Emarref\Jwt\Algorithm\RsaSsaPkcs

Complexity

Total Complexity

10

Size/Duplication

Total Lines	75
Duplicated Lines	26.67 %

Coupling/Cohesion

Components	1
Dependencies	0

Importance

Changes

0

6 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	4	1
A	ensureSupport()	0	12	3
A	getSslErrors()	0	10	2
A	sign()	10	10	2
A	verify()	10	10	2
	getAlgorithm()	0	1	?

<?php

namespace Emarref\Jwt\Algorithm;

abstract class RsaSsaPkcs implements AsymmetricInterface
{
    public function __construct()
    {
        $this->ensureSupport();
    }

    /**
     * @throws \RuntimeException
     */
    public function ensureSupport()
    {
        if (!function_exists('openssl_sign')) {
            throw new \RuntimeException('Openssl is required to use RSA encryption.');
        }

        $supportedAlgorithms = openssl_get_md_methods(true);

        if (!in_array($this->getAlgorithm(), $supportedAlgorithms)) {
            throw new \RuntimeException('Algorithm "%s" is not supported on this system.', $this->getAlgorithm());
        }
    }

    /**
     * @return array
     */
    private function getSslErrors()
    {
        $messages = [];

        while ($msg = openssl_error_string()) {
            $messages[] = $msg;
        }

        return $messages;
    }

    /**
     * @param string          $value
     * @param string|resource $privateKey
     * @return string
     */
    public function sign($value, $privateKey)
    {
        $result = openssl_sign($value, $signature, $privateKey, $this->getAlgorithm());

        if (false === $result) {
            throw new \RuntimeException('Failed to encrypt value. ' . implode("\n", $this->getSslErrors()));
        }

        return $signature;
    }

    /**
     * @param string          $value
     * @param string          $signature
     * @param string|resource $publicKey
     * @return boolean
     */
    public function verify($value, $signature, $publicKey)
    {
        $result = openssl_verify($value, $signature, $publicKey, $this->getAlgorithm());

        if ($result === -1) {
            throw new \RuntimeException('Failed to verify signature. ' . implode("\n", $this->getSslErrors()));
        }

        return (boolean)$result;
    }

    /**
     * @return integer
     */
    abstract protected function getAlgorithm();
}