Your IP : 216.73.216.79
<?php
namespace common\components;
class JWT
{
const SECRET_KEY = 'OshIsABeautifulHumanBeing';
private static $algorithms = [
'HS256' => 'sha256',
'HS384' => 'sha384',
'HS512' => 'sha512'
];
private static $algorithm = 'HS256';
private static $secret = 'secret';
private static $leeway = 5;
// seconds
private static $ttl = 30;
// seconds
public static function getVerifiedClaims($token)
{
$algorithms = static::$algorithms;
$algorithm = static::$algorithm;
$secret = static::$secret;
if (! isset($algorithms[$algorithm]))
return false;
$hmac = $algorithms[$algorithm];
$token = explode('.', $token);
if (count($token) < 3)
return false;
$header = json_decode(base64_decode(strtr($token[0], '-_', '+/')), true);
if (! $secret)
return false;
if ($header['typ'] != 'JWT')
return false;
if ($header['alg'] != $algorithm)
return false;
$signature = bin2hex(base64_decode(strtr($token[2], '-_', '+/')));
if ($signature != hash_hmac($hmac, "$token[0].$token[1]", $secret))
return false;
$claims = json_decode(base64_decode(strtr($token[1], '-_', '+/')), true);
if (! $claims)
return false;
return $claims;
}
public static function generateToken($claims)
{
$algorithms = static::$algorithms;
$algorithm = static::$algorithm;
$secret = static::$secret;
$header = [];
$header['typ'] = 'JWT';
$header['alg'] = $algorithm;
$token = [];
$token[0] = rtrim(strtr(base64_encode(json_encode((object) $header)), '+/', '-_'), '=');
// $claims['iat'] = $time;
// $claims['exp'] = $time + $ttl;
$token[1] = rtrim(strtr(base64_encode(json_encode((object) $claims)), '+/', '-_'), '=');
if (! isset($algorithms[$algorithm]))
return false;
$hmac = $algorithms[$algorithm];
$signature = hash_hmac($hmac, "$token[0].$token[1]", $secret, true);
$token[2] = rtrim(strtr(base64_encode($signature), '+/', '-_'), '=');
return implode('.', $token);
}
}