vendor/lexik/jwt-authentication-bundle/Encoder/LcobucciJWTEncoder.php line 47

Open in your IDE?
  1. <?php
  3. namespace Lexik\Bundle\JWTAuthenticationBundle\Encoder;
  5. use Lexik\Bundle\JWTAuthenticationBundle\Exception\JWTDecodeFailureException;
  6. use Lexik\Bundle\JWTAuthenticationBundle\Exception\JWTEncodeFailureException;
  7. use Lexik\Bundle\JWTAuthenticationBundle\Services\JWSProvider\JWSProviderInterface;
  9. /**
  10. * Json Web Token encoder/decoder based on the lcobucci/jwt library.
  11. *
  12. * @author Robin Chalas <robin.chalas@gmail.com>
  13. */
  14. class LcobucciJWTEncoder implements JWTEncoderInterface, HeaderAwareJWTEncoderInterface
  15. {
  16. /**
  17. * @var JWSProviderInterface
  18. */
  19. protected $jwsProvider;
  21. public function __construct(JWSProviderInterface $jwsProvider)
  22. {
  23. $this->jwsProvider = $jwsProvider;
  24. }
  26. /**
  27. * {@inheritdoc}
  28. */
  29. public function encode(array $payload, array $header = [])
  30. {
  31. try {
  32. $jws = $this->jwsProvider->create($payload, $header);
  33. } catch (\InvalidArgumentException $e) {
  34. throw new JWTEncodeFailureException(JWTEncodeFailureException::INVALID_CONFIG, 'An error occurred while trying to encode the JWT token. Please verify your configuration (private key/passphrase)', $e, $payload);
  35. }
  37. if (!$jws->isSigned()) {
  38. throw new JWTEncodeFailureException(JWTEncodeFailureException::UNSIGNED_TOKEN, 'Unable to create a signed JWT from the given configuration.', null, $payload);
  39. }
  41. return $jws->getToken();
  42. }
  44. /**
  45. * {@inheritdoc}
  46. */
  47. public function decode($token)
  48. {
  49. try {
  50. $jws = $this->jwsProvider->load($token);
  51. } catch (\Exception $e) {
  52. throw new JWTDecodeFailureException(JWTDecodeFailureException::INVALID_TOKEN, 'Invalid JWT Token', $e);
  53. }
  55. if ($jws->isInvalid()) {
  56. throw new JWTDecodeFailureException(JWTDecodeFailureException::INVALID_TOKEN, 'Invalid JWT Token', null, $jws->getPayload());
  57. }
  59. if ($jws->isExpired()) {
  60. throw new JWTDecodeFailureException(JWTDecodeFailureException::EXPIRED_TOKEN, 'Expired JWT Token', null, $jws->getPayload());
  61. }
  63. if (!$jws->isVerified()) {
  64. throw new JWTDecodeFailureException(JWTDecodeFailureException::UNVERIFIED_TOKEN, 'Unable to verify the given JWT through the given configuration. If the "lexik_jwt_authentication.encoder" encryption options have been changed since your last authentication, please renew the token. If the problem persists, verify that the configured keys/passphrase are valid.', null, $jws->getPayload());
  65. }
  67. return $jws->getPayload();
  68. }
  69. }