unjwt 0.8.4 → 0.8.5

package/dist/_chunks/wrap.mjs

@@ -0,0 +1,209 @@
+import { JWTError } from "../error.mjs";
+import { assertPlainObject, isCryptoKey } from "./jwt.mjs";
+import { MAX_PARTY_INFO_BYTES, aesKwUnwrap, aesKwWrap, asDecryptionError, assertDirectKeyRole, assertECDHKeyAllowed, assertJWEEncSupported, assertOctKeyLength, assertPBES2Params, bitLengthIV, bitLengthTag, buildECDHAgreementParams, decodeSegment, decryptRSAES, deriveECDHESKey, ecdhDerivedBits, ecdhesWrap, encryptRSAES, gcmkwDecrypt, gcmkwEncrypt, importKey, normalizeEpk, pbes2Unwrap, pbes2Wrap, resolvePasswordKey } from "./algorithms.mjs";
+import { aesBitsOf, innerKeyWrapAlg } from "./digest.mjs";
+function inferAesImportAlgorithm(enc, cekLengthBytes) {
+	const bitLength = cekLengthBytes << 3;
+	if (enc) {
+		if (enc.includes("GCM")) return {
+			name: "AES-GCM",
+			length: aesBitsOf(enc)
+		};
+		if (enc.includes("CBC-HS")) return;
+	}
+	if (bitLength === 128 || bitLength === 192 || bitLength === 256) return {
+		name: "AES-GCM",
+		length: bitLength
+	};
+}
+function assertWrappableCEK(cek, alg) {
+	if (cek.length >= 16 && cek.length % 8 === 0) return;
+	throw new JWTError(`${alg} wraps a key of 16 or more bytes in whole 8-byte blocks (got ${cek.length}).`, "ERR_INVALID_OPTION");
+}
+async function unwrapping(operation) {
+	try {
+		return await operation;
+	} catch (error) {
+		throw asDecryptionError(error);
+	}
+}
+function assertKeyBytesArg(value, name) {
+	if (value instanceof Uint8Array || isCryptoKey(value)) return;
+	throw new JWTError(`"${name}" must be a Uint8Array or a CryptoKey.`, "ERR_INVALID_OPTION");
+}
+function assertPartyInfoLength(name, bytes) {
+	if (bytes.length > 1024) throw new JWTError(`Invalid JWE: "${name}" must not exceed ${MAX_PARTY_INFO_BYTES} bytes (got ${bytes.length}).`, "ERR_JWE_INVALID");
+}
+function assertKeyWrapSegmentLength(name, bytes, expected, alg) {
+	if (bytes.length !== expected) throw new JWTError(`Invalid JWE: "${name}" must be ${expected} bytes for ${alg} (got ${bytes.length}).`, "ERR_JWE_INVALID");
+}
+function assertCryptoKeyFor(alg, key, role) {
+	if (isCryptoKey(key)) return;
+	throw new JWTError(`${alg} requires the ${role} key to be a CryptoKey`, "ERR_JWK_INVALID");
+}
+function segmentBytes(value, name) {
+	return typeof value === "string" ? decodeSegment(value, {
+		family: "JWE",
+		what: `"${name}"`
+	}) : value;
+}
+async function wrapKey(keyToWrap, wrappingKey, options) {
+	assertPlainObject(options, "options");
+	assertKeyBytesArg(keyToWrap, "keyToWrap");
+	const { alg } = options;
+	const cekBytes = keyToWrap instanceof Uint8Array ? keyToWrap : new Uint8Array(await crypto.subtle.exportKey("raw", keyToWrap));
+	if (alg.endsWith("KW")) assertWrappableCEK(cekBytes, alg);
+	if (alg.startsWith("PBES2")) assertPBES2Params({
+		p2s: options.p2s,
+		p2c: options.p2c
+	});
+	const importedWrappingKey = await importKey(resolvePasswordKey(alg, wrappingKey), {
+		alg,
+		expect: "public"
+	});
+	switch (alg) {
+		case "dir": return { encryptedKey: /* @__PURE__ */ new Uint8Array(0) };
+		case "A128KW":
+		case "A192KW":
+		case "A256KW": return { encryptedKey: await aesKwWrap(alg, importedWrappingKey, cekBytes) };
+		case "PBES2-HS256+A128KW":
+		case "PBES2-HS384+A192KW":
+		case "PBES2-HS512+A256KW": {
+			const { p2s, p2c } = options;
+			if (!p2s || typeof p2c !== "number") throw new JWTError("PBES2 requires 'p2s' (salt) and 'p2c' (count) options", "ERR_JWE_INVALID");
+			return pbes2Wrap(alg, importedWrappingKey, cekBytes, p2c, p2s);
+		}
+		case "A128GCMKW":
+		case "A192GCMKW":
+		case "A256GCMKW": {
+			const { encryptedKey, iv, tag } = await gcmkwEncrypt(alg, importedWrappingKey, cekBytes, options.iv);
+			return {
+				encryptedKey,
+				iv,
+				tag
+			};
+		}
+		case "RSA-OAEP":
+		case "RSA-OAEP-256":
+		case "RSA-OAEP-384":
+		case "RSA-OAEP-512":
+			assertCryptoKeyFor(alg, importedWrappingKey, "wrapping");
+			return { encryptedKey: await encryptRSAES(alg, importedWrappingKey, cekBytes) };
+		case "ECDH-ES":
+		case "ECDH-ES+A128KW":
+		case "ECDH-ES+A192KW":
+		case "ECDH-ES+A256KW": {
+			assertCryptoKeyFor(alg, importedWrappingKey, "wrapping");
+			const enc = options.ecdh?.enc;
+			if (enc !== void 0) assertJWEEncSupported(enc);
+			if (alg === "ECDH-ES" && !enc) throw new JWTError("ECDH-ES direct key agreement requires options.ecdh.enc", "ERR_JWK_INVALID");
+			const { encryptedKey, parameters } = await ecdhesWrap(alg, {
+				enc,
+				recipientKey: importedWrappingKey,
+				cek: cekBytes,
+				parameters: buildECDHAgreementParams(options.ecdh)
+			});
+			const wrapResult = {
+				encryptedKey: encryptedKey ?? /* @__PURE__ */ new Uint8Array(0),
+				epk: parameters.epk
+			};
+			if (parameters.apu) wrapResult.apu = parameters.apu;
+			if (parameters.apv) wrapResult.apv = parameters.apv;
+			return wrapResult;
+		}
+		default: throw new JWTError(`Unsupported key wrapping algorithm: ${alg}`, "ERR_JWK_UNSUPPORTED");
+	}
+}
+async function unwrapKey(wrappedKey, unwrappingKey, options) {
+	assertPlainObject(options, "options");
+	if (!(wrappedKey instanceof Uint8Array)) throw new JWTError("\"wrappedKey\" must be a Uint8Array.", "ERR_INVALID_OPTION");
+	const { alg } = options;
+	const returnRaw = options.format === "raw";
+	const defaultExtractable = options.extractable !== false;
+	const importedUnwrappingKey = await importKey(resolvePasswordKey(alg, unwrappingKey), {
+		alg,
+		expect: "private"
+	});
+	let unwrappedCekBytes;
+	switch (alg) {
+		case "dir":
+			assertDirectKeyRole(unwrappingKey, options.enc);
+			if (importedUnwrappingKey instanceof Uint8Array) {
+				assertOctKeyLength(importedUnwrappingKey, options.enc);
+				unwrappedCekBytes = importedUnwrappingKey;
+			} else {
+				if (!returnRaw) return importedUnwrappingKey;
+				unwrappedCekBytes = new Uint8Array(await crypto.subtle.exportKey("raw", importedUnwrappingKey));
+			}
+			break;
+		case "A128KW":
+		case "A192KW":
+		case "A256KW":
+			unwrappedCekBytes = await unwrapping(aesKwUnwrap(alg, importedUnwrappingKey, wrappedKey));
+			break;
+		case "PBES2-HS256+A128KW":
+		case "PBES2-HS384+A192KW":
+		case "PBES2-HS512+A256KW": {
+			const { p2s, p2c, minIterations, maxIterations } = options;
+			if (!p2s || typeof p2c !== "number") throw new JWTError("PBES2 requires 'p2s' (salt) and 'p2c' (count) options", "ERR_JWE_INVALID");
+			const p2sBytes = segmentBytes(p2s, "p2s");
+			unwrappedCekBytes = await unwrapping(pbes2Unwrap(alg, importedUnwrappingKey, wrappedKey, p2c, p2sBytes, minIterations, maxIterations));
+			break;
+		}
+		case "A128GCMKW":
+		case "A192GCMKW":
+		case "A256GCMKW": {
+			if (!options.iv || !options.tag) throw new JWTError("AES-GCMKW requires 'iv' and 'tag' options for unwrapping", "ERR_JWE_INVALID");
+			const ivBytes = segmentBytes(options.iv, "iv");
+			const tagBytes = segmentBytes(options.tag, "tag");
+			assertKeyWrapSegmentLength("iv", ivBytes, bitLengthIV(alg) >> 3, alg);
+			assertKeyWrapSegmentLength("tag", tagBytes, bitLengthTag(alg) >> 3, alg);
+			unwrappedCekBytes = await unwrapping(gcmkwDecrypt(alg, importedUnwrappingKey, wrappedKey, ivBytes, tagBytes));
+			break;
+		}
+		case "RSA-OAEP":
+		case "RSA-OAEP-256":
+		case "RSA-OAEP-384":
+		case "RSA-OAEP-512": {
+			assertCryptoKeyFor(alg, importedUnwrappingKey, "unwrapping");
+			unwrappedCekBytes = await unwrapping(decryptRSAES(alg, importedUnwrappingKey, wrappedKey));
+			if (returnRaw) break;
+			const inferredAlgorithm = options.unwrappedKeyAlgorithm || inferAesImportAlgorithm(options.enc, unwrappedCekBytes.length);
+			if (!inferredAlgorithm) throw new JWTError("Cannot infer the RSA-OAEP unwrapped key algorithm, pass \"unwrappedKeyAlgorithm\".", "ERR_JWE_INVALID");
+			const keyUsages = options.keyUsage || ["encrypt", "decrypt"];
+			return await crypto.subtle.importKey("raw", unwrappedCekBytes, inferredAlgorithm, defaultExtractable, keyUsages);
+		}
+		case "ECDH-ES":
+		case "ECDH-ES+A128KW":
+		case "ECDH-ES+A192KW":
+		case "ECDH-ES+A256KW": {
+			if (!options.epk) throw new JWTError("ECDH-ES requires 'epk' option", "ERR_JWE_INVALID");
+			assertCryptoKeyFor(alg, importedUnwrappingKey, "unwrapping");
+			assertECDHKeyAllowed(importedUnwrappingKey);
+			const epkCandidate = await normalizeEpk(options.epk, {
+				alg,
+				recipientKey: importedUnwrappingKey
+			});
+			const apuBytes = segmentBytes(options.apu ?? /* @__PURE__ */ new Uint8Array(0), "apu");
+			const apvBytes = segmentBytes(options.apv ?? /* @__PURE__ */ new Uint8Array(0), "apv");
+			assertPartyInfoLength("apu", apuBytes);
+			assertPartyInfoLength("apv", apvBytes);
+			if (options.enc !== void 0) assertJWEEncSupported(options.enc);
+			const infoAlg = alg === "ECDH-ES" ? options.enc : alg;
+			if (!infoAlg) throw new JWTError("ECDH-ES requires 'enc' to derive the shared secret", "ERR_JWE_INVALID");
+			const keyLength = ecdhDerivedBits(alg, options.enc);
+			const sharedSecret = await unwrapping(deriveECDHESKey(epkCandidate, importedUnwrappingKey, infoAlg, keyLength, apuBytes, apvBytes));
+			if (alg === "ECDH-ES") unwrappedCekBytes = sharedSecret;
+			else {
+				const kwAlg = innerKeyWrapAlg(alg);
+				if (!(wrappedKey instanceof Uint8Array) || wrappedKey.length === 0) throw new JWTError("ECDH-ES key agreement with key wrapping requires an encrypted key", "ERR_JWE_INVALID");
+				unwrappedCekBytes = await unwrapping(aesKwUnwrap(kwAlg, sharedSecret, wrappedKey));
+			}
+			break;
+		}
+		default: throw new JWTError(`Unsupported key unwrapping algorithm: ${alg}`, "ERR_JWK_UNSUPPORTED");
+	}
+	if (returnRaw) return unwrappedCekBytes;
+	return await crypto.subtle.importKey("raw", unwrappedCekBytes, options.unwrappedKeyAlgorithm || { name: "AES-GCM" }, defaultExtractable, options.keyUsage || ["encrypt", "decrypt"]);
+}
+export { unwrapKey, wrapKey };

package/dist/adapters/elysia/index.d.mts

@@ -1,8 +1,8 @@
-import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/_codec-jwe.mjs";
-import { CookieAttributes } from "../../_chunks/_cookie-attributes.mjs";
+import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/codec-jwe.mjs";
+import { CookieAttributes } from "../../_chunks/cookie-attributes.mjs";
 import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
-import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/jwk.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/index2.mjs";
+import { thumbprint } from "../../_chunks/index3.mjs";
 import { Elysia } from "elysia";
 interface ChunkableCookie {
   value: unknown;

package/dist/adapters/elysia/index.mjs

@@ -1,6 +1,7 @@
-import { thumbprint } from "../../_chunks/_import-key.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
-import { createJWECodec, createJWSCodec, defineSession, invalidConfigError } from "../../_chunks/_codec-jws.mjs";
+import { thumbprint } from "../../_chunks/algorithms.mjs";
+import { toPublicJWK } from "../../_chunks/export.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../_chunks/jwk.mjs";
+import { createJWECodec, createJWSCodec, defineSession, invalidConfigError } from "../../_chunks/codec-jws.mjs";
 import { Elysia } from "elysia";
 function sessionPlugin(options) {
 	const contextKey = options.contextKey ?? "session";

package/dist/adapters/h3/index.d.mts

@@ -1,24 +1,24 @@
-import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/_codec-jwe.mjs";
+import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/codec-jwe.mjs";
 import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
-import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/jwk.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/index2.mjs";
+import { thumbprint } from "../../_chunks/index3.mjs";
 import { HTTPEvent, setCookie } from "h3";
 type CookieSerializeOptions = NonNullable<Parameters<typeof setCookie>[3]>;
 /**
  * Session state for the current request, mirroring the claims of its JWE token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 interface SessionJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
 /**
  * JWE session hooks; `onRead`, `onExpire` and `onError` are mutually exclusive per token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 interface SessionHooksJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWESessionHooks<SessionJWE<T, MaxAge>, SessionManager<T, MaxAge>, {
   event: TEvent;
 }, SessionConfigJWE<T, MaxAge, TEvent>> {}
 /**
  * Configuration for a JWE-backed (encrypted) session.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 interface SessionConfigJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWESessionConfig<MaxAge, CookieSerializeOptions> {
   /** Cookie and session-header name. Default `"h3-jwe"`; a `.<digits>` suffix throws `ERR_SESSION_CONFIG_INVALID`. */
@@ -27,7 +27,7 @@ interface SessionConfigJWE<T extends SessionRecord = SessionClaims, MaxAge exten
 }
 /**
  * Defines a JWE (encrypted) session once; its `use`, `token`, `issue` and `open` serve every request.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 export declare function defineJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(config: SessionConfigJWE<T, MaxAge, TEvent>): SessionDefinition<T, MaxAge, TEvent>;
 /**
@@ -41,7 +41,7 @@ export declare function useJWESession<T extends SessionRecord = SessionClaims, M
  */
 export declare function getJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<SessionJWE<T, MaxAge>>;
 /**
- * Read the raw session token: cookie first, then the session header (default `x-<name>-session`, optional `Bearer`).
+ * Read the raw session token: the session header when the request carries it (default `x-<name>-session`, optional `Bearer`), else the cookie.
  * @deprecated Use `defineJWESession(config).token(event)`.
  */
 export declare function getJWESessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): string | undefined;
@@ -70,19 +70,19 @@ export declare function unsealJWESession<T extends SessionRecord = SessionClaims
 export declare function clearJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<void>;
 /**
  * Session state for the current request, mirroring the claims of its JWS token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 interface SessionJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
 /**
  * JWS session hooks; `onRead`, `onExpire` and `onError` are mutually exclusive per token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 interface SessionHooksJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWSSessionHooks<SessionJWS<T, MaxAge>, SessionManager<T, MaxAge>, {
   event: TEvent;
 }, SessionConfigJWS<T, MaxAge, TEvent>> {}
 /**
  * Configuration for a JWS-backed (signed, not encrypted) session.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 interface SessionConfigJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWSSessionConfig<MaxAge, CookieSerializeOptions> {
   /** Cookie and session-header name. Default `"h3-jws"`; a `.<digits>` suffix throws `ERR_SESSION_CONFIG_INVALID`. */
@@ -91,7 +91,7 @@ interface SessionConfigJWS<T extends SessionRecord = SessionClaims, MaxAge exten
 }
 /**
  * Defines a JWS (signed, not encrypted) session once, its data readable by clients; `use`, `token`, `issue` and `open` serve every request.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is; a handler that throws after a write keeps its cookie through an `onUpdate`/`onClear` hook that copies `res.headers.getSetCookie()` into `res.errHeaders`.
+ * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
  */
 export declare function defineJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(config: SessionConfigJWS<T, MaxAge, TEvent>): SessionDefinition<T, MaxAge, TEvent>;
 /**
@@ -105,7 +105,7 @@ export declare function useJWSSession<T extends SessionRecord = SessionClaims, M
  */
 export declare function getJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<SessionJWS<T, MaxAge>>;
 /**
- * Read the raw session token: cookie first, then the session header (default `x-<name>-session`, optional `Bearer`).
+ * Read the raw session token: the session header when the request carries it (default `x-<name>-session`, optional `Bearer`), else the cookie.
  * @deprecated Use `defineJWSSession(config).token(event)`.
  */
 export declare function getJWSSessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): string | undefined;

package/dist/adapters/h3/index.mjs

@@ -1,6 +1,7 @@
-import { thumbprint } from "../../_chunks/_import-key.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
-import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, openSessionToken, sessionActions, setCookieName, setCookieValues } from "../../_chunks/_codec-jws.mjs";
+import { thumbprint } from "../../_chunks/algorithms.mjs";
+import { toPublicJWK } from "../../_chunks/export.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../_chunks/jwk.mjs";
+import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, mirrorSetCookie, openSessionToken, sessionActions, setCookieValues } from "../../_chunks/codec-jws.mjs";
 import { getCookie, getEventContext, setCookie } from "h3";
 const PREFIX = "[unjwt/h3]";
 const h3SessionDriver = {
@@ -15,20 +16,16 @@ function responseCookieJar(event) {
 		written: (name) => setCookieValues(event.res.headers.getSetCookie())[name],
 		write: (name, value, attrs) => {
 			setCookie(event, name, value, attrs);
-			stageErrCookie(event, name);
+			mirrorSetCookie(name, {
+				from: event.res.headers,
+				to: event.res.errHeaders
+			});
 		}
 	};
 }
 function hasResponse(event) {
 	return "res" in event && Boolean(event.res);
 }
-function stageErrCookie(event, cookieName) {
-	const isThisCookie = (cookie) => setCookieName(cookie) === cookieName;
-	const errHeaders = event.res.errHeaders;
-	const staged = [...errHeaders.getSetCookie().filter((cookie) => !isThisCookie(cookie)), ...event.res.headers.getSetCookie().filter((cookie) => isThisCookie(cookie))];
-	errHeaders.delete("set-cookie");
-	for (const cookie of staged) errHeaders.append("set-cookie", cookie);
-}
 const codec$1 = createJWECodec({
 	prefix: PREFIX,
 	defaultName: "h3-jwe"

package/dist/adapters/h3v1/index.d.mts

@@ -1,7 +1,7 @@
-import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/_codec-jwe.mjs";
+import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/codec-jwe.mjs";
 import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
-import { thumbprint } from "../../_chunks/index2.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/jwk.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/index2.mjs";
+import { thumbprint } from "../../_chunks/index3.mjs";
 import { H3Event, H3EventContext, setCookie } from "h3";
 type CookieSerializeOptions = NonNullable<Parameters<typeof setCookie>[3]>;
 /**
@@ -54,7 +54,7 @@ export declare function useJWESession<T extends SessionRecord = SessionClaims, M
  */
 export declare function getJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends CompatEvent | H3Event = CompatEvent | H3Event>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<SessionJWE<T, MaxAge>>;
 /**
- * Read the raw session token: cookie first, then the session header (default `x-<name>-session`, optional `Bearer`).
+ * Read the raw session token: the session header when the request carries it (default `x-<name>-session`, optional `Bearer`), else the cookie.
  * @deprecated Use `defineJWESession(config).token(event)`.
  */
 export declare function getJWESessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends CompatEvent | H3Event = CompatEvent | H3Event>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): string | undefined;
@@ -118,7 +118,7 @@ export declare function useJWSSession<T extends SessionRecord = SessionClaims, M
  */
 export declare function getJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends CompatEvent | H3Event = CompatEvent | H3Event>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<SessionJWS<T, MaxAge>>;
 /**
- * Read the raw session token: cookie first, then the session header (default `x-<name>-session`, optional `Bearer`).
+ * Read the raw session token: the session header when the request carries it (default `x-<name>-session`, optional `Bearer`), else the cookie.
  * @deprecated Use `defineJWSSession(config).token(event)`.
  */
 export declare function getJWSSessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends CompatEvent | H3Event = CompatEvent | H3Event>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): string | undefined;

package/dist/adapters/h3v1/index.mjs

@@ -1,7 +1,8 @@
-import { thumbprint } from "../../_chunks/_import-key.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../core/jwk.mjs";
-import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, openSessionToken, sessionActions, setCookieValues } from "../../_chunks/_codec-jws.mjs";
-import { parse } from "../../_chunks/libs/cookie-es.mjs";
+import { thumbprint } from "../../_chunks/algorithms.mjs";
+import { toPublicJWK } from "../../_chunks/export.mjs";
+import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../_chunks/jwk.mjs";
+import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, openSessionToken, sessionActions, setCookieValues } from "../../_chunks/codec-jws.mjs";
+import { requestCookies } from "../../_chunks/cookie.mjs";
 import { getCookie, getRequestHeader, getResponseHeader, isEvent, setCookie } from "h3";
 function responseSetCookies(event) {
 	const value = getResponseHeader(event, "set-cookie");
@@ -27,7 +28,7 @@ function eventJar(event) {
 }
 function compatJar(event) {
 	let cookies;
-	return { read: (name) => (cookies ||= compatCookies(event))[name] };
+	return { read: (name) => (cookies ||= requestCookies(compatHeaders(event)))[name] };
 }
 function requestHeader(event, name) {
 	const value = getRequestHeader(event, name);
@@ -36,10 +37,6 @@ function requestHeader(event, name) {
 function compatHeaders(event) {
 	return "request" in event ? event.request.headers : event.headers;
 }
-function compatCookies(event) {
-	const header = compatHeaders(event).get("cookie");
-	return header ? parse(header) : Object.create(null);
-}
 const codec$1 = createJWECodec({
 	prefix: PREFIX,
 	defaultName: "h3-jwe"

package/dist/core/internal.mjs

@@ -1 +1 @@
-export { applyTypDefault, assertCritShape, computeJwtTimeClaims, expiredClaimMessage, getPlaintextBytes, parsePayloadBytes, parsePayloadSegment, parsePayloadText, validateCriticalHeadersJWE, validateCriticalHeadersJWS } from "../_chunks/_jwt-internal.mjs";
+export { applyTypDefault, assertCritShape, computeJwtTimeClaims, expiredClaimMessage, getPlaintextBytes, parsePayloadBytes, parsePayloadSegment, parsePayloadText, validateCriticalHeadersJWE, validateCriticalHeadersJWS } from "../_chunks/jwt.mjs";

package/dist/core/{jwe.d.mts → jwe/index.d.mts}

@@ -1,5 +1,6 @@
-import { UnsecureError, UnsecureErrorCode } from "../_chunks/libs/unsecure.mjs";
-import { JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWTError, JWTErrorCauseMap, JWTErrorCode, KnownJWTErrorCode, PayloadOf, isJWTError, isUnsecureError } from "../_chunks/index.mjs";
-import { decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened } from "../_chunks/jwe.mjs";
-import { DEFAULT_JOSE_LIMITS } from "../_chunks/_internal.mjs";
+import { UnsecureError, UnsecureErrorCode } from "../../_chunks/libs/unsecure.mjs";
+import { JWTError, JWTErrorCauseMap, JWTErrorCode, KnownJWTErrorCode, isJWTError, isUnsecureError } from "../../_chunks/error.mjs";
+import { JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, PayloadOf } from "../../_chunks/index.mjs";
+import { decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened } from "../../_chunks/index4.mjs";
+import { DEFAULT_JOSE_LIMITS } from "../../_chunks/limits.mjs";
 export { DEFAULT_JOSE_LIMITS, type JOSEPayloadMode, type JOSEPayloadTypeMap, type JWEAsymmetricPrivateJWK, type JWEAsymmetricPublicJWK, type JWEDecryptJWK, type JWEDecryptOptions, type JWEDecryptResult, type JWEEncryptJWK, type JWEEncryptOptions, type JWEFlattenedSerialization, type JWEGeneralRecipient, type JWEGeneralSerialization, type JWEHeaderParameters, type JWEKeyLookup, type JWEKeyManagementHeaderParameters, type JWELibraryHeaderName, type JWEMultiDecryptKey, type JWEMultiDecryptOptions, type JWEMultiDecryptResult, type JWEMultiEncryptOptions, type JWEMultiRecipient, type JWEProtectedHeader, JWTError, type JWTErrorCauseMap, type JWTErrorCode, type KnownJWTErrorCode, type PayloadOf, UnsecureError, type UnsecureErrorCode, decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened, isJWTError, isUnsecureError };

package/dist/core/jwe/index.mjs

@@ -0,0 +1,5 @@
+import { UnsecureError } from "../../_chunks/libs/unsecure.mjs";
+import { JWTError, isJWTError, isUnsecureError } from "../../error.mjs";
+import { DEFAULT_JOSE_LIMITS } from "../../_chunks/algorithms.mjs";
+import { decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened } from "../../_chunks/jwe.mjs";
+export { DEFAULT_JOSE_LIMITS, JWTError, UnsecureError, decrypt, decryptMulti, encrypt, encryptMulti, generalToFlattened, isJWTError, isUnsecureError };

package/dist/core/{jwk.d.mts → jwk/index.d.mts}

@@ -1,5 +1,6 @@
-import { UnsecureError, UnsecureErrorCode } from "../_chunks/libs/unsecure.mjs";
-import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, ECDHEphemeralKeyInput, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWTError, JWTErrorCauseMap, JWTErrorCode, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, KnownJWTErrorCode, PEMType, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor, isJWTError, isUnsecureError } from "../_chunks/index.mjs";
-import { ThumbprintHash, thumbprint } from "../_chunks/index2.mjs";
-import { WeakMapJWKCache, clearJWKCache, configureJWKCache, deriveJWKFromPassword, deriveKeyFromPassword, deriveSharedSecret, exportJWK, exportKey, exportPEM, generateJWK, generateKey, getJWKsFromSet, importKey, importPEM, toPublicJWK, unwrapKey, wrapKey } from "../_chunks/jwk.mjs";
+import { UnsecureError, UnsecureErrorCode } from "../../_chunks/libs/unsecure.mjs";
+import { JWTError, JWTErrorCauseMap, JWTErrorCode, KnownJWTErrorCode, isJWTError, isUnsecureError } from "../../_chunks/error.mjs";
+import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, ECDHEphemeralKeyInput, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, PEMType, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
+import { WeakMapJWKCache, clearJWKCache, configureJWKCache, deriveJWKFromPassword, deriveKeyFromPassword, deriveSharedSecret, exportJWK, exportKey, exportPEM, generateJWK, generateKey, getJWKsFromSet, importKey, importPEM, toPublicJWK, unwrapKey, wrapKey } from "../../_chunks/index2.mjs";
+import { ThumbprintHash, thumbprint } from "../../_chunks/index3.mjs";
 export { type CompositeKey, type ContentEncryptionAlgorithm, type DeriveJWKOptions, type DeriveJWKReturn, type DeriveKeyOptions, type DeriveKeyReturn, type ECDHEphemeralKeyInput, type GenerateJWKOptions, type GenerateJWKReturn, type GenerateKeyAlgorithm, type GenerateKeyOptions, type GenerateKeyReturn, type GeneratedJWKMap, type GeneratedKeyMap, type ImportedKey, type ImportedKeyMap, type ImportedPEMJWK, type JWK, type JWKAlgorithm, type JWKCacheAdapter, type JWKLookupFunction, type JWKLookupFunctionHeader, type JWKMetadata, type JWKPEMAlgorithm, type JWKParameters, type JWKSet, type JWK_AES_Algorithm, type JWK_AES_CBC_HMAC, type JWK_AES_GCM, type JWK_AES_GCM_KW, type JWK_AES_KW, type JWK_Asymmetric, type JWK_Asymmetric_Algorithm, type JWK_EC, type JWK_ECDH_ES, type JWK_ECDSA, type JWK_EC_Private, type JWK_EC_Public, type JWK_HMAC, type JWK_OKP, type JWK_OKP_Private, type JWK_OKP_Public, type JWK_OKP_SIGN, type JWK_PBES2, type JWK_Pair, type JWK_Private, type JWK_Public, type JWK_RSA, type JWK_RSA_ENC, type JWK_RSA_PSS, type JWK_RSA_Private, type JWK_RSA_Public, type JWK_RSA_SIGN, type JWK_Symmetric, type JWK_Symmetric_Algorithm, type JWK_oct, JWTError, type JWTErrorCauseMap, type JWTErrorCode, type KeyManagementAlgorithm, type KeyWrapAlgorithmOf, type KeyWrappingAlgorithm, type KnownJWTErrorCode, type PEMType, type ThumbprintHash, type ToPublicJWKReturn, UnsecureError, type UnsecureErrorCode, type UnwrapKeyOptions, type UnwrapKeyResult, type UnwrappingKeyFor, WeakMapJWKCache, type WrapKeyOptions, type WrapKeyResult, type WrappingKeyFor, clearJWKCache, configureJWKCache, deriveJWKFromPassword, deriveKeyFromPassword, deriveSharedSecret, exportJWK, exportKey, exportPEM, generateJWK, generateKey, getJWKsFromSet, importKey, importPEM, isJWTError, isUnsecureError, thumbprint, toPublicJWK, unwrapKey, wrapKey };

package/dist/core/jwk/index.mjs

@@ -0,0 +1,7 @@
+import { UnsecureError } from "../../_chunks/libs/unsecure.mjs";
+import { JWTError, isJWTError, isUnsecureError } from "../../error.mjs";
+import { WeakMapJWKCache, clearJWKCache, configureJWKCache, getJWKsFromSet, importKey, thumbprint } from "../../_chunks/algorithms.mjs";
+import { unwrapKey, wrapKey } from "../../_chunks/wrap.mjs";
+import { exportJWK, exportKey, toPublicJWK } from "../../_chunks/export.mjs";
+import { deriveJWKFromPassword, deriveKeyFromPassword, deriveSharedSecret, exportPEM, generateJWK, generateKey, importPEM } from "../../_chunks/jwk.mjs";
+export { JWTError, UnsecureError, WeakMapJWKCache, clearJWKCache, configureJWKCache, deriveJWKFromPassword, deriveKeyFromPassword, deriveSharedSecret, exportJWK, exportKey, exportPEM, generateJWK, generateKey, getJWKsFromSet, importKey, importPEM, isJWTError, isUnsecureError, thumbprint, toPublicJWK, unwrapKey, wrapKey };

package/dist/core/{jws.d.mts → jws/index.d.mts}

@@ -1,5 +1,6 @@
-import { UnsecureError, UnsecureErrorCode } from "../_chunks/libs/unsecure.mjs";
-import { JOSEPayloadMode, JOSEPayloadTypeMap, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWTError, JWTErrorCauseMap, JWTErrorCode, KnownJWTErrorCode, PayloadOf, isJWTError, isUnsecureError } from "../_chunks/index.mjs";
-import { DEFAULT_JOSE_LIMITS } from "../_chunks/_internal.mjs";
-import { generalToFlattenedJWS, sign, signMulti, verify, verifyMulti, verifyMultiAll } from "../_chunks/jws.mjs";
+import { UnsecureError, UnsecureErrorCode } from "../../_chunks/libs/unsecure.mjs";
+import { JWTError, JWTErrorCauseMap, JWTErrorCode, KnownJWTErrorCode, isJWTError, isUnsecureError } from "../../_chunks/error.mjs";
+import { JOSEPayloadMode, JOSEPayloadTypeMap, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, PayloadOf } from "../../_chunks/index.mjs";
+import { DEFAULT_JOSE_LIMITS } from "../../_chunks/limits.mjs";
+import { generalToFlattenedJWS, sign, signMulti, verify, verifyMulti, verifyMultiAll } from "../../_chunks/index5.mjs";
 export { DEFAULT_JOSE_LIMITS, type JOSEPayloadMode, type JOSEPayloadTypeMap, type JWSAlgorithm, type JWSAsymmetricPrivateJWK, type JWSAsymmetricPublicJWK, type JWSFlattenedSerialization, type JWSGeneralSerialization, type JWSGeneralSignature, type JWSHashedAlgorithm, type JWSHeaderParameters, type JWSKeyLookup, type JWSMultiSignOptions, type JWSMultiSigner, type JWSMultiVerifyAllOptions, type JWSMultiVerifyOptions, type JWSMultiVerifyOutcome, type JWSMultiVerifyResult, type JWSProtectedHeader, type JWSSignJWK, type JWSSignOptions, type JWSVerifyJWK, type JWSVerifyOptions, type JWSVerifyResult, JWTError, type JWTErrorCauseMap, type JWTErrorCode, type KnownJWTErrorCode, type PayloadOf, UnsecureError, type UnsecureErrorCode, generalToFlattenedJWS, isJWTError, isUnsecureError, sign, signMulti, verify, verifyMulti, verifyMultiAll };

package/dist/core/jws/index.mjs

@@ -0,0 +1,5 @@
+import { UnsecureError } from "../../_chunks/libs/unsecure.mjs";
+import { JWTError, isJWTError, isUnsecureError } from "../../error.mjs";
+import { DEFAULT_JOSE_LIMITS } from "../../_chunks/algorithms.mjs";
+import { generalToFlattenedJWS, sign, signMulti, verify, verifyMulti, verifyMultiAll } from "../../_chunks/jws.mjs";
+export { DEFAULT_JOSE_LIMITS, JWTError, UnsecureError, generalToFlattenedJWS, isJWTError, isUnsecureError, sign, signMulti, verify, verifyMulti, verifyMultiAll };

package/dist/dpop/index.d.mts

@@ -0,0 +1,73 @@
+import { JWTError, JWTErrorCode, KnownJWTErrorCode, isJWTError } from "../_chunks/error.mjs";
+import { JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK } from "../_chunks/index.mjs";
+/** Closed set of supported asymmetric JWS algorithms. */
+type DPoPAlgorithm = Exclude<JWSAlgorithm, `HS${string}`>;
+/** The request method and absolute HTTP(S) URL; a Web Request satisfies this shape. */
+interface DPoPTarget {
+  method: string;
+  url: string;
+}
+/** Explicit signing pair; the private CryptoKey need not be extractable. */
+type DPoPKeyPair = CryptoKeyPair | {
+  privateKey: JWSAsymmetricPrivateJWK;
+  publicKey: JWSAsymmetricPublicJWK;
+};
+interface DPoPPayload {
+  jti: string;
+  iat: number;
+  exp?: number;
+  nbf?: number;
+  htm: string;
+  htu: string;
+  nonce?: string;
+  ath?: string;
+  [claim: string]: unknown;
+}
+interface DPoPCreateOptions {
+  keyPair: DPoPKeyPair;
+  /** Inferred from JWK alg metadata or an unambiguous key shape. Required for CryptoKey pairs. */
+  algorithm?: DPoPAlgorithm;
+  /** Unique proof identifier. Defaults to a fresh UUID v4 for each proof. */
+  jti?: string;
+  /** Creation time in NumericDate seconds. Defaults to the current Unix second. */
+  iat?: number;
+  /** Expiration time in NumericDate seconds. Omitted by default. */
+  exp?: number;
+  /** Earliest acceptance time in NumericDate seconds. Omitted by default. */
+  nbf?: number;
+  nonce?: string;
+  /** Raw ASCII access token whose SHA-256 digest becomes `ath`. */
+  accessToken?: {
+    token: string;
+  };
+}
+interface DPoPVerifyResult {
+  payload: DPoPPayload;
+  /** SHA-256 RFC 7638 thumbprint of the authenticated public key. */
+  thumbprint: string;
+}
+interface DPoPVerifyOptions {
+  algorithms: DPoPAlgorithm[];
+  /** Positive finite maximum proof age, in seconds. */
+  maxTokenAge: number;
+  currentDate?: Date;
+  /** Finite, non-negative clock tolerance, in seconds. Default: 0. */
+  clockTolerance?: number;
+  nonce?: string;
+  /** The raw access token and its authenticated `cnf.jkt` binding, supplied together. */
+  accessToken?: {
+    token: string;
+    thumbprint: string;
+  };
+  /** Atomically consume a validated proof; false rejects replay. No replay storage is provided. */
+  consumeProof?: (result: DPoPVerifyResult) => boolean | Promise<boolean>;
+}
+/** Create a proof with matching private/public signing keys and optional identifier/time overrides. */
+export declare function createDPoPProof(target: DPoPTarget, options: DPoPCreateOptions): Promise<string>;
+/**
+ * Authenticate and bind a proof; replay storage and access-token validation belong to the caller.
+ * A proof failure is `ERR_DPOP_INVALID` or `ERR_DPOP_CLAIM_INVALID` (a core error kept as `cause`);
+ * a missing or different expected nonce, checked last, is `ERR_DPOP_NONCE_INVALID`.
+ */
+export declare function verifyDPoPProof(proof: string, target: DPoPTarget, options: DPoPVerifyOptions): Promise<DPoPVerifyResult>;
+export { type DPoPAlgorithm, type DPoPCreateOptions, type DPoPKeyPair, type DPoPPayload, type DPoPTarget, type DPoPVerifyOptions, type DPoPVerifyResult, JWTError, type JWTErrorCode, type KnownJWTErrorCode, isJWTError };