<?php

namespace Lcobucci\JWT\Validation\Constraint;

use Lcobucci\JWT\Signer;
use Lcobucci\JWT\Token;
use Lcobucci\JWT\UnencryptedToken;
use Lcobucci\JWT\Validation\ConstraintViolation;
use Lcobucci\JWT\Validation\SignedWith as SignedWithInterface;

final class SignedWith implements SignedWithInterface
{
    public function __construct(
        private readonly Signer $signer,
        private readonly Signer\Key $key,
    ) {
    }

    public function assert(Token $token): void
    {
        if (! $token instanceof UnencryptedToken) {
            throw ConstraintViolation::error('You should pass a plain token', $this);
        }

        if ($token->headers()->get('alg') !== $this->signer->algorithmId()) {
            throw ConstraintViolation::error('Token signer mismatch', $this);
        }

        if (! $this->signer->verify($token->signature()->hash(), $token->payload(), $this->key)) {
            throw ConstraintViolation::error('Token signature mismatch', $this);
        }
    }
}
__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NzM5ODYzODgyMTg0MTQ3NSAzNDAwMDUxMTcyMTgyMDA2IDY0MDI3ODU4Nzc2MzQyODg=