KleijnWeb\JwtBundle\Authenticator\JwtToken

Complexity

Total Complexity

12

Size/Duplication

Total Lines	133
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes	5
Bugs	1	Features	1

8 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	8	2
A	setTokenFromString()	0	18	2
A	setTokenFromParams()	0	21	1
A	getKeyId()	0	4	2
A	validateSignature()	0	6	2
A	getClaims()	0	4	1
A	getHeader()	0	4	1
A	getTokenString()	0	4	1

<?php
/*
 * This file is part of the KleijnWeb\JwtBundle package.
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace KleijnWeb\JwtBundle\Authenticator;

use KleijnWeb\JwtBundle\Authenticator\SignatureValidator\SignatureValidator;

/**
 * @author John Kleijn <john@kleijnweb.nl>
 */
class JwtToken
{
    /**
     * @var array
     */
    private $claims = [];

    /**
     * @var array
     */
    private $header = [];

    /**
     * @var int
     */
    private $payload;

    /**
     * @var string
     */
    private $signature;

    /**
     * @var string
     */
    private $tokenString;

    /**
     * @param $tokenData
     */
    public function __construct($tokenData)
    {
        if (is_array($tokenData)) {
            $this->setTokenFromParams($tokenData['header'], $tokenData['claims'], $tokenData['secret']);
        } else {
            $this->setTokenFromString($tokenData);
        }
    }

    /**
     * @param string $tokenString
     */
    public function setTokenFromString($tokenString)
    {
        $this->tokenString = $tokenString;
        $segments = explode('.', $tokenString);

        if (count($segments) !== 3) {
            throw new \InvalidArgumentException("Not a JWT token string");
        }

        list($headerBase64, $claimsBase64, $signatureBase64) = $segments;

        $this->payload = "{$headerBase64}.{$claimsBase64}";

        $decoder = new Decoder();
        $this->header = $decoder->decode($headerBase64);
        $this->claims = $decoder->decode($claimsBase64);
        $this->signature = $decoder->base64Decode($signatureBase64);
    }

    /**
     * @param array $header
     * @param array $claims
     * @param       $secret
     */
    public function setTokenFromParams($header, $claims, $secret)
    {
        $this->header = $header;
        $this->claims = $claims;

        $encoder = new Encoder();
        $headerBase64 = $encoder->encode($header);
        $claimsBase64 = $encoder->encode($claims);

        $this->payload = "{$headerBase64}.{$claimsBase64}";

        $signatureBase64 = $this->signature = $encoder->base64Encode(hash_hmac(
            'sha256',
            $this->payload,
            $secret,
            true
        ));

        $segments = compact('headerBase64', 'claimsBase64', 'signatureBase64');
        $this->tokenString = implode('.', $segments);
    }

    /**
     * @return string|null
     */
    public function getKeyId()
    {
        return isset($this->header['kid']) ? $this->header['kid'] : null;
    }

    /**
     * @param string             $secret
     * @param SignatureValidator $validator
     *
     * @throws \InvalidArgumentException
     */
    public function validateSignature($secret, SignatureValidator $validator)
    {
        if (!$validator->isValid($this->payload, $secret, $this->signature)) {
            throw new \InvalidArgumentException("Invalid signature");
        }
    }

    /**
     * @return array
     */
    public function getClaims()
    {
        return $this->claims;
    }

    /**
     * @return array
     */
    public function getHeader()
    {
        return $this->header;
    }

    /**
     * @return string
     */
    public function getTokenString()
    {
        return $this->tokenString;
    }
}