OAuth2\Extensions\OpenID\IdTokenManager::issueIdToken()

Complexity

Conditions	8
Paths	12

Size

Total Lines

68

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function issueIdToken(RegisteredClient $client,
                                 string $resourceOwnerIdentifier,
                                 array $additionalClaims = []): string
    {
        $metadata = $client->getMetadata();

        $idToken = array_merge([
            'iss' => $this->config->getIssuerIdentifier(),
            'sub' => $resourceOwnerIdentifier,
            'aud' => $client->getIdentifier(),
            'exp' => time() + $this->config->getIdTokenLifetime(),
            'iat' => time()
        ], $additionalClaims);

        $alg = 'RS256';
        if ($metadata instanceof ClientMetadataInterface) {
            $alg = $metadata->getIdTokenSignedResponseAlg() ?: 'RS256';
        }

        $keys=[];
        $jwks = $metadata->getJwks();

        if (!empty($jwks)) {
            $jwks = JWKFactory::createFromValues($jwks);
            if ($jwks instanceof JWKSet) {
                foreach ($jwks->all() as $key) {
                    $keys[] = $key;
                }
            } else {
                $keys[] = $jwks;
            }
        }

        $jwku = $metadata->getJwksUri();
        if (!is_null($jwku)) {
            foreach (JWKFactory::createFromJKU($jwku) as $key) {

The method createFromJKU() does not exist on Jose\Component\KeyManagement\JWKFactory. Did you maybe mean createFromKey()?

                $keys[] = $key;
            }
        }
        $jwkSet = new JWKSet($keys);

        $key = $jwkSet->selectKey('sig', $alg);

$alg of type string is incompatible with the type null|Jose\Component\Core\Algorithm expected by parameter $algorithm of Jose\Component\Core\JWKSet::selectKey().

//var_dump($idToken);die;

86% of this comment could be valid code. Did you maybe forget this after debugging?

        $jws = JWSFactory::createJWS($idToken);

The type OAuth2\Extensions\OpenID\JWSFactory was not found. Maybe you did not declare it correctly or list all dependencies?

        $jws = $jws->addSignatureInformation($key,
            [
                'alg' => $alg,
                'kid' => $key->get('kid')
            ]
        );
        $signer = Signer::createSigner([$alg]);

The type OAuth2\Extensions\OpenID\Signer was not found. Maybe you did not declare it correctly or list all dependencies?

        // Then we sign
        $signer->sign($jws);

//        var_dump($jws->toCompactJSON(0));die;

66% of this comment could be valid code. Did you maybe forget this after debugging?

//        echo '<pre>';
//        print_r($jws->getClaims());
//        print_r($jws->toCompactJSON(0));
//        echo '</pre>';die;

//        var_dump($jws->toJSON());

58% of this comment could be valid code. Did you maybe forget this after debugging?

//        die;
//        $idToken = JWT::encode($idToken, $key, $alg);

        return $jws->toCompactJSON(0);
    }
}