관리-도구

편집 파일: AudienceChecker.php

<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2020 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace Jose\Component\Checker;

use function in_array;
use function is_array;
use function is_string;

/**
 * This class is a header parameter and claim checker.
 * When the "aud" header parameter or claim is present, it will check if the value is within the allowed ones.
 */
final class AudienceChecker implements ClaimChecker, HeaderChecker
{
    private const CLAIM_NAME = 'aud';

/**
     * @var bool
     */
    private $protectedHeader;

/**
     * @var string
     */
    private $audience;

public function __construct(string $audience, bool $protectedHeader = false)
    {
        $this->audience = $audience;
        $this->protectedHeader = $protectedHeader;
    }

/**
     * {@inheritdoc}
     */
    public function checkClaim($value): void
    {
        $this->checkValue($value, InvalidClaimException::class);
    }

/**
     * {@inheritdoc}
     */
    public function checkHeader($value): void
    {
        $this->checkValue($value, InvalidHeaderException::class);
    }

public function supportedClaim(): string
    {
        return self::CLAIM_NAME;
    }

public function supportedHeader(): string
    {
        return self::CLAIM_NAME;
    }

public function protectedHeaderOnly(): bool
    {
        return $this->protectedHeader;
    }

/**
     * @param mixed $value
     *
     * @throws InvalidClaimException  if the claim is invalid
     * @throws InvalidHeaderException if the header is invalid
     */
    private function checkValue($value, string $class): void
    {
        if (is_string($value) && $value !== $this->audience) {
            throw new $class('Bad audience.', self::CLAIM_NAME, $value);
        }
        if (is_array($value) && !in_array($this->audience, $value, true)) {
            throw new $class('Bad audience.', self::CLAIM_NAME, $value);
        }
        if (!is_array($value) && !is_string($value)) {
            throw new $class('Bad audience.', self::CLAIM_NAME, $value);
        }
    }
}