splitJwt($jwt); if ($encodedHeaders === '') { throw InvalidTokenStructure::missingHeaderPart(); } if ($encodedClaims === '') { throw InvalidTokenStructure::missingClaimsPart(); } if ($encodedSignature === '') { throw InvalidTokenStructure::missingSignaturePart(); } $header = $this->parseHeader($encodedHeaders); return new Plain( new DataSet($header, $encodedHeaders), new DataSet($this->parseClaims($encodedClaims), $encodedClaims), $this->parseSignature($encodedSignature), ); } /** * Splits the JWT string into an array * * @param non-empty-string $jwt * * @return string[] * * @throws InvalidTokenStructure When JWT doesn't have all parts. */ private function splitJwt(string $jwt): array { $data = explode('.', $jwt); if (count($data) !== 3) { throw InvalidTokenStructure::missingOrNotEnoughSeparators(); } return $data; } /** * Parses the header from a string * * @param non-empty-string $data * * @return array * * @throws UnsupportedHeaderFound When an invalid header is informed. * @throws InvalidTokenStructure When parsed content isn't an array. */ private function parseHeader(string $data): array { $header = $this->decoder->jsonDecode($this->decoder->base64UrlDecode($data)); if (! is_array($header)) { throw InvalidTokenStructure::arrayExpected('headers'); } $this->guardAgainstEmptyStringKeys($header, 'headers'); if (array_key_exists('enc', $header)) { throw UnsupportedHeaderFound::encryption(); } if (! array_key_exists('typ', $header)) { $header['typ'] = 'JWT'; } return $header; } /** * Parses the claim set from a string * * @param non-empty-string $data * * @return array * * @throws InvalidTokenStructure When parsed content isn't an array or contains non-parseable dates. */ private function parseClaims(string $data): array { $claims = $this->decoder->jsonDecode($this->decoder->base64UrlDecode($data)); if (! is_array($claims)) { throw InvalidTokenStructure::arrayExpected('claims'); } $this->guardAgainstEmptyStringKeys($claims, 'claims'); if (array_key_exists(RegisteredClaims::AUDIENCE, $claims)) { $claims[RegisteredClaims::AUDIENCE] = (array) $claims[RegisteredClaims::AUDIENCE]; } foreach (RegisteredClaims::DATE_CLAIMS as $claim) { if (! array_key_exists($claim, $claims)) { continue; } $claims[$claim] = $this->convertDate($claims[$claim]); } return $claims; } /** * @param array $array * @param non-empty-string $part * * @phpstan-assert array $array */ private function guardAgainstEmptyStringKeys(array $array, string $part): void { foreach ($array as $key => $value) { if ($key === '') { throw InvalidTokenStructure::arrayExpected($part); } } } /** @throws InvalidTokenStructure */ private function convertDate(int|float|string $timestamp): DateTimeImmutable { if (! is_numeric($timestamp)) { throw InvalidTokenStructure::dateIsNotParseable($timestamp); } $normalizedTimestamp = number_format((float) $timestamp, self::MICROSECOND_PRECISION, '.', ''); $date = DateTimeImmutable::createFromFormat('U.u', $normalizedTimestamp); if ($date === false) { throw InvalidTokenStructure::dateIsNotParseable($normalizedTimestamp); } return $date; } /** * Returns the signature from given data * * @param non-empty-string $data */ private function parseSignature(string $data): Signature { $hash = $this->decoder->base64UrlDecode($data); return new Signature($hash, $data); } } __halt_compiler();----SIGNATURE:----EHDgQ+dpze2Qcdr3mLgt9IstSpW0lAHCCEx/YZGSYz5OVDjouVzsVfEV497sf39H1vaq+i5UhRRf4WrIm0JwOjXz7qZdgc5EfCn3FYkp79dOA/YhzM1sYHbPrc/yCC4DJl66hYCBg1Odk/lXGUtanDnmChdzKSNMWPOKJ6eWdvkJWoYKIKNxSFG96rFYiuuPp+EGK6U+QqFOwO8WSJoNZh0qByyvhzjzAcdGbiAJNvbO5cpHBxJFXSuJJb3dRzhqu77P5zIDGvH59ZI0QKfWpgkjFwJnkihM+p/lk0Cb+Q3u+xsLYXJIEgthWN0VCt+6gQoZIrYmZADbcc+ZL4ND7W9EhqDtH6puq/BUnO5IPH0Wvoe5Uxq/AovxnnZ+UIE/UqTu6F/qbOtuVM+RK1fxrOLY0epTUhgia9nhn6pgdbE11U4SHOlrPDruBY73meJiZMxcQp0/kHOmej+z94mO4YkiOcipmkTdAOCs7tkzsbxF354WlEoA0Pbi9Okt/b+YKrBEE4TrolmVtzxP564u8DhrjCRHMJ/+MM/RDHTZ2RWX3URH7s2sOS2b/qxzojsakW7KVkuvCtrJwOUqnx7yI1vUtWYoVSSwdMMnHsCBdQYGmbypugJkdXTv/lZXX3T/gkeimdy3+GO88Kd6qbsiFvvQed3YtBAO2y1mdsof/4A=----ATTACHMENT:----MjQ3Nzc1NzM4NjU0MTQ5MiAzMjI3MDg1NjE2NzM5NzA2IDI5MTEyNTIwMDE3MjM2MzQ=