Initial commit
This commit is contained in:
root
123
application/Espo/Core/Authentication/Jwt/Token/Header.php
Normal file
123
application/Espo/Core/Authentication/Jwt/Token/Header.php
Normal file
@@ -0,0 +1,123 @@
|
||||
<?php
|
||||
/************************************************************************
|
||||
* This file is part of EspoCRM.
|
||||
*
|
||||
* EspoCRM – Open Source CRM application.
|
||||
* Copyright (C) 2014-2025 EspoCRM, Inc.
|
||||
* Website: https://www.espocrm.com
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Affero General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Affero General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Affero General Public License
|
||||
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
*
|
||||
* The interactive user interfaces in modified source and object code versions
|
||||
* of this program must display Appropriate Legal Notices, as required under
|
||||
* Section 5 of the GNU Affero General Public License version 3.
|
||||
*
|
||||
* In accordance with Section 7(b) of the GNU Affero General Public License version 3,
|
||||
* these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
|
||||
************************************************************************/
|
||||
|
||||
namespace Espo\Core\Authentication\Jwt\Token;
|
||||
|
||||
use Espo\Core\Utils\Json;
|
||||
use RuntimeException;
|
||||
use JsonException;
|
||||
use stdClass;
|
||||
|
||||
/**
|
||||
* Immutable.
|
||||
*/
|
||||
class Header
|
||||
{
|
||||
private string $alg;
|
||||
private ?string $kid;
|
||||
/** @var array<string, mixed> */
|
||||
private array $data;
|
||||
|
||||
/**
|
||||
* @param array<string, mixed> $data
|
||||
*/
|
||||
private function __construct(
|
||||
string $alg,
|
||||
?string $kid,
|
||||
array $data
|
||||
) {
|
||||
$this->alg = $alg;
|
||||
$this->kid = $kid;
|
||||
$this->data = $data;
|
||||
}
|
||||
|
||||
/**
|
||||
* @return mixed
|
||||
*/
|
||||
public function get(string $name)
|
||||
{
|
||||
return $this->data[$name] ?? null;
|
||||
}
|
||||
|
||||
public static function fromRaw(string $raw): self
|
||||
{
|
||||
$parsed = null;
|
||||
|
||||
try {
|
||||
$parsed = Json::decode($raw);
|
||||
} catch (JsonException) {}
|
||||
|
||||
if (!$parsed instanceof stdClass) {
|
||||
throw new RuntimeException();
|
||||
}
|
||||
|
||||
$alg = self::obtainFromParsedString($parsed, 'alg');
|
||||
$kid = self::obtainFromParsedStringNull($parsed, 'kid');
|
||||
|
||||
return new self(
|
||||
$alg,
|
||||
$kid,
|
||||
get_object_vars($parsed)
|
||||
);
|
||||
}
|
||||
|
||||
/** @noinspection PhpSameParameterValueInspection */
|
||||
private static function obtainFromParsedString(stdClass $parsed, string $name): string
|
||||
{
|
||||
$value = $parsed->$name ?? null;
|
||||
|
||||
if (!is_string($value)) {
|
||||
throw new RuntimeException("No or bad `$name` in JWT header.");
|
||||
}
|
||||
|
||||
return $value;
|
||||
}
|
||||
|
||||
/** @noinspection PhpSameParameterValueInspection */
|
||||
private static function obtainFromParsedStringNull(stdClass $parsed, string $name): ?string
|
||||
{
|
||||
$value = $parsed->$name ?? null;
|
||||
|
||||
if ($value !== null && !is_string($value)) {
|
||||
throw new RuntimeException("Bad `$name` in JWT header.");
|
||||
}
|
||||
|
||||
return $value;
|
||||
}
|
||||
|
||||
public function getAlg(): string
|
||||
{
|
||||
return $this->alg;
|
||||
}
|
||||
|
||||
public function getKid(): ?string
|
||||
{
|
||||
return $this->kid;
|
||||
}
|
||||
}
|
||||
235
application/Espo/Core/Authentication/Jwt/Token/Payload.php
Normal file
235
application/Espo/Core/Authentication/Jwt/Token/Payload.php
Normal file
@@ -0,0 +1,235 @@
|
||||
<?php
|
||||
/************************************************************************
|
||||
* This file is part of EspoCRM.
|
||||
*
|
||||
* EspoCRM – Open Source CRM application.
|
||||
* Copyright (C) 2014-2025 EspoCRM, Inc.
|
||||
* Website: https://www.espocrm.com
|
||||
*
|
||||
* This program is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Affero General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Affero General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Affero General Public License
|
||||
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
*
|
||||
* The interactive user interfaces in modified source and object code versions
|
||||
* of this program must display Appropriate Legal Notices, as required under
|
||||
* Section 5 of the GNU Affero General Public License version 3.
|
||||
*
|
||||
* In accordance with Section 7(b) of the GNU Affero General Public License version 3,
|
||||
* these Appropriate Legal Notices must retain the display of the "EspoCRM" word.
|
||||
************************************************************************/
|
||||
|
||||
namespace Espo\Core\Authentication\Jwt\Token;
|
||||
|
||||
use Espo\Core\Utils\Json;
|
||||
use RuntimeException;
|
||||
use JsonException;
|
||||
use stdClass;
|
||||
|
||||
/**
|
||||
* Immutable.
|
||||
*/
|
||||
class Payload
|
||||
{
|
||||
private ?string $sub;
|
||||
private ?string $iss;
|
||||
/** @var string[] */
|
||||
private array $aud;
|
||||
private ?int $exp;
|
||||
private ?int $iat;
|
||||
private ?int $nbf;
|
||||
private ?string $nonce;
|
||||
private ?int $authTime;
|
||||
private ?string $sid;
|
||||
/** @var array<string, mixed> */
|
||||
private array $data;
|
||||
|
||||
/**
|
||||
* @param string[] $aud
|
||||
* @param array<string, mixed> $data
|
||||
*/
|
||||
private function __construct(
|
||||
?string $sub,
|
||||
?string $iss,
|
||||
array $aud,
|
||||
?int $exp,
|
||||
?int $iat,
|
||||
?int $nbf,
|
||||
?string $nonce,
|
||||
?int $authTime,
|
||||
?string $sid,
|
||||
array $data
|
||||
) {
|
||||
$this->sub = $sub;
|
||||
$this->iss = $iss;
|
||||
$this->aud = $aud;
|
||||
$this->exp = $exp;
|
||||
$this->iat = $iat;
|
||||
$this->nbf = $nbf;
|
||||
$this->nonce = $nonce;
|
||||
$this->authTime = $authTime;
|
||||
$this->sid = $sid;
|
||||
$this->data = $data;
|
||||
}
|
||||
|
||||
public function getSub(): ?string
|
||||
{
|
||||
return $this->sub;
|
||||
}
|
||||
|
||||
public function getIss(): ?string
|
||||
{
|
||||
return $this->iss;
|
||||
}
|
||||
|
||||
public function getExp(): ?int
|
||||
{
|
||||
return $this->exp;
|
||||
}
|
||||
|
||||
public function getIat(): ?int
|
||||
{
|
||||
return $this->iat;
|
||||
}
|
||||
|
||||
public function getNbf(): ?int
|
||||
{
|
||||
return $this->nbf;
|
||||
}
|
||||
|
||||
/**
|
||||
* @return string[]
|
||||
*/
|
||||
public function getAud(): array
|
||||
{
|
||||
return $this->aud;
|
||||
}
|
||||
|
||||
public function getNonce(): ?string
|
||||
{
|
||||
return $this->nonce;
|
||||
}
|
||||
|
||||
public function getAuthTime(): ?int
|
||||
{
|
||||
return $this->authTime;
|
||||
}
|
||||
|
||||
/** @noinspection PhpUnused */
|
||||
public function getSid(): ?string
|
||||
{
|
||||
return $this->sid;
|
||||
}
|
||||
|
||||
/**
|
||||
* @return mixed
|
||||
*/
|
||||
public function get(string $name)
|
||||
{
|
||||
return $this->data[$name] ?? null;
|
||||
}
|
||||
|
||||
public static function fromRaw(string $raw): self
|
||||
{
|
||||
$parsed = null;
|
||||
|
||||
try {
|
||||
$parsed = Json::decode($raw);
|
||||
} catch (JsonException) {}
|
||||
|
||||
if (!$parsed instanceof stdClass) {
|
||||
throw new RuntimeException();
|
||||
}
|
||||
|
||||
$sub = $parsed->sub ?? null;
|
||||
$iss = $parsed->iss ?? null;
|
||||
$aud = $parsed->aud ?? null;
|
||||
$exp = $parsed->exp ?? null;
|
||||
$iat = $parsed->iat ?? null;
|
||||
$nbf = $parsed->nbf ?? null;
|
||||
$nonce = $parsed->nonce ?? null;
|
||||
$authTime = $parsed->auth_time ?? null;
|
||||
$sid = $parsed->sid ?? null;
|
||||
|
||||
if (is_string($aud)) {
|
||||
$aud = [$aud];
|
||||
}
|
||||
|
||||
if ($aud === null) {
|
||||
$aud = [];
|
||||
}
|
||||
|
||||
if ($iss !== null && !is_string($sub)) {
|
||||
throw new RuntimeException("Bad `sub`.");
|
||||
}
|
||||
|
||||
if ($iss !== null && !is_string($iss)) {
|
||||
throw new RuntimeException("Bad `iss`.");
|
||||
}
|
||||
|
||||
if (!is_array($aud)) {
|
||||
throw new RuntimeException("Bad `aud`.");
|
||||
}
|
||||
|
||||
if ($exp !== null && !is_numeric($exp)) {
|
||||
throw new RuntimeException("Bad `exp`.");
|
||||
}
|
||||
|
||||
if ($iat !== null && !is_numeric($iat)) {
|
||||
throw new RuntimeException("Bad `iat`.");
|
||||
}
|
||||
|
||||
if ($nbf !== null && !is_numeric($nbf)) {
|
||||
throw new RuntimeException("Bad `nbf`.");
|
||||
}
|
||||
|
||||
if ($nonce !== null && !is_string($nonce)) {
|
||||
throw new RuntimeException("Bad `nonce`.");
|
||||
}
|
||||
|
||||
if ($authTime !== null && !is_numeric($authTime)) {
|
||||
throw new RuntimeException("Bad `auth_time`.");
|
||||
}
|
||||
|
||||
if ($sid !== null && !is_string($sid)) {
|
||||
throw new RuntimeException("Bad `sid`.");
|
||||
}
|
||||
|
||||
if ($exp !== null) {
|
||||
$exp = (int) $exp;
|
||||
}
|
||||
|
||||
if ($iat !== null) {
|
||||
$iat = (int) $iat;
|
||||
}
|
||||
|
||||
if ($nbf !== null) {
|
||||
$nbf = (int) $nbf;
|
||||
}
|
||||
|
||||
if ($authTime !== null) {
|
||||
$authTime = (int) $authTime;
|
||||
}
|
||||
|
||||
return new self(
|
||||
$sub,
|
||||
$iss,
|
||||
$aud,
|
||||
$exp,
|
||||
$iat,
|
||||
$nbf,
|
||||
$nonce,
|
||||
$authTime,
|
||||
$sid,
|
||||
get_object_vars($parsed)
|
||||
);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user