unjwt 0.7.0 → 0.7.2

package/dist/_chunks/libs/unsecure.d.mts

@@ -61,22 +61,22 @@ declare function sanitizeObjectCopy<T extends Record<string, unknown> | undefine
 * Base64 encoding. Accepts `string` or raw bytes; throws `TypeError` on
 * `null`/`undefined`. Empty strings and empty `Uint8Array` return `""`.
 */
-declare function base64Encode(data: Uint8Array<ArrayBuffer> | string): string;
+declare function base64Encode(data: Uint8Array | string): string;
 /**
 * Base64 URL-safe encoding (no padding). Accepts `string` or raw bytes;
 * throws `TypeError` on `null`/`undefined`. Empty inputs return `""`.
 */
-declare function base64UrlEncode(data: Uint8Array<ArrayBuffer> | string): string;
-declare function base64Decode<T extends DecodeReturnAs>(data: string | Uint8Array<ArrayBuffer>, options: {
+declare function base64UrlEncode(data: Uint8Array | string): string;
+declare function base64Decode<T extends DecodeReturnAs>(data: string | Uint8Array, options: {
   returnAs: T;
 }): T extends "string" ? string : Uint8Array<ArrayBuffer>;
 declare function base64Decode(data: string): string;
-declare function base64Decode(data: Uint8Array<ArrayBuffer>): Uint8Array<ArrayBuffer>;
-declare function base64UrlDecode<T extends DecodeReturnAs>(data: string | Uint8Array<ArrayBuffer>, options: {
+declare function base64Decode(data: Uint8Array): Uint8Array<ArrayBuffer>;
+declare function base64UrlDecode<T extends DecodeReturnAs>(data: string | Uint8Array, options: {
   returnAs: T;
 }): T extends "string" ? string : Uint8Array<ArrayBuffer>;
 declare function base64UrlDecode(data: string): string;
-declare function base64UrlDecode(data: Uint8Array<ArrayBuffer>): Uint8Array<ArrayBuffer>;
+declare function base64UrlDecode(data: Uint8Array): Uint8Array<ArrayBuffer>;
 /**
 * Hex encoding. Accepts `string` or raw bytes; throws `TypeError` on
 * `null`/`undefined`. Empty strings and empty `Uint8Array` return `""`.
@@ -91,4 +91,4 @@ declare function base64UrlDecode(data: Uint8Array<ArrayBuffer>): Uint8Array<Arra
 type DecodeReturnAs = "string" | "uint8array" | "bytes";
 declare const textEncoder: TextEncoder;
 declare const textDecoder: TextDecoder;
-export { textDecoder as a, sanitizeObject as c, base64UrlEncode as i, sanitizeObjectCopy as l, base64Encode as n, textEncoder as o, base64UrlDecode as r, safeJsonParse as s, base64Decode as t, secureRandomBytes as u };
+export { base64Decode, base64Encode, base64UrlDecode, base64UrlEncode, safeJsonParse, sanitizeObject, sanitizeObjectCopy, secureRandomBytes, textDecoder, textEncoder };

package/dist/_chunks/libs/unsecure.mjs

@@ -82,19 +82,24 @@ const _b64UrlEncOpts = /* @__PURE__ */ Object.freeze({
 	omitPadding: true
 });
 const _b64UrlDecOpts = /* @__PURE__ */ Object.freeze({ alphabet: "base64url" });
+function _bytesToBase64Fallback(bytes) {
+	let binary = "";
+	for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+	return btoa(binary);
+}
 function base64Encode(data) {
 	if (data == null) throw new TypeError("base64Encode: data must be a string or Uint8Array.");
 	if (_hasBuffer) return _toBuffer(data).toString("base64");
 	const encodedData = data instanceof Uint8Array ? data : textEncoder.encode(data);
 	if (_hasToBase64) return encodedData.toBase64();
-	return btoa(String.fromCodePoint(...encodedData));
+	return _bytesToBase64Fallback(encodedData);
 }
 function base64UrlEncode(data) {
 	if (data == null) throw new TypeError("base64UrlEncode: data must be a string or Uint8Array.");
 	if (_hasBuffer) return _toBuffer(data).toString("base64url");
 	const encodedData = data instanceof Uint8Array ? data : textEncoder.encode(data);
 	if (_hasToBase64) return encodedData.toBase64(_b64UrlEncOpts);
-	return btoa(String.fromCodePoint(...encodedData)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+	return _bytesToBase64Fallback(encodedData).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
 }
 function base64Decode(data, options) {
 	if (data == null) throw new TypeError("base64Decode: data must be a string or Uint8Array.");
@@ -104,7 +109,7 @@ function base64Decode(data, options) {
 	if (!str) return decodeToString ? "" : new Uint8Array(0);
 	if (_hasBuffer) {
 		const buf = _Buffer.from(str, "base64");
-		return decodeToString ? buf.toString("utf8") : new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+		return decodeToString ? buf.toString("utf8") : new Uint8Array(buf);
 	}
 	const decoded = _hasFromBase64 ? Uint8Array.fromBase64(str) : Uint8Array.from(atob(str), (b) => b.codePointAt(0));
 	return decodeToString ? textDecoder.decode(decoded) : decoded;
@@ -117,7 +122,7 @@ function base64UrlDecode(data, options) {
 	if (!str) return decodeToString ? "" : new Uint8Array(0);
 	if (_hasBuffer) {
 		const buf = _Buffer.from(str, "base64url");
-		return decodeToString ? buf.toString("utf8") : new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);
+		return decodeToString ? buf.toString("utf8") : new Uint8Array(buf);
 	}
 	let decoded;
 	if (_hasFromBase64) decoded = Uint8Array.fromBase64(str, _b64UrlDecOpts);
@@ -141,4 +146,4 @@ function secureRandomBytes(length) {
 	}
 	return bytes;
 }
-export { base64UrlEncode as a, safeJsonParse as c, base64UrlDecode as i, sanitizeObject as l, base64Decode as n, textDecoder as o, base64Encode as r, textEncoder as s, secureRandomBytes as t, sanitizeObjectCopy as u };
+export { base64Decode, base64Encode, base64UrlDecode, base64UrlEncode, safeJsonParse, sanitizeObject, sanitizeObjectCopy, secureRandomBytes, textDecoder, textEncoder };

package/dist/_chunks/utils.mjs

@@ -1,4 +1,4 @@
-import { c as safeJsonParse, i as base64UrlDecode, o as textDecoder, s as textEncoder } from "./libs/unsecure.mjs";
+import { base64UrlDecode, safeJsonParse, textDecoder, textEncoder } from "./libs/unsecure.mjs";
 var JWTError = class extends Error {
 	code;
 	cause;
@@ -387,4 +387,4 @@ function isPublicJWK(key) {
 	}
 	return false;
 }
-export { validateCriticalHeadersJWS as C, JWTError as D, inferJWSAllowedAlgorithms as E, isJWTError as O, validateCriticalHeadersJWE as S, inferJWEAllowedAlgorithms as T, decodeMaybeJWTString as _, isCryptoKeyPair as a, getPlaintextBytes as b, isPrivateJWK as c, maybeArray as d, applyTypCtyDefaults as f, computeMaxTokenAgeSeconds as g, computeJwtTimeClaims as h, isCryptoKey as i, isPublicJWK as l, computeExpiresInSeconds as m, concatUint8Arrays as n, isJWK as o, computeDurationInSeconds as p, isAsymmetricJWK as r, isJWKSet as s, assertCryptoKey as t, isSymmetricJWK as u, decodePayloadFromB64UrlSegment as v, validateJwtClaims as w, isJWTContent as x, decodePayloadFromBytes as y };
+export { JWTError, applyTypCtyDefaults, assertCryptoKey, computeDurationInSeconds, computeExpiresInSeconds, computeJwtTimeClaims, computeMaxTokenAgeSeconds, concatUint8Arrays, decodeMaybeJWTString, decodePayloadFromB64UrlSegment, decodePayloadFromBytes, getPlaintextBytes, inferJWEAllowedAlgorithms, inferJWSAllowedAlgorithms, isAsymmetricJWK, isCryptoKey, isCryptoKeyPair, isJWK, isJWKSet, isJWTContent, isJWTError, isPrivateJWK, isPublicJWK, isSymmetricJWK, maybeArray, validateCriticalHeadersJWE, validateCriticalHeadersJWS, validateJwtClaims };

package/dist/adapters/elysia/index.d.mts

@@ -0,0 +1,244 @@
+import { CompositeKey, ContentEncryptionAlgorithm, DeriveKeyOptions, DeriveKeyReturn, Duration, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, JOSEPayload, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyManagementHeaderParameters, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHeaderParameters, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JoseHeaderParameters, KeyManagementAlgorithm, MaxTokenAge, NotBeforeIn, StrictOmit, UnwrapKeyOptions, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../core/jwk.mjs";
+import { Elysia } from "elysia";
+interface CookieAttributes {
+  domain?: string;
+  expires?: Date;
+  httpOnly?: boolean;
+  maxAge?: number;
+  path?: string;
+  priority?: "low" | "medium" | "high";
+  sameSite?: boolean | "lax" | "strict" | "none";
+  secure?: boolean;
+  partitioned?: boolean;
+}
+interface ChunkableCookie {
+  value: unknown;
+  set(config: CookieAttributes & {
+    value: string;
+  }): unknown;
+}
+type ChunkableCookieJar = Record<string, ChunkableCookie>;
+type WriteChunkedCookieOptions = CookieAttributes & {
+  chunkMaxLength?: number;
+};
+interface SessionContext {
+  cookie: ChunkableCookieJar;
+  request: {
+    headers: {
+      get(name: string): string | null;
+    };
+  };
+}
+interface SessionClaims extends Required<Pick<JWTClaims, "jti" | "iat">>, StrictOmit<JWTClaims, "jti" | "iat"> {}
+type SessionData<T extends Record<string, any> = SessionClaims> = StrictOmit<T, "jti" | "iat" | "exp">;
+type SessionUpdate<T extends Record<string, any> = SessionClaims> = Partial<SessionData<T>> | ((oldData: SessionData<T>) => Partial<SessionData<T>> | undefined);
+interface SessionManager<T extends Record<string, any> = SessionClaims, ConfigMaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> {
+  readonly id: string | undefined;
+  readonly createdAt: number;
+  readonly expiresAt: ConfigMaxAge extends ExpiresIn ? number : "exp" extends keyof T ? T["exp"] : number | undefined;
+  readonly data: SessionData<T>;
+  readonly token: string | undefined;
+  update: (update?: SessionUpdate<T>) => Promise<SessionManager<T, ConfigMaxAge>>;
+  clear: () => Promise<SessionManager<T, ConfigMaxAge>>;
+}
+/**
+* Explicit return type for the `jwsSession` / `jweSession` plugin factories.
+*
+* Modelling Elysia's generics by hand is required by `isolatedDeclarations`
+* (the factories return an inferred `new Elysia().resolve().macro()` type that
+* cannot otherwise be emitted). `Resolved` is the scoped `Ephemeral.resolve`
+* augmentation — typically `{ [P in ContextKey]: SessionManager }` — so consumers
+* read a typed `ctx[contextKey]`. `GuardName` is the guard macro key (derived
+* from the context key, e.g. `requireSession`), so multiple session plugins on
+* one app each expose a distinct guard rather than colliding. `macroFn` is left
+* `{}`: consumers only need `Metadata.macro` for the `{ [GuardName]: true }`
+* route option.
+*/
+type SessionPlugin<Resolved extends Record<string, unknown>, GuardName extends string = "requireSession"> = Elysia<"", {
+  decorator: {};
+  store: {};
+  derive: {};
+  resolve: {};
+}, {
+  typebox: {};
+  error: {};
+}, {
+  schema: {};
+  standaloneSchema: {};
+  macro: { [M in GuardName]?: boolean };
+  macroFn: {};
+  parser: {};
+  response: {};
+}, {}, {
+  derive: {};
+  resolve: Resolved;
+  schema: {};
+  standaloneSchema: {};
+  response: {};
+}, {
+  derive: {};
+  resolve: {};
+  schema: {};
+  standaloneSchema: {};
+  response: {};
+}>;
+interface SessionJWS<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> {
+  id: string | undefined;
+  createdAt: number;
+  expiresAt: MaxAge extends ExpiresIn ? number : T["exp"];
+  data: SessionData<T>;
+  token: string | undefined;
+}
+interface SessionHooksJWS<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> {
+  onRead?: (args: {
+    session: SessionJWS<T, MaxAge> & {
+      id: string;
+      token: string;
+    };
+    context: TContext;
+    config: SessionConfigJWS<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onUpdate?: (args: {
+    session: SessionJWS<T, MaxAge> & {
+      id: string;
+      token: string;
+    };
+    oldSession: SessionJWS<T, MaxAge>;
+    context: TContext;
+    config: SessionConfigJWS<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onClear?: (args: {
+    oldSession: SessionJWS<T, MaxAge> | undefined;
+    context: TContext;
+    config: SessionConfigJWS<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onExpire?: (args: {
+    session: {
+      id: string | undefined;
+      createdAt: number | undefined;
+      expiresAt: number | undefined;
+      token: string;
+    };
+    context: TContext;
+    error: Error;
+    config: SessionConfigJWS<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onError?: (args: {
+    session: SessionJWS<T, MaxAge>;
+    context: TContext;
+    error: any;
+    config: SessionConfigJWS<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onVerifyKeyLookup?: (args: {
+    header: JWKLookupFunctionHeader;
+    context: TContext;
+    config: SessionConfigJWS<T, MaxAge, TContext>;
+  }) => JWKSet | JWSVerifyJWK | Promise<JWKSet | JWSVerifyJWK>;
+}
+interface SessionConfigJWS<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> {
+  key: JWK_oct<JWK_HMAC> | {
+    privateKey: JWSAsymmetricPrivateJWK;
+    publicKey: JWSAsymmetricPublicJWK | JWSAsymmetricPublicJWK[] | JWKSet;
+  };
+  maxAge?: MaxAge;
+  name?: string;
+  /** Context property the session is exposed under. Default `"session"`. */
+  contextKey?: string;
+  cookie?: false | (CookieAttributes & {
+    chunkMaxLength?: number;
+  });
+  sessionHeader?: false | string;
+  generateId?: () => string;
+  jws?: {
+    signOptions?: Omit<JWSSignOptions, "expiresIn">;
+    verifyOptions?: JWTClaimValidationOptions;
+  };
+  hooks?: SessionHooksJWS<T, MaxAge, TContext>;
+}
+declare function createJWSSession<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext>(context: TContext, config: SessionConfigJWS<T, MaxAge, TContext>): Promise<SessionManager<T, MaxAge>>;
+declare function jwsSession<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session">(config: SessionConfigJWS<T, MaxAge> & (K extends "session" ? {
+  contextKey?: K;
+} : {
+  contextKey: K;
+})): SessionPlugin<{ [P in K]: SessionManager<T, MaxAge> }, `require${Capitalize<K>}`>;
+interface SessionJWE<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> {
+  id: string | undefined;
+  createdAt: number;
+  expiresAt: MaxAge extends ExpiresIn ? number : T["exp"];
+  data: SessionData<T>;
+  token: string | undefined;
+}
+interface SessionHooksJWE<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> {
+  onRead?: (args: {
+    session: SessionJWE<T, MaxAge> & {
+      id: string;
+      token: string;
+    };
+    context: TContext;
+    config: SessionConfigJWE<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onUpdate?: (args: {
+    session: SessionJWE<T, MaxAge> & {
+      id: string;
+      token: string;
+    };
+    oldSession: SessionJWE<T, MaxAge>;
+    context: TContext;
+    config: SessionConfigJWE<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onClear?: (args: {
+    oldSession: SessionJWE<T, MaxAge> | undefined;
+    context: TContext;
+    config: SessionConfigJWE<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onExpire?: (args: {
+    session: {
+      id: string | undefined;
+      createdAt: number | undefined;
+      expiresAt: number | undefined;
+      token: string;
+    };
+    context: TContext;
+    error: Error;
+    config: SessionConfigJWE<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onError?: (args: {
+    session: SessionJWE<T, MaxAge>;
+    context: TContext;
+    error: any;
+    config: SessionConfigJWE<T, MaxAge, TContext>;
+  }) => void | Promise<void>;
+  onUnsealKeyLookup?: (args: {
+    header: JWEHeaderParameters;
+    context: TContext;
+    config: SessionConfigJWE<T, MaxAge, TContext>;
+  }) => JWEDecryptJWK | Promise<JWEDecryptJWK>;
+}
+interface SessionConfigJWE<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> {
+  key: string | JWEEncryptJWK | {
+    privateKey: JWEAsymmetricPrivateJWK;
+    publicKey?: JWEAsymmetricPublicJWK;
+  };
+  maxAge?: MaxAge;
+  name?: string;
+  /** Context property the session is exposed under. Default `"session"`. */
+  contextKey?: string;
+  cookie?: false | (CookieAttributes & {
+    chunkMaxLength?: number;
+  });
+  sessionHeader?: false | string;
+  generateId?: () => string;
+  jwe?: {
+    encryptOptions?: Omit<JWEEncryptOptions, "expiresIn">;
+    decryptOptions?: JWTClaimValidationOptions;
+  };
+  hooks?: SessionHooksJWE<T, MaxAge, TContext>;
+}
+declare function createJWESession<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext>(context: TContext, config: SessionConfigJWE<T, MaxAge, TContext>): Promise<SessionManager<T, MaxAge>>;
+declare function jweSession<T extends Record<string, any> = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session">(config: SessionConfigJWE<T, MaxAge> & (K extends "session" ? {
+  contextKey?: K;
+} : {
+  contextKey: K;
+})): SessionPlugin<{ [P in K]: SessionManager<T, MaxAge> }, `require${Capitalize<K>}`>;
+export { type ChunkableCookie, type ChunkableCookieJar, type CompositeKey, type ContentEncryptionAlgorithm, type CookieAttributes, type DeriveKeyOptions, type DeriveKeyReturn, type Duration, type ExpiresIn, type GenerateJWKOptions, type GenerateJWKReturn, type GenerateKeyAlgorithm, type GenerateKeyOptions, type GenerateKeyReturn, type JOSEPayload, type JWEAsymmetricPrivateJWK, type JWEAsymmetricPublicJWK, type JWEDecryptJWK, type JWEDecryptOptions, type JWEDecryptResult, type JWEEncryptJWK, type JWEEncryptOptions, type JWEFlattenedSerialization, type JWEGeneralRecipient, type JWEGeneralSerialization, type JWEHeaderParameters, type JWEKeyManagementHeaderParameters, type JWEMultiDecryptOptions, type JWEMultiDecryptResult, type JWEMultiEncryptOptions, type JWEMultiRecipient, type JWEProtectedHeader, type JWK, type JWKAlgorithm, type JWKCacheAdapter, type JWKLookupFunction, type JWKLookupFunctionHeader, type JWKPEMAlgorithm, type JWKParameters, type JWKSet, type JWK_AES_CBC_HMAC, type JWK_AES_GCM, type JWK_AES_GCM_KW, type JWK_AES_KW, type JWK_Asymmetric, type JWK_Asymmetric_Algorithm, type JWK_EC, type JWK_ECDH_ES, type JWK_ECDSA, type JWK_EC_Private, type JWK_EC_Public, type JWK_HMAC, type JWK_OKP, type JWK_OKP_Private, type JWK_OKP_Public, type JWK_OKP_SIGN, type JWK_PBES2, type JWK_Pair, type JWK_Private, type JWK_Public, type JWK_RSA, type JWK_RSA_ENC, type JWK_RSA_PSS, type JWK_RSA_Private, type JWK_RSA_Public, type JWK_RSA_SIGN, type JWK_Symmetric, type JWK_Symmetric_Algorithm, type JWK_oct, type JWSAlgorithm, type JWSAsymmetricPrivateJWK, type JWSAsymmetricPublicJWK, type JWSFlattenedSerialization, type JWSGeneralSerialization, type JWSGeneralSignature, type JWSHeaderParameters, type JWSMultiSignOptions, type JWSMultiSigner, type JWSMultiVerifyAllOptions, type JWSMultiVerifyOptions, type JWSMultiVerifyOutcome, type JWSMultiVerifyResult, type JWSProtectedHeader, type JWSSignJWK, type JWSSignOptions, type JWSVerifyJWK, type JWSVerifyOptions, type JWSVerifyResult, type JWT, type JWTClaimValidationOptions, type JWTClaims, type JoseHeaderParameters, type KeyManagementAlgorithm, type MaxTokenAge, type NotBeforeIn, type SessionClaims, type SessionConfigJWE, type SessionConfigJWS, type SessionContext, type SessionData, type SessionHooksJWE, type SessionHooksJWS, type SessionJWE, type SessionJWS, type SessionManager, type SessionPlugin, type SessionUpdate, type UnwrapKeyOptions, type UnwrappingKeyFor, type WrapKeyOptions, type WrapKeyResult, type WrappingKeyFor, type WriteChunkedCookieOptions, createJWESession, createJWSSession, deriveJWKFromPassword, exportPEM, generateJWK, importPEM, jweSession, jwsSession };