Jose\Component\Encryption\NestedTokenLoader

Complexity

Total Complexity

8

Size/Duplication

Total Lines	73
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	4

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	5	1
A	load()	0	11	2
B	checkContentTypeHeader()	0	20	5

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2018 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace Jose\Component\Encryption;

use Jose\Component\Core\JWKSet;
use Jose\Component\Signature\JWS;
use Jose\Component\Signature\JWSLoader;

class NestedTokenLoader
{
    /**
     * @var JWSLoader
     */
    private $jwsLoader;

    /**
     * @var JWELoader
     */
    private $jweLoader;

    /**
     * NestedToken constructor.
     *
     * @param JWELoader $jweLoader
     * @param JWSLoader $jwsLoader
     */
    public function __construct(JWELoader $jweLoader, JWSLoader $jwsLoader)
    {
        $this->jweLoader = $jweLoader;
        $this->jwsLoader = $jwsLoader;
    }

    /**
     * @param string   $token
     * @param JWKSet   $encryptionKeySet
     * @param JWKSet   $signatureKeySet
     * @param int|null $signature
     *
     * @throws \Exception
     *
     * @return JWS
     */
    public function load(string $token, JWKSet $encryptionKeySet, JWKSet $signatureKeySet, ?int &$signature = null): JWS
    {
        $recipient = null;
        $jwe = $this->jweLoader->loadAndDecryptWithKeySet($token, $encryptionKeySet, $recipient);
        $this->checkContentTypeHeader($jwe, $recipient);
        if (null === $jwe->getPayload()) {
            throw new \InvalidArgumentException('The token has no payload.');
        }

        return $this->jwsLoader->loadAndVerifyWithKeySet($jwe->getPayload(), $signatureKeySet, $signature);
    }

    /**
     * @param JWE $jwe
     * @param int $recipient
     *
     * @throws \InvalidArgumentException
     */
    private function checkContentTypeHeader(JWE $jwe, int $recipient)
    {
        switch (true) {
            case $jwe->hasSharedProtectedHeaderParameter('cty'):
                $cty = $jwe->getSharedProtectedHeaderParameter('cty');
                break;
            case $jwe->hasSharedHeaderParameter('cty'):
                $cty = $jwe->getSharedHeaderParameter('cty');
                break;
            case $jwe->getRecipient($recipient)->hasHeaderParameter('cty'):
                $cty = $jwe->getRecipient($recipient)->getHeaderParameter('cty');
                break;
            default:
                throw new \InvalidArgumentException('The token is not a nested token.');
        }

        if (0 !== strcasecmp($cty, 'jwt')) {
            throw new \InvalidArgumentException('The token is not a nested token.');
        }
    }
}