|
1
|
|
|
<?php declare(strict_types=1); |
|
2
|
|
|
|
|
3
|
|
|
namespace CustomerGauge\Cognito; |
|
4
|
|
|
|
|
5
|
|
|
use Jose\Component\Checker\ClaimCheckerManager; |
|
6
|
|
|
use Jose\Component\Checker\ExpirationTimeChecker; |
|
7
|
|
|
use Jose\Component\Checker\IssuerChecker; |
|
8
|
|
|
use Jose\Component\Core\AlgorithmManager; |
|
9
|
|
|
use Jose\Component\Core\JWKSet; |
|
10
|
|
|
use Jose\Component\Signature\Algorithm\RS256; |
|
11
|
|
|
use Jose\Component\Signature\JWS; |
|
12
|
|
|
use Jose\Component\Signature\JWSLoader; |
|
13
|
|
|
use Jose\Component\Signature\JWSVerifier; |
|
14
|
|
|
use Jose\Component\Signature\Serializer\CompactSerializer; |
|
15
|
|
|
use Jose\Component\Signature\Serializer\JWSSerializerManager; |
|
16
|
|
|
|
|
17
|
|
|
final class TokenParser |
|
18
|
|
|
{ |
|
19
|
|
|
private $keyResolver; |
|
20
|
|
|
|
|
21
|
4 |
|
public function __construct(KeyResolver $keyResolver) |
|
22
|
|
|
{ |
|
23
|
4 |
|
$this->keyResolver = $keyResolver; |
|
24
|
|
|
} |
|
25
|
|
|
|
|
26
|
|
|
/** |
|
27
|
|
|
* This public method is useful for parsing the token from PHPUnit. It is not intended for production use. |
|
28
|
|
|
*/ |
|
29
|
4 |
|
public function unverifiedPayload(string $token): array |
|
30
|
|
|
{ |
|
31
|
4 |
|
$jws = $this->loadAndVerifyWithKeySet($token); |
|
32
|
|
|
|
|
33
|
3 |
|
return json_decode($jws->getPayload(), true); |
|
|
|
|
|
|
34
|
|
|
} |
|
35
|
|
|
|
|
36
|
4 |
|
public function parse(string $token) |
|
37
|
|
|
{ |
|
38
|
4 |
|
$payload = $this->unverifiedPayload($token); |
|
39
|
|
|
|
|
40
|
3 |
|
$claimCheckerManager = new ClaimCheckerManager([ |
|
41
|
3 |
|
new IssuerChecker([$this->keyResolver->issuer()->toString()]), |
|
42
|
3 |
|
new ExpirationTimeChecker, |
|
43
|
|
|
]); |
|
44
|
|
|
|
|
45
|
3 |
|
$claimCheckerManager->check($payload); |
|
46
|
|
|
|
|
47
|
3 |
|
return $payload; |
|
48
|
|
|
} |
|
49
|
|
|
|
|
50
|
4 |
|
private function loadAndVerifyWithKeySet(string $token): JWS |
|
51
|
|
|
{ |
|
52
|
4 |
|
$jwsVerifier = new JWSVerifier(new AlgorithmManager([new RS256()])); |
|
53
|
|
|
|
|
54
|
4 |
|
$serializerManager = new JWSSerializerManager([new CompactSerializer()]); |
|
55
|
|
|
|
|
56
|
4 |
|
$jwsLoader = new JWSLoader($serializerManager, $jwsVerifier, null); |
|
57
|
|
|
|
|
58
|
4 |
|
$jwkset = JWKSet::createFromJson($this->keyResolver->jwkset()); |
|
59
|
|
|
|
|
60
|
4 |
|
return $jwsLoader->loadAndVerifyWithKeySet($token, $jwkset, $signature); |
|
61
|
|
|
} |
|
62
|
|
|
} |
|
63
|
|
|
|
cgauge /
laravel-cognito-provider
Loading history...