlEncode, t as textEncoder, c as textDecoder, d as base64UrlDecode, e as isJWKSet, m as maybeArray } from './unjwt.BHpknTpg.mjs';
+import { s as sign$1, v as verify$1 } from './unjwt.Ca03jPX3.mjs';
 
 async function sign(payload, key, options = {}) {
   const { protectedHeader: additionalProtectedHeader } = options;

package/dist/shared/{unjwt.BvA-8hLQ.d.mts → unjwt.CGkRbYL2.d.mts}

@@ -33,7 +33,7 @@ interface JWSSignOptions {
     protectedHeader?: JWSHeaderParameters;
 }
 /** Result of JWS verification */
-interface JWSVerifyResult<T = JWTClaims | Uint8Array | string> {
+interface JWSVerifyResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> {
     /** The decoded and verified payload. */
     payload: T;
     /** The JWS Protected Header. */
@@ -117,14 +117,20 @@ type JWSKeyLookupFunction = (header: JWSProtectedHeader, token: string) => Crypt
  * @param options Signing options, including the algorithm (`alg`) and protected header parameters.
  * @returns A Promise resolving to the JWS Compact Serialization string.
  */
-declare function sign(payload: JWTClaims, key: JWK | Uint8Array, options?: JWSSignOptions): Promise<string>;
-declare function sign(payload: string | Uint8Array | Record<string, any>, key: JWK | Uint8Array, options?: JWSSignOptions): Promise<string>;
+declare function sign(payload: JWTClaims, key: JWK, options?: JWSSignOptions): Promise<string>;
+declare function sign(payload: string | Uint8Array | Record<string, any>, key: JWK, options?: JWSSignOptions): Promise<string>;
 declare function sign(payload: JWTClaims, key: CryptoKey, options: JWSSignOptions & {
     alg: JWSAlgorithm;
 }): Promise<string>;
 declare function sign(payload: string | Uint8Array | Record<string, any>, key: CryptoKey, options: JWSSignOptions & {
     alg: JWSAlgorithm;
 }): Promise<string>;
+declare function sign(payload: JWTClaims, key: Uint8Array, options: JWSSignOptions & {
+    alg: JWSAlgorithm;
+}): Promise<string>;
+declare function sign(payload: string | Uint8Array | Record<string, any>, key: Uint8Array, options: JWSSignOptions & {
+    alg: JWSAlgorithm;
+}): Promise<string>;
 declare function sign(payload: string | Uint8Array | Record<string, any>, key: CryptoKey | JWK | Uint8Array, options: JWSSignOptions & {
     alg: JWSAlgorithm;
 }): Promise<string>;
@@ -137,7 +143,7 @@ declare function sign(payload: string | Uint8Array | Record<string, any>, key: C
  * @returns A Promise resolving to an object containing the verified payload and protected header.
  * @throws If the JWS is invalid, signature verification fails, or options are not met.
  */
-declare function verify<T = JWTClaims | Uint8Array | string>(jws: string, key: CryptoKey | JWK | JWKSet | Uint8Array | JWSKeyLookupFunction, options?: JWSVerifyOptions): Promise<JWSVerifyResult<T>>;
+declare function verify<T extends JWTClaims | Uint8Array | string>(jws: string, key: CryptoKey | JWK | JWKSet | Uint8Array | JWSKeyLookupFunction, options?: JWSVerifyOptions): Promise<JWSVerifyResult<T>>;
 declare function verify(jws: string, key: CryptoKey | JWK | JWKSet | Uint8Array | JWSKeyLookupFunction, options: JWSVerifyOptions & {
     forceUint8Array: true;
 }): Promise<JWSVerifyResult<Uint8Array>>;
@@ -148,7 +154,7 @@ type jws_JWSKeyLookupFunction = JWSKeyLookupFunction;
 type jws_JWSProtectedHeader = JWSProtectedHeader;
 type jws_JWSSignOptions = JWSSignOptions;
 type jws_JWSVerifyOptions = JWSVerifyOptions;
-type jws_JWSVerifyResult<T = JWTClaims | Uint8Array | string> = JWSVerifyResult<T>;
+type jws_JWSVerifyResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> = JWSVerifyResult<T>;
 declare const jws_sign: typeof sign;
 declare const jws_verify: typeof verify;
 declare namespace jws {

package/dist/shared/{unjwt.CauxOPN5.mjs → unjwt.Ca03jPX3.mjs}

@@ -1,4 +1,4 @@
-import { c as checkSigCryptoKey } from './unjwt.BPpolBff.mjs';
+import { c as checkSigCryptoKey } from './unjwt.DRUXIabl.mjs';
 
 /**
  * This is a fork of Jose library's utility functions.

package/dist/shared/{unjwt.BJPVLhUb.d.ts → unjwt.CoSilGqk.d.ts}

@@ -125,7 +125,7 @@ interface JWEDecryptOptions {
 /**
  * Result of a JWE decryption operation.
  */
-interface JWEDecryptResult<T = JWTClaims | string> {
+interface JWEDecryptResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> {
     /** The decrypted payload. */
     payload: T;
     /** The JWE Protected Header. */
@@ -167,13 +167,13 @@ declare function encrypt(payload: string | Uint8Array | Record<string, any>, key
  * @returns A Promise resolving to an object containing the decrypted plaintext, protected header, CEK, and AAD.
  * @throws If JWE is invalid, decryption fails, or options are not met.
  */
-declare function decrypt<T = JWTClaims | string>(jwe: string, key: CryptoKey | JWK | string | Uint8Array | JWEKeyLookupFunction, options?: JWEDecryptOptions): Promise<JWEDecryptResult<T>>;
+declare function decrypt<T extends JWTClaims | Uint8Array | string>(jwe: string, key: CryptoKey | JWK | string | Uint8Array | JWEKeyLookupFunction, options?: JWEDecryptOptions): Promise<JWEDecryptResult<T>>;
 declare function decrypt(jwe: string, key: CryptoKey | JWK | string | Uint8Array | JWEKeyLookupFunction, options: JWEDecryptOptions & {
     forceUint8Array: true;
 }): Promise<JWEDecryptResult<Uint8Array>>;
 
 type jwe_JWEDecryptOptions = JWEDecryptOptions;
-type jwe_JWEDecryptResult<T = JWTClaims | string> = JWEDecryptResult<T>;
+type jwe_JWEDecryptResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> = JWEDecryptResult<T>;
 type jwe_JWEEncryptOptions = JWEEncryptOptions;
 type jwe_JWEHeaderParameters = JWEHeaderParameters;
 type jwe_JWEKeyLookupFunction = JWEKeyLookupFunction;

package/dist/shared/{unjwt.B4NFVxpx.d.ts → unjwt.CrcUJklb.d.ts}

@@ -48,7 +48,6 @@ declare function importKey(key: string): Promise<Uint8Array>;
 declare function importKey(key: Uint8Array): Promise<Uint8Array>;
 declare function importKey(key: CryptoKey): Promise<CryptoKey>;
 declare function importKey(key: JWK_oct): Promise<Uint8Array>;
-declare function importKey(key: Exclude<JWK, JWK_oct>, alg: string): Promise<CryptoKey>;
 declare function importKey(key: CryptoKey | JWK | Uint8Array | string, alg?: string): Promise<CryptoKey | Uint8Array>;
 /**
  * Exports a CryptoKey to a JWK (JSON Web Key) format.

package/dist/shared/{unjwt.DZjogLQk.d.mts → unjwt.DH1p_WL8.d.mts}

@@ -48,7 +48,6 @@ declare function importKey(key: string): Promise<Uint8Array>;
 declare function importKey(key: Uint8Array): Promise<Uint8Array>;
 declare function importKey(key: CryptoKey): Promise<CryptoKey>;
 declare function importKey(key: JWK_oct): Promise<Uint8Array>;
-declare function importKey(key: Exclude<JWK, JWK_oct>, alg: string): Promise<CryptoKey>;
 declare function importKey(key: CryptoKey | JWK | Uint8Array | string, alg?: string): Promise<CryptoKey | Uint8Array>;
 /**
  * Exports a CryptoKey to a JWK (JSON Web Key) format.

package/dist/shared/{unjwt.BPpolBff.mjs → unjwt.DRUXIabl.mjs}

@@ -1,4 +1,4 @@
-import { h as isCryptoKey, f as concatUint8Arrays, b as base64UrlEncode, j as base64Decode, k as base64Encode, t as textEncoder, r as randomBytes, a as isJWK, d as base64UrlDecode, e as isJWKSet } from './unjwt.X5vzu_l_.mjs';
+import { h as isCryptoKey, f as concatUint8Arrays, b as base64UrlEncode, j as base64Decode, k as base64Encode, t as textEncoder, r as randomBytes, a as isJWK, d as base64UrlDecode, e as isJWKSet } from './unjwt.BHpknTpg.mjs';
 
 /**
  * This is a fork of Jose library's utility functions.
@@ -1095,12 +1095,12 @@ async function importKey(key, alg) {
     if ("k" in key && typeof key.k === "string") {
       return base64UrlDecode(key.k, false);
     } else {
-      if (!alg) {
+      if (!key.alg && !alg) {
         throw new TypeError(
           "Algorithm must be provided when importing non-oct JWK"
         );
       }
-      return jwkTokey({ ...key, alg });
+      return jwkTokey({ ...key, alg: key.alg || alg });
     }
   }
   throw new Error("Invalid key type provided to importKey");

package/dist/shared/{unjwt.C5blWtcA.d.ts → unjwt.RZpKLLLg.d.ts}

@@ -33,7 +33,7 @@ interface JWSSignOptions {
     protectedHeader?: JWSHeaderParameters;
 }
 /** Result of JWS verification */
-interface JWSVerifyResult<T = JWTClaims | Uint8Array | string> {
+interface JWSVerifyResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> {
     /** The decoded and verified payload. */
     payload: T;
     /** The JWS Protected Header. */
@@ -117,14 +117,20 @@ type JWSKeyLookupFunction = (header: JWSProtectedHeader, token: string) => Crypt
  * @param options Signing options, including the algorithm (`alg`) and protected header parameters.
  * @returns A Promise resolving to the JWS Compact Serialization string.
  */
-declare function sign(payload: JWTClaims, key: JWK | Uint8Array, options?: JWSSignOptions): Promise<string>;
-declare function sign(payload: string | Uint8Array | Record<string, any>, key: JWK | Uint8Array, options?: JWSSignOptions): Promise<string>;
+declare function sign(payload: JWTClaims, key: JWK, options?: JWSSignOptions): Promise<string>;
+declare function sign(payload: string | Uint8Array | Record<string, any>, key: JWK, options?: JWSSignOptions): Promise<string>;
 declare function sign(payload: JWTClaims, key: CryptoKey, options: JWSSignOptions & {
     alg: JWSAlgorithm;
 }): Promise<string>;
 declare function sign(payload: string | Uint8Array | Record<string, any>, key: CryptoKey, options: JWSSignOptions & {
     alg: JWSAlgorithm;
 }): Promise<string>;
+declare function sign(payload: JWTClaims, key: Uint8Array, options: JWSSignOptions & {
+    alg: JWSAlgorithm;
+}): Promise<string>;
+declare function sign(payload: string | Uint8Array | Record<string, any>, key: Uint8Array, options: JWSSignOptions & {
+    alg: JWSAlgorithm;
+}): Promise<string>;
 declare function sign(payload: string | Uint8Array | Record<string, any>, key: CryptoKey | JWK | Uint8Array, options: JWSSignOptions & {
     alg: JWSAlgorithm;
 }): Promise<string>;
@@ -137,7 +143,7 @@ declare function sign(payload: string | Uint8Array | Record<string, any>, key: C
  * @returns A Promise resolving to an object containing the verified payload and protected header.
  * @throws If the JWS is invalid, signature verification fails, or options are not met.
  */
-declare function verify<T = JWTClaims | Uint8Array | string>(jws: string, key: CryptoKey | JWK | JWKSet | Uint8Array | JWSKeyLookupFunction, options?: JWSVerifyOptions): Promise<JWSVerifyResult<T>>;
+declare function verify<T extends JWTClaims | Uint8Array | string>(jws: string, key: CryptoKey | JWK | JWKSet | Uint8Array | JWSKeyLookupFunction, options?: JWSVerifyOptions): Promise<JWSVerifyResult<T>>;
 declare function verify(jws: string, key: CryptoKey | JWK | JWKSet | Uint8Array | JWSKeyLookupFunction, options: JWSVerifyOptions & {
     forceUint8Array: true;
 }): Promise<JWSVerifyResult<Uint8Array>>;
@@ -148,7 +154,7 @@ type jws_JWSKeyLookupFunction = JWSKeyLookupFunction;
 type jws_JWSProtectedHeader = JWSProtectedHeader;
 type jws_JWSSignOptions = JWSSignOptions;
 type jws_JWSVerifyOptions = JWSVerifyOptions;
-type jws_JWSVerifyResult<T = JWTClaims | Uint8Array | string> = JWSVerifyResult<T>;
+type jws_JWSVerifyResult<T extends JWTClaims | Uint8Array | string = JWTClaims | Uint8Array | string> = JWSVerifyResult<T>;
 declare const jws_sign: typeof sign;
 declare const jws_verify: typeof verify;
 declare namespace jws {

package/dist/utils.mjs

@@ -1 +1 @@
-export { g as assertCryptoKey, j as base64Decode, k as base64Encode, d as base64UrlDecode, b as base64UrlEncode, f as concatUint8Arrays, h as isCryptoKey, l as isCryptoKeyPair, a as isJWK, e as isJWKSet, m as maybeArray, r as randomBytes, c as textDecoder, t as textEncoder } from './shared/unjwt.X5vzu_l_.mjs';
+export { g as assertCryptoKey, j as base64Decode, k as base64Encode, d as base64UrlDecode, b as base64UrlEncode, f as concatUint8Arrays, h as isCryptoKey, l as isCryptoKeyPair, a as isJWK, e as isJWKSet, m as maybeArray, r as randomBytes, c as textDecoder, t as textEncoder } from './shared/unjwt.BHpknTpg.mjs';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unjwt",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Low-level JWT utilities",
   "repository": "sandros94/unjwt",
   "license": "MIT",
@@ -45,7 +45,8 @@
     "lint:fix": "automd && eslint . --fix && prettier -w .",
     "prepack": "pnpm build",
     "release": "pnpm test && pnpm prepack && changelogen --release --push --publish",
-    "test": "pnpm lint && pnpm test:types && vitest run --coverage --slowTestThreshold=500",
+    "test": "pnpm lint && pnpm test:types && vitest run --slowTestThreshold=500",
+    "test:coverage": "pnpm lint && pnpm test:types && vitest run --coverage --slowTestThreshold=500",
     "test:types": "tsc --noEmit --skipLibCheck"
   },
   "devDependencies": {