@ atcute/ oauth- keyset (帮助)

aT 协议 OAuth 的密钥集管理.

npm install @atcute/oauth-keyset

使用量

生成密钥

import { generateClientAssertionKey } from '@atcute/oauth-crypto';
import { Keyset } from '@atcute/oauth-keyset';

// generate a new ES256 key
const key = await generateClientAssertionKey('my-key-id');

// create a keyset with the key
const keyset = new Keyset([key]);

直接使用 JWK

import type { ClientAssertionPrivateJwk } from '@atcute/oauth-crypto';
import { Keyset } from '@atcute/oauth-keyset';

// JWKs can be used directly - no import step needed
const jwk: ClientAssertionPrivateJwk = {
    kty: 'EC',
    crv: 'P-256',
    kid: 'my-key',
    alg: 'ES256',
    // ... private key parameters (x, y, d)
};

const keyset = new Keyset([jwk]);

从 PKCS # 8 导入

import { importClientAssertionPkcs8 } from '@atcute/oauth-crypto';
import { Keyset } from '@atcute/oauth-keyset';

// import from PKCS#8 PEM - returns a JWK
const jwk = await importClientAssertionPkcs8(pemString, {
    kid: 'my-key',
    alg: 'ES256',
});

const keyset = new Keyset([jwk]);

使用密钥集

// get public JWKS (for serving at jwks_uri)
const jwks = keyset.publicJwks;

// find a key by criteria
const key = keyset.find({ kid: 'my-key' });
const key = keyset.find({ alg: 'ES256' });

// find a key for signing with server negotiation
const { key, alg } = keyset.findForSigning(['ES256', 'ES384']);