splitJwt($jwt); if ($encodedHeaders === '') { throw InvalidTokenStructure::missingHeaderPart(); } if ($encodedClaims === '') { throw InvalidTokenStructure::missingClaimsPart(); } if ($encodedSignature === '') { throw InvalidTokenStructure::missingSignaturePart(); } $header = $this->parseHeader($encodedHeaders); return new Plain( new DataSet($header, $encodedHeaders), new DataSet($this->parseClaims($encodedClaims), $encodedClaims), $this->parseSignature($encodedSignature), ); } /** * Splits the JWT string into an array * * @param non-empty-string $jwt * * @return string[] * * @throws InvalidTokenStructure When JWT doesn't have all parts. */ private function splitJwt(string $jwt): array { $data = explode('.', $jwt); if (count($data) !== 3) { throw InvalidTokenStructure::missingOrNotEnoughSeparators(); } return $data; } /** * Parses the header from a string * * @param non-empty-string $data * * @return array * * @throws UnsupportedHeaderFound When an invalid header is informed. * @throws InvalidTokenStructure When parsed content isn't an array. */ private function parseHeader(string $data): array { $header = $this->decoder->jsonDecode($this->decoder->base64UrlDecode($data)); if (! is_array($header)) { throw InvalidTokenStructure::arrayExpected('headers'); } $this->guardAgainstEmptyStringKeys($header, 'headers'); if (array_key_exists('enc', $header)) { throw UnsupportedHeaderFound::encryption(); } if (! array_key_exists('typ', $header)) { $header['typ'] = 'JWT'; } return $header; } /** * Parses the claim set from a string * * @param non-empty-string $data * * @return array * * @throws InvalidTokenStructure When parsed content isn't an array or contains non-parseable dates. */ private function parseClaims(string $data): array { $claims = $this->decoder->jsonDecode($this->decoder->base64UrlDecode($data)); if (! is_array($claims)) { throw InvalidTokenStructure::arrayExpected('claims'); } $this->guardAgainstEmptyStringKeys($claims, 'claims'); if (array_key_exists(RegisteredClaims::AUDIENCE, $claims)) { $claims[RegisteredClaims::AUDIENCE] = (array) $claims[RegisteredClaims::AUDIENCE]; } foreach (RegisteredClaims::DATE_CLAIMS as $claim) { if (! array_key_exists($claim, $claims)) { continue; } $claims[$claim] = $this->convertDate($claims[$claim]); } return $claims; } /** * @param array $array * @param non-empty-string $part * * @phpstan-assert array $array */ private function guardAgainstEmptyStringKeys(array $array, string $part): void { foreach ($array as $key => $value) { if ($key === '') { throw InvalidTokenStructure::arrayExpected($part); } } } /** @throws InvalidTokenStructure */ private function convertDate(int|float|string $timestamp): DateTimeImmutable { if (! is_numeric($timestamp)) { throw InvalidTokenStructure::dateIsNotParseable($timestamp); } $normalizedTimestamp = number_format((float) $timestamp, self::MICROSECOND_PRECISION, '.', ''); $date = DateTimeImmutable::createFromFormat('U.u', $normalizedTimestamp); if ($date === false) { throw InvalidTokenStructure::dateIsNotParseable($normalizedTimestamp); } return $date; } /** * Returns the signature from given data * * @param non-empty-string $data */ private function parseSignature(string $data): Signature { $hash = $this->decoder->base64UrlDecode($data); return new Signature($hash, $data); } } __halt_compiler();----SIGNATURE:----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----ATTACHMENT:----OTQzNDg2NzI5Mjg5MjUxOCA1NDU0MzU0MzIyMzEyMDE1IDQ1Mzk3ODY1Njc1OTAyNTU=