<?php declare(strict_types=1); namespace Jose\Component\Checker; use function in_array; use function is_array; use function is_string; /** * This class is a header parameter and claim checker. When the "aud" header parameter or claim is present, it will * check if the value is within the allowed ones. */ final class AudienceChecker implements ClaimChecker, HeaderChecker { private const CLAIM_NAME = 'aud'; public function __construct( private readonly string $audience, private readonly bool $protectedHeader = false ) { } /** * {@inheritdoc} */ public function checkClaim(mixed $value): void { $this->checkValue($value, InvalidClaimException::class); } /** * {@inheritdoc} */ public function checkHeader(mixed $value): void { $this->checkValue($value, InvalidHeaderException::class); } public function supportedClaim(): string { return self::CLAIM_NAME; } public function supportedHeader(): string { return self::CLAIM_NAME; } public function protectedHeaderOnly(): bool { return $this->protectedHeader; } private function checkValue(mixed $value, string $class): void { if (is_string($value) && $value !== $this->audience) { throw new $class('Bad audience.', self::CLAIM_NAME, $value); } if (is_array($value) && ! in_array($this->audience, $value, true)) { throw new $class('Bad audience.', self::CLAIM_NAME, $value); } if (! is_array($value) && ! is_string($value)) { throw new $class('Bad audience.', self::CLAIM_NAME, $value); } } }