OAuth2\Extensions\OpenID\IdTokenManager::issueIdToken()

Complexity

Conditions	8
Paths	12

Size

Total Lines	67
Code Lines	32

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function issueIdToken(ClientInterface $client,
                                 ResourceOwnerInterface $resourceOwner,
                                 array $additionalClaims = []): string
    {
        $metadata = $client->getMetadata();

        $idToken = array_merge([
            'iss' => $this->config->getIssuerIdentifier(),
            'sub' => $resourceOwner->getIdentifier(),
            'aud' => $client->getIdentifier(),
            'exp' => time() + $this->config->getIdTokenLifetime(),
            'iat' => time()
        ], $additionalClaims);

        $alg = 'RS256';
        if ($metadata instanceof ClientMetadataInterface) {
            $alg = $metadata->getIdTokenSignedResponseAlg() ?: 'RS256';
        }

        $jwkSet = new JWKSet();
        $jwks = $metadata->getJwks();

        if (!empty($jwks)) {
            $jwks = JWKFactory::createFromValues($jwks);
            if ($jwks instanceof JWKSet) {
                foreach ($jwks->getKeys() as $key) {
                    $jwkSet->addKey($key);
                }
            } else {
                $jwkSet->addKey($jwks);
            }
        }

        $jwku = $metadata->getJwksUri();
        if (!is_null($jwku)) {
            foreach (JWKFactory::createFromJKU($jwku) as $key) {
                $jwkSet->addKey($key);
            }
        }

        $key = $jwkSet->selectKey('sig', $alg);


//var_dump($idToken);die;

86% of this comment could be valid code. Did you maybe forget this after debugging?

        $jws = JWSFactory::createJWS($idToken);
        $jws = $jws->addSignatureInformation($key,
            [
                'alg' => $alg,
                'kid' => $key->get('kid')
            ]
        );
        $signer = Signer::createSigner([$alg]);

        // Then we sign
        $signer->sign($jws);

//        var_dump($jws->toCompactJSON(0));die;

66% of this comment could be valid code. Did you maybe forget this after debugging?

//        echo '<pre>';
//        print_r($jws->getClaims());
//        print_r($jws->toCompactJSON(0));
//        echo '</pre>';die;

//        var_dump($jws->toJSON());

58% of this comment could be valid code. Did you maybe forget this after debugging?

//        die;
//        $idToken = JWT::encode($idToken, $key, $alg);

        return $jws->toCompactJSON(0);
    }
}