unjwt 0.5.38 → 0.5.39

package/dist/adapters/h3.mjs

@@ -1,704 +1,3 @@
-export { k as deriveJWKFromPassword, h as exportJWKToPEM, c as generateJWK, f as importJWKFromPEM } from '../shared/unjwt.Dpl__ZAR.mjs';
-import { isEvent, setCookie } from 'h3';
-import { parse } from 'cookie-es';
-import { e as encrypt, d as decrypt } from '../shared/unjwt.B-v62plj.mjs';
-import { p as computeExpiresInSeconds, q as isSymmetricJWK, u as isPrivateJWK, w as isPublicJWK } from '../shared/unjwt.Be8NxwFK.mjs';
-import { s as sign, v as verify } from '../shared/unjwt.DdLN9vwI.mjs';
-
-/**
- * This is a fork of h3 library's session utility functions.
- * @source https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/src/utils/session.ts
- * @license MIT https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/LICENSE
- */
-const kGetSessionPromise$1 = Symbol("h3_jwe_getSession");
-const DEFAULT_NAME$1 = "h3-jwe";
-const DEFAULT_COOKIE$1 = {
-  path: "/",
-  secure: true,
-  httpOnly: true
-};
-async function useJWESession(event, config) {
-  const sessionName = config.name || DEFAULT_NAME$1;
-  await getJWESession(event, config);
-  const sessionManager = {
-    get id() {
-      return event.context.sessions?.[sessionName]?.id;
-    },
-    get createdAt() {
-      return event.context.sessions?.[sessionName]?.createdAt || Date.now();
-    },
-    get expiresAt() {
-      return event.context.sessions?.[sessionName]?.expiresAt;
-    },
-    get data() {
-      return event.context.sessions?.[sessionName]?.data || {};
-    },
-    get token() {
-      return getJWESessionToken(event, config);
-    },
-    update: async (update) => {
-      if (!isEvent(event)) {
-        throw new Error("[h3] Cannot update read-only session.");
-      }
-      await updateJWESession(event, config, update);
-      return sessionManager;
-    },
-    clear: () => {
-      if (!isEvent(event)) {
-        throw new Error("[h3] Cannot clear read-only session.");
-      }
-      clearJWESession(event, config);
-      return Promise.resolve(sessionManager);
-    }
-  };
-  return sessionManager;
-}
-async function getJWESession(event, config) {
-  const sessionName = config.name || DEFAULT_NAME$1;
-  if (!event.context.sessions) {
-    event.context.sessions = /* @__PURE__ */ Object.create(null);
-  }
-  const existingSession = event.context.sessions[sessionName];
-  if (existingSession) {
-    const session2 = existingSession[kGetSessionPromise$1] ? await existingSession[kGetSessionPromise$1] : existingSession;
-    if (session2.expiresAt !== void 0 && session2.expiresAt < Date.now() && isEvent(event)) {
-      await config.hooks?.onExpire?.({
-        event,
-        error: new Error(
-          `JWT "exp" (Expiration Time) Claim validation failed: Token has expired (exp: ${new Date(session2.expiresAt * 1e3).toISOString()})`
-        ),
-        config
-      });
-      return clearJWESession(event, config).then(
-        () => getJWESession(event, config)
-      );
-    }
-    await config.hooks?.onRead?.({
-      event,
-      session: session2,
-      config
-    });
-    return session2;
-  }
-  const now = config.jwe?.encryptOptions?.currentDate?.getTime() ?? Date.now();
-  const createdAt = now - now % 1e3;
-  const session = {
-    id: void 0,
-    createdAt,
-    expiresAt: config.maxAge === void 0 ? void 0 : createdAt + computeExpiresInSeconds(config.maxAge) * 1e3,
-    data: /* @__PURE__ */ Object.create(null)
-  };
-  event.context.sessions[sessionName] = session;
-  const token = getJWESessionToken(event, config);
-  if (token) {
-    const promise = unsealJWESession(event, config, token).catch(async (error_) => {
-      if (error_ instanceof Error && (error_.message.includes("Token has expired") || error_.message.includes("Token is too old"))) {
-        await config.hooks?.onExpire?.({
-          event,
-          error: error_,
-          config
-        });
-        return void 0;
-      }
-      await config.hooks?.onError?.({
-        event,
-        error: error_,
-        config
-      });
-      return void 0;
-    }).then((unsealed) => {
-      if (unsealed) {
-        Object.assign(session, unsealed);
-      }
-      delete event.context.sessions[sessionName][kGetSessionPromise$1];
-      return session;
-    });
-    event.context.sessions[sessionName][kGetSessionPromise$1] = promise;
-    await promise;
-  }
-  await config.hooks?.onRead?.({
-    event,
-    session,
-    config
-  });
-  return session;
-}
-function getJWESessionToken(event, config) {
-  const sessionName = config.name || DEFAULT_NAME$1;
-  let token;
-  if (config.sessionHeader !== false) {
-    const headerName = typeof config.sessionHeader === "string" ? config.sessionHeader.toLowerCase() : `x-${sessionName.toLowerCase()}-session`;
-    const headerValue = _getReqHeader$1(event, headerName);
-    if (typeof headerValue === "string") {
-      token = headerValue.startsWith("Bearer ") ? headerValue.slice(7).trim() : headerValue;
-    }
-  }
-  if (config.cookie !== false) {
-    const setCookie2 = _getResHeader$1(event, "set-cookie");
-    if (typeof setCookie2 === "string") {
-      token = findSetCookie$1(setCookie2, sessionName);
-    } else if (Array.isArray(setCookie2)) {
-      for (const sc of setCookie2) {
-        token = findSetCookie$1(sc, sessionName);
-        if (token) {
-          break;
-        }
-      }
-    }
-  }
-  if (!token) {
-    const cookieHeader = _getReqHeader$1(event, "cookie");
-    if (cookieHeader) {
-      token = parse(String(cookieHeader))[sessionName];
-    }
-  }
-  return token;
-}
-function _getReqHeader$1(event, name) {
-  if (event.node) {
-    return event.node?.req.headers[name];
-  }
-  if (event.request) {
-    return event.request.headers?.get(name);
-  }
-  if (event.headers) {
-    return event.headers.get(name);
-  }
-}
-function _getResHeader$1(event, name) {
-  if (event.node) {
-    return event.node?.res.getHeader(name);
-  }
-  if (event.response) {
-    return event.response.headers?.get(name);
-  }
-}
-async function updateJWESession(event, config, update) {
-  if (!isEvent(event)) {
-    throw new Error(
-      "Cannot update a new session. Use `useSession(event)` within the main handler."
-    );
-  }
-  const sessionName = config.name || DEFAULT_NAME$1;
-  const session = event.context.sessions?.[sessionName] || await getJWESession(event, config);
-  if (typeof update === "function") {
-    update = update(session.data);
-  }
-  if (update) {
-    const oldSession = { ...session, data: { ...session.data } };
-    Object.assign(session.data, update);
-    await config.hooks?.onUpdate?.({
-      session,
-      oldSession,
-      event,
-      config
-    });
-  }
-  const now = config.jwe?.encryptOptions?.currentDate?.getTime() ?? Date.now();
-  const createdAt = now - now % 1e3;
-  Object.assign(session, {
-    id: config.generateId?.() || crypto.randomUUID(),
-    createdAt,
-    expiresAt: config.maxAge === void 0 ? void 0 : createdAt + computeExpiresInSeconds(config.maxAge) * 1e3
-  });
-  if (config.cookie !== false) {
-    const sealed = await sealJWESession(event, config);
-    setCookie(event, sessionName, sealed, {
-      ...DEFAULT_COOKIE$1,
-      ...config.cookie,
-      expires: config.maxAge === void 0 ? void 0 : new Date(
-        // createdAt is ms, maxAge is seconds
-        session.createdAt + computeExpiresInSeconds(config.maxAge) * 1e3
-      )
-    });
-  }
-  return session;
-}
-async function sealJWESession(event, config) {
-  const key = getEncryptKey(config.key || config.secret);
-  const sessionName = config.name || DEFAULT_NAME$1;
-  const session = event.context.sessions?.[sessionName] || await getJWESession(event, config);
-  const iat = Math.floor(session.createdAt / 1e3);
-  const exp = session.expiresAt ? Math.floor(session.expiresAt / 1e3) : void 0;
-  const payload = {
-    ...session.data,
-    jti: session.id,
-    iat
-  };
-  if (exp) {
-    payload.exp = exp;
-  }
-  let typ = void 0;
-  if (config.jwe?.encryptOptions?.protectedHeader?.typ && typeof config.jwe.encryptOptions.protectedHeader.typ === "string" && config.jwe.encryptOptions.protectedHeader.typ.toLowerCase().includes("jwt")) {
-    typ = config.jwe.encryptOptions.protectedHeader.typ;
-  }
-  const token = await encrypt(payload, key, {
-    ...config.jwe?.encryptOptions,
-    expiresIn: void 0,
-    // controlled via 'exp' claim
-    protectedHeader: {
-      ...config.jwe?.encryptOptions?.protectedHeader,
-      kid: typeof key === "string" ? void 0 : key.kid,
-      typ: typ || "JWT",
-      cty: "application/json"
-    }
-  });
-  return token;
-}
-async function unsealJWESession(event, config, sealed) {
-  const key = config.hooks?.onUnsealKeyLookup ? (header) => config.hooks.onUnsealKeyLookup({
-    header,
-    event,
-    config
-  }) : getDecryptKey(config.key || config.secret);
-  const alg = config.jwe?.encryptOptions?.alg;
-  const enc = config.jwe?.encryptOptions?.enc;
-  if (config.jwe?.encryptOptions?.protectedHeader?.typ && typeof config.jwe.encryptOptions.protectedHeader.typ === "string" && config.jwe.encryptOptions.protectedHeader.typ.toLowerCase().includes("jwt")) {
-    config.jwe.encryptOptions.protectedHeader.typ;
-  }
-  const { payload } = await decrypt(sealed, key, {
-    ...config.jwe?.decryptOptions,
-    requiredClaims: [
-      .../* @__PURE__ */ new Set([
-        ...config.jwe?.decryptOptions?.requiredClaims || [],
-        "jti",
-        "iat"
-      ])
-    ],
-    maxTokenAge: config.maxAge,
-    algorithms: alg ? [alg] : void 0,
-    encryptionAlgorithms: enc ? [enc] : void 0,
-    unwrappedKeyAlgorithm: void 0,
-    keyUsage: void 0,
-    forceUint8Array: false,
-    validateJWT: true
-  }).catch((error_) => {
-    if (error_ instanceof Error) {
-      const message = error_.message;
-      throw new Error(`Invalid session token: ${message}`);
-    }
-    throw new Error(error_);
-  });
-  const { jti, iat, exp, ...data } = payload;
-  return {
-    id: jti,
-    createdAt: iat * 1e3,
-    // Convert back to ms
-    expiresAt: exp ? exp * 1e3 : void 0,
-    data: data && typeof data === "object" ? data : /* @__PURE__ */ Object.create(null)
-  };
-}
-async function clearJWESession(event, config) {
-  const sessionName = config.name || DEFAULT_NAME$1;
-  let session = event.context.sessions?.[sessionName];
-  if (session && session[kGetSessionPromise$1]) {
-    session = await session[kGetSessionPromise$1];
-  }
-  if (event.context.sessions?.[sessionName]) {
-    delete event.context.sessions[sessionName];
-  }
-  setCookie(event, sessionName, "", {
-    ...DEFAULT_COOKIE$1,
-    ...config.cookie,
-    expires: /* @__PURE__ */ new Date(0),
-    maxAge: void 0
-  });
-  await config.hooks?.onClear?.({
-    session,
-    event,
-    config
-  });
-}
-function getEncryptKey(key) {
-  if (!key) {
-    throw new Error("Session: JWE key is required.");
-  }
-  let _key;
-  if (typeof key === "string") {
-    _key = key;
-  } else if (isSymmetricJWK(key) || isPrivateJWK(key)) {
-    _key = key;
-  } else if ("publicKey" in key && isPublicJWK(key.publicKey)) {
-    _key = key.publicKey;
-  } else if ("privateKey" in key && isPrivateJWK(key.privateKey)) {
-    _key = key.privateKey;
-  }
-  if (!_key) {
-    throw new Error(
-      "Session: Invalid JWE key. It must be a password string or valid JWK.",
-      { cause: key }
-    );
-  }
-  return _key;
-}
-function getDecryptKey(key) {
-  if (!key) {
-    throw new Error("Session: JWE key is required.");
-  }
-  let _key = void 0;
-  if (typeof key === "string") {
-    _key = key;
-  } else if (isSymmetricJWK(key)) {
-    _key = key;
-  } else if ("privateKey" in key) {
-    _key = key.privateKey;
-  }
-  if (!_key) {
-    throw new Error(
-      "Session: Invalid JWE key. It must be a password string or a valid private JWK.",
-      { cause: key }
-    );
-  }
-  return _key;
-}
-function findSetCookie$1(setCookie2, name) {
-  const regex = new RegExp(`(?:^|,\\s*)${name}=([^;]+)`);
-  const match = setCookie2.match(regex);
-  return match ? match[1] : void 0;
-}
-
-/**
- * This is a fork of h3 library's session utility functions.
- * @source https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/src/utils/session.ts
- * @license MIT https://github.com/h3js/h3/blob/b4dce71c256911335f3402d09f30ffad120ad61a/LICENSE
- */
-const kGetSessionPromise = Symbol("h3_jws_getSession");
-const DEFAULT_NAME = "h3-jws";
-const DEFAULT_COOKIE = {
-  path: "/",
-  secure: true,
-  httpOnly: false
-};
-async function useJWSSession(event, config) {
-  const sessionName = config.name || DEFAULT_NAME;
-  await getJWSSession(event, config);
-  const sessionManager = {
-    get id() {
-      return event.context.sessions?.[sessionName]?.id;
-    },
-    get createdAt() {
-      return event.context.sessions?.[sessionName]?.createdAt || Date.now();
-    },
-    get expiresAt() {
-      return event.context.sessions?.[sessionName]?.expiresAt;
-    },
-    get data() {
-      return event.context.sessions?.[sessionName]?.data || {};
-    },
-    get token() {
-      return getJWSSessionToken(event, config);
-    },
-    update: async (update) => {
-      if (!isEvent(event)) {
-        throw new Error("[h3] Cannot update read-only session.");
-      }
-      await updateJWSSession(event, config, update);
-      return sessionManager;
-    },
-    clear: () => {
-      if (!isEvent(event)) {
-        throw new Error("[h3] Cannot clear read-only session.");
-      }
-      clearJWSSession(event, config);
-      return Promise.resolve(sessionManager);
-    }
-  };
-  return sessionManager;
-}
-async function getJWSSession(event, config) {
-  const sessionName = config.name || DEFAULT_NAME;
-  if (!event.context.sessions) {
-    event.context.sessions = /* @__PURE__ */ Object.create(null);
-  }
-  const existingSession = event.context.sessions[sessionName];
-  if (existingSession) {
-    const session2 = existingSession[kGetSessionPromise] ? await existingSession[kGetSessionPromise] : existingSession;
-    if (session2.expiresAt !== void 0 && session2.expiresAt < Date.now() && isEvent(event)) {
-      await config.hooks?.onExpire?.({
-        event,
-        error: new Error(
-          `JWT "exp" (Expiration Time) Claim validation failed: Token has expired (exp: ${new Date(session2.expiresAt * 1e3).toISOString()})`
-        ),
-        config
-      });
-      return clearJWSSession(event, config).then(
-        () => getJWSSession(event, config)
-      );
-    }
-    await config.hooks?.onRead?.({
-      event,
-      session: session2,
-      config
-    });
-    return session2;
-  }
-  const now = config.jws?.signOptions?.currentDate?.getTime() ?? Date.now();
-  const createdAt = now - now % 1e3;
-  const session = {
-    id: void 0,
-    createdAt,
-    expiresAt: config.maxAge === void 0 ? void 0 : createdAt + computeExpiresInSeconds(config.maxAge) * 1e3,
-    data: /* @__PURE__ */ Object.create(null)
-  };
-  event.context.sessions[sessionName] = session;
-  const token = getJWSSessionToken(event, config);
-  if (token) {
-    const promise = verifyJWSSession(event, config, token).catch(async (error_) => {
-      if (error_ instanceof Error && (error_.message.includes("Token has expired") || error_.message.includes("Token is too old"))) {
-        await config.hooks?.onExpire?.({
-          event,
-          error: error_,
-          config
-        });
-        return void 0;
-      }
-      await config.hooks?.onError?.({
-        event,
-        error: error_,
-        config
-      });
-      return void 0;
-    }).then((unsealed) => {
-      if (unsealed) {
-        Object.assign(session, unsealed);
-      }
-      delete event.context.sessions[sessionName][kGetSessionPromise];
-      return session;
-    });
-    session[kGetSessionPromise] = promise;
-    await promise;
-  }
-  await config.hooks?.onRead?.({
-    event,
-    session,
-    config
-  });
-  return session;
-}
-function getJWSSessionToken(event, config) {
-  const sessionName = config.name || DEFAULT_NAME;
-  let token;
-  if (config.sessionHeader !== false) {
-    const headerName = typeof config.sessionHeader === "string" ? config.sessionHeader.toLowerCase() : `x-${sessionName.toLowerCase()}-session`;
-    const headerValue = _getReqHeader(event, headerName);
-    if (typeof headerValue === "string") {
-      token = headerValue.startsWith("Bearer ") ? headerValue.slice(7).trim() : headerValue;
-    }
-  }
-  if (config.cookie !== false) {
-    const setCookie2 = _getResHeader(event, "set-cookie");
-    if (typeof setCookie2 === "string") {
-      token = findSetCookie(setCookie2, sessionName);
-    } else if (Array.isArray(setCookie2)) {
-      for (const sc of setCookie2) {
-        token = findSetCookie(sc, sessionName);
-        if (token) {
-          break;
-        }
-      }
-    }
-  }
-  if (!token) {
-    const cookieHeader = _getReqHeader(event, "cookie");
-    if (cookieHeader) {
-      token = parse(String(cookieHeader))[sessionName];
-    }
-  }
-  return token;
-}
-function _getReqHeader(event, name) {
-  if (event.node) {
-    return event.node.req.headers[name];
-  }
-  if (event.request) {
-    return event.request.headers.get(name);
-  }
-  if (event.headers) {
-    return event.headers.get(name);
-  }
-}
-function _getResHeader(event, name) {
-  if (event.node) {
-    return event.node?.res.getHeader(name);
-  }
-  if (event.response) {
-    return event.response.headers?.get(name);
-  }
-}
-async function updateJWSSession(event, config, update) {
-  if (!isEvent(event)) {
-    throw new Error(
-      "Cannot update a new session. Use `useSession(event)` within the main handler."
-    );
-  }
-  const sessionName = config.name || DEFAULT_NAME;
-  const session = event.context.sessions?.[sessionName] || await getJWSSession(event, config);
-  if (typeof update === "function") {
-    update = update(session.data);
-  }
-  if (update) {
-    const oldSession = { ...session, data: { ...session.data } };
-    Object.assign(session.data, update);
-    await config.hooks?.onUpdate?.({
-      session,
-      oldSession,
-      event,
-      config
-    });
-  }
-  const now = config.jws?.signOptions?.currentDate?.getTime() ?? Date.now();
-  const createdAt = now - now % 1e3;
-  Object.assign(session, {
-    id: config.generateId?.() || crypto.randomUUID(),
-    createdAt,
-    expiresAt: config.maxAge === void 0 ? void 0 : createdAt + computeExpiresInSeconds(config.maxAge) * 1e3
-  });
-  if (config.cookie !== false) {
-    const token = await signJWSSession(event, config);
-    setCookie(event, sessionName, token, {
-      ...DEFAULT_COOKIE,
-      ...config.cookie,
-      expires: config.maxAge === void 0 ? void 0 : new Date(
-        session.createdAt + computeExpiresInSeconds(config.maxAge) * 1e3
-      )
-    });
-  }
-  return session;
-}
-async function signJWSSession(event, config) {
-  const key = getSignKey(config.key);
-  const sessionName = config.name || DEFAULT_NAME;
-  const session = event.context.sessions?.[sessionName] || await getJWSSession(event, config);
-  const iat = Math.floor(session.createdAt / 1e3);
-  const exp = session.expiresAt ? Math.floor(session.expiresAt / 1e3) : void 0;
-  const payload = {
-    ...session.data,
-    jti: session.id,
-    iat
-  };
-  if (exp) {
-    payload.exp = exp;
-  }
-  let typ = void 0;
-  if (config.jws?.signOptions?.protectedHeader?.typ && typeof config.jws.signOptions.protectedHeader.typ === "string" && config.jws.signOptions.protectedHeader.typ.toLowerCase().includes("jwt")) {
-    typ = config.jws.signOptions.protectedHeader.typ;
-  }
-  const token = await sign(payload, key, {
-    ...config.jws?.signOptions,
-    expiresIn: void 0,
-    // controlled via 'exp' claim
-    protectedHeader: {
-      ...config.jws?.signOptions?.protectedHeader,
-      kid: key.kid,
-      typ: typ || "JWT",
-      cty: "application/json"
-    }
-  });
-  return token;
-}
-async function verifyJWSSession(event, config, token) {
-  const alg = config.jws?.signOptions?.alg;
-  const jwk = config.hooks?.onVerifyKeyLookup ? (header) => config.hooks.onVerifyKeyLookup({
-    header,
-    event,
-    config
-  }) : getVerifyKey(config.key);
-  let typ = void 0;
-  if (config.jws?.signOptions?.protectedHeader?.typ && typeof config.jws.signOptions.protectedHeader.typ === "string" && config.jws.signOptions.protectedHeader.typ.toLowerCase().includes("jwt")) {
-    typ = config.jws.signOptions.protectedHeader.typ;
-  }
-  const { payload } = await verify(token, jwk, {
-    ...config.jws?.verifyOptions,
-    requiredClaims: [
-      .../* @__PURE__ */ new Set([
-        ...config.jws?.verifyOptions?.requiredClaims || [],
-        "jti",
-        "iat"
-      ])
-    ],
-    typ: typ || "JWT",
-    algorithms: alg ? [alg] : void 0,
-    forceUint8Array: false,
-    validateJWT: true
-  }).catch((error_) => {
-    const message = error_ instanceof Error ? error_.message : String(error_);
-    throw new Error(`Invalid session token: ${message}`);
-  });
-  const { jti, iat, exp, ...data } = payload;
-  return {
-    id: jti,
-    createdAt: iat * 1e3,
-    // Convert back to ms
-    expiresAt: exp ? exp * 1e3 : void 0,
-    data: data && typeof data === "object" ? data : /* @__PURE__ */ Object.create(null)
-  };
-}
-async function clearJWSSession(event, config) {
-  const sessionName = config.name || DEFAULT_NAME;
-  let session = event.context.sessions?.[sessionName];
-  if (session && session[kGetSessionPromise]) {
-    session = await session[kGetSessionPromise];
-  }
-  if (event.context.sessions?.[sessionName]) {
-    delete event.context.sessions[sessionName];
-  }
-  setCookie(event, sessionName, "", {
-    ...DEFAULT_COOKIE,
-    ...config.cookie,
-    expires: /* @__PURE__ */ new Date(0),
-    maxAge: void 0
-  });
-  await config.hooks?.onClear?.({
-    session,
-    event,
-    config
-  });
-}
-function getSignKey(key) {
-  if (!key) {
-    throw new Error("Session: JWS key is required.");
-  }
-  let _key = void 0;
-  if (isSymmetricJWK(key)) {
-    _key = key;
-  } else if ("privateKey" in key && isPrivateJWK(key.privateKey)) {
-    _key = key.privateKey;
-  }
-  if (!_key) {
-    throw new Error(
-      "Session: Invalid JWS key. It must be a symmetric JWK or a private JWK.",
-      { cause: key }
-    );
-  }
-  return _key;
-}
-function getVerifyKey(key) {
-  if (!key) {
-    throw new Error("Session: JWS key is required.");
-  }
-  let _key = void 0;
-  if (isSymmetricJWK(key)) {
-    _key = key;
-  } else if ("publicKey" in key && isPublicJWK(key.publicKey)) {
-    _key = key.publicKey;
-  } else if ("publicKey" in key && Array.isArray(key.publicKey)) {
-    const keys = key.publicKey.filter((k) => isPublicJWK(k));
-    if (keys && keys.length > 0) {
-      _key = { keys };
-    }
-  }
-  if (!_key) {
-    throw new Error(
-      "Session: Invalid JWS key. It must be a symmetric JWK or a public JWK/set.",
-      { cause: key }
-    );
-  }
-  return _key;
-}
-function findSetCookie(setCookie2, name) {
-  const regex = new RegExp(`(?:^|,\\s*)${name}=([^;]+)`);
-  const match = setCookie2.match(regex);
-  return match ? match[1] : void 0;
-}
-
-export { clearJWESession, clearJWSSession, getJWESession, getJWESessionToken, getJWSSession, sealJWESession, signJWSSession, unsealJWESession, updateJWESession, updateJWSSession, useJWESession, useJWSSession, verifyJWSSession };
+import { a as deriveJWKFromPassword, c as importJWKFromPEM, o as exportJWKToPEM, s as generateJWK } from "../_chunks/jws.mjs";
+import { a as useJWSSession, c as getJWESession, d as unsealJWESession, f as updateJWESession, i as updateJWSSession, l as getJWESessionToken, n as getJWSSession, o as verifyJWSSession, p as useJWESession, r as signJWSSession, s as clearJWESession, t as clearJWSSession, u as sealJWESession } from "../_chunks/h3v1.mjs";
+export { clearJWESession, clearJWSSession, deriveJWKFromPassword, exportJWKToPEM, generateJWK, getJWESession, getJWESessionToken, getJWSSession, importJWKFromPEM, sealJWESession, signJWSSession, unsealJWESession, updateJWESession, updateJWSSession, useJWESession, useJWSSession, verifyJWSSession };