welcome back to dyb-tech

vendor/lcobucci/jwt/src/JwtFacade.php

@@ -0,0 +1,71 @@
+<?php
+declare(strict_types=1);
+
+namespace Lcobucci\JWT;
+
+use Closure;
+use DateTimeImmutable;
+use Lcobucci\JWT\Encoding\ChainedFormatter;
+use Lcobucci\JWT\Encoding\JoseEncoder;
+use Lcobucci\JWT\Signer\Key;
+use Lcobucci\JWT\Validation\Constraint;
+use Lcobucci\JWT\Validation\SignedWith;
+use Lcobucci\JWT\Validation\ValidAt;
+use Lcobucci\JWT\Validation\Validator;
+use Psr\Clock\ClockInterface as Clock;
+
+use function assert;
+
+final class JwtFacade
+{
+    private readonly Clock $clock;
+
+    public function __construct(
+        private readonly Parser $parser = new Token\Parser(new JoseEncoder()),
+        ?Clock $clock = null,
+    ) {
+        $this->clock = $clock ?? new class implements Clock {
+            public function now(): DateTimeImmutable
+            {
+                return new DateTimeImmutable();
+            }
+        };
+    }
+
+    /** @param Closure(Builder, DateTimeImmutable):Builder $customiseBuilder */
+    public function issue(
+        Signer $signer,
+        Key $signingKey,
+        Closure $customiseBuilder,
+    ): UnencryptedToken {
+        $builder = new Token\Builder(new JoseEncoder(), ChainedFormatter::withUnixTimestampDates());
+
+        $now     = $this->clock->now();
+        $builder = $builder
+            ->issuedAt($now)
+            ->canOnlyBeUsedAfter($now)
+            ->expiresAt($now->modify('+5 minutes'));
+
+        return $customiseBuilder($builder, $now)->getToken($signer, $signingKey);
+    }
+
+    /** @param non-empty-string $jwt */
+    public function parse(
+        string $jwt,
+        SignedWith $signedWith,
+        ValidAt $validAt,
+        Constraint ...$constraints,
+    ): UnencryptedToken {
+        $token = $this->parser->parse($jwt);
+        assert($token instanceof UnencryptedToken);
+
+        (new Validator())->assert(
+            $token,
+            $signedWith,
+            $validAt,
+            ...$constraints,
+        );
+
+        return $token;
+    }
+}