123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100
import { convertUint8ArrayToBase64url } from "./base64/base64url.ts";import { decodeString as convertHexToUint8Array } from "https://deno.land/std@v0.61.0/encoding/hex.ts";import { HmacSha256 } from "https://deno.land/std@v0.61.0/hash/sha256.ts";import { HmacSha512 } from "https://deno.land/std@v0.61.0/hash/sha512.ts";
type Algorithm = "none" | "HS256" | "HS512";type JsonPrimitive = string | number | boolean | null;type JsonObject = { [member: string]: JsonValue };type JsonArray = JsonValue[];type JsonValue = JsonPrimitive | JsonObject | JsonArray;
interface JwtInput {  key: string;  header: Jose;  payload?: Payload;}
interface Payload {  iss?: string;  sub?: string;  aud?: string[] | string;  exp?: number;  nbf?: number;  iat?: number;  jti?: string;  [key: string]: JsonValue | undefined;}
interface Jose {  alg: Algorithm;  crit?: string[];  [key: string]: JsonValue | undefined;}
// Helper function: setExpiration()// returns the number of seconds since January 1, 1970, 00:00:00 UTCfunction setExpiration(exp: number | Date): number {  return Math.round(    (exp instanceof Date ? exp.getTime() : Date.now() + exp * 1000) / 1000  );}
function convertHexToBase64url(input: string): string {  return convertUint8ArrayToBase64url(convertHexToUint8Array(input));}
function convertStringToBase64url(input: string): string {  return convertUint8ArrayToBase64url(new TextEncoder().encode(input));}
function makeSigningInput(header: Jose, payload?: Payload): string {  return `${convertStringToBase64url(    JSON.stringify(header)  )}.${convertStringToBase64url(JSON.stringify(payload || ""))}`;}
function encrypt(alg: Algorithm, key: string, msg: string): string | null {  function assertNever(alg: never): never {    throw new RangeError("no matching crypto algorithm in the header: " + alg);  }  switch (alg) {    case "none":      return null;    case "HS256":      return new HmacSha256(key).update(msg).toString();    case "HS512":      return new HmacSha512(key).update(msg).toString();    default:      assertNever(alg);  }}
function makeSignature(alg: Algorithm, key: string, input: string): string {  const encryptionInHex = encrypt(alg, key, input);  return encryptionInHex ? convertHexToBase64url(encryptionInHex) : "";}
async function makeJwt({ key, header, payload }: JwtInput): Promise<string> {  try {    const signingInput = makeSigningInput(header, payload);    return `${signingInput}.${makeSignature(header.alg, key, signingInput)}`;  } catch (err) {    err.message = `Failed to create JWT: ${err.message}`;    throw err;  }}
export {  makeJwt,  setExpiration,  makeSignature,  convertHexToBase64url,  convertStringToBase64url,  Algorithm,  Payload,  Jose,  JwtInput,  JsonValue,};