1. class
  2. Hypervel
  3. \
  4. Passport
  5. \
  6. DpopProofValidator

DpopProofValidator

class DpopProofValidator

Constants

protected MAX_PROOF_BYTES

protected PROOF_LIFETIME

protected CONTEXT_KEY

Methods

__construct(Repository $config, JwkValidator $keys, ReplayCache $replays, ServerFactory $servers)

Create the proof validator with shared replay storage and server policy.

string
validate(ServerRequestInterface $request, string|null $accessToken = null, string|null $thumbprint = null)

Validate a proof and return its public key thumbprint.

string
normalizeUri(string $uri)

Normalize an HTTP target without its query or fragment.

string
thumbprint(array $jwk)

Hash the validated public JWK's required members in RFC 7638 order.

OAuthServerException
invalidProof(string|null $hint = null)

Describe a rejected proof without exposing its signed contents.

Details

at line 31
__construct(Repository $config, JwkValidator $keys, ReplayCache $replays, ServerFactory $servers)

Create the proof validator with shared replay storage and server policy.

Parameters

Repository $config
JwkValidator $keys
ReplayCache $replays
ServerFactory $servers

at line 42
string validate(ServerRequestInterface $request, string|null $accessToken = null, string|null $thumbprint = null)

Validate a proof and return its public key thumbprint.

Parameters

ServerRequestInterface $request
string|null $accessToken
string|null $thumbprint

Return Value

string

at line 131
protected string normalizeUri(string $uri)

Normalize an HTTP target without its query or fragment.

Parameters

string $uri

Return Value

string

at line 152
protected string thumbprint(array $jwk)

Hash the validated public JWK's required members in RFC 7638 order.

Parameters

array $jwk

Return Value

string

at line 166
protected OAuthServerException invalidProof(string|null $hint = null)

Describe a rejected proof without exposing its signed contents.

Parameters

string|null $hint

Return Value

OAuthServerException