The start of something beautiful

2024-09-11 22:48:07 -06:00
parent 45acea47f3
commit f5997ee5ec
5614 changed files with 630696 additions and 0 deletions
@@ -0,0 +1,30 @@
+<?php
+
+namespace Lexik\Bundle\JWTAuthenticationBundle\Signature;
+
+/**
+ * Object representation of a newly created JSON Web Signature.
+ *
+ * @author Robin Chalas <robin.chalas@gmail.com>
+ */
+final class CreatedJWS
+{
+    private string $token;
+    private bool $signed;
+
+    public function __construct(string $token, bool $isSigned)
+    {
+        $this->token = $token;
+        $this->signed = $isSigned;
+    }
+
+    public function isSigned(): bool
+    {
+        return $this->signed;
+    }
+
+    public function getToken(): string
+    {
+        return $this->token;
+    }
+}
@@ -0,0 +1,91 @@
+<?php
+
+namespace Lexik\Bundle\JWTAuthenticationBundle\Signature;
+
+/**
+ * Object representation of a JSON Web Signature loaded from an
+ * existing JSON Web Token.
+ *
+ * @author Robin Chalas <robin.chalas@gmail.com>
+ */
+final class LoadedJWS
+{
+    public const VERIFIED = 'verified';
+    public const EXPIRED = 'expired';
+    public const INVALID = 'invalid';
+
+    private array $header;
+    private array $payload;
+    private ?string $state = null;
+    private int $clockSkew;
+    private bool $shouldCheckExpiration;
+
+    public function __construct(array $payload, bool $isVerified, bool $shouldCheckExpiration = true, array $header = [], int $clockSkew = 0)
+    {
+        $this->payload = $payload;
+        $this->header = $header;
+        $this->shouldCheckExpiration = $shouldCheckExpiration;
+        $this->clockSkew = $clockSkew;
+
+        if (true === $isVerified) {
+            $this->state = self::VERIFIED;
+        }
+
+        $this->checkIssuedAt();
+        $this->checkExpiration();
+    }
+
+    public function getHeader(): array
+    {
+        return $this->header;
+    }
+
+    public function getPayload(): array
+    {
+        return $this->payload;
+    }
+
+    public function isVerified(): bool
+    {
+        return self::VERIFIED === $this->state;
+    }
+
+    public function isExpired(): bool
+    {
+        $this->checkExpiration();
+
+        return self::EXPIRED === $this->state;
+    }
+
+    public function isInvalid(): bool
+    {
+        return self::INVALID === $this->state;
+    }
+
+    private function checkExpiration(): void
+    {
+        if (!$this->shouldCheckExpiration) {
+            return;
+        }
+
+        if (!isset($this->payload['exp']) || !is_numeric($this->payload['exp'])) {
+            $this->state = self::INVALID;
+
+            return;
+        }
+
+        if ($this->clockSkew <= time() - $this->payload['exp']) {
+            $this->state = self::EXPIRED;
+        }
+    }
+
+    /**
+     * Ensures that the iat claim is not in the future.
+     */
+    private function checkIssuedAt(): void
+    {
+        if (isset($this->payload['iat']) && (int) $this->payload['iat'] - $this->clockSkew > time()) {
+            $this->state = self::INVALID;
+        }
+    }
+}