for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
declare(strict_types=1);
namespace TMV\OpenIdClient\ClaimChecker;
use function is_int;
use Jose\Component\Checker\ClaimChecker;
use Jose\Component\Checker\InvalidClaimException;
use function time;
final class AuthTimeChecker implements ClaimChecker
{
private const CLAIM_NAME = 'auth_time';
/** @var int */
private $maxAge;
private $allowedTimeDrift;
public function __construct(int $maxAge, int $allowedTimeDrift = 0)
$this->maxAge = $maxAge;
$this->allowedTimeDrift = $allowedTimeDrift;
}
/**
* {@inheritdoc}
*/
public function checkClaim($value): void
if (! is_int($value)) {
throw new InvalidClaimException('"auth_time" must be an integer.', self::CLAIM_NAME, $value);
if ($value + $this->maxAge < time() - $this->allowedTimeDrift) {
throw new InvalidClaimException('Too much time has elapsed since the last End-User authentication.', self::CLAIM_NAME, $value);
public function supportedClaim(): string
return self::CLAIM_NAME;
thomasvargiu /
php-openid-client
