unjwt 0.8.5 → 0.9.1

package/dist/_chunks/cookie-attributes.d.mts

@@ -1,12 +0,0 @@
-/** The `Set-Cookie` attributes of a session cookie (RFC 6265, RFC 6265bis, CHIPS). */
-export interface CookieAttributes {
-  domain?: string;
-  expires?: Date;
-  httpOnly?: boolean;
-  maxAge?: number;
-  path?: string;
-  priority?: "low" | "medium" | "high";
-  sameSite?: boolean | "lax" | "strict" | "none";
-  secure?: boolean;
-  partitioned?: boolean;
-}

package/dist/_chunks/cookie.mjs

@@ -1,50 +0,0 @@
-import { mirrorSetCookie, setCookieName, setCookieValues } from "./codec-jws.mjs";
-import { parse, parseSetCookie, serialize } from "./libs/cookie-es.mjs";
-function webCookieJar(request, response) {
-	let cookies;
-	const jar = { read: (name) => (cookies ||= requestCookies(request))[name] };
-	if (response) {
-		const { headers, errHeaders } = response;
-		jar.written = (name) => setCookieValues(headers.getSetCookie())[name];
-		jar.write = (name, value, attrs) => {
-			setCookie(headers, {
-				name,
-				value,
-				...attrs
-			});
-			if (errHeaders) mirrorSetCookie(name, {
-				from: headers,
-				to: errHeaders
-			});
-		};
-	}
-	return jar;
-}
-function requestCookies(request) {
-	const header = request.get("cookie");
-	return header ? parse(header) : Object.create(null);
-}
-function setCookie(headers, cookie) {
-	const line = serialize({
-		path: "/",
-		...cookie
-	});
-	const key = cookieKey(cookie);
-	const kept = headers.getSetCookie().filter((existing) => {
-		const parsed = parseSetCookie(existing);
-		return parsed ? cookieKey(parsed) !== key : setCookieName(existing) !== cookie.name;
-	});
-	headers.delete("set-cookie");
-	for (const existing of kept) headers.append("set-cookie", existing);
-	headers.append("set-cookie", line);
-}
-function cookieKey(cookie) {
-	const domain = (cookie.domain || "").replace(/^\./, "").toLowerCase();
-	return [
-		cookie.name,
-		domain,
-		cookie.path || "/",
-		cookie.partitioned ? "1" : "0"
-	].join(";");
-}
-export { requestCookies, webCookieJar };

package/dist/adapters/elysia/index.d.mts

@@ -1,123 +0,0 @@
-import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/codec-jwe.mjs";
-import { CookieAttributes } from "../../_chunks/cookie-attributes.mjs";
-import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/index2.mjs";
-import { thumbprint } from "../../_chunks/index3.mjs";
-import { Elysia } from "elysia";
-interface ChunkableCookie {
-  value: unknown;
-  set(config: CookieAttributes & {
-    value: string;
-  }): unknown;
-}
-type ChunkableCookieJar = Record<string, ChunkableCookie>;
-type WriteChunkedCookieOptions = CookieAttributes & {
-  chunkMaxLength?: number;
-};
-interface SessionContext {
-  cookie: ChunkableCookieJar;
-  request: {
-    headers: {
-      get(name: string): string | null;
-    };
-  };
-}
-/**
- * Explicit return type for the `jwsSession` / `jweSession` plugin factories.
- *
- * Modelling Elysia's generics by hand is required by `isolatedDeclarations`
- * (the factories return an inferred `new Elysia().resolve().macro()` type that
- * cannot otherwise be emitted). `Resolved` is the scoped `Ephemeral.resolve`
- * augmentation — typically `{ [P in ContextKey]: SessionManager }` — so consumers
- * read a typed `ctx[contextKey]`. `GuardName` is the guard macro key (derived
- * from the context key, e.g. `requireSession`), so multiple session plugins on
- * one app each expose a distinct guard rather than colliding. `macroFn` is left
- * `{}`: consumers only need `Metadata.macro` for the `{ [GuardName]: true }`
- * route option.
- */
-type SessionPlugin<Resolved extends Record<string, unknown>, GuardName extends string = "requireSession"> = Elysia<"", {
-  decorator: {};
-  store: {};
-  derive: {};
-  resolve: {};
-}, {
-  typebox: {};
-  error: {};
-}, {
-  schema: {};
-  standaloneSchema: {};
-  macro: { [M in GuardName]?: boolean; };
-  macroFn: {};
-  parser: {};
-  response: {};
-}, {}, {
-  derive: {};
-  resolve: Resolved;
-  schema: {};
-  standaloneSchema: {};
-  response: {};
-}, {
-  derive: {};
-  resolve: {};
-  schema: {};
-  standaloneSchema: {};
-  response: {};
-}>;
-/** A session definition on Elysia, plus the plugin that resolves its manager under `contextKey` (`K`). */
-interface SessionPluginDefinition<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session"> extends SessionDefinition<T, MaxAge, SessionContext> {
-  /** Resolves the session onto the context under `contextKey`, with the guard macro answering 401 while no session is established. */
-  plugin: () => SessionPlugin<{ [P in K]: SessionManager<T, MaxAge>; }, `require${Capitalize<K>}`>;
-}
-interface SessionJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
-interface SessionHooksJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> extends JWSSessionHooks<SessionJWS<T, MaxAge>, SessionManager<T, MaxAge>, {
-  context: TContext;
-}, SessionConfigJWS<T, MaxAge, TContext>> {}
-interface SessionConfigJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> extends JWSSessionConfig<MaxAge, CookieAttributes> {
-  /** Context property the session is exposed under. Default `"session"`. */
-  contextKey?: string;
-  hooks?: SessionHooksJWS<T, MaxAge, TContext>;
-}
-/** Defines a JWS (signed, not encrypted) session once: `use`, `token`, `issue` and `open` serve every request, `plugin()` mounts it on an app. */
-export declare function defineJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session">(config: SessionConfigJWS<T, MaxAge> & (K extends "session" ? {
-  contextKey?: K;
-} : {
-  contextKey: K;
-})): SessionPluginDefinition<T, MaxAge, K>;
-/**
- * Create a JWS (signed, not encrypted) session manager for the request.
- * @deprecated Use `defineJWSSession(config).use(context)`.
- */
-export declare function createJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext>(context: TContext, config: SessionConfigJWS<T, MaxAge, TContext>): Promise<SessionManager<T, MaxAge>>;
-/** The Elysia plugin of a JWS (signed, not encrypted) session: `defineJWSSession(config).plugin()`. */
-export declare function jwsSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session">(config: SessionConfigJWS<T, MaxAge> & (K extends "session" ? {
-  contextKey?: K;
-} : {
-  contextKey: K;
-})): SessionPlugin<{ [P in K]: SessionManager<T, MaxAge>; }, `require${Capitalize<K>}`>;
-interface SessionJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
-interface SessionHooksJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> extends JWESessionHooks<SessionJWE<T, MaxAge>, SessionManager<T, MaxAge>, {
-  context: TContext;
-}, SessionConfigJWE<T, MaxAge, TContext>> {}
-interface SessionConfigJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext> extends JWESessionConfig<MaxAge, CookieAttributes> {
-  /** Context property the session is exposed under. Default `"session"`. */
-  contextKey?: string;
-  hooks?: SessionHooksJWE<T, MaxAge, TContext>;
-}
-/** Defines a JWE (encrypted) session once: `use`, `token`, `issue` and `open` serve every request, `plugin()` mounts it on an app. */
-export declare function defineJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session">(config: SessionConfigJWE<T, MaxAge> & (K extends "session" ? {
-  contextKey?: K;
-} : {
-  contextKey: K;
-})): SessionPluginDefinition<T, MaxAge, K>;
-/**
- * Create a JWE (encrypted) session manager for the request.
- * @deprecated Use `defineJWESession(config).use(context)`.
- */
-export declare function createJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TContext extends SessionContext = SessionContext>(context: TContext, config: SessionConfigJWE<T, MaxAge, TContext>): Promise<SessionManager<T, MaxAge>>;
-/** The Elysia plugin of a JWE (encrypted) session: `defineJWESession(config).plugin()`. */
-export declare function jweSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, K extends string = "session">(config: SessionConfigJWE<T, MaxAge> & (K extends "session" ? {
-  contextKey?: K;
-} : {
-  contextKey: K;
-})): SessionPlugin<{ [P in K]: SessionManager<T, MaxAge>; }, `require${Capitalize<K>}`>;
-export { type ChunkableCookie, type ChunkableCookieJar, type CompositeKey, type ContentEncryptionAlgorithm, type CookieAttributes, type DeriveJWKOptions, type DeriveJWKReturn, type DeriveKeyOptions, type DeriveKeyReturn, type Duration, type ECDHEphemeralKeyInput, type ExpiresIn, type GenerateJWKOptions, type GenerateJWKReturn, type GenerateKeyAlgorithm, type GenerateKeyOptions, type GenerateKeyReturn, type GeneratedJWKMap, type GeneratedKeyMap, type ImportedKey, type ImportedKeyMap, type ImportedPEMJWK, type JOSEConsumerOptions, type JOSELimits, type JOSEPayload, type JOSEPayloadMode, type JOSEPayloadTypeMap, type JWEAsymmetricPrivateJWK, type JWEAsymmetricPublicJWK, type JWEDecryptJWK, type JWEDecryptOptions, type JWEDecryptResult, type JWEEncryptJWK, type JWEEncryptOptions, type JWEFlattenedSerialization, type JWEGeneralRecipient, type JWEGeneralSerialization, type JWEHeaderParameters, type JWEKeyLookup, type JWEKeyManagementHeaderParameters, type JWELibraryHeaderName, type JWEMultiDecryptKey, type JWEMultiDecryptOptions, type JWEMultiDecryptResult, type JWEMultiEncryptOptions, type JWEMultiRecipient, type JWEProtectedHeader, type JWK, type JWKAlgorithm, type JWKCacheAdapter, type JWKLookupFunction, type JWKLookupFunctionHeader, type JWKMetadata, type JWKPEMAlgorithm, type JWKParameters, type JWKSet, type JWK_AES_Algorithm, type JWK_AES_CBC_HMAC, type JWK_AES_GCM, type JWK_AES_GCM_KW, type JWK_AES_KW, type JWK_Asymmetric, type JWK_Asymmetric_Algorithm, type JWK_EC, type JWK_ECDH_ES, type JWK_ECDSA, type JWK_EC_Private, type JWK_EC_Public, type JWK_HMAC, type JWK_OKP, type JWK_OKP_Private, type JWK_OKP_Public, type JWK_OKP_SIGN, type JWK_PBES2, type JWK_Pair, type JWK_Private, type JWK_Public, type JWK_RSA, type JWK_RSA_ENC, type JWK_RSA_PSS, type JWK_RSA_Private, type JWK_RSA_Public, type JWK_RSA_SIGN, type JWK_Symmetric, type JWK_Symmetric_Algorithm, type JWK_oct, type JWSAlgorithm, type JWSAsymmetricPrivateJWK, type JWSAsymmetricPublicJWK, type JWSFlattenedSerialization, type JWSGeneralSerialization, type JWSGeneralSignature, type JWSHashedAlgorithm, type JWSHeaderParameters, type JWSKeyLookup, type JWSMultiSignOptions, type JWSMultiSigner, type JWSMultiVerifyAllOptions, type JWSMultiVerifyOptions, type JWSMultiVerifyOutcome, type JWSMultiVerifyResult, type JWSProtectedHeader, type JWSSignJWK, type JWSSignOptions, type JWSVerifyJWK, type JWSVerifyOptions, type JWSVerifyResult, type JWT, type JWTClaimValidationOptions, type JWTClaims, type JWTConfirmation, type JWTTimeClaimOptions, type JoseHeaderParameters, type KeyManagementAlgorithm, type KeyWrapAlgorithmOf, type KeyWrappingAlgorithm, type MaxTokenAge, type NotBeforeIn, type OpenedSessionState, type PEMType, type PayloadOf, type SessionClaims, type SessionConfigJWE, type SessionConfigJWS, type SessionContext, type SessionData, type SessionDecryptOptions, type SessionDefinition, type SessionEncryptOptions, type SessionHooksJWE, type SessionHooksJWS, type SessionIssueOptions, type SessionJWE, type SessionJWS, type SessionManager, type SessionPlugin, type SessionPluginDefinition, type SessionSignOptions, type SessionUpdate, type SessionUpdateTrigger, type SessionVerifyOptions, type ToPublicJWKReturn, type UnwrapKeyOptions, type UnwrapKeyResult, type UnwrappingKeyFor, type WrapKeyOptions, type WrapKeyResult, type WrappingKeyFor, type WriteChunkedCookieOptions, deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint, toPublicJWK };

package/dist/adapters/elysia/index.mjs

@@ -1,120 +0,0 @@
-import { thumbprint } from "../../_chunks/algorithms.mjs";
-import { toPublicJWK } from "../../_chunks/export.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../_chunks/jwk.mjs";
-import { createJWECodec, createJWSCodec, defineSession, invalidConfigError } from "../../_chunks/codec-jws.mjs";
-import { Elysia } from "elysia";
-function sessionPlugin(options) {
-	const contextKey = options.contextKey ?? "session";
-	const seed = `${options.sessionName}:${contextKey}`;
-	return new Elysia({
-		name: options.name,
-		seed
-	}).resolve({ as: "scoped" }, async ({ cookie, request }) => {
-		const session = await options.create({
-			cookie,
-			request
-		});
-		return { [contextKey]: session };
-	}).macro({ [guardName(contextKey)]: { resolve(ctx) {
-		if (!hasSessionId(ctx[contextKey])) return ctx.status(401, "Unauthorized");
-		return {};
-	} } });
-}
-function guardName(contextKey) {
-	return `require${contextKey.charAt(0).toUpperCase()}${contextKey.slice(1)}`;
-}
-function hasSessionId(session) {
-	return typeof session === "object" && session !== null && "id" in session && Boolean(session.id);
-}
-const PREFIX$1 = "[unjwt/elysia]";
-function reactiveCookieJar(jar) {
-	return {
-		read: (name) => {
-			const value = jar[name]?.value;
-			return typeof value === "string" ? value : void 0;
-		},
-		write: (name, value, attrs) => reactiveCookie(jar, name).set({
-			...attrs,
-			value
-		})
-	};
-}
-function reactiveCookie(jar, name) {
-	const cookie = jar[name];
-	if (!cookie || typeof cookie.set !== "function") throw invalidConfigError(`${PREFIX$1} Session cookie jar has no reactive cookie at "${name}", pass Elysia's \`cookie\`.`);
-	return cookie;
-}
-const PREFIX = "[unjwt/elysia]";
-const SESSIONS = /* @__PURE__ */ new WeakMap();
-const elysiaSessionDriver = {
-	prefix: PREFIX,
-	state: (context) => requestSessions(context.request),
-	header: (context, name) => context.request.headers.get(name),
-	cookies: (context) => reactiveCookieJar(context.cookie)
-};
-function requestSessions(request) {
-	const existing = SESSIONS.get(request);
-	if (existing) return existing;
-	const created = Object.create(null);
-	SESSIONS.set(request, created);
-	return created;
-}
-const codec$1 = createJWSCodec({
-	prefix: PREFIX,
-	defaultName: "elysia-jws"
-});
-function defineJWSSession(config) {
-	const definition = define$1(config);
-	return {
-		...definition,
-		plugin: () => sessionPlugin({
-			name: "unjwt/elysia-jws",
-			sessionName: config.name || codec$1.defaultName,
-			contextKey: config.contextKey,
-			create: definition.use
-		})
-	};
-}
-async function createJWSSession(context, config) {
-	return define$1(config).use(context);
-}
-function jwsSession(config) {
-	return defineJWSSession(config).plugin();
-}
-function define$1(config) {
-	return defineSession(config, {
-		driver: elysiaSessionDriver,
-		hookArgs: (context) => ({ context }),
-		codec: codec$1
-	});
-}
-const codec = createJWECodec({
-	prefix: PREFIX,
-	defaultName: "elysia-jwe"
-});
-function defineJWESession(config) {
-	const definition = define(config);
-	return {
-		...definition,
-		plugin: () => sessionPlugin({
-			name: "unjwt/elysia-jwe",
-			sessionName: config.name || codec.defaultName,
-			contextKey: config.contextKey,
-			create: definition.use
-		})
-	};
-}
-async function createJWESession(context, config) {
-	return define(config).use(context);
-}
-function jweSession(config) {
-	return defineJWESession(config).plugin();
-}
-function define(config) {
-	return defineSession(config, {
-		driver: elysiaSessionDriver,
-		hookArgs: (context) => ({ context }),
-		codec
-	});
-}
-export { createJWESession, createJWSSession, defineJWESession, defineJWSSession, deriveJWKFromPassword, exportPEM, generateJWK, importPEM, jweSession, jwsSession, thumbprint, toPublicJWK };

package/dist/adapters/h3/index.d.mts

@@ -1,135 +0,0 @@
-import { JWESessionConfig, JWESessionHooks, JWSSessionConfig, JWSSessionHooks, OpenedSessionState, SessionClaims, SessionData, SessionDecryptOptions, SessionDefinition, SessionEncryptOptions, SessionIssueOptions, SessionManager, SessionRecord, SessionSignOptions, SessionState, SessionUpdate, SessionUpdateTrigger, SessionVerifyOptions } from "../../_chunks/codec-jwe.mjs";
-import { CompositeKey, ContentEncryptionAlgorithm, DeriveJWKOptions, DeriveJWKReturn, DeriveKeyOptions, DeriveKeyReturn, Duration, ECDHEphemeralKeyInput, ExpiresIn, GenerateJWKOptions, GenerateJWKReturn, GenerateKeyAlgorithm, GenerateKeyOptions, GenerateKeyReturn, GeneratedJWKMap, GeneratedKeyMap, ImportedKey, ImportedKeyMap, ImportedPEMJWK, JOSEConsumerOptions, JOSELimits, JOSEPayload, JOSEPayloadMode, JOSEPayloadTypeMap, JWEAsymmetricPrivateJWK, JWEAsymmetricPublicJWK, JWEDecryptJWK, JWEDecryptOptions, JWEDecryptResult, JWEEncryptJWK, JWEEncryptOptions, JWEFlattenedSerialization, JWEGeneralRecipient, JWEGeneralSerialization, JWEHeaderParameters, JWEKeyLookup, JWEKeyManagementHeaderParameters, JWELibraryHeaderName, JWEMultiDecryptKey, JWEMultiDecryptOptions, JWEMultiDecryptResult, JWEMultiEncryptOptions, JWEMultiRecipient, JWEProtectedHeader, JWK, JWKAlgorithm, JWKCacheAdapter, JWKLookupFunction, JWKLookupFunctionHeader, JWKMetadata, JWKPEMAlgorithm, JWKParameters, JWKSet, JWK_AES_Algorithm, JWK_AES_CBC_HMAC, JWK_AES_GCM, JWK_AES_GCM_KW, JWK_AES_KW, JWK_Asymmetric, JWK_Asymmetric_Algorithm, JWK_EC, JWK_ECDH_ES, JWK_ECDSA, JWK_EC_Private, JWK_EC_Public, JWK_HMAC, JWK_OKP, JWK_OKP_Private, JWK_OKP_Public, JWK_OKP_SIGN, JWK_PBES2, JWK_Pair, JWK_Private, JWK_Public, JWK_RSA, JWK_RSA_ENC, JWK_RSA_PSS, JWK_RSA_Private, JWK_RSA_Public, JWK_RSA_SIGN, JWK_Symmetric, JWK_Symmetric_Algorithm, JWK_oct, JWSAlgorithm, JWSAsymmetricPrivateJWK, JWSAsymmetricPublicJWK, JWSFlattenedSerialization, JWSGeneralSerialization, JWSGeneralSignature, JWSHashedAlgorithm, JWSHeaderParameters, JWSKeyLookup, JWSMultiSignOptions, JWSMultiSigner, JWSMultiVerifyAllOptions, JWSMultiVerifyOptions, JWSMultiVerifyOutcome, JWSMultiVerifyResult, JWSProtectedHeader, JWSSignJWK, JWSSignOptions, JWSVerifyJWK, JWSVerifyOptions, JWSVerifyResult, JWT, JWTClaimValidationOptions, JWTClaims, JWTConfirmation, JWTTimeClaimOptions, JoseHeaderParameters, KeyManagementAlgorithm, KeyWrapAlgorithmOf, KeyWrappingAlgorithm, MaxTokenAge, NotBeforeIn, PEMType, PayloadOf, ToPublicJWKReturn, UnwrapKeyOptions, UnwrapKeyResult, UnwrappingKeyFor, WrapKeyOptions, WrapKeyResult, WrappingKeyFor } from "../../_chunks/index.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM, toPublicJWK } from "../../_chunks/index2.mjs";
-import { thumbprint } from "../../_chunks/index3.mjs";
-import { HTTPEvent, setCookie } from "h3";
-type CookieSerializeOptions = NonNullable<Parameters<typeof setCookie>[3]>;
-/**
- * Session state for the current request, mirroring the claims of its JWE token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-interface SessionJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
-/**
- * JWE session hooks; `onRead`, `onExpire` and `onError` are mutually exclusive per token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-interface SessionHooksJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWESessionHooks<SessionJWE<T, MaxAge>, SessionManager<T, MaxAge>, {
-  event: TEvent;
-}, SessionConfigJWE<T, MaxAge, TEvent>> {}
-/**
- * Configuration for a JWE-backed (encrypted) session.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-interface SessionConfigJWE<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWESessionConfig<MaxAge, CookieSerializeOptions> {
-  /** Cookie and session-header name. Default `"h3-jwe"`; a `.<digits>` suffix throws `ERR_SESSION_CONFIG_INVALID`. */
-  name?: string;
-  hooks?: SessionHooksJWE<T, MaxAge, TEvent>;
-}
-/**
- * Defines a JWE (encrypted) session once; its `use`, `token`, `issue` and `open` serve every request.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-export declare function defineJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(config: SessionConfigJWE<T, MaxAge, TEvent>): SessionDefinition<T, MaxAge, TEvent>;
-/**
- * Create a JWE (encrypted) session manager for the request.
- * @deprecated Use `defineJWESession(config).use(event)`.
- */
-export declare function useJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<SessionManager<T, MaxAge>>;
-/**
- * Get (and lazily initialize) the session for the current request.
- * @deprecated Use `defineJWESession(config).use(event)`; the manager exposes the same state.
- */
-export declare function getJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<SessionJWE<T, MaxAge>>;
-/**
- * Read the raw session token: the session header when the request carries it (default `x-<name>-session`, optional `Bearer`), else the cookie.
- * @deprecated Use `defineJWESession(config).token(event)`.
- */
-export declare function getJWESessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): string | undefined;
-/**
- * Update the session data (if provided) and reissue the JWE; `options.maxAge` overrides this token's lifetime.
- * @deprecated Use `(await defineJWESession(config).use(event)).update(update, options)`.
- */
-export declare function updateJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>, update?: SessionUpdate<T>, options?: SessionIssueOptions): Promise<SessionJWE<T, MaxAge> & {
-  id: string;
-  token: string;
-}>;
-/**
- * Seal the session as a compact JWE without writing a cookie; fresh `jti` if no ID, no token source needed.
- * @deprecated Use `defineJWESession(config).issue(data)` to mint a token, or `(await defineJWESession(config).use(event)).token` for the current one.
- */
-export declare function sealJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<string>;
-/**
- * Decrypt a compact JWE into a session, checking `typ`, pinned `alg`/`enc`, `jti`/`iat` and `exp` (required with `maxAge`).
- * @deprecated Use `defineJWESession(config).open(sealed)`.
- */
-export declare function unsealJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>, sealed: string): Promise<Partial<SessionJWE<T, MaxAge>>>;
-/**
- * Drop the session cookie and leave an empty session for the rest of the request.
- * @deprecated Use `(await defineJWESession(config).use(event)).clear()`.
- */
-export declare function clearJWESession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWE<T, MaxAge, TEvent>): Promise<void>;
-/**
- * Session state for the current request, mirroring the claims of its JWS token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-interface SessionJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined> extends SessionState<T, MaxAge> {}
-/**
- * JWS session hooks; `onRead`, `onExpire` and `onError` are mutually exclusive per token.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-interface SessionHooksJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWSSessionHooks<SessionJWS<T, MaxAge>, SessionManager<T, MaxAge>, {
-  event: TEvent;
-}, SessionConfigJWS<T, MaxAge, TEvent>> {}
-/**
- * Configuration for a JWS-backed (signed, not encrypted) session.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-interface SessionConfigJWS<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent> extends JWSSessionConfig<MaxAge, CookieSerializeOptions> {
-  /** Cookie and session-header name. Default `"h3-jws"`; a `.<digits>` suffix throws `ERR_SESSION_CONFIG_INVALID`. */
-  name?: string;
-  hooks?: SessionHooksJWS<T, MaxAge, TEvent>;
-}
-/**
- * Defines a JWS (signed, not encrypted) session once, its data readable by clients; `use`, `token`, `issue` and `open` serve every request.
- * @deprecated `unjwt/adapters/h3` (and `h3v2`) is removed in 0.9.0. `unjwt/session` takes the h3 v2 event as it is and mirrors cookie writes into `res.errHeaders` as this adapter does.
- */
-export declare function defineJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(config: SessionConfigJWS<T, MaxAge, TEvent>): SessionDefinition<T, MaxAge, TEvent>;
-/**
- * Create a JWS (signed, not encrypted) session manager for the request.
- * @deprecated Use `defineJWSSession(config).use(event)`.
- */
-export declare function useJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<SessionManager<T, MaxAge>>;
-/**
- * Get (and lazily initialize) the session for the current request.
- * @deprecated Use `defineJWSSession(config).use(event)`; the manager exposes the same state.
- */
-export declare function getJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<SessionJWS<T, MaxAge>>;
-/**
- * Read the raw session token: the session header when the request carries it (default `x-<name>-session`, optional `Bearer`), else the cookie.
- * @deprecated Use `defineJWSSession(config).token(event)`.
- */
-export declare function getJWSSessionToken<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): string | undefined;
-/**
- * Update the session data (if provided) and reissue the JWS; `options.maxAge` overrides this token's lifetime.
- * @deprecated Use `(await defineJWSSession(config).use(event)).update(update, options)`.
- */
-export declare function updateJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>, update?: SessionUpdate<T>, options?: SessionIssueOptions): Promise<SessionJWS<T, MaxAge> & {
-  id: string;
-  token: string;
-}>;
-/**
- * Sign the session as a compact JWS without writing a cookie; fresh `jti` if no ID, no token source needed.
- * @deprecated Use `defineJWSSession(config).issue(data)` to mint a token, or `(await defineJWSSession(config).use(event)).token` for the current one.
- */
-export declare function signJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<string>;
-/**
- * Verify a compact JWS into a session, checking `typ`, pinned `alg`, `jti`/`iat` and `exp` (required with `maxAge`).
- * @deprecated Use `defineJWSSession(config).open(token)`.
- */
-export declare function verifyJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>, token: string): Promise<Partial<SessionJWS<T, MaxAge>>>;
-/**
- * Drop the session cookie and leave an empty session for the rest of the request.
- * @deprecated Use `(await defineJWSSession(config).use(event)).clear()`.
- */
-export declare function clearJWSSession<T extends SessionRecord = SessionClaims, MaxAge extends ExpiresIn | undefined = ExpiresIn | undefined, TEvent extends HTTPEvent = HTTPEvent>(event: TEvent, config: SessionConfigJWS<T, MaxAge, TEvent>): Promise<void>;
-export { type CompositeKey, type ContentEncryptionAlgorithm, type DeriveJWKOptions, type DeriveJWKReturn, type DeriveKeyOptions, type DeriveKeyReturn, type Duration, type ECDHEphemeralKeyInput, type ExpiresIn, type GenerateJWKOptions, type GenerateJWKReturn, type GenerateKeyAlgorithm, type GenerateKeyOptions, type GenerateKeyReturn, type GeneratedJWKMap, type GeneratedKeyMap, type ImportedKey, type ImportedKeyMap, type ImportedPEMJWK, type JOSEConsumerOptions, type JOSELimits, type JOSEPayload, type JOSEPayloadMode, type JOSEPayloadTypeMap, type JWEAsymmetricPrivateJWK, type JWEAsymmetricPublicJWK, type JWEDecryptJWK, type JWEDecryptOptions, type JWEDecryptResult, type JWEEncryptJWK, type JWEEncryptOptions, type JWEFlattenedSerialization, type JWEGeneralRecipient, type JWEGeneralSerialization, type JWEHeaderParameters, type JWEKeyLookup, type JWEKeyManagementHeaderParameters, type JWELibraryHeaderName, type JWEMultiDecryptKey, type JWEMultiDecryptOptions, type JWEMultiDecryptResult, type JWEMultiEncryptOptions, type JWEMultiRecipient, type JWEProtectedHeader, type JWK, type JWKAlgorithm, type JWKCacheAdapter, type JWKLookupFunction, type JWKLookupFunctionHeader, type JWKMetadata, type JWKPEMAlgorithm, type JWKParameters, type JWKSet, type JWK_AES_Algorithm, type JWK_AES_CBC_HMAC, type JWK_AES_GCM, type JWK_AES_GCM_KW, type JWK_AES_KW, type JWK_Asymmetric, type JWK_Asymmetric_Algorithm, type JWK_EC, type JWK_ECDH_ES, type JWK_ECDSA, type JWK_EC_Private, type JWK_EC_Public, type JWK_HMAC, type JWK_OKP, type JWK_OKP_Private, type JWK_OKP_Public, type JWK_OKP_SIGN, type JWK_PBES2, type JWK_Pair, type JWK_Private, type JWK_Public, type JWK_RSA, type JWK_RSA_ENC, type JWK_RSA_PSS, type JWK_RSA_Private, type JWK_RSA_Public, type JWK_RSA_SIGN, type JWK_Symmetric, type JWK_Symmetric_Algorithm, type JWK_oct, type JWSAlgorithm, type JWSAsymmetricPrivateJWK, type JWSAsymmetricPublicJWK, type JWSFlattenedSerialization, type JWSGeneralSerialization, type JWSGeneralSignature, type JWSHashedAlgorithm, type JWSHeaderParameters, type JWSKeyLookup, type JWSMultiSignOptions, type JWSMultiSigner, type JWSMultiVerifyAllOptions, type JWSMultiVerifyOptions, type JWSMultiVerifyOutcome, type JWSMultiVerifyResult, type JWSProtectedHeader, type JWSSignJWK, type JWSSignOptions, type JWSVerifyJWK, type JWSVerifyOptions, type JWSVerifyResult, type JWT, type JWTClaimValidationOptions, type JWTClaims, type JWTConfirmation, type JWTTimeClaimOptions, type JoseHeaderParameters, type KeyManagementAlgorithm, type KeyWrapAlgorithmOf, type KeyWrappingAlgorithm, type MaxTokenAge, type NotBeforeIn, type OpenedSessionState, type PEMType, type PayloadOf, type SessionClaims, type SessionConfigJWE, type SessionConfigJWS, type SessionData, type SessionDecryptOptions, type SessionDefinition, type SessionEncryptOptions, type SessionHooksJWE, type SessionHooksJWS, type SessionIssueOptions, type SessionJWE, type SessionJWS, type SessionManager, type SessionSignOptions, type SessionUpdate, type SessionUpdateTrigger, type SessionVerifyOptions, type ToPublicJWKReturn, type UnwrapKeyOptions, type UnwrapKeyResult, type UnwrappingKeyFor, type WrapKeyOptions, type WrapKeyResult, type WrappingKeyFor, deriveJWKFromPassword, exportPEM, generateJWK, importPEM, thumbprint, toPublicJWK };

package/dist/adapters/h3/index.mjs

@@ -1,117 +0,0 @@
-import { thumbprint } from "../../_chunks/algorithms.mjs";
-import { toPublicJWK } from "../../_chunks/export.mjs";
-import { deriveJWKFromPassword, exportPEM, generateJWK, importPEM } from "../../_chunks/jwk.mjs";
-import { bindSession, createJWECodec, createJWSCodec, defineSession, dropSession, encodeSession, issueSession, loadSession, mirrorSetCookie, openSessionToken, sessionActions, setCookieValues } from "../../_chunks/codec-jws.mjs";
-import { getCookie, getEventContext, setCookie } from "h3";
-const PREFIX = "[unjwt/h3]";
-const h3SessionDriver = {
-	prefix: PREFIX,
-	state: (event) => getEventContext(event).sessions ||= Object.create(null),
-	header: (event, name) => event.req.headers.get(name),
-	cookies: (event) => hasResponse(event) ? responseCookieJar(event) : { read: (name) => getCookie(event, name) }
-};
-function responseCookieJar(event) {
-	return {
-		read: (name) => getCookie(event, name),
-		written: (name) => setCookieValues(event.res.headers.getSetCookie())[name],
-		write: (name, value, attrs) => {
-			setCookie(event, name, value, attrs);
-			mirrorSetCookie(name, {
-				from: event.res.headers,
-				to: event.res.errHeaders
-			});
-		}
-	};
-}
-function hasResponse(event) {
-	return "res" in event && Boolean(event.res);
-}
-const codec$1 = createJWECodec({
-	prefix: PREFIX,
-	defaultName: "h3-jwe"
-});
-const hookArgs$1 = (event) => ({ event });
-function defineJWESession(config) {
-	return defineSession(config, {
-		driver: h3SessionDriver,
-		hookArgs: hookArgs$1,
-		codec: codec$1
-	});
-}
-async function useJWESession(event, config) {
-	return defineJWESession(config).use(event);
-}
-async function getJWESession(event, config) {
-	return loadSession(bind$1(event, config));
-}
-function getJWESessionToken(event, config) {
-	return defineJWESession(config).token(event);
-}
-async function updateJWESession(event, config, update, options) {
-	return issueSession(bind$1(event, config), update, options);
-}
-async function sealJWESession(event, config) {
-	return encodeSession(bind$1(event, config));
-}
-async function unsealJWESession(event, config, sealed) {
-	return openSessionToken(codec$1, config, {
-		token: sealed,
-		args: { event }
-	});
-}
-async function clearJWESession(event, config) {
-	return dropSession(bind$1(event, config));
-}
-function bind$1(event, config) {
-	return bindSession(event, config, {
-		driver: h3SessionDriver,
-		hookArgs: hookArgs$1,
-		codec: codec$1,
-		actions: sessionActions()
-	});
-}
-const codec = createJWSCodec({
-	prefix: PREFIX,
-	defaultName: "h3-jws"
-});
-const hookArgs = (event) => ({ event });
-function defineJWSSession(config) {
-	return defineSession(config, {
-		driver: h3SessionDriver,
-		hookArgs,
-		codec
-	});
-}
-async function useJWSSession(event, config) {
-	return defineJWSSession(config).use(event);
-}
-async function getJWSSession(event, config) {
-	return loadSession(bind(event, config));
-}
-function getJWSSessionToken(event, config) {
-	return defineJWSSession(config).token(event);
-}
-async function updateJWSSession(event, config, update, options) {
-	return issueSession(bind(event, config), update, options);
-}
-async function signJWSSession(event, config) {
-	return encodeSession(bind(event, config));
-}
-async function verifyJWSSession(event, config, token) {
-	return openSessionToken(codec, config, {
-		token,
-		args: { event }
-	});
-}
-async function clearJWSSession(event, config) {
-	return dropSession(bind(event, config));
-}
-function bind(event, config) {
-	return bindSession(event, config, {
-		driver: h3SessionDriver,
-		hookArgs,
-		codec,
-		actions: sessionActions()
-	});
-}
-export { clearJWESession, clearJWSSession, defineJWESession, defineJWSSession, deriveJWKFromPassword, exportPEM, generateJWK, getJWESession, getJWESessionToken, getJWSSession, getJWSSessionToken, importPEM, sealJWESession, signJWSSession, thumbprint, toPublicJWK, unsealJWESession, updateJWESession, updateJWSSession, useJWESession, useJWSSession, verifyJWSSession };