sop / jwx

lib/JWX/JWS/Algorithm/HS256Algorithm.php

Indentation +16 added lines, -16 removed lines

@@ -13,21 +13,21 @@
  */
 class HS256Algorithm extends HMACAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _hashAlgo(): string
-    {
-        return "sha256";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _hashAlgo(): string
+	{
+		return "sha256";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_HS256;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_HS256;
+	}
 }

lib/JWX/JWS/Algorithm/OpenSSLSignatureAlgorithm.php

Indentation +81 added lines, -81 removed lines

@@ -12,90 +12,90 @@
  */
 abstract class OpenSSLSignatureAlgorithm extends SignatureAlgorithm
 {
-    /**
-     * Public key.
-     *
-     * @var \JWX\JWK\Asymmetric\PublicKeyJWK $_publicKey
-     */
-    protected $_publicKey;
+	/**
+	 * Public key.
+	 *
+	 * @var \JWX\JWK\Asymmetric\PublicKeyJWK $_publicKey
+	 */
+	protected $_publicKey;
     
-    /**
-     * Private key.
-     *
-     * @var \JWX\JWK\Asymmetric\PrivateKeyJWK|null $_privateKey
-     */
-    protected $_privateKey;
+	/**
+	 * Private key.
+	 *
+	 * @var \JWX\JWK\Asymmetric\PrivateKeyJWK|null $_privateKey
+	 */
+	protected $_privateKey;
     
-    /**
-     * Get the message digest method name supported by OpenSSL.
-     *
-     * @return string
-     */
-    abstract protected function _mdMethod(): string;
+	/**
+	 * Get the message digest method name supported by OpenSSL.
+	 *
+	 * @return string
+	 */
+	abstract protected function _mdMethod(): string;
     
-    /**
-     *
-     * @see \JWX\JWS\SignatureAlgorithm::computeSignature()
-     * @throws \LogicException If private key was not provided
-     * @throws \RuntimeException For generic errors
-     * @return string
-     */
-    public function computeSignature(string $data): string
-    {
-        /**
-         * NOTE: OpenSSL uses PKCS #1 v1.5 padding by default, so no explicit
-         * padding is required by sign and verify operations.
-         */
-        if (!isset($this->_privateKey)) {
-            throw new \LogicException("Private key not set.");
-        }
-        $key = openssl_pkey_get_private($this->_privateKey->toPEM()->string());
-        if (!$key) {
-            throw new \RuntimeException(
-                "openssl_pkey_get_private() failed: " .
-                     $this->_getLastOpenSSLError());
-        }
-        $result = @openssl_sign($data, $signature, $key, $this->_mdMethod());
-        if (!$result) {
-            throw new \RuntimeException(
-                "openssl_sign() failed: " . $this->_getLastOpenSSLError());
-        }
-        return $signature;
-    }
+	/**
+	 *
+	 * @see \JWX\JWS\SignatureAlgorithm::computeSignature()
+	 * @throws \LogicException If private key was not provided
+	 * @throws \RuntimeException For generic errors
+	 * @return string
+	 */
+	public function computeSignature(string $data): string
+	{
+		/**
+		 * NOTE: OpenSSL uses PKCS #1 v1.5 padding by default, so no explicit
+		 * padding is required by sign and verify operations.
+		 */
+		if (!isset($this->_privateKey)) {
+			throw new \LogicException("Private key not set.");
+		}
+		$key = openssl_pkey_get_private($this->_privateKey->toPEM()->string());
+		if (!$key) {
+			throw new \RuntimeException(
+				"openssl_pkey_get_private() failed: " .
+					 $this->_getLastOpenSSLError());
+		}
+		$result = @openssl_sign($data, $signature, $key, $this->_mdMethod());
+		if (!$result) {
+			throw new \RuntimeException(
+				"openssl_sign() failed: " . $this->_getLastOpenSSLError());
+		}
+		return $signature;
+	}
     
-    /**
-     *
-     * @see \JWX\JWS\SignatureAlgorithm::validateSignature()
-     * @throws \RuntimeException For generic errors
-     * @return bool
-     */
-    public function validateSignature(string $data, string $signature): bool
-    {
-        $key = openssl_pkey_get_public($this->_publicKey->toPEM()->string());
-        if (!$key) {
-            throw new \RuntimeException(
-                "openssl_pkey_get_public() failed: " .
-                     $this->_getLastOpenSSLError());
-        }
-        $result = @openssl_verify($data, $signature, $key, $this->_mdMethod());
-        if (false === $result || -1 == $result) {
-            throw new \RuntimeException(
-                "openssl_verify() failed: " . $this->_getLastOpenSSLError());
-        }
-        return $result == 1;
-    }
+	/**
+	 *
+	 * @see \JWX\JWS\SignatureAlgorithm::validateSignature()
+	 * @throws \RuntimeException For generic errors
+	 * @return bool
+	 */
+	public function validateSignature(string $data, string $signature): bool
+	{
+		$key = openssl_pkey_get_public($this->_publicKey->toPEM()->string());
+		if (!$key) {
+			throw new \RuntimeException(
+				"openssl_pkey_get_public() failed: " .
+					 $this->_getLastOpenSSLError());
+		}
+		$result = @openssl_verify($data, $signature, $key, $this->_mdMethod());
+		if (false === $result || -1 == $result) {
+			throw new \RuntimeException(
+				"openssl_verify() failed: " . $this->_getLastOpenSSLError());
+		}
+		return $result == 1;
+	}
     
-    /**
-     * Get the last OpenSSL error message.
-     *
-     * @return string|null
-     */
-    protected function _getLastOpenSSLError()
-    {
-        $msg = null;
-        while (false !== ($err = openssl_error_string())) {
-            $msg = $err;
-        }
-        return $msg;
-    }
+	/**
+	 * Get the last OpenSSL error message.
+	 *
+	 * @return string|null
+	 */
+	protected function _getLastOpenSSLError()
+	{
+		$msg = null;
+		while (false !== ($err = openssl_error_string())) {
+			$msg = $err;
+		}
+		return $msg;
+	}
 }

lib/JWX/JWS/Algorithm/HS384Algorithm.php

Indentation +16 added lines, -16 removed lines

@@ -13,21 +13,21 @@
  */
 class HS384Algorithm extends HMACAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _hashAlgo(): string
-    {
-        return "sha384";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _hashAlgo(): string
+	{
+		return "sha384";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_HS384;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_HS384;
+	}
 }

lib/JWX/JWS/Algorithm/NoneAlgorithm.php

Indentation +34 added lines, -34 removed lines

@@ -16,41 +16,41 @@
  */
 class NoneAlgorithm extends SignatureAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_NONE;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_NONE;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function computeSignature(string $data): string
-    {
-        return "";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function computeSignature(string $data): string
+	{
+		return "";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function validateSignature(string $data, string $signature): bool
-    {
-        return $signature === "";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function validateSignature(string $data, string $signature): bool
+	{
+		return $signature === "";
+	}
     
-    /**
-     *
-     * @see \JWX\JWS\SignatureAlgorithm::headerParameters()
-     * @return \JWX\JWT\Parameter\JWTParameter[]
-     */
-    public function headerParameters(): array
-    {
-        return array_merge(parent::headerParameters(),
-            array(AlgorithmParameter::fromAlgorithm($this)));
-    }
+	/**
+	 *
+	 * @see \JWX\JWS\SignatureAlgorithm::headerParameters()
+	 * @return \JWX\JWT\Parameter\JWTParameter[]
+	 */
+	public function headerParameters(): array
+	{
+		return array_merge(parent::headerParameters(),
+			array(AlgorithmParameter::fromAlgorithm($this)));
+	}
 }

lib/JWX/JWS/Algorithm/ECDSAAlgorithm.php

Indentation +125 added lines, -125 removed lines

@@ -20,138 +20,138 @@
  */
 abstract class ECDSAAlgorithm extends OpenSSLSignatureAlgorithm
 {
-    /**
-     * Mapping from algorithm name to class name.
-     *
-     * @internal
-     *
-     * @var array
-     */
-    const MAP_ALGO_TO_CLASS = array(
-        /* @formatter:off */
-        JWA::ALGO_ES256 => ES256Algorithm::class,
-        JWA::ALGO_ES384 => ES384Algorithm::class,
-        JWA::ALGO_ES512 => ES512Algorithm::class
-        /* @formatter:on */
-    );
+	/**
+	 * Mapping from algorithm name to class name.
+	 *
+	 * @internal
+	 *
+	 * @var array
+	 */
+	const MAP_ALGO_TO_CLASS = array(
+		/* @formatter:off */
+		JWA::ALGO_ES256 => ES256Algorithm::class,
+		JWA::ALGO_ES384 => ES384Algorithm::class,
+		JWA::ALGO_ES512 => ES512Algorithm::class
+		/* @formatter:on */
+	);
     
-    /**
-     * Signature size in bytes.
-     *
-     * @var int
-     */
-    private $_signatureSize;
+	/**
+	 * Signature size in bytes.
+	 *
+	 * @var int
+	 */
+	private $_signatureSize;
     
-    /**
-     * Get the name of the curve used by this algorithm.
-     *
-     * @return string
-     */
-    abstract protected function _curveName(): string;
+	/**
+	 * Get the name of the curve used by this algorithm.
+	 *
+	 * @return string
+	 */
+	abstract protected function _curveName(): string;
     
-    /**
-     * Constructor.
-     *
-     * @param ECPublicKeyJWK $pub_key
-     * @param ECPrivateKeyJWK $priv_key
-     */
-    protected function __construct(ECPublicKeyJWK $pub_key,
-        ECPrivateKeyJWK $priv_key = null)
-    {
-        $curve = $pub_key->curveParameter()->value();
-        if ($this->_curveName() != $curve) {
-            throw new \InvalidArgumentException(
-                "Key with " . $this->_curveName() .
-                     " curve expected, got $curve.");
-        }
-        $this->_publicKey = $pub_key;
-        $this->_privateKey = $priv_key;
-        $key_size = $pub_key->curveParameter()->keySizeBits();
-        $this->_signatureSize = intval(ceil($key_size / 8) * 2);
-    }
+	/**
+	 * Constructor.
+	 *
+	 * @param ECPublicKeyJWK $pub_key
+	 * @param ECPrivateKeyJWK $priv_key
+	 */
+	protected function __construct(ECPublicKeyJWK $pub_key,
+		ECPrivateKeyJWK $priv_key = null)
+	{
+		$curve = $pub_key->curveParameter()->value();
+		if ($this->_curveName() != $curve) {
+			throw new \InvalidArgumentException(
+				"Key with " . $this->_curveName() .
+					 " curve expected, got $curve.");
+		}
+		$this->_publicKey = $pub_key;
+		$this->_privateKey = $priv_key;
+		$key_size = $pub_key->curveParameter()->keySizeBits();
+		$this->_signatureSize = intval(ceil($key_size / 8) * 2);
+	}
     
-    /**
-     * Initialize from a public key.
-     *
-     * @param ECPublicKeyJWK $jwk
-     * @return self
-     */
-    public static function fromPublicKey(ECPublicKeyJWK $jwk): self
-    {
-        return new static($jwk);
-    }
+	/**
+	 * Initialize from a public key.
+	 *
+	 * @param ECPublicKeyJWK $jwk
+	 * @return self
+	 */
+	public static function fromPublicKey(ECPublicKeyJWK $jwk): self
+	{
+		return new static($jwk);
+	}
     
-    /**
-     * Initialize from a private key.
-     *
-     * @param ECPrivateKeyJWK $jwk
-     * @return self
-     */
-    public static function fromPrivateKey(ECPrivateKeyJWK $jwk): self
-    {
-        return new static($jwk->publicKey(), $jwk);
-    }
+	/**
+	 * Initialize from a private key.
+	 *
+	 * @param ECPrivateKeyJWK $jwk
+	 * @return self
+	 */
+	public static function fromPrivateKey(ECPrivateKeyJWK $jwk): self
+	{
+		return new static($jwk->publicKey(), $jwk);
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public static function fromJWK(JWK $jwk, Header $header): self
-    {
-        $alg = JWA::deriveAlgorithmName($header, $jwk);
-        if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
-            throw new \UnexpectedValueException("Unsupported algorithm '$alg'.");
-        }
-        $cls = self::MAP_ALGO_TO_CLASS[$alg];
-        if ($jwk->has(...ECPrivateKeyJWK::MANAGED_PARAMS)) {
-            return $cls::fromPrivateKey(ECPrivateKeyJWK::fromJWK($jwk));
-        }
-        return $cls::fromPublicKey(ECPublicKeyJWK::fromJWK($jwk));
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public static function fromJWK(JWK $jwk, Header $header): self
+	{
+		$alg = JWA::deriveAlgorithmName($header, $jwk);
+		if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
+			throw new \UnexpectedValueException("Unsupported algorithm '$alg'.");
+		}
+		$cls = self::MAP_ALGO_TO_CLASS[$alg];
+		if ($jwk->has(...ECPrivateKeyJWK::MANAGED_PARAMS)) {
+			return $cls::fromPrivateKey(ECPrivateKeyJWK::fromJWK($jwk));
+		}
+		return $cls::fromPublicKey(ECPublicKeyJWK::fromJWK($jwk));
+	}
     
-    /**
-     *
-     * @see \JWX\JWS\Algorithm\OpenSSLSignatureAlgorithm::computeSignature()
-     * @return string
-     */
-    public function computeSignature(string $data): string
-    {
-        // OpenSSL returns ECDSA signature as a DER encoded ECDSA-Sig-Value
-        $der = parent::computeSignature($data);
-        $sig = ECSignature::fromDER($der);
-        $mlen = intval(floor($this->_signatureSize / 2));
-        $signature = ECConversion::numberToOctets($sig->r(), $mlen) .
-             ECConversion::numberToOctets($sig->s(), $mlen);
-        return $signature;
-    }
+	/**
+	 *
+	 * @see \JWX\JWS\Algorithm\OpenSSLSignatureAlgorithm::computeSignature()
+	 * @return string
+	 */
+	public function computeSignature(string $data): string
+	{
+		// OpenSSL returns ECDSA signature as a DER encoded ECDSA-Sig-Value
+		$der = parent::computeSignature($data);
+		$sig = ECSignature::fromDER($der);
+		$mlen = intval(floor($this->_signatureSize / 2));
+		$signature = ECConversion::numberToOctets($sig->r(), $mlen) .
+			 ECConversion::numberToOctets($sig->s(), $mlen);
+		return $signature;
+	}
     
-    /**
-     *
-     * @see \JWX\JWS\Algorithm\OpenSSLSignatureAlgorithm::validateSignature()
-     * @return bool
-     */
-    public function validateSignature(string $data, string $signature): bool
-    {
-        if (strlen($signature) != $this->_signatureSize) {
-            throw new \UnexpectedValueException("Invalid signature length.");
-        }
-        list($r_octets, $s_octets) = str_split($signature,
-            intval(floor($this->_signatureSize / 2)));
-        // convert signature to DER sequence for OpenSSL
-        $r = ECConversion::octetsToNumber($r_octets);
-        $s = ECConversion::octetsToNumber($s_octets);
-        $sig = new ECSignature($r, $s);
-        return parent::validateSignature($data, $sig->toDER());
-    }
+	/**
+	 *
+	 * @see \JWX\JWS\Algorithm\OpenSSLSignatureAlgorithm::validateSignature()
+	 * @return bool
+	 */
+	public function validateSignature(string $data, string $signature): bool
+	{
+		if (strlen($signature) != $this->_signatureSize) {
+			throw new \UnexpectedValueException("Invalid signature length.");
+		}
+		list($r_octets, $s_octets) = str_split($signature,
+			intval(floor($this->_signatureSize / 2)));
+		// convert signature to DER sequence for OpenSSL
+		$r = ECConversion::octetsToNumber($r_octets);
+		$s = ECConversion::octetsToNumber($s_octets);
+		$sig = new ECSignature($r, $s);
+		return parent::validateSignature($data, $sig->toDER());
+	}
     
-    /**
-     *
-     * @see \JWX\JWS\SignatureAlgorithm::headerParameters()
-     * @return \JWX\JWT\Parameter\JWTParameter[]
-     */
-    public function headerParameters(): array
-    {
-        return array_merge(parent::headerParameters(),
-            array(AlgorithmParameter::fromAlgorithm($this)));
-    }
+	/**
+	 *
+	 * @see \JWX\JWS\SignatureAlgorithm::headerParameters()
+	 * @return \JWX\JWT\Parameter\JWTParameter[]
+	 */
+	public function headerParameters(): array
+	{
+		return array_merge(parent::headerParameters(),
+			array(AlgorithmParameter::fromAlgorithm($this)));
+	}
 }

lib/JWX/JWS/Algorithm/RS256Algorithm.php

Indentation +16 added lines, -16 removed lines

@@ -13,21 +13,21 @@
  */
 class RS256Algorithm extends RSASSAPKCS1Algorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _mdMethod(): string
-    {
-        return "sha256WithRSAEncryption";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _mdMethod(): string
+	{
+		return "sha256WithRSAEncryption";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_RS256;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_RS256;
+	}
 }

lib/JWX/JWS/Algorithm/ES256Algorithm.php

Indentation +24 added lines, -24 removed lines

@@ -14,30 +14,30 @@
  */
 class ES256Algorithm extends ECDSAAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _curveName(): string
-    {
-        return CurveParameter::CURVE_P256;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _curveName(): string
+	{
+		return CurveParameter::CURVE_P256;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _mdMethod(): string
-    {
-        return "sha256";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _mdMethod(): string
+	{
+		return "sha256";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_ES256;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_ES256;
+	}
 }

lib/JWX/JWS/Algorithm/ES384Algorithm.php

Indentation +24 added lines, -24 removed lines

@@ -14,30 +14,30 @@
  */
 class ES384Algorithm extends ECDSAAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _curveName(): string
-    {
-        return CurveParameter::CURVE_P384;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _curveName(): string
+	{
+		return CurveParameter::CURVE_P384;
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _mdMethod(): string
-    {
-        return "sha384";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _mdMethod(): string
+	{
+		return "sha384";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_ES384;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_ES384;
+	}
 }

lib/JWX/JWS/Algorithm/HS512Algorithm.php

Indentation +16 added lines, -16 removed lines

@@ -13,21 +13,21 @@
  */
 class HS512Algorithm extends HMACAlgorithm
 {
-    /**
-     *
-     * {@inheritdoc}
-     */
-    protected function _hashAlgo(): string
-    {
-        return "sha512";
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	protected function _hashAlgo(): string
+	{
+		return "sha512";
+	}
     
-    /**
-     *
-     * {@inheritdoc}
-     */
-    public function algorithmParamValue(): string
-    {
-        return JWA::ALGO_HS512;
-    }
+	/**
+	 *
+	 * {@inheritdoc}
+	 */
+	public function algorithmParamValue(): string
+	{
+		return JWA::ALGO_HS512;
+	}
 }