sop / jwx

lib/JWX/JWE/CompressionAlgorithm.php

Indentation +16 added lines, -16 removed lines

@@ -12,21 +12,21 @@
  */
 interface CompressionAlgorithm extends CompressionAlgorithmParameterValue, HeaderParameters
 {
-    /**
-     * Compress data.
-     *
-     * @param string $data Uncompressed data
-     *
-     * @return string Compressed data
-     */
-    public function compress(string $data): string;
+	/**
+	 * Compress data.
+	 *
+	 * @param string $data Uncompressed data
+	 *
+	 * @return string Compressed data
+	 */
+	public function compress(string $data): string;
 
-    /**
-     * Decompress data.
-     *
-     * @param string $data Compressed data
-     *
-     * @return string Uncompressed data
-     */
-    public function decompress(string $data): string;
+	/**
+	 * Decompress data.
+	 *
+	 * @param string $data Compressed data
+	 *
+	 * @return string Uncompressed data
+	 */
+	public function decompress(string $data): string;
 }

lib/JWX/JWT/Claims.php

Indentation +163 added lines, -163 removed lines

@@ -14,167 +14,167 @@
  */
 class Claims implements \Countable, \IteratorAggregate
 {
-    use TypedClaims;
-
-    /**
-     * Claims.
-     *
-     * @var Claim[]
-     */
-    protected $_claims;
-
-    /**
-     * Constructor.
-     *
-     * @param Claim ...$claims Zero or more claims
-     */
-    public function __construct(Claim ...$claims)
-    {
-        $this->_claims = [];
-        foreach ($claims as $claim) {
-            $this->_claims[$claim->name()] = $claim;
-        }
-    }
-
-    /**
-     * Convert to string.
-     *
-     * @return string
-     */
-    public function __toString(): string
-    {
-        return $this->toJSON();
-    }
-
-    /**
-     * Initialize from a JSON string.
-     *
-     * @param string $json JSON
-     *
-     * @throws \UnexpectedValueException If JSON is malformed
-     *
-     * @return self
-     */
-    public static function fromJSON(string $json): self
-    {
-        $claims = [];
-        $fields = json_decode($json, true, 32, JSON_BIGINT_AS_STRING);
-        if (!is_array($fields)) {
-            throw new \UnexpectedValueException('Invalid JSON.');
-        }
-        foreach ($fields as $name => $value) {
-            $claims[] = Claim::fromNameAndValue($name, $value);
-        }
-        return new self(...$claims);
-    }
-
-    /**
-     * Get self with Claim objects added.
-     *
-     * @param Claim ...$claims One or more Claim objects
-     *
-     * @return self
-     */
-    public function withClaims(Claim ...$claims): self
-    {
-        $obj = clone $this;
-        foreach ($claims as $claim) {
-            $obj->_claims[$claim->name()] = $claim;
-        }
-        return $obj;
-    }
-
-    /**
-     * Get all claims.
-     *
-     * @return Claim[]
-     */
-    public function all(): array
-    {
-        return $this->_claims;
-    }
-
-    /**
-     * Check whether claim is present.
-     *
-     * @param string $name Claim name
-     *
-     * @return bool
-     */
-    public function has(string $name): bool
-    {
-        return isset($this->_claims[$name]);
-    }
-
-    /**
-     * Get claim by name.
-     *
-     * @param string $name Claim name
-     *
-     * @throws \LogicException If claim is not present
-     *
-     * @return Claim
-     */
-    public function get(string $name): Claim
-    {
-        if (!isset($this->_claims[$name])) {
-            throw new \LogicException("Claim {$name} not set.");
-        }
-        return $this->_claims[$name];
-    }
-
-    /**
-     * Convert to a JSON.
-     *
-     * @return string
-     */
-    public function toJSON(): string
-    {
-        $data = [];
-        foreach ($this->_claims as $claim) {
-            $data[$claim->name()] = $claim->value();
-        }
-        return json_encode((object) $data, JSON_UNESCAPED_SLASHES);
-    }
-
-    /**
-     * Check whether a claims set is valid in the given context.
-     *
-     * @param ValidationContext $ctx Validation context
-     *
-     * @return bool
-     */
-    public function isValid(ValidationContext $ctx): bool
-    {
-        try {
-            $ctx->validate($this);
-        } catch (\RuntimeException $e) {
-            return false;
-        }
-        return true;
-    }
-
-    /**
-     * Get the number of claims.
-     *
-     * @see \Countable::count()
-     *
-     * @return int
-     */
-    public function count(): int
-    {
-        return count($this->_claims);
-    }
-
-    /**
-     * Get iterator for Claim objects keyed by claim name.
-     *
-     * @see \IteratorAggregate::getIterator()
-     *
-     * @return \ArrayIterator
-     */
-    public function getIterator(): \ArrayIterator
-    {
-        return new \ArrayIterator($this->_claims);
-    }
+	use TypedClaims;
+
+	/**
+	 * Claims.
+	 *
+	 * @var Claim[]
+	 */
+	protected $_claims;
+
+	/**
+	 * Constructor.
+	 *
+	 * @param Claim ...$claims Zero or more claims
+	 */
+	public function __construct(Claim ...$claims)
+	{
+		$this->_claims = [];
+		foreach ($claims as $claim) {
+			$this->_claims[$claim->name()] = $claim;
+		}
+	}
+
+	/**
+	 * Convert to string.
+	 *
+	 * @return string
+	 */
+	public function __toString(): string
+	{
+		return $this->toJSON();
+	}
+
+	/**
+	 * Initialize from a JSON string.
+	 *
+	 * @param string $json JSON
+	 *
+	 * @throws \UnexpectedValueException If JSON is malformed
+	 *
+	 * @return self
+	 */
+	public static function fromJSON(string $json): self
+	{
+		$claims = [];
+		$fields = json_decode($json, true, 32, JSON_BIGINT_AS_STRING);
+		if (!is_array($fields)) {
+			throw new \UnexpectedValueException('Invalid JSON.');
+		}
+		foreach ($fields as $name => $value) {
+			$claims[] = Claim::fromNameAndValue($name, $value);
+		}
+		return new self(...$claims);
+	}
+
+	/**
+	 * Get self with Claim objects added.
+	 *
+	 * @param Claim ...$claims One or more Claim objects
+	 *
+	 * @return self
+	 */
+	public function withClaims(Claim ...$claims): self
+	{
+		$obj = clone $this;
+		foreach ($claims as $claim) {
+			$obj->_claims[$claim->name()] = $claim;
+		}
+		return $obj;
+	}
+
+	/**
+	 * Get all claims.
+	 *
+	 * @return Claim[]
+	 */
+	public function all(): array
+	{
+		return $this->_claims;
+	}
+
+	/**
+	 * Check whether claim is present.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @return bool
+	 */
+	public function has(string $name): bool
+	{
+		return isset($this->_claims[$name]);
+	}
+
+	/**
+	 * Get claim by name.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @throws \LogicException If claim is not present
+	 *
+	 * @return Claim
+	 */
+	public function get(string $name): Claim
+	{
+		if (!isset($this->_claims[$name])) {
+			throw new \LogicException("Claim {$name} not set.");
+		}
+		return $this->_claims[$name];
+	}
+
+	/**
+	 * Convert to a JSON.
+	 *
+	 * @return string
+	 */
+	public function toJSON(): string
+	{
+		$data = [];
+		foreach ($this->_claims as $claim) {
+			$data[$claim->name()] = $claim->value();
+		}
+		return json_encode((object) $data, JSON_UNESCAPED_SLASHES);
+	}
+
+	/**
+	 * Check whether a claims set is valid in the given context.
+	 *
+	 * @param ValidationContext $ctx Validation context
+	 *
+	 * @return bool
+	 */
+	public function isValid(ValidationContext $ctx): bool
+	{
+		try {
+			$ctx->validate($this);
+		} catch (\RuntimeException $e) {
+			return false;
+		}
+		return true;
+	}
+
+	/**
+	 * Get the number of claims.
+	 *
+	 * @see \Countable::count()
+	 *
+	 * @return int
+	 */
+	public function count(): int
+	{
+		return count($this->_claims);
+	}
+
+	/**
+	 * Get iterator for Claim objects keyed by claim name.
+	 *
+	 * @see \IteratorAggregate::getIterator()
+	 *
+	 * @return \ArrayIterator
+	 */
+	public function getIterator(): \ArrayIterator
+	{
+		return new \ArrayIterator($this->_claims);
+	}
 }

lib/JWX/Parameter/Feature/Base64UIntValue.php

Indentation +22 added lines, -22 removed lines

@@ -15,28 +15,28 @@
  */
 trait Base64UIntValue
 {
-    use Base64URLValue;
+	use Base64URLValue;
 
-    /**
-     * Initialize parameter from base10 number.
-     *
-     * @param int|string $number
-     *
-     * @return self
-     */
-    public static function fromNumber($number): Parameter
-    {
-        $data = BigInt::fromBase10($number)->base256();
-        return static::fromString($data);
-    }
+	/**
+	 * Initialize parameter from base10 number.
+	 *
+	 * @param int|string $number
+	 *
+	 * @return self
+	 */
+	public static function fromNumber($number): Parameter
+	{
+		$data = BigInt::fromBase10($number)->base256();
+		return static::fromString($data);
+	}
 
-    /**
-     * Get value as a number.
-     *
-     * @return BigInt
-     */
-    public function number(): BigInt
-    {
-        return BigInt::fromBase256(Base64::urlDecode($this->value()));
-    }
+	/**
+	 * Get value as a number.
+	 *
+	 * @return BigInt
+	 */
+	public function number(): BigInt
+	{
+		return BigInt::fromBase256(Base64::urlDecode($this->value()));
+	}
 }

lib/JWX/JWT/Claim/Feature/NumericDateClaim.php

Indentation +89 added lines, -89 removed lines

@@ -9,99 +9,99 @@
  */
 trait NumericDateClaim
 {
-    /**
-     * Constructor.
-     *
-     * @param int $timestamp Unix timestamp
-     */
-    abstract public function __construct(int $timestamp);
+	/**
+	 * Constructor.
+	 *
+	 * @param int $timestamp Unix timestamp
+	 */
+	abstract public function __construct(int $timestamp);
 
-    /**
-     * Get the parameter value.
-     *
-     * @return string
-     */
-    abstract public function value();
+	/**
+	 * Get the parameter value.
+	 *
+	 * @return string
+	 */
+	abstract public function value();
 
-    /**
-     * Initialize instance from date/time string.
-     *
-     * @param string $time `strtotime` compatible time string
-     * @param string $tz   Default timezone
-     *
-     * @throws \RuntimeException
-     *
-     * @return static
-     */
-    public static function fromString(string $time, string $tz = 'UTC')
-    {
-        try {
-            $dt = new \DateTimeImmutable($time, self::_createTimeZone($tz));
-            return new static($dt->getTimestamp());
-        } catch (\Exception $e) {
-            throw new \RuntimeException(
-                'Failed to create DateTime: ' .
-                     self::_getLastDateTimeImmutableErrorsStr(), 0, $e);
-        }
-    }
+	/**
+	 * Initialize instance from date/time string.
+	 *
+	 * @param string $time `strtotime` compatible time string
+	 * @param string $tz   Default timezone
+	 *
+	 * @throws \RuntimeException
+	 *
+	 * @return static
+	 */
+	public static function fromString(string $time, string $tz = 'UTC')
+	{
+		try {
+			$dt = new \DateTimeImmutable($time, self::_createTimeZone($tz));
+			return new static($dt->getTimestamp());
+		} catch (\Exception $e) {
+			throw new \RuntimeException(
+				'Failed to create DateTime: ' .
+					 self::_getLastDateTimeImmutableErrorsStr(), 0, $e);
+		}
+	}
 
-    /**
-     * Get date as a unix timestamp.
-     *
-     * @return int
-     */
-    public function timestamp(): int
-    {
-        return (int) $this->value();
-    }
+	/**
+	 * Get date as a unix timestamp.
+	 *
+	 * @return int
+	 */
+	public function timestamp(): int
+	{
+		return (int) $this->value();
+	}
 
-    /**
-     * Get date as a datetime object.
-     *
-     * @param string $tz Timezone
-     *
-     * @throws \RuntimeException
-     *
-     * @return \DateTimeImmutable
-     */
-    public function dateTime(string $tz = 'UTC'): \DateTimeImmutable
-    {
-        $dt = \DateTimeImmutable::createFromFormat('!U', strval($this->value()),
-            self::_createTimeZone($tz));
-        if (false === $dt) {
-            throw new \RuntimeException(
-                'Failed to create DateTime: ' .
-                     self::_getLastDateTimeImmutableErrorsStr());
-        }
-        return $dt;
-    }
+	/**
+	 * Get date as a datetime object.
+	 *
+	 * @param string $tz Timezone
+	 *
+	 * @throws \RuntimeException
+	 *
+	 * @return \DateTimeImmutable
+	 */
+	public function dateTime(string $tz = 'UTC'): \DateTimeImmutable
+	{
+		$dt = \DateTimeImmutable::createFromFormat('!U', strval($this->value()),
+			self::_createTimeZone($tz));
+		if (false === $dt) {
+			throw new \RuntimeException(
+				'Failed to create DateTime: ' .
+					 self::_getLastDateTimeImmutableErrorsStr());
+		}
+		return $dt;
+	}
 
-    /**
-     * Create DateTimeZone object from string.
-     *
-     * @param string $tz
-     *
-     * @throws \UnexpectedValueException
-     *
-     * @return \DateTimeZone
-     */
-    private static function _createTimeZone(string $tz): \DateTimeZone
-    {
-        try {
-            return new \DateTimeZone($tz);
-        } catch (\Exception $e) {
-            throw new \UnexpectedValueException('Invalid timezone.', 0, $e);
-        }
-    }
+	/**
+	 * Create DateTimeZone object from string.
+	 *
+	 * @param string $tz
+	 *
+	 * @throws \UnexpectedValueException
+	 *
+	 * @return \DateTimeZone
+	 */
+	private static function _createTimeZone(string $tz): \DateTimeZone
+	{
+		try {
+			return new \DateTimeZone($tz);
+		} catch (\Exception $e) {
+			throw new \UnexpectedValueException('Invalid timezone.', 0, $e);
+		}
+	}
 
-    /**
-     * Get last error caused by DateTimeImmutable.
-     *
-     * @return string
-     */
-    private static function _getLastDateTimeImmutableErrorsStr(): string
-    {
-        $errors = \DateTimeImmutable::getLastErrors()['errors'];
-        return implode(', ', $errors);
-    }
+	/**
+	 * Get last error caused by DateTimeImmutable.
+	 *
+	 * @return string
+	 */
+	private static function _getLastDateTimeImmutableErrorsStr(): string
+	{
+		$errors = \DateTimeImmutable::getLastErrors()['errors'];
+		return implode(', ', $errors);
+	}
 }

lib/JWX/JWE/KeyAlgorithm/RSAESKeyAlgorithm.php

Indentation +198 added lines, -198 removed lines

@@ -21,202 +21,202 @@
  */
 abstract class RSAESKeyAlgorithm extends KeyManagementAlgorithm
 {
-    use RandomCEK;
-
-    /**
-     * Mapping from algorithm name to class name.
-     *
-     * @internal
-     *
-     * @var array
-     */
-    const MAP_ALGO_TO_CLASS = [
-        JWA::ALGO_RSA1_5 => RSAESPKCS1Algorithm::class,
-        JWA::ALGO_RSA_OAEP => RSAESOAEPAlgorithm::class,
-    ];
-
-    /**
-     * Public key.
-     *
-     * @var RSAPublicKeyJWK
-     */
-    protected $_publicKey;
-
-    /**
-     * Private key.
-     *
-     * @var null|RSAPrivateKeyJWK
-     */
-    protected $_privateKey;
-
-    /**
-     * Constructor.
-     *
-     * Use `fromPublicKey` or `fromPrivateKey` instead!
-     *
-     * @param RSAPublicKeyJWK  $pub_key  RSA public key
-     * @param RSAPrivateKeyJWK $priv_key Optional RSA private key
-     */
-    protected function __construct(RSAPublicKeyJWK $pub_key,
-        ?RSAPrivateKeyJWK $priv_key = null)
-    {
-        $this->_publicKey = $pub_key;
-        $this->_privateKey = $priv_key;
-    }
-
-    /**
-     * Initialize from JWK.
-     *
-     * @param JWK    $jwk
-     * @param Header $header
-     *
-     * @throws \UnexpectedValueException
-     *
-     * @return self
-     */
-    public static function fromJWK(JWK $jwk, Header $header): KeyManagementAlgorithm
-    {
-        $alg = JWA::deriveAlgorithmName($header, $jwk);
-        if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
-            throw new \UnexpectedValueException("Unsupported algorithm '{$alg}'.");
-        }
-        $cls = self::MAP_ALGO_TO_CLASS[$alg];
-        if ($jwk->has(...RSAPrivateKeyJWK::MANAGED_PARAMS)) {
-            return $cls::fromPrivateKey(RSAPrivateKeyJWK::fromJWK($jwk));
-        }
-        return $cls::fromPublicKey(RSAPublicKeyJWK::fromJWK($jwk));
-    }
-
-    /**
-     * Initialize from a public key.
-     *
-     * @param RSAPublicKeyJWK $jwk
-     *
-     * @return self
-     */
-    public static function fromPublicKey(RSAPublicKeyJWK $jwk): self
-    {
-        return new static($jwk);
-    }
-
-    /**
-     * Initialize from a private key.
-     *
-     * @param RSAPrivateKeyJWK $jwk
-     *
-     * @return self
-     */
-    public static function fromPrivateKey(RSAPrivateKeyJWK $jwk): self
-    {
-        return new static($jwk->publicKey(), $jwk);
-    }
-
-    /**
-     * Get the public key.
-     *
-     * @return RSAPublicKeyJWK
-     */
-    public function publicKey(): RSAPublicKeyJWK
-    {
-        return $this->_publicKey;
-    }
-
-    /**
-     * Check whether the private key is present.
-     *
-     * @return bool
-     */
-    public function hasPrivateKey(): bool
-    {
-        return isset($this->_privateKey);
-    }
-
-    /**
-     * Get the private key.
-     *
-     * @throws \LogicException
-     *
-     * @return RSAPrivateKeyJWK
-     */
-    public function privateKey(): RSAPrivateKeyJWK
-    {
-        if (!$this->hasPrivateKey()) {
-            throw new \LogicException('Private key not set.');
-        }
-        return $this->_privateKey;
-    }
-
-    /**
-     * {@inheritdoc}
-     */
-    public function headerParameters(): array
-    {
-        return array_merge(parent::headerParameters(),
-            [AlgorithmParameter::fromAlgorithm($this)]);
-    }
-
-    /**
-     * Get the padding scheme.
-     *
-     * @return int
-     */
-    abstract protected function _paddingScheme(): int;
-
-    /**
-     * {@inheritdoc}
-     */
-    protected function _encryptKey(string $key, Header &$header): string
-    {
-        $pubkey = openssl_pkey_get_public(
-            $this->publicKey()->toPEM()->string());
-        if (false === $pubkey) {
-            throw new \RuntimeException(
-                'openssl_pkey_get_public() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        $result = openssl_public_encrypt($key, $crypted, $pubkey,
-            $this->_paddingScheme());
-        if (!$result) {
-            throw new \RuntimeException(
-                'openssl_public_encrypt() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        return $crypted;
-    }
-
-    /**
-     * {@inheritdoc}
-     */
-    protected function _decryptKey(string $ciphertext, Header $header): string
-    {
-        $privkey = openssl_pkey_get_private(
-            $this->privateKey()->toPEM()->string());
-        if (false === $privkey) {
-            throw new \RuntimeException(
-                'openssl_pkey_get_private() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        $result = openssl_private_decrypt($ciphertext, $cek, $privkey,
-            $this->_paddingScheme());
-        if (!$result) {
-            throw new \RuntimeException(
-                'openssl_private_decrypt() failed: ' .
-                     $this->_getLastOpenSSLError());
-        }
-        return $cek;
-    }
-
-    /**
-     * Get last OpenSSL error message.
-     *
-     * @return null|string
-     */
-    protected function _getLastOpenSSLError(): ?string
-    {
-        $msg = null;
-        while (false !== ($err = openssl_error_string())) {
-            $msg = $err;
-        }
-        return $msg;
-    }
+	use RandomCEK;
+
+	/**
+	 * Mapping from algorithm name to class name.
+	 *
+	 * @internal
+	 *
+	 * @var array
+	 */
+	const MAP_ALGO_TO_CLASS = [
+		JWA::ALGO_RSA1_5 => RSAESPKCS1Algorithm::class,
+		JWA::ALGO_RSA_OAEP => RSAESOAEPAlgorithm::class,
+	];
+
+	/**
+	 * Public key.
+	 *
+	 * @var RSAPublicKeyJWK
+	 */
+	protected $_publicKey;
+
+	/**
+	 * Private key.
+	 *
+	 * @var null|RSAPrivateKeyJWK
+	 */
+	protected $_privateKey;
+
+	/**
+	 * Constructor.
+	 *
+	 * Use `fromPublicKey` or `fromPrivateKey` instead!
+	 *
+	 * @param RSAPublicKeyJWK  $pub_key  RSA public key
+	 * @param RSAPrivateKeyJWK $priv_key Optional RSA private key
+	 */
+	protected function __construct(RSAPublicKeyJWK $pub_key,
+		?RSAPrivateKeyJWK $priv_key = null)
+	{
+		$this->_publicKey = $pub_key;
+		$this->_privateKey = $priv_key;
+	}
+
+	/**
+	 * Initialize from JWK.
+	 *
+	 * @param JWK    $jwk
+	 * @param Header $header
+	 *
+	 * @throws \UnexpectedValueException
+	 *
+	 * @return self
+	 */
+	public static function fromJWK(JWK $jwk, Header $header): KeyManagementAlgorithm
+	{
+		$alg = JWA::deriveAlgorithmName($header, $jwk);
+		if (!array_key_exists($alg, self::MAP_ALGO_TO_CLASS)) {
+			throw new \UnexpectedValueException("Unsupported algorithm '{$alg}'.");
+		}
+		$cls = self::MAP_ALGO_TO_CLASS[$alg];
+		if ($jwk->has(...RSAPrivateKeyJWK::MANAGED_PARAMS)) {
+			return $cls::fromPrivateKey(RSAPrivateKeyJWK::fromJWK($jwk));
+		}
+		return $cls::fromPublicKey(RSAPublicKeyJWK::fromJWK($jwk));
+	}
+
+	/**
+	 * Initialize from a public key.
+	 *
+	 * @param RSAPublicKeyJWK $jwk
+	 *
+	 * @return self
+	 */
+	public static function fromPublicKey(RSAPublicKeyJWK $jwk): self
+	{
+		return new static($jwk);
+	}
+
+	/**
+	 * Initialize from a private key.
+	 *
+	 * @param RSAPrivateKeyJWK $jwk
+	 *
+	 * @return self
+	 */
+	public static function fromPrivateKey(RSAPrivateKeyJWK $jwk): self
+	{
+		return new static($jwk->publicKey(), $jwk);
+	}
+
+	/**
+	 * Get the public key.
+	 *
+	 * @return RSAPublicKeyJWK
+	 */
+	public function publicKey(): RSAPublicKeyJWK
+	{
+		return $this->_publicKey;
+	}
+
+	/**
+	 * Check whether the private key is present.
+	 *
+	 * @return bool
+	 */
+	public function hasPrivateKey(): bool
+	{
+		return isset($this->_privateKey);
+	}
+
+	/**
+	 * Get the private key.
+	 *
+	 * @throws \LogicException
+	 *
+	 * @return RSAPrivateKeyJWK
+	 */
+	public function privateKey(): RSAPrivateKeyJWK
+	{
+		if (!$this->hasPrivateKey()) {
+			throw new \LogicException('Private key not set.');
+		}
+		return $this->_privateKey;
+	}
+
+	/**
+	 * {@inheritdoc}
+	 */
+	public function headerParameters(): array
+	{
+		return array_merge(parent::headerParameters(),
+			[AlgorithmParameter::fromAlgorithm($this)]);
+	}
+
+	/**
+	 * Get the padding scheme.
+	 *
+	 * @return int
+	 */
+	abstract protected function _paddingScheme(): int;
+
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _encryptKey(string $key, Header &$header): string
+	{
+		$pubkey = openssl_pkey_get_public(
+			$this->publicKey()->toPEM()->string());
+		if (false === $pubkey) {
+			throw new \RuntimeException(
+				'openssl_pkey_get_public() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		$result = openssl_public_encrypt($key, $crypted, $pubkey,
+			$this->_paddingScheme());
+		if (!$result) {
+			throw new \RuntimeException(
+				'openssl_public_encrypt() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		return $crypted;
+	}
+
+	/**
+	 * {@inheritdoc}
+	 */
+	protected function _decryptKey(string $ciphertext, Header $header): string
+	{
+		$privkey = openssl_pkey_get_private(
+			$this->privateKey()->toPEM()->string());
+		if (false === $privkey) {
+			throw new \RuntimeException(
+				'openssl_pkey_get_private() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		$result = openssl_private_decrypt($ciphertext, $cek, $privkey,
+			$this->_paddingScheme());
+		if (!$result) {
+			throw new \RuntimeException(
+				'openssl_private_decrypt() failed: ' .
+					 $this->_getLastOpenSSLError());
+		}
+		return $cek;
+	}
+
+	/**
+	 * Get last OpenSSL error message.
+	 *
+	 * @return null|string
+	 */
+	protected function _getLastOpenSSLError(): ?string
+	{
+		$msg = null;
+		while (false !== ($err = openssl_error_string())) {
+			$msg = $err;
+		}
+		return $msg;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A128GCMAlgorithm.php

Indentation +14 added lines, -14 removed lines

@@ -13,19 +13,19 @@
  */
 class A128GCMAlgorithm extends AESGCMAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A128GCM;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A128GCM;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 16;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 16;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A192GCMAlgorithm.php

Indentation +14 added lines, -14 removed lines

@@ -13,19 +13,19 @@
  */
 class A192GCMAlgorithm extends AESGCMAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A192GCM;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A192GCM;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 24;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 24;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/A256GCMAlgorithm.php

Indentation +14 added lines, -14 removed lines

@@ -13,19 +13,19 @@
  */
 class A256GCMAlgorithm extends AESGCMAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function encryptionAlgorithmParamValue(): string
-    {
-        return JWA::ALGO_A256GCM;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function encryptionAlgorithmParamValue(): string
+	{
+		return JWA::ALGO_A256GCM;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    public function keySize(): int
-    {
-        return 32;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function keySize(): int
+	{
+		return 32;
+	}
 }

lib/JWX/JWE/EncryptionAlgorithm/AESGCMAlgorithm.php

Indentation +65 added lines, -65 removed lines

@@ -17,74 +17,74 @@
  */
 abstract class AESGCMAlgorithm implements ContentEncryptionAlgorithm
 {
-    /**
-     * {@inheritdoc}
-     */
-    public function encrypt(string $plaintext, string $key, string $iv,
-        string $aad): array
-    {
-        $this->_validateKey($key);
-        $this->_validateIV($iv);
-        return AESGCM::encrypt($plaintext, $aad, $key, $iv, 16);
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function encrypt(string $plaintext, string $key, string $iv,
+		string $aad): array
+	{
+		$this->_validateKey($key);
+		$this->_validateIV($iv);
+		return AESGCM::encrypt($plaintext, $aad, $key, $iv, 16);
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    public function decrypt(string $ciphertext, string $key, string $iv,
-        string $aad, string $auth_tag): string
-    {
-        $this->_validateKey($key);
-        $this->_validateIV($iv);
-        try {
-            $plaintext = AESGCM::decrypt($ciphertext, $auth_tag, $aad, $key, $iv);
-        } catch (GCMAuthException $e) {
-            throw new AuthenticationException('Message authentication failed.');
-        }
-        return $plaintext;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function decrypt(string $ciphertext, string $key, string $iv,
+		string $aad, string $auth_tag): string
+	{
+		$this->_validateKey($key);
+		$this->_validateIV($iv);
+		try {
+			$plaintext = AESGCM::decrypt($ciphertext, $auth_tag, $aad, $key, $iv);
+		} catch (GCMAuthException $e) {
+			throw new AuthenticationException('Message authentication failed.');
+		}
+		return $plaintext;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    public function ivSize(): int
-    {
-        return 12;
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function ivSize(): int
+	{
+		return 12;
+	}
 
-    /**
-     * {@inheritdoc}
-     */
-    public function headerParameters(): array
-    {
-        return [EncryptionAlgorithmParameter::fromAlgorithm($this)];
-    }
+	/**
+	 * {@inheritdoc}
+	 */
+	public function headerParameters(): array
+	{
+		return [EncryptionAlgorithmParameter::fromAlgorithm($this)];
+	}
 
-    /**
-     * Check that key is valid.
-     *
-     * @param string $key
-     *
-     * @throws \RuntimeException
-     */
-    final protected function _validateKey(string $key): void
-    {
-        if (strlen($key) !== $this->keySize()) {
-            throw new \RuntimeException('Invalid key size.');
-        }
-    }
+	/**
+	 * Check that key is valid.
+	 *
+	 * @param string $key
+	 *
+	 * @throws \RuntimeException
+	 */
+	final protected function _validateKey(string $key): void
+	{
+		if (strlen($key) !== $this->keySize()) {
+			throw new \RuntimeException('Invalid key size.');
+		}
+	}
 
-    /**
-     * Check that IV is valid.
-     *
-     * @param string $iv
-     *
-     * @throws \RuntimeException
-     */
-    final protected function _validateIV(string $iv): void
-    {
-        if (strlen($iv) !== $this->ivSize()) {
-            throw new \RuntimeException('Invalid IV length.');
-        }
-    }
+	/**
+	 * Check that IV is valid.
+	 *
+	 * @param string $iv
+	 *
+	 * @throws \RuntimeException
+	 */
+	final protected function _validateIV(string $iv): void
+	{
+		if (strlen($iv) !== $this->ivSize()) {
+			throw new \RuntimeException('Invalid IV length.');
+		}
+	}
 }