bdbb39a0f5
Add gateway-first pattern: when AGILITON_API_KEY is set, route all external API calls through the gateway with X-API-Key auth. Falls back to direct API access when gateway is unavailable. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
18 lines
685 B
JavaScript
18 lines
685 B
JavaScript
import { importJWK } from '../key/import.js';
|
|
import { isObject } from '../lib/is_object.js';
|
|
import { JWSInvalid } from '../util/errors.js';
|
|
export async function EmbeddedJWK(protectedHeader, token) {
|
|
const joseHeader = {
|
|
...protectedHeader,
|
|
...token?.header,
|
|
};
|
|
if (!isObject(joseHeader.jwk)) {
|
|
throw new JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a JSON object');
|
|
}
|
|
const key = await importJWK({ ...joseHeader.jwk, ext: true }, joseHeader.alg);
|
|
if (key instanceof Uint8Array || key.type !== 'public') {
|
|
throw new JWSInvalid('"jwk" (JSON Web Key) Header Parameter must be a public key');
|
|
}
|
|
return key;
|
|
}
|