1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495
/* * JSW §1: Cryptographic algorithms and identifiers for use with this specification * are described in the separate JSON Web Algorithms (JWA) specification: * https://www.rfc-editor.org/rfc/rfc7518 */export type Algorithm =  | "HS256"  | "HS384"  | "HS512"  | "PS256"  | "PS384"  | "PS512"  | "RS256"  | "RS384"  | "RS512"  // The algorithm ECDSA will be implemented by Deno in version 1.14.0  // | "ES256"  // | "ES384"  // | "ES512"  | "none";
export function verify(  alg: Algorithm,  key: CryptoKey | null,): boolean {  if (alg === "none") {    if (key) throw new Error(`The alg '${alg}' does not allow a key.`);    else return true;  } else {    if (!key) throw new Error(`The alg '${alg}' demands a key.`);    const algorithm = getAlgorithm(alg);    if (key.algorithm.name === algorithm.name) {      if (        // Deno's type CryptoKey is still buggy, therefore type assertions.        // They will fix CryptoKey with the next release!        (key.algorithm as { hash?: { name: string } }).hash?.name &&        (key.algorithm as { hash?: { name: string } }).hash?.name ===          algorithm.hash.name      ) {        return true;        // } else if (        // (key.algorithm as { namedCurve?: string }).namedCurve &&        // (key.algorithm as { namedCurve?: string }).namedCurve ===        // algorithm.namedCurve        // ) {        // return true;      }    }  }  return false;}
export function getAlgorithm(alg: Algorithm) {  switch (alg) {    case "HS256":      return { hash: { name: "SHA-256" }, name: "HMAC" };    case "HS384":      return { hash: { name: "SHA-384" }, name: "HMAC" };    case "HS512":      return { hash: { name: "SHA-512" }, name: "HMAC" };    case "PS256":      return {        hash: { name: "SHA-256" },        name: "RSA-PSS",        saltLength: 256 >> 3,      };    case "PS384":      return {        hash: { name: "SHA-384" },        name: "RSA-PSS",        saltLength: 384 >> 3,      };    case "PS512":      return {        hash: { name: "SHA-512" },        name: "RSA-PSS",        saltLength: 512 >> 3,      };    case "RS256":      return { hash: { name: "SHA-256" }, name: "RSASSA-PKCS1-v1_5" };    case "RS384":      return { hash: { name: "SHA-384" }, name: "RSASSA-PKCS1-v1_5" };    case "RS512":      return { hash: { name: "SHA-512" }, name: "RSASSA-PKCS1-v1_5" };    // case "ES256":    // return { hash: { name: "SHA-256" }, name: "ECDSA", namedCurve: "P-256" };    // case "ES384":    // return { hash: { name: "SHA-384" }, name: "ECDSA", namedCurve: "P-384" };    // case "ES512":    // return { hash: { name: "SHA-512" }, name: "ECDSA", namedCurve: "P-521" };    default:      throw new Error(`The jwt's alg '${alg}' is not supported.`);  }}