sop / jwx

lib/JWX/JWT/Claims.php

Indentation +163 added lines, -163 removed lines

@@ -14,167 +14,167 @@
  */
 class Claims implements \Countable, \IteratorAggregate
 {
-    use TypedClaims;
-
-    /**
-     * Claims.
-     *
-     * @var Claim[]
-     */
-    protected $_claims;
-
-    /**
-     * Constructor.
-     *
-     * @param Claim ...$claims Zero or more claims
-     */
-    public function __construct(Claim ...$claims)
-    {
-        $this->_claims = [];
-        foreach ($claims as $claim) {
-            $this->_claims[$claim->name()] = $claim;
-        }
-    }
-
-    /**
-     * Convert to string.
-     *
-     * @return string
-     */
-    public function __toString(): string
-    {
-        return $this->toJSON();
-    }
-
-    /**
-     * Initialize from a JSON string.
-     *
-     * @param string $json JSON
-     *
-     * @throws \UnexpectedValueException If JSON is malformed
-     *
-     * @return self
-     */
-    public static function fromJSON(string $json): self
-    {
-        $claims = [];
-        $fields = json_decode($json, true, 32, JSON_BIGINT_AS_STRING);
-        if (!is_array($fields)) {
-            throw new \UnexpectedValueException('Invalid JSON.');
-        }
-        foreach ($fields as $name => $value) {
-            $claims[] = Claim::fromNameAndValue($name, $value);
-        }
-        return new self(...$claims);
-    }
-
-    /**
-     * Get self with Claim objects added.
-     *
-     * @param Claim ...$claims One or more Claim objects
-     *
-     * @return self
-     */
-    public function withClaims(Claim ...$claims): self
-    {
-        $obj = clone $this;
-        foreach ($claims as $claim) {
-            $obj->_claims[$claim->name()] = $claim;
-        }
-        return $obj;
-    }
-
-    /**
-     * Get all claims.
-     *
-     * @return Claim[]
-     */
-    public function all(): array
-    {
-        return array_values($this->_claims);
-    }
-
-    /**
-     * Check whether claim is present.
-     *
-     * @param string $name Claim name
-     *
-     * @return bool
-     */
-    public function has(string $name): bool
-    {
-        return isset($this->_claims[$name]);
-    }
-
-    /**
-     * Get claim by name.
-     *
-     * @param string $name Claim name
-     *
-     * @throws \LogicException If claim is not present
-     *
-     * @return Claim
-     */
-    public function get(string $name): Claim
-    {
-        if (!isset($this->_claims[$name])) {
-            throw new \LogicException("Claim {$name} not set.");
-        }
-        return $this->_claims[$name];
-    }
-
-    /**
-     * Convert to a JSON.
-     *
-     * @return string
-     */
-    public function toJSON(): string
-    {
-        $data = [];
-        foreach ($this->_claims as $claim) {
-            $data[$claim->name()] = $claim->value();
-        }
-        return json_encode((object) $data, JSON_UNESCAPED_SLASHES);
-    }
-
-    /**
-     * Check whether a claims set is valid in the given context.
-     *
-     * @param ValidationContext $ctx Validation context
-     *
-     * @return bool
-     */
-    public function isValid(ValidationContext $ctx): bool
-    {
-        try {
-            $ctx->validate($this);
-        } catch (\RuntimeException $e) {
-            return false;
-        }
-        return true;
-    }
-
-    /**
-     * Get the number of claims.
-     *
-     * @see \Countable::count()
-     *
-     * @return int
-     */
-    public function count(): int
-    {
-        return count($this->_claims);
-    }
-
-    /**
-     * Get iterator for Claim objects keyed by claim name.
-     *
-     * @see \IteratorAggregate::getIterator()
-     *
-     * @return \ArrayIterator
-     */
-    public function getIterator(): \ArrayIterator
-    {
-        return new \ArrayIterator($this->_claims);
-    }
+	use TypedClaims;
+
+	/**
+	 * Claims.
+	 *
+	 * @var Claim[]
+	 */
+	protected $_claims;
+
+	/**
+	 * Constructor.
+	 *
+	 * @param Claim ...$claims Zero or more claims
+	 */
+	public function __construct(Claim ...$claims)
+	{
+		$this->_claims = [];
+		foreach ($claims as $claim) {
+			$this->_claims[$claim->name()] = $claim;
+		}
+	}
+
+	/**
+	 * Convert to string.
+	 *
+	 * @return string
+	 */
+	public function __toString(): string
+	{
+		return $this->toJSON();
+	}
+
+	/**
+	 * Initialize from a JSON string.
+	 *
+	 * @param string $json JSON
+	 *
+	 * @throws \UnexpectedValueException If JSON is malformed
+	 *
+	 * @return self
+	 */
+	public static function fromJSON(string $json): self
+	{
+		$claims = [];
+		$fields = json_decode($json, true, 32, JSON_BIGINT_AS_STRING);
+		if (!is_array($fields)) {
+			throw new \UnexpectedValueException('Invalid JSON.');
+		}
+		foreach ($fields as $name => $value) {
+			$claims[] = Claim::fromNameAndValue($name, $value);
+		}
+		return new self(...$claims);
+	}
+
+	/**
+	 * Get self with Claim objects added.
+	 *
+	 * @param Claim ...$claims One or more Claim objects
+	 *
+	 * @return self
+	 */
+	public function withClaims(Claim ...$claims): self
+	{
+		$obj = clone $this;
+		foreach ($claims as $claim) {
+			$obj->_claims[$claim->name()] = $claim;
+		}
+		return $obj;
+	}
+
+	/**
+	 * Get all claims.
+	 *
+	 * @return Claim[]
+	 */
+	public function all(): array
+	{
+		return array_values($this->_claims);
+	}
+
+	/**
+	 * Check whether claim is present.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @return bool
+	 */
+	public function has(string $name): bool
+	{
+		return isset($this->_claims[$name]);
+	}
+
+	/**
+	 * Get claim by name.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @throws \LogicException If claim is not present
+	 *
+	 * @return Claim
+	 */
+	public function get(string $name): Claim
+	{
+		if (!isset($this->_claims[$name])) {
+			throw new \LogicException("Claim {$name} not set.");
+		}
+		return $this->_claims[$name];
+	}
+
+	/**
+	 * Convert to a JSON.
+	 *
+	 * @return string
+	 */
+	public function toJSON(): string
+	{
+		$data = [];
+		foreach ($this->_claims as $claim) {
+			$data[$claim->name()] = $claim->value();
+		}
+		return json_encode((object) $data, JSON_UNESCAPED_SLASHES);
+	}
+
+	/**
+	 * Check whether a claims set is valid in the given context.
+	 *
+	 * @param ValidationContext $ctx Validation context
+	 *
+	 * @return bool
+	 */
+	public function isValid(ValidationContext $ctx): bool
+	{
+		try {
+			$ctx->validate($this);
+		} catch (\RuntimeException $e) {
+			return false;
+		}
+		return true;
+	}
+
+	/**
+	 * Get the number of claims.
+	 *
+	 * @see \Countable::count()
+	 *
+	 * @return int
+	 */
+	public function count(): int
+	{
+		return count($this->_claims);
+	}
+
+	/**
+	 * Get iterator for Claim objects keyed by claim name.
+	 *
+	 * @see \IteratorAggregate::getIterator()
+	 *
+	 * @return \ArrayIterator
+	 */
+	public function getIterator(): \ArrayIterator
+	{
+		return new \ArrayIterator($this->_claims);
+	}
 }

lib/JWX/JWT/ValidationContext.php

Indentation +310 added lines, -310 removed lines

@@ -29,339 +29,339 @@
  */
 class ValidationContext
 {
-    /**
-     * Reference time.
-     *
-     * @var int
-     */
-    protected $_refTime;
+	/**
+	 * Reference time.
+	 *
+	 * @var int
+	 */
+	protected $_refTime;
 
-    /**
-     * Leeway in seconds for the reference time constraints.
-     *
-     * @var int
-     */
-    protected $_leeway;
+	/**
+	 * Leeway in seconds for the reference time constraints.
+	 *
+	 * @var int
+	 */
+	protected $_leeway;
 
-    /**
-     * Validation constraints.
-     *
-     * @var array
-     */
-    protected $_constraints;
+	/**
+	 * Validation constraints.
+	 *
+	 * @var array
+	 */
+	protected $_constraints;
 
-    /**
-     * Explicitly defined validators for named claims.
-     *
-     * @var Validator[]
-     */
-    protected $_validators;
+	/**
+	 * Explicitly defined validators for named claims.
+	 *
+	 * @var Validator[]
+	 */
+	protected $_validators;
 
-    /**
-     * Set of JSON Web Keys usable for the validation.
-     *
-     * @var JWKSet
-     */
-    protected $_keys;
+	/**
+	 * Set of JSON Web Keys usable for the validation.
+	 *
+	 * @var JWKSet
+	 */
+	protected $_keys;
 
-    /**
-     * Whether to allow unsecured JWT's, that is, claims without integrity
-     * protection nor encryption.
-     *
-     * @var bool
-     */
-    protected $_allowUnsecured;
+	/**
+	 * Whether to allow unsecured JWT's, that is, claims without integrity
+	 * protection nor encryption.
+	 *
+	 * @var bool
+	 */
+	protected $_allowUnsecured;
 
-    /**
-     * Constructor.
-     *
-     * @param null|array  $constraints Optional array of constraints for the
-     *                                 registered claims
-     * @param null|JWKSet $keys        Optional set of JSON Web Keys used for
-     *                                 signature validation and/or decryption
-     */
-    public function __construct(?array $constraints = null, ?JWKSet $keys = null)
-    {
-        $this->_refTime = time();
-        $this->_leeway = 60;
-        $this->_constraints = $constraints ? $constraints : [];
-        $this->_validators = [];
-        $this->_keys = $keys ? $keys : new JWKSet();
-        $this->_allowUnsecured = false;
-    }
+	/**
+	 * Constructor.
+	 *
+	 * @param null|array  $constraints Optional array of constraints for the
+	 *                                 registered claims
+	 * @param null|JWKSet $keys        Optional set of JSON Web Keys used for
+	 *                                 signature validation and/or decryption
+	 */
+	public function __construct(?array $constraints = null, ?JWKSet $keys = null)
+	{
+		$this->_refTime = time();
+		$this->_leeway = 60;
+		$this->_constraints = $constraints ? $constraints : [];
+		$this->_validators = [];
+		$this->_keys = $keys ? $keys : new JWKSet();
+		$this->_allowUnsecured = false;
+	}
 
-    /**
-     * Initialize with a single JSON Web Key.
-     *
-     * @param JWK        $key         JSON Web Key
-     * @param null|array $constraints Optional constraints
-     *
-     * @return self
-     */
-    public static function fromJWK(JWK $key, ?array $constraints = null): self
-    {
-        return new self($constraints, new JWKSet($key));
-    }
+	/**
+	 * Initialize with a single JSON Web Key.
+	 *
+	 * @param JWK        $key         JSON Web Key
+	 * @param null|array $constraints Optional constraints
+	 *
+	 * @return self
+	 */
+	public static function fromJWK(JWK $key, ?array $constraints = null): self
+	{
+		return new self($constraints, new JWKSet($key));
+	}
 
-    /**
-     * Get self with the reference time.
-     *
-     * @param null|int $ts Unix timestamp
-     *
-     * @return self
-     */
-    public function withReferenceTime(?int $ts): self
-    {
-        $obj = clone $this;
-        $obj->_refTime = $ts;
-        return $obj;
-    }
+	/**
+	 * Get self with the reference time.
+	 *
+	 * @param null|int $ts Unix timestamp
+	 *
+	 * @return self
+	 */
+	public function withReferenceTime(?int $ts): self
+	{
+		$obj = clone $this;
+		$obj->_refTime = $ts;
+		return $obj;
+	}
 
-    /**
-     * Check whether the reference time is set.
-     *
-     * @return bool
-     */
-    public function hasReferenceTime(): bool
-    {
-        return isset($this->_refTime);
-    }
+	/**
+	 * Check whether the reference time is set.
+	 *
+	 * @return bool
+	 */
+	public function hasReferenceTime(): bool
+	{
+		return isset($this->_refTime);
+	}
 
-    /**
-     * Get the reference time.
-     *
-     * @throws \LogicException
-     *
-     * @return int
-     */
-    public function referenceTime(): int
-    {
-        if (!$this->hasReferenceTime()) {
-            throw new \LogicException('Reference time not set.');
-        }
-        return $this->_refTime;
-    }
+	/**
+	 * Get the reference time.
+	 *
+	 * @throws \LogicException
+	 *
+	 * @return int
+	 */
+	public function referenceTime(): int
+	{
+		if (!$this->hasReferenceTime()) {
+			throw new \LogicException('Reference time not set.');
+		}
+		return $this->_refTime;
+	}
 
-    /**
-     * Get self with the reference time leeway.
-     *
-     * @param int $seconds
-     *
-     * @return self
-     */
-    public function withLeeway(int $seconds): self
-    {
-        $obj = clone $this;
-        $obj->_leeway = $seconds;
-        return $obj;
-    }
+	/**
+	 * Get self with the reference time leeway.
+	 *
+	 * @param int $seconds
+	 *
+	 * @return self
+	 */
+	public function withLeeway(int $seconds): self
+	{
+		$obj = clone $this;
+		$obj->_leeway = $seconds;
+		return $obj;
+	}
 
-    /**
-     * Get the reference time leeway.
-     *
-     * @return int
-     */
-    public function leeway(): int
-    {
-        return $this->_leeway;
-    }
+	/**
+	 * Get the reference time leeway.
+	 *
+	 * @return int
+	 */
+	public function leeway(): int
+	{
+		return $this->_leeway;
+	}
 
-    /**
-     * Get self with a validation constraint.
-     *
-     * If the claim does not provide its own validator, an explicit validator
-     * must be given.
-     *
-     * @param string         $name       Claim name
-     * @param mixed          $constraint Value to check claim against
-     * @param null|Validator $validator  Optional explicit validator
-     *
-     * @return self
-     */
-    public function withConstraint(string $name, $constraint,
-        ?Validator $validator = null): self
-    {
-        $obj = clone $this;
-        $obj->_constraints[$name] = $constraint;
-        if ($validator) {
-            $obj->_validators[$name] = $validator;
-        }
-        return $obj;
-    }
+	/**
+	 * Get self with a validation constraint.
+	 *
+	 * If the claim does not provide its own validator, an explicit validator
+	 * must be given.
+	 *
+	 * @param string         $name       Claim name
+	 * @param mixed          $constraint Value to check claim against
+	 * @param null|Validator $validator  Optional explicit validator
+	 *
+	 * @return self
+	 */
+	public function withConstraint(string $name, $constraint,
+		?Validator $validator = null): self
+	{
+		$obj = clone $this;
+		$obj->_constraints[$name] = $constraint;
+		if ($validator) {
+			$obj->_validators[$name] = $validator;
+		}
+		return $obj;
+	}
 
-    /**
-     * Get self with the issuer constraint.
-     *
-     * @param string $issuer Issuer name
-     *
-     * @return self
-     */
-    public function withIssuer(string $issuer): self
-    {
-        return $this->withConstraint(RegisteredClaim::NAME_ISSUER, $issuer);
-    }
+	/**
+	 * Get self with the issuer constraint.
+	 *
+	 * @param string $issuer Issuer name
+	 *
+	 * @return self
+	 */
+	public function withIssuer(string $issuer): self
+	{
+		return $this->withConstraint(RegisteredClaim::NAME_ISSUER, $issuer);
+	}
 
-    /**
-     * Get self with the subject constraint.
-     *
-     * @param string $subject Subject name
-     *
-     * @return self
-     */
-    public function withSubject(string $subject): self
-    {
-        return $this->withConstraint(RegisteredClaim::NAME_SUBJECT, $subject);
-    }
+	/**
+	 * Get self with the subject constraint.
+	 *
+	 * @param string $subject Subject name
+	 *
+	 * @return self
+	 */
+	public function withSubject(string $subject): self
+	{
+		return $this->withConstraint(RegisteredClaim::NAME_SUBJECT, $subject);
+	}
 
-    /**
-     * Get self with the audience constraint.
-     *
-     * @param string $audience Audience name
-     *
-     * @return self
-     */
-    public function withAudience(string $audience): self
-    {
-        return $this->withConstraint(RegisteredClaim::NAME_AUDIENCE, $audience);
-    }
+	/**
+	 * Get self with the audience constraint.
+	 *
+	 * @param string $audience Audience name
+	 *
+	 * @return self
+	 */
+	public function withAudience(string $audience): self
+	{
+		return $this->withConstraint(RegisteredClaim::NAME_AUDIENCE, $audience);
+	}
 
-    /**
-     * Get self with the JWT ID constraint.
-     *
-     * @param string $id JWT ID
-     *
-     * @return self
-     */
-    public function withID(string $id): self
-    {
-        return $this->withConstraint(RegisteredClaim::NAME_JWT_ID, $id);
-    }
+	/**
+	 * Get self with the JWT ID constraint.
+	 *
+	 * @param string $id JWT ID
+	 *
+	 * @return self
+	 */
+	public function withID(string $id): self
+	{
+		return $this->withConstraint(RegisteredClaim::NAME_JWT_ID, $id);
+	}
 
-    /**
-     * Check whether a named constraint is present.
-     *
-     * @param string $name Claim name
-     *
-     * @return bool
-     */
-    public function hasConstraint(string $name): bool
-    {
-        return isset($this->_constraints[$name]);
-    }
+	/**
+	 * Check whether a named constraint is present.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @return bool
+	 */
+	public function hasConstraint(string $name): bool
+	{
+		return isset($this->_constraints[$name]);
+	}
 
-    /**
-     * Get a constraint value by the claim name.
-     *
-     * @param string $name Claim name
-     *
-     * @throws \LogicException If constraint is not set
-     *
-     * @return mixed Constraint value
-     */
-    public function constraint(string $name)
-    {
-        if (!$this->hasConstraint($name)) {
-            throw new \LogicException("Constraint {$name} not set.");
-        }
-        return $this->_constraints[$name];
-    }
+	/**
+	 * Get a constraint value by the claim name.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @throws \LogicException If constraint is not set
+	 *
+	 * @return mixed Constraint value
+	 */
+	public function constraint(string $name)
+	{
+		if (!$this->hasConstraint($name)) {
+			throw new \LogicException("Constraint {$name} not set.");
+		}
+		return $this->_constraints[$name];
+	}
 
-    /**
-     * Check whether a validator is defined for the given claim name.
-     *
-     * @param string $name Claim name
-     *
-     * @return bool
-     */
-    public function hasValidator(string $name): bool
-    {
-        return isset($this->_validators[$name]);
-    }
+	/**
+	 * Check whether a validator is defined for the given claim name.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @return bool
+	 */
+	public function hasValidator(string $name): bool
+	{
+		return isset($this->_validators[$name]);
+	}
 
-    /**
-     * Get explicitly defined validator by the claim name.
-     *
-     * @param string $name Claim name
-     *
-     * @throws \LogicException If validator is not set
-     *
-     * @return Validator
-     */
-    public function validator(string $name): Validator
-    {
-        if (!$this->hasValidator($name)) {
-            throw new \LogicException("Validator {$name} not set.");
-        }
-        return $this->_validators[$name];
-    }
+	/**
+	 * Get explicitly defined validator by the claim name.
+	 *
+	 * @param string $name Claim name
+	 *
+	 * @throws \LogicException If validator is not set
+	 *
+	 * @return Validator
+	 */
+	public function validator(string $name): Validator
+	{
+		if (!$this->hasValidator($name)) {
+			throw new \LogicException("Validator {$name} not set.");
+		}
+		return $this->_validators[$name];
+	}
 
-    /**
-     * Get a set of JSON Web Keys defined in this context.
-     *
-     * @return JWKSet
-     */
-    public function keys(): JWKSet
-    {
-        return $this->_keys;
-    }
+	/**
+	 * Get a set of JSON Web Keys defined in this context.
+	 *
+	 * @return JWKSet
+	 */
+	public function keys(): JWKSet
+	{
+		return $this->_keys;
+	}
 
-    /**
-     * Get self with 'allow unsecured' flag set.
-     *
-     * If the unsecured JWT's are allowed, claims shall be considered valid even
-     * though they are not signed nor encrypted.
-     *
-     * @param bool $allow Whether to allow unsecured JWT's
-     *
-     * @return self
-     */
-    public function withUnsecuredAllowed(bool $allow): self
-    {
-        $obj = clone $this;
-        $obj->_allowUnsecured = $allow;
-        return $obj;
-    }
+	/**
+	 * Get self with 'allow unsecured' flag set.
+	 *
+	 * If the unsecured JWT's are allowed, claims shall be considered valid even
+	 * though they are not signed nor encrypted.
+	 *
+	 * @param bool $allow Whether to allow unsecured JWT's
+	 *
+	 * @return self
+	 */
+	public function withUnsecuredAllowed(bool $allow): self
+	{
+		$obj = clone $this;
+		$obj->_allowUnsecured = $allow;
+		return $obj;
+	}
 
-    /**
-     * Check whether the unsecured JWT's are allowed.
-     *
-     * @return bool
-     */
-    public function isUnsecuredAllowed(): bool
-    {
-        return $this->_allowUnsecured;
-    }
+	/**
+	 * Check whether the unsecured JWT's are allowed.
+	 *
+	 * @return bool
+	 */
+	public function isUnsecuredAllowed(): bool
+	{
+		return $this->_allowUnsecured;
+	}
 
-    /**
-     * Validate claims.
-     *
-     * @param Claims $claims
-     *
-     * @throws ValidationException If any of the claims is not valid
-     *
-     * @return self
-     */
-    public function validate(Claims $claims): self
-    {
-        $claimset = iterator_to_array($claims);
-        // validate required constraints
-        foreach (array_keys($this->_constraints) as $name) {
-            if (!isset($claimset[$name])) {
-                throw new ValidationException("Claim '{$name}' is required.");
-            }
-            if (!$claimset[$name]->validateWithContext($this)) {
-                throw new ValidationException(
-                    "Validation of claim '{$name}' failed.");
-            }
-            unset($claimset[$name]);
-        }
-        // validate remaining claims using default validators
-        foreach ($claimset as $name => $claim) {
-            if (!$claim->validateWithContext($this)) {
-                throw new ValidationException(
-                    "Validation of claim '{$name}' failed.");
-            }
-        }
-        return $this;
-    }
+	/**
+	 * Validate claims.
+	 *
+	 * @param Claims $claims
+	 *
+	 * @throws ValidationException If any of the claims is not valid
+	 *
+	 * @return self
+	 */
+	public function validate(Claims $claims): self
+	{
+		$claimset = iterator_to_array($claims);
+		// validate required constraints
+		foreach (array_keys($this->_constraints) as $name) {
+			if (!isset($claimset[$name])) {
+				throw new ValidationException("Claim '{$name}' is required.");
+			}
+			if (!$claimset[$name]->validateWithContext($this)) {
+				throw new ValidationException(
+					"Validation of claim '{$name}' failed.");
+			}
+			unset($claimset[$name]);
+		}
+		// validate remaining claims using default validators
+		foreach ($claimset as $name => $claim) {
+			if (!$claim->validateWithContext($this)) {
+				throw new ValidationException(
+					"Validation of claim '{$name}' failed.");
+			}
+		}
+		return $this;
+	}
 }

lib/JWX/JWT/Claim/Claim.php

Indentation +106 added lines, -106 removed lines

@@ -14,118 +14,118 @@
  */
 class Claim
 {
-    /**
-     * Claim name.
-     *
-     * @var string
-     */
-    protected $_name;
+	/**
+	 * Claim name.
+	 *
+	 * @var string
+	 */
+	protected $_name;
 
-    /**
-     * Claim value.
-     *
-     * @var mixed
-     */
-    protected $_value;
+	/**
+	 * Claim value.
+	 *
+	 * @var mixed
+	 */
+	protected $_value;
 
-    /**
-     * Claim validator.
-     *
-     * @var null|Validator
-     */
-    protected $_validator;
+	/**
+	 * Claim validator.
+	 *
+	 * @var null|Validator
+	 */
+	protected $_validator;
 
-    /**
-     * Constructor.
-     *
-     * @param string         $name      Claim name
-     * @param mixed          $value     Claim value
-     * @param null|Validator $validator Claim validator or null if claim doesn't
-     *                                  provide validation
-     */
-    public function __construct(string $name, $value, ?Validator $validator = null)
-    {
-        $this->_name = $name;
-        $this->_value = $value;
-        $this->_validator = $validator;
-    }
+	/**
+	 * Constructor.
+	 *
+	 * @param string         $name      Claim name
+	 * @param mixed          $value     Claim value
+	 * @param null|Validator $validator Claim validator or null if claim doesn't
+	 *                                  provide validation
+	 */
+	public function __construct(string $name, $value, ?Validator $validator = null)
+	{
+		$this->_name = $name;
+		$this->_value = $value;
+		$this->_validator = $validator;
+	}
 
-    /**
-     * Initialize from a name and a value.
-     *
-     * Returns a specific claim object if applicable.
-     *
-     * @param string $name  Claim name
-     * @param mixed  $value Claim value
-     *
-     * @return Claim
-     */
-    public static function fromNameAndValue(string $name, $value): Claim
-    {
-        if (array_key_exists($name, RegisteredClaim::MAP_NAME_TO_CLASS)) {
-            $cls = RegisteredClaim::MAP_NAME_TO_CLASS[$name];
-            return $cls::fromJSONValue($value);
-        }
-        return new self($name, $value);
-    }
+	/**
+	 * Initialize from a name and a value.
+	 *
+	 * Returns a specific claim object if applicable.
+	 *
+	 * @param string $name  Claim name
+	 * @param mixed  $value Claim value
+	 *
+	 * @return Claim
+	 */
+	public static function fromNameAndValue(string $name, $value): Claim
+	{
+		if (array_key_exists($name, RegisteredClaim::MAP_NAME_TO_CLASS)) {
+			$cls = RegisteredClaim::MAP_NAME_TO_CLASS[$name];
+			return $cls::fromJSONValue($value);
+		}
+		return new self($name, $value);
+	}
 
-    /**
-     * Get the claim name.
-     *
-     * @return string
-     */
-    public function name(): string
-    {
-        return $this->_name;
-    }
+	/**
+	 * Get the claim name.
+	 *
+	 * @return string
+	 */
+	public function name(): string
+	{
+		return $this->_name;
+	}
 
-    /**
-     * Get the claim value.
-     *
-     * @return mixed
-     */
-    public function value()
-    {
-        return $this->_value;
-    }
+	/**
+	 * Get the claim value.
+	 *
+	 * @return mixed
+	 */
+	public function value()
+	{
+		return $this->_value;
+	}
 
-    /**
-     * Validate the claim against a given constraint.
-     *
-     * @param mixed $constraint Constraint value
-     *
-     * @return bool True if the claim is valid
-     */
-    public function validate($constraint): bool
-    {
-        // if claim has no validator, consider validation failed
-        if (!isset($this->_validator)) {
-            return false;
-        }
-        return $this->_validator->validate($this->_value, $constraint);
-    }
+	/**
+	 * Validate the claim against a given constraint.
+	 *
+	 * @param mixed $constraint Constraint value
+	 *
+	 * @return bool True if the claim is valid
+	 */
+	public function validate($constraint): bool
+	{
+		// if claim has no validator, consider validation failed
+		if (!isset($this->_validator)) {
+			return false;
+		}
+		return $this->_validator->validate($this->_value, $constraint);
+	}
 
-    /**
-     * Validate the claim in a given context.
-     *
-     * Overridden in specific claims that provide default validation.
-     *
-     * @param ValidationContext $ctx
-     *
-     * @return bool True if claim is valid
-     */
-    public function validateWithContext(ValidationContext $ctx): bool
-    {
-        // if validator has no constraint for the claim
-        if (!$ctx->hasConstraint($this->_name)) {
-            return true;
-        }
-        // if validation context has an explicitly defined validator for the claim
-        if ($ctx->hasValidator($this->_name)) {
-            return $ctx->validator($this->_name)
-                ->validate($this->_value, $ctx->constraint($this->_name));
-        }
-        // validate using claim's default validator
-        return $this->validate($ctx->constraint($this->_name));
-    }
+	/**
+	 * Validate the claim in a given context.
+	 *
+	 * Overridden in specific claims that provide default validation.
+	 *
+	 * @param ValidationContext $ctx
+	 *
+	 * @return bool True if claim is valid
+	 */
+	public function validateWithContext(ValidationContext $ctx): bool
+	{
+		// if validator has no constraint for the claim
+		if (!$ctx->hasConstraint($this->_name)) {
+			return true;
+		}
+		// if validation context has an explicitly defined validator for the claim
+		if ($ctx->hasValidator($this->_name)) {
+			return $ctx->validator($this->_name)
+				->validate($this->_value, $ctx->constraint($this->_name));
+		}
+		// validate using claim's default validator
+		return $this->validate($ctx->constraint($this->_name));
+	}
 }