Class DPoPKey

constructor

• new DPoPKey(
      alg: string,
      privateKey: CryptoKey,
      publicJwk: Record<string, string>,
      thumbprint: string,
  ): DPoPKey

  Use DPoPKey.create() or DPoPKey.loadOrCreate() rather than this.

  Parameters

  • alg: string
  • privateKey: CryptoKey
  • publicJwk: Record<string, string>
  • thumbprint: string

  Returns DPoPKey

alg

publicJwk

thumbprint

Staticcreate

• create(
      opts?: { alg?: string; extractable?: boolean; keyPair?: CryptoKeyPair },
  ): Promise<DPoPKey>

  Builds a key from a CryptoKeyPair, generating a new pair if none is given. Generated keys are non-extractable unless extractable is set, which sessionStorage requires.

  Parameters

  • Optionalopts: { alg?: string; extractable?: boolean; keyPair?: CryptoKeyPair } = {}

  Returns Promise<DPoPKey>

StaticloadOrCreate

• loadOrCreate(
      store: {
          get(): Promise<{ alg: string; keyPair: CryptoKeyPair } | undefined>;
          set(value: any): Promise<void>;
      },
      opts?: { alg?: string },
  ): Promise<DPoPKey>

  Loads the key held in store, or creates one and stores it.

  Parameters

  • store: {
        get(): Promise<{ alg: string; keyPair: CryptoKeyPair } | undefined>;
        set(value: any): Promise<void>;
    }
  • Optionalopts: { alg?: string } = {}

  Returns Promise<DPoPKey>

proof

• proof(
      opts: {
          accessToken?: string;
          method: string;
          nonce?: string;
          url: string;
      },
  ): Promise<any>

  Creates a DPoP proof JWT (RFC 9449 §4.2).

  Parameters

  • opts: { accessToken?: string; method: string; nonce?: string; url: string }

  Returns Promise<any>