Ahc\Jwt\ValidatesJWT

Complexity

Total Complexity

25

Size/Duplication

Total Lines	108
Duplicated Lines	0 %

Importance

Changes	4
Bugs	0	Features	1

6 Methods

Rating	Name	Duplication	Size	Complexity
A	validateConfig()	0	16	6
A	validateTimestamps()	0	16	6
A	validateKid()	0	10	3
A	validateHeader()	0	10	3
A	validateKey()	0	12	5
A	validateLastJson()	0	7	2

<?php

declare(strict_types=1);

/*
 * This file is part of the PHP-JWT package.
 *
 * (c) Jitendra Adhikari <jiten.adhikary@gmail.com>
 *     <https://github.com/adhocore>
 *
 * Licensed under MIT license.
 */

namespace Ahc\Jwt;

/**
 * JSON Web Token (JWT) implementation in PHP7.
 *
 * @author   Jitendra Adhikari <jiten.adhikary@gmail.com>
 * @license  MIT
 *
 * @link     https://github.com/adhocore/jwt
 */
trait ValidatesJWT
{
    /**
     * Throw up if input parameters invalid.
     *
     * @codeCoverageIgnore
     */
    protected function validateConfig($key, string $algo, int $maxAge, int $leeway)
    {
        if (empty($key)) {
            throw new JWTException('Signing key cannot be empty', static::ERROR_KEY_EMPTY);

The constant Ahc\Jwt\ValidatesJWT::ERROR_KEY_EMPTY was not found. Maybe you did not declare it correctly or list all dependencies?

        }

        if (!isset($this->algos[$algo])) {
            throw new JWTException('Unsupported algo ' . $algo, static::ERROR_ALGO_UNSUPPORTED);

The constant Ahc\Jwt\ValidatesJWT::ERROR_ALGO_UNSUPPORTED was not found. Maybe you did not declare it correctly or list all dependencies?

        }

        if ($maxAge < 1) {
            throw new JWTException('Invalid maxAge: Should be greater than 0', static::ERROR_INVALID_MAXAGE);

The constant Ahc\Jwt\ValidatesJWT::ERROR_INVALID_MAXAGE was not found. Maybe you did not declare it correctly or list all dependencies?

        }

        if ($leeway < 0 || $leeway > 120) {
            throw new JWTException('Invalid leeway: Should be between 0-120', static::ERROR_INVALID_LEEWAY);

The constant Ahc\Jwt\ValidatesJWT::ERROR_INVALID_LEEWAY was not found. Maybe you did not declare it correctly or list all dependencies?

        }
    }

    /**
     * Throw up if header invalid.
     */
    protected function validateHeader(array $header)
    {
        if (empty($header['alg'])) {
            throw new JWTException('Invalid token: Missing header algo', static::ERROR_ALGO_MISSING);

The constant Ahc\Jwt\ValidatesJWT::ERROR_ALGO_MISSING was not found. Maybe you did not declare it correctly or list all dependencies?

        }
        if (empty($this->algos[$header['alg']])) {
            throw new JWTException('Invalid token: Unsupported header algo', static::ERROR_ALGO_UNSUPPORTED);

The constant Ahc\Jwt\ValidatesJWT::ERROR_ALGO_UNSUPPORTED was not found. Maybe you did not declare it correctly or list all dependencies?

        }

        $this->validateKid($header);
    }

    /**
     * Throw up if kid exists and invalid.
     */
    protected function validateKid(array $header)
    {
        if (!isset($header['kid'])) {
            return;
        }
        if (empty($this->keys[$header['kid']])) {

The property keys does not exist on Ahc\Jwt\ValidatesJWT. Did you mean key?

            throw new JWTException('Invalid token: Unknown key ID', static::ERROR_KID_UNKNOWN);

The constant Ahc\Jwt\ValidatesJWT::ERROR_KID_UNKNOWN was not found. Maybe you did not declare it correctly or list all dependencies?

        }

        $this->key = $this->keys[$header['kid']];

The property key does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

    }

    /**
     * Throw up if timestamp claims like iat, exp, nbf are invalid.
     */
    protected function validateTimestamps(array $payload)
    {
        $timestamp = $this->timestamp ?: \time();
        $checks    = [
            ['exp', $this->leeway /*          */ , static::ERROR_TOKEN_EXPIRED, 'Expired'],

The constant Ahc\Jwt\ValidatesJWT::ERROR_TOKEN_EXPIRED was not found. Maybe you did not declare it correctly or list all dependencies?

            ['iat', $this->maxAge - $this->leeway, static::ERROR_TOKEN_EXPIRED, 'Expired'],
            ['nbf', $this->maxAge - $this->leeway, static::ERROR_TOKEN_NOT_NOW, 'Not now'],

The constant Ahc\Jwt\ValidatesJWT::ERROR_TOKEN_NOT_NOW was not found. Maybe you did not declare it correctly or list all dependencies?

        ];

        foreach ($checks as list($key, $offset, $code, $error)) {
            if (isset($payload[$key])) {
                $offset += $payload[$key];
                $fail    = $key === 'nbf' ? $timestamp <= $offset : $timestamp >= $offset;

                if ($fail) {
                    throw new JWTException('Invalid token: ' . $error, $code);
                }
            }
        }
    }

    /**
     * Throw up if key is not resource or file path to private key.
     */
    protected function validateKey()
    {
        if (\is_string($key = $this->key)) {
            if (\substr($key, 0, 7) !== 'file://') {
                $key = 'file://' . $key;
            }

            $this->key = \openssl_get_privatekey($key, $this->passphrase ?: '');

The property key does not exist. Although not strictly required by PHP, it is generally a best practice to declare properties explicitly.

        }

        if (!\is_resource($this->key)) {
            throw new JWTException('Invalid key: Should be resource of private key', static::ERROR_KEY_INVALID);

The constant Ahc\Jwt\ValidatesJWT::ERROR_KEY_INVALID was not found. Maybe you did not declare it correctly or list all dependencies?

        }
    }

    /**
     * Throw up if last json_encode/decode was a failure.
     */
    protected function validateLastJson()
    {
        if (\JSON_ERROR_NONE === \json_last_error()) {
            return;
        }

        throw new JWTException('JSON failed: ' . \json_last_error_msg(), static::ERROR_JSON_FAILED);

The constant Ahc\Jwt\ValidatesJWT::ERROR_JSON_FAILED was not found. Maybe you did not declare it correctly or list all dependencies?

    }
}