Emarref\Jwt\Verification\EncryptionVerifier

Complexity

Total Complexity

5

Size/Duplication

Total Lines	54
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	6

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	6	1
A	verify()	0	21	4

<?php

namespace Emarref\Jwt\Verification;

use Emarref\Jwt\Encoding;
use Emarref\Jwt\Encryption;
use Emarref\Jwt\Exception\InvalidSignatureException;
use Emarref\Jwt\HeaderParameter;
use Emarref\Jwt\Signature;
use Emarref\Jwt\Token;

class EncryptionVerifier implements VerifierInterface
{
    /**
     * @var Encryption\EncryptionInterface
     */
    private $encryption;

    /**
     * @var Encoding\EncoderInterface
     */
    private $encoder;

    /**
     * @var Signature\Jws
     */
    protected $signer;

    /**
     * @param Encryption\EncryptionInterface $encryption
     * @param Encoding\EncoderInterface    $encoder
     */
    public function __construct(Encryption\EncryptionInterface $encryption, Encoding\EncoderInterface $encoder)
    {
        $this->encryption = $encryption;
        $this->encoder    = $encoder;
        $this->signer     = new Signature\Jws($this->encryption, $this->encoder);
    }

    /**
     * @param Token $token
     * @throws InvalidSignatureException
     */
    public function verify(Token $token)
    {
        /** @var HeaderParameter\Algorithm $algorithmParameter */
        $algorithmParameter = $token->getHeader()->findParameterByName(HeaderParameter\Algorithm::NAME);

        if (null === $algorithmParameter) {
            throw new \RuntimeException('Algorithm parameter not found in token header.');
        }

        if ($algorithmParameter->getValue() !== $this->encryption->getAlgorithmName()) {
            throw new \RuntimeException(sprintf(
                'Cannot use "%s" algorithm to decrypt token encrypted with algorithm "%s".',
                $this->encryption->getAlgorithmName(),
                $algorithmParameter->getValue()
            ));
        }

        if (!$this->encryption->verify($this->signer->getUnsignedValue($token), $token->getSignature())) {
            throw new InvalidSignatureException;
        }
    }
}