rfyio/JWT

<?php

namespace RFY\JWT\Service;

use Firebase\JWT\JWT;
use Neos\Flow\Annotations as Flow;
use Neos\Flow\Mvc\ActionRequest;
use RFY\JWT\Security\Authentication\Token\JwtToken;
use RFY\JWT\Security\KeyProvider;

/**
 * @Flow\Scope("singleton")
 */
class JwtService
{
    /**
     * @Flow\InjectConfiguration(path="algorithms")
     * @var array
     */
    protected array $algorithms = [];

    /**
     * @Flow\InjectConfiguration(path="tokenSources")
     * @var array
     */
    protected array $tokenSources = [];

    /**
     * @var KeyProvider
     * @Flow\Inject
     */
    protected $keyProvider;

    /**
     * @param array $payload
     * @return string
     */
    public function createJsonWebToken(array $payload): string
    {
        return JWT::encode($payload, $this->keyProvider->getPublicKey(), $this->algorithms[0]);
    }

    /**
     * @param string $encodedJWT
     * @return object
     */
    public function decodeJsonWebToken($encodedJWT): object
    {
        return JWT::decode($encodedJWT, $this->keyProvider->getPublicKey(), $this->algorithms);
    }

    /**
     * @param ActionRequest $request
     * @return null|object
     * @throws \Neos\Flow\Security\Exception\InvalidAuthenticationStatusException
     */
    public function decodeJsonWebTokenFromRequest(ActionRequest $request): ?object
    {
        $claims = null;
        $jwtToken = new JwtToken();
        $result = $jwtToken->updateCredentials($request);
        if ($result === true) {
            $encodedJWT = $jwtToken->getEncodedJwt();
            if (\is_string($encodedJWT) && \count(\explode('.', $encodedJWT)) === 3) {
                $claims = $this->decodeJsonWebToken($encodedJWT);
            }
        }
        return $claims;
    }

    /**
     * Returns the cookiename for the token.
     *
     * @return string
     */
    public function getCookieName(): string
    {
        return $this->getName('cookie');
    }

    /**
     * Returns the header name from the configuration.
     *
     * @return string
     */
    public function getHeaderName(): string
    {
        return $this->getName('header');
    }

    /**
     * Returns the query name from the configuration.
     *
     * @return string
     */
    public function getQueryName(): string
    {
        return $this->getName('query');
    }

    /**
     * @param string $from
     * @return string
     */
    protected function getName(string $from): string
    {
        foreach ($this->tokenSources as $tokenSource) {
            $name = $tokenSource['name'];
            if ($tokenSource['from'] == $from) {
                return $name;
            }
        }
        return '';
    }
}