Release 3.0.2. Remember to include the damn dist files.

dist/jwtauth/AuthorizationBadge.d.ts

@@ -1,15 +1,29 @@
 import { JwtPayload } from "./JwtPayload";
+import { RolesConfig } from "../secureConfig/RolesConfig";
+/**
+ * Expanded representation of the JWT payload.
+ */
 export declare class AuthorizationBadge {
     giftbitUserId: string;
     merchantId: string;
     cardId: string;
+    programId: string;
     recipientId: string;
     templateId: string;
+    teamMemberId: string;
+    serviceId: string;
     audience: string;
     issuer: string;
     issuedAtTime: Date;
     expirationTime: Date;
     uniqueIdentifier: string;
+    roles: string[];
     scopes: string[];
-    constructor(jwtPayload?: JwtPayload);
+    effectiveScopes: string[];
+    constructor(jwtPayload?: JwtPayload, rolesConfig?: RolesConfig);
+    private getEffectiveScopes(rolesConfig);
+    private getParentScope(scope);
+    isBadgeAuthorized(scope: string): boolean;
+    requireScopes(...scopes: string[]): void;
+    requireIds(...ids: ("giftbitUserId" | "merchantId" | "cardId" | "programId" | "recipientId" | "templateId" | "teamMemberId" | "serviceId")[]): void;
 }

dist/jwtauth/AuthorizationHeader.d.ts

@@ -1,4 +1,7 @@
 import { JwtHeader } from "./JwtHeader";
+/**
+ * Expanded representation of the JWT header.
+ */
 export declare class AuthorizationHeader {
     version: number;
     validAfterVersion: number;

dist/jwtauth/JwtAuthorizationRoute.d.ts

@@ -1,14 +1,14 @@
 import * as cassava from "cassava";
-import * as jwt from "jsonwebtoken";
-import { AuthenticationBadgeKey } from "../secureConfig/AuthenticationBadgeKey";
+import { AuthenticationConfig } from "../secureConfig/AuthenticationConfig";
+import { RolesConfig } from "../secureConfig/RolesConfig";
 export declare class JwtAuthorizationRoute implements cassava.routes.Route {
-    private readonly authBadgePromise;
-    private readonly jwtOptions;
+    private readonly authConfigPromise;
+    private readonly rolesConfigPromise;
     /**
      * Log errors to console.
      */
     logErrors: boolean;
-    constructor(authBadgePromise: Promise<AuthenticationBadgeKey>, jwtOptions?: jwt.VerifyOptions);
+    constructor(authConfigPromise: Promise<AuthenticationConfig>, rolesConfigPromise?: Promise<RolesConfig>);
     handle(evt: cassava.RouterEvent): Promise<cassava.RouterResponse>;
     postProcess(evt: cassava.RouterEvent, resp: cassava.RouterResponse): Promise<cassava.RouterResponse>;
     matches(evt: cassava.RouterEvent): boolean;