{"_id":"web-bot-auth","_rev":"14-6eebd5b33970f34f00b1d0956949ac33","name":"web-bot-auth","dist-tags":{"latest":"0.2.0"},"versions":{"0.0.1":{"name":"web-bot-auth","version":"0.0.1","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.1","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"427802a179adbac67a1d24cb97c21a133235469b","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.1.tgz","fileCount":3,"integrity":"sha512-lA2X6b68hN4hJBYV05jK227HCgnOuZQJyptiEZx6FI5WNzd+sj+/VL82gdiQ84LwOWNn1fquwXD9WDkWj5Rcvw==","signatures":[{"sig":"MEYCIQCYa7zbRq7zgVom4jon0YDzg9QBFIowT85/x1GG0wSBDQIhAJSidEzQ0qzOev9W/5lu1njrEQM15NJ+siad8Avt/xuJ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3154},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"496aaed2da9bef3db5b5a6de9581fc7784bbb066","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"23.3.0","dependencies":{"http-message-sig":"^0.0.1","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.1_1744645180963_0.8758072329412319","host":"s3://npm-registry-packages-npm-production"}},"0.0.2":{"name":"web-bot-auth","version":"0.0.2","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.2","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"1607388a2c9718b48ea8d0c5ce24ef562258a21c","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.2.tgz","fileCount":4,"integrity":"sha512-2GicQRTO+aqbD7raMGRPY3cFovYzc6ZSFXyQEeQE+8Okw34QoZDJFZd2UwhMPzTn/wGBbULv9lBSKo6G+ggPWg==","signatures":[{"sig":"MEUCIQCg6AkQh+8NRkgd6H7weD0qhCvEvzs0cA1Y7TD6fo2xvQIgONUqqlBkvb2/dM1DPfPiq55xKxYpV9OxmrvCeq4M6RY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":3279},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"36ff0898075cbf863ee5e3ffb2fb34725ce11bd6","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"23.3.0","dependencies":{"http-message-sig":"^0.0.1","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.2_1744699259930_0.05931724463801569","host":"s3://npm-registry-packages-npm-production"}},"0.0.3":{"name":"web-bot-auth","version":"0.0.3","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.3","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"31c26e79881f7fa7e3c99dbdfd8c0fec4f530e04","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.3.tgz","fileCount":4,"integrity":"sha512-3DSgb5PdTRBEk3HGJxdEzRZQLxhkYWlBr3RYLh+IBCKGd8nkhUF/KUsDvfYLY/8iKxUpG1HIyl4eLeVqfDYMVQ==","signatures":[{"sig":"MEUCICL4nR9og0yY6miHochmeJjYO9hGg4wVzppDFmAGVbRRAiEAh7uSU+6s3dzcXdiWcEHAgN/BaRVMHQLNd9vCtmnZI70=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":8902},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"4fb87ae64cdb791b2f9d180d9368fa8939d56250","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"23.3.0","dependencies":{"http-message-sig":"^0.0.2","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.3_1744707253144_0.41616162155120673","host":"s3://npm-registry-packages-npm-production"}},"0.0.4":{"name":"web-bot-auth","version":"0.0.4","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.4","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"cf5aeece9c312f92b00db52dc111e33f9859a23d","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.4.tgz","fileCount":4,"integrity":"sha512-BJYsdw/ZI0RxH9DXEJnH1eio2N+gqADuMT+EjWpjjn/nmAYSduBBOXKpDvMYFtddSJjR7uX0AO3NSfKlh5fzkw==","signatures":[{"sig":"MEQCIC4jsC2xNzUIVc0s++w+9usm1zFmMu66k++bJvJK6C8fAiAmpH7BilSg4+9dI3jG5Mpk0lQIZgRTmsasIKWNt+sdDg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":8902},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"4fb87ae64cdb791b2f9d180d9368fa8939d56250","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"23.3.0","dependencies":{"http-message-sig":"^0.0.3","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.4_1744707704429_0.7894332921151566","host":"s3://npm-registry-packages-npm-production"}},"0.0.5":{"name":"web-bot-auth","version":"0.0.5","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.5","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"92174c9926caa425b7d8535750717fbb9dfdbdb4","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.5.tgz","fileCount":4,"integrity":"sha512-HWV+CzawYn9BBdsM8rmAFojulaoT+dg0rJIBzZkAyaOrqSruke2KdEHYXyzQIshqMWnwqKXhlDXdaJ1c7rk2Gw==","signatures":[{"sig":"MEYCIQDa+vfRlFqLj9gW/PT7apTFk6QnHKbsGzAZBXtxK+1RVAIhAPZPAIH8LvH3cVDDNWQapoPjI2OF8gIN39Iw2lRb/T3p","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":8912},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"7e1fa8a3994392e76012cc9d7053cba0450dc3f7","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"23.3.0","dependencies":{"http-message-sig":"^0.0.3","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.5_1744709175774_0.2512374249090277","host":"s3://npm-registry-packages-npm-production"}},"0.0.6":{"name":"web-bot-auth","version":"0.0.6","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.6","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"55e605bc48deb1b5f2df8c3c0740588d4cd84832","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.6.tgz","fileCount":6,"integrity":"sha512-yB38WMqAmhkZqksdQHtXoour2wfIGae0pYnH+affFho9QuHk80meho5VKPdjTSTf5iDSZXVLyiT5VIPbWrGEXg==","signatures":[{"sig":"MEYCIQCC1lDh/ILZ1OgEpxMzUE1S5i6Iqnd7R3HcYppDiq4dYgIhANywsQqoVfx5jRrDnGd7kWAMv5Viw4Q82Z8mj0Gl8s5q","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":11843},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"87ea9a6a2a28861ef10da465adf41c7c1f2c9f3a","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.7.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"22.1.0","dependencies":{"http-message-sig":"^0.0.3","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.6_1744967134238_0.1350733893155982","host":"s3://npm-registry-packages-npm-production"}},"0.0.7":{"name":"web-bot-auth","version":"0.0.7","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.7","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"e090bea76ae8f3d2f1e03f5f2a66b30027f6ad06","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.7.tgz","fileCount":8,"integrity":"sha512-zQ68cduiHvTgeP7aOSPMY7fE7sL9zobuaH/ZvLWJGTDr+4TGSjUI6ja/nHCpiZgWC/FIO9D3XydXyVHrBKIfaQ==","signatures":[{"sig":"MEUCIQC1ZYAt4kpdOCqBEOXfiTb4llVZBhjQUzNNnG5jvxHZpAIgeYf6rbcnFwFnKybgIGyo4WqLfcodc3FhO5hZt+kqnnw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":20709},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"}},"gitHead":"a488f7694c8581b6ddc20ed838d493f1aa10aae6","scripts":{"test":"vitest","build":"tsup src/index.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"23.3.0","dependencies":{"http-message-sig":"^0.0.7","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.7_1746613356982_0.5962748655965804","host":"s3://npm-registry-packages-npm-production"}},"0.0.8":{"name":"web-bot-auth","version":"0.0.8","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.8","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"3dc906c3fa75bdcad1188f70b799fe59b8f0213b","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.8.tgz","fileCount":9,"integrity":"sha512-tU6R4iLmFAohObWZYpCCw6Kj7vcxnRHvphs95EcaAG/aydsGrbyXgvgjnuFBVwR1k9EGUHN3XH1qUo/rjnxIDw==","signatures":[{"sig":"MEYCIQCS7Vyyn9HKP7XvtGXcQkDimq/WBoacfVkZsFL/SaDh+AIhAPBU+qCPpCvmGAipVcpxRBlzXroJ+s7IqxC49dcEyQi0","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":19418},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"},"./crypto":{"types":"./dist/crypto.d.ts","import":"./dist/crypto.mjs","require":"./dist/crypto.js"}},"gitHead":"ee1919c52f5252edd95875c96d2036ac55bfa26a","scripts":{"test":"vitest","build":"tsup src/index.ts src/crypto.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.7.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"22.1.0","dependencies":{"http-message-sig":"^0.0.7","jsonwebkey-thumbprint":"^0.0.1"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.8_1747212560832_0.9610858010342596","host":"s3://npm-registry-packages-npm-production"}},"0.0.9":{"name":"web-bot-auth","version":"0.0.9","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.0.9","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"82c263e613f184d44be01f52d2e062643b291ee5","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.0.9.tgz","fileCount":11,"integrity":"sha512-QyRiYLvlmQkpsGijeWnJr/Sb6WwbeUgLsGcUuAOS6aP7ZBWcp5Q0QFrlKcf66MRhoIIa9AYUojSXSdNQJIlVEw==","signatures":[{"sig":"MEQCIAr/nHfmf0MXRqac6ez/BDZjoFyoQKTyd29gUNBVMgM4AiBBPTTf1KLV8HvGnkL78f1Mv77jsrNzFoN8k82lMqt71Q==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":30704},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"},"./crypto":{"types":"./dist/crypto.d.ts","import":"./dist/crypto.mjs","require":"./dist/crypto.js"}},"gitHead":"daa224e58cc7193019fb886be729f324d5c3bbfb","scripts":{"test":"vitest","build":"tsup src/index.ts src/crypto.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.8.2","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"22.8.0","dependencies":{"http-message-sig":"^0.0.9","jsonwebkey-thumbprint":"^0.0.9"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.0.9_1748464100529_0.4979026083312248","host":"s3://npm-registry-packages-npm-production"}},"0.1.0":{"name":"web-bot-auth","version":"0.1.0","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.1.0","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"345c39bda7d873b8141904c3637e8fb4f5384e02","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.1.0.tgz","fileCount":11,"integrity":"sha512-HJ5v1Xz6HTRoilJxLOQm4sYPsVXCXDa9Y1Bem4DbgEhGjJu2RMR+MIGt2bnwGoQfO3jMtddaRVdPaILZU8Mi9w==","signatures":[{"sig":"MEYCIQDfKy2IMXy4fHCaUfqcse/0TdDOz9bxgcKIgc/DzzlA7AIhAKV2VMYLt/ffgteyxat70RT3cFiMPYq5V/J8sR7AjSAY","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":30997},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"},"./crypto":{"types":"./dist/crypto.d.ts","import":"./dist/crypto.mjs","require":"./dist/crypto.js"}},"gitHead":"d72fdec0bc57b02c8754fedc70d475512711850a","scripts":{"test":"vitest","build":"tsup src/index.ts src/crypto.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"thibmeu","actor":{"name":"thibmeu","type":"user","email":"mail@thibaultmeunier.com"},"email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"10.7.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"22.1.0","dependencies":{"http-message-sig":"^0.1.0","jsonwebkey-thumbprint":"^0.1.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.1.0_1750149137916_0.16372065747408837","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"web-bot-auth","version":"0.1.1","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.1.1","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"deca1e99250ad808c6ee79ddb7307cce270e730c","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.1.1.tgz","fileCount":11,"integrity":"sha512-luRXoRAzeZXU7XnYIvQfxy13Xk5Pw4VdlGn2tXzL3qHBVj+KvJL50nsQzA/VgqaRTvDXWwTIdEKsnjlEYkMlkw==","signatures":[{"sig":"MEYCIQCC3IBay+kN8Gdosrp9MzcB5MM0QfVqswmxLxoMiTmJ1gIhAJc+DjnrPDKoElcJiTSIUjUELKuJDyrmCvokSvJoz3/O","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":31482},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"},"./crypto":{"types":"./dist/crypto.d.ts","import":"./dist/crypto.mjs","require":"./dist/crypto.js"}},"gitHead":"b03be0117ad0f875e0da6fa136b5272a999a3c24","scripts":{"test":"vitest","build":"tsup src/index.ts src/crypto.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"thibmeu","actor":{"name":"thibmeu","type":"user","email":"mail@thibaultmeunier.com"},"email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"11.4.2","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"24.3.0","dependencies":{"http-message-sig":"^0.1.0","jsonwebkey-thumbprint":"^0.1.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.1.1_1751643426049_0.20498418323105771","host":"s3://npm-registry-packages-npm-production"}},"0.1.2":{"name":"web-bot-auth","version":"0.1.2","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.1.2","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflareresearch/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflareresearch/web-bot-auth/issues"},"dist":{"shasum":"b191e378179afc3e4a6aba4ca78fc5e92a963636","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.1.2.tgz","fileCount":11,"integrity":"sha512-6hIt4smUw2MtWt23frAMta1+wwan4+pZVDbWLkfrSAjMAqltr4Ahu7wY9OXVmIheg/IE+BzGL7Di89j6OZcPbw==","signatures":[{"sig":"MEUCID6zxkh+zRV/s8/fV/3HZteOgdqGP8PrRkrQdLZwvXxcAiEAui1bObApDktbLa4tT9u7+XIV2pZ15AV0LDaqJgo3TJg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":31568},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"},"./crypto":{"types":"./dist/crypto.d.ts","import":"./dist/crypto.mjs","require":"./dist/crypto.js"}},"gitHead":"a93fcb31de838574f6b482938e2a3195c647fa44","scripts":{"test":"vitest","build":"tsup src/index.ts src/crypto.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"thibmeu","email":"mail@thibaultmeunier.com"},"repository":{"url":"git+https://github.com/cloudflareresearch/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"11.6.2","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"25.3.0","dependencies":{"http-message-sig":"^0.2.0","jsonwebkey-thumbprint":"^0.1.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.1.2_1768380353534_0.9689929090957909","host":"s3://npm-registry-packages-npm-production"}},"0.1.3":{"name":"web-bot-auth","version":"0.1.3","keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","_id":"web-bot-auth@0.1.3","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"homepage":"https://github.com/cloudflare/web-bot-auth#readme","bugs":{"url":"https://github.com/cloudflare/web-bot-auth/issues"},"dist":{"shasum":"5699137bc381e223fc4de580e7d333bd1951601c","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.1.3.tgz","fileCount":11,"integrity":"sha512-gDT9+5aMQbo4A0nNTPvIiN70a4F9iI+NLsmcE14CcTbiUsGgQOAnDZUDHCmDpvIqyJgZWkOcbv+jDvSmhKaIXQ==","signatures":[{"sig":"MEUCIQC7vEHuld5VLzVfJTsGcjVQJVKNDdCVJiOuqIuM6gF3qAIgbqbJkaFN3j1v8cDLrjE72ziS7tU28VuHQLIOqkMbvKo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/web-bot-auth@0.1.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":31708},"main":"./dist/index.js","types":"./dist/index.d.ts","module":"./dist/index.mjs","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.mjs","require":"./dist/index.js"},"./crypto":{"types":"./dist/crypto.d.ts","import":"./dist/crypto.mjs","require":"./dist/crypto.js"}},"gitHead":"2646df4e5a475fd2901ffc7bd605b65225c66f84","scripts":{"test":"vitest","build":"tsup src/index.ts src/crypto.ts --format cjs,esm --dts --clean","watch":"npm run build -- --watch src","prepublishOnly":"npm run build","generate-test-vectors":"node --experimental-transform-types scripts/test-vectors.ts test/test_data/web_bot_auth_architecture_v1.json"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:00d033d2-6227-47e6-8c4a-ff5ea4553b24"}},"repository":{"url":"git+https://github.com/cloudflare/web-bot-auth.git","type":"git","directory":"packages/web-bot-auth"},"_npmVersion":"11.9.0","description":"Web Bot Authentication using HTTP Message Signatures","directories":{},"_nodeVersion":"24.14.0","dependencies":{"http-message-sig":"^0.2.0","jsonwebkey-thumbprint":"^0.1.0"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/web-bot-auth_0.1.3_1773054231835_0.2830327257765344","host":"s3://npm-registry-packages-npm-production"}},"0.2.0":{"name":"web-bot-auth","version":"0.2.0","description":"Web Bot Authentication using HTTP Message Signatures","main":"./dist/index.cjs","module":"./dist/index.mjs","types":"./dist/index.d.mts","exports":{".":{"import":{"types":"./dist/index.d.mts","default":"./dist/index.mjs"},"require":{"types":"./dist/index.d.cts","default":"./dist/index.cjs"}},"./crypto":{"import":{"types":"./dist/crypto.d.mts","default":"./dist/crypto.mjs"},"require":{"types":"./dist/crypto.d.cts","default":"./dist/crypto.cjs"}}},"scripts":{"build":"tsdown src/index.ts src/crypto.ts --format esm,cjs --target es2021","generate-test-vectors":"npm run build -w http-message-sig -w jsonwebkey-thumbprint && npm run build && node scripts/test-vectors.ts test/test_data","prepublishOnly":"npm run build","test":"vitest","watch":"npm run build -- --watch src"},"repository":{"type":"git","url":"git+https://github.com/cloudflare/web-bot-auth.git","directory":"packages/web-bot-auth"},"keywords":["web-bot-auth","cryptography","typescript"],"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","bugs":{"url":"https://github.com/cloudflare/web-bot-auth/issues"},"homepage":"https://github.com/cloudflare/web-bot-auth#readme","dependencies":{"http-message-sig":"^0.3.0","jsonwebkey-thumbprint":"^0.1.0","structured-headers":"2.0.3"},"gitHead":"6a8ece9bd2a64d83fc7bf3d7f9fd7886900a7355","_id":"web-bot-auth@0.2.0","_nodeVersion":"24.19.0","_npmVersion":"11.17.0","dist":{"integrity":"sha512-3DJ72ZhWK4a3yCHCClF6q32g03X37DJlpyASYeBroGTRj/qFkHNcPwkESc3FLigjW6NOWF6MR+Hat9AfOqqtAQ==","shasum":"bc7a309233096a2d484061f4ece8869427b7a1a7","tarball":"https://registry.npmjs.org/web-bot-auth/-/web-bot-auth-0.2.0.tgz","fileCount":12,"unpackedSize":53655,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/web-bot-auth@0.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIEHqtXOMLfZCH8pF1cMicyoswDR6msZecan6fudkkuPUAiAipkq/Y7ii7Ova6wpyH5H9sdIQqEPywt1zGxsuHcetIA=="}]},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:00d033d2-6227-47e6-8c4a-ff5ea4553b24"}},"directories":{},"maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/web-bot-auth_0.2.0_1788185299644_0.2584373149951764"},"_hasShrinkwrap":false}},"time":{"created":"2025-04-14T15:39:40.962Z","modified":"2026-08-31T14:08:20.284Z","0.0.1":"2025-04-14T15:39:41.154Z","0.0.2":"2025-04-15T06:41:00.118Z","0.0.3":"2025-04-15T08:54:13.308Z","0.0.4":"2025-04-15T09:01:44.593Z","0.0.5":"2025-04-15T09:26:15.968Z","0.0.6":"2025-04-18T09:05:34.415Z","0.0.7":"2025-05-07T10:22:37.156Z","0.0.8":"2025-05-14T08:49:21.455Z","0.0.9":"2025-05-28T20:28:20.700Z","0.1.0":"2025-06-17T08:32:18.081Z","0.1.1":"2025-07-04T15:37:06.205Z","0.1.2":"2026-01-14T08:45:53.674Z","0.1.3":"2026-03-09T11:03:52.065Z","0.2.0":"2026-08-31T14:08:19.785Z"},"bugs":{"url":"https://github.com/cloudflare/web-bot-auth/issues"},"author":{"name":"Thibault Meunier"},"license":"Apache-2.0","homepage":"https://github.com/cloudflare/web-bot-auth#readme","keywords":["web-bot-auth","cryptography","typescript"],"repository":{"type":"git","url":"git+https://github.com/cloudflare/web-bot-auth.git","directory":"packages/web-bot-auth"},"description":"Web Bot Authentication using HTTP Message Signatures","maintainers":[{"name":"thibmeu","email":"mail@thibaultmeunier.com"}],"readme":"# web-bot-auth\n\n![License](https://img.shields.io/npm/l/web-bot-auth.svg)\n[![crates.io](https://img.shields.io/npm/v/web-bot-auth.svg)][npm]\n\n[npm]: https://www.npmjs.com/package/web-bot-auth\n\nTypeScript helpers for Web Bot Auth, as described in [draft-meunier-webbotauth-httpsig-protocol-00](https://datatracker.ietf.org/doc/draft-meunier-webbotauth-httpsig-protocol/00/).\n\n## Table of Contents\n\n- [Features](#features)\n- [Usage](#usage)\n- [Security Considerations](#security-considerations)\n- [License](#license)\n\n## Features\n\n- Web Bot Auth request signing and verification policy\n- Ed25519 and RSA-PSS/SHA-512 JWK signers and verifiers\n- `Signature-Agent`, registry, and Signature Agent Card parsers\n- TypeScript types\n\n## Usage\n\nThis section shows basic signing and verification.\nMore concrete examples are provided on [cloudflareresearch/web-bot-auth/examples](https://github.com/cloudflareresearch/web-bot-auth#examples).\n\n### Research server for debug purposes\n\nTo help debug `web-both-auth` HTTPS requests, Cloudflare Research provides a test endpoint on `https://http-message-signatures-example.research.cloudflare.com/debug`. You may also run this [research server's code on GitHub](https://github.com/cloudflare/web-bot-auth/tree/main/examples/verification-workers) on a local endpoint.\n\n### Signing\n\n```typescript\nimport { generateNonce, sign } from \"web-bot-auth\";\nimport { signerFromJWK } from \"web-bot-auth/crypto\";\n\nconst signatureAgent = 'sig1=\"https://signature-agent.test\";type=directory';\nconst request = new Request(\"https://example.com\", {\n  headers: { \"Signature-Agent\": signatureAgent },\n});\n\n// This is a testing-only private key/public key pair described in RFC 9421 Appendix B.1.4\n// Also available at https://github.com/cloudflareresearch/web-bot-auth/blob/main/examples/rfc9421-keys/ed25519.json\nconst RFC_9421_ED25519_TEST_KEY = {\n  kty: \"OKP\",\n  crv: \"Ed25519\",\n  alg: \"EdDSA\",\n  kid: \"test-key-ed25519\",\n  d: \"n4Ni-HpISpVObnQMW0wOhCKROaIKqKtW_2ZYb2p9KcU\",\n  x: \"JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs\",\n};\n\nconst now = new Date();\nconst fields = await sign(request, {\n  signer: await signerFromJWK(RFC_9421_ED25519_TEST_KEY),\n  created: now,\n  expires: new Date(now.getTime() + 300_000),\n  nonce: generateNonce(),\n});\n\n// Et voila! Here is our signed request.\nconst signedRequest = new Request(\"https://example.com\", {\n  headers: {\n    Signature: fields.signature,\n    \"Signature-Agent\": signatureAgent,\n    \"Signature-Input\": fields.signatureInput,\n  },\n});\n```\n\n### Verifying\n\n```typescript\nimport { verify } from \"web-bot-auth\";\nimport { verifierFromJWK } from \"web-bot-auth/crypto\";\n\n// available at https://github.com/cloudflareresearch/web-bot-auth/blob/main/examples/rfc9421-keys/ed25519.json\nconst RFC_9421_ED25519_TEST_KEY = {\n  kty: \"OKP\",\n  crv: \"Ed25519\",\n  alg: \"EdDSA\",\n  kid: \"test-key-ed25519\",\n  x: \"JrQLj5P_89iXES9-vFgrIy29clF9CC_oPPsw3c5D0bs\",\n};\n\n// Reusing the incoming request signed in the above section\nconst signedRequest = new Request(\"https://example.com\", {\n  headers: {\n    Signature: fields.signature,\n    \"Signature-Agent\": signatureAgent,\n    \"Signature-Input\": fields.signatureInput,\n  },\n});\n\nconst verifier = await verifierFromJWK(RFC_9421_ED25519_TEST_KEY);\nconst authenticated = await verify(signedRequest, {\n  // Resolve only from trusted local configuration. The candidate is untrusted.\n  resolver: (candidate) => {\n    if (candidate.keyid !== verifier.keyid) throw new Error(\"unknown key\");\n    return verifier;\n  },\n  validate: ({ nonce }) => {\n    // Atomically reject a nonce already present in your replay cache.\n  },\n});\n```\n\n## Security Considerations\n\nThis software has not been audited. Please use at your sole discretion.\n\n## License\n\nThis project is under the Apache-2.0 license.\n\n### Contribution\n\nUnless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you shall be Apache-2.0 licensed as above, without any additional terms or conditions.\n","readmeFilename":"README.md"}