Rev 566 | Rev 571 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed
| Rev | Author | Line No. | Line |
|---|---|---|---|
| 566 | daniel-mar | 1 | <?php |
| 2 | |||
| 3 | /* |
||
| 4 | * OIDplus 2.0 |
||
| 5 | * Copyright 2019 - 2021 Daniel Marschall, ViaThinkSoft |
||
| 6 | * |
||
| 7 | * Licensed under the Apache License, Version 2.0 (the "License"); |
||
| 8 | * you may not use this file except in compliance with the License. |
||
| 9 | * You may obtain a copy of the License at |
||
| 10 | * |
||
| 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
||
| 12 | * |
||
| 13 | * Unless required by applicable law or agreed to in writing, software |
||
| 14 | * distributed under the License is distributed on an "AS IS" BASIS, |
||
| 15 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||
| 16 | * See the License for the specific language governing permissions and |
||
| 17 | * limitations under the License. |
||
| 18 | */ |
||
| 19 | |||
| 20 | if (!defined('INSIDE_OIDPLUS')) die(); |
||
| 21 | |||
| 22 | class OIDplusAuthContentStoreJWT extends OIDplusAuthContentStoreDummy { |
||
| 23 | |||
| 24 | // Individual functions |
||
| 25 | |||
| 570 | daniel-mar | 26 | public function loadJWT($jwt) { |
| 27 | if (OIDplus::getPkiStatus()) { |
||
| 28 | $pubKey = OIDplus::config()->getValue('oidplus_public_key'); |
||
| 29 | $this->content = (array) \Firebase\JWT\JWT::decode($jwt, $pubKey, array('RS256', 'RS384', 'RS512')); |
||
| 30 | } else { |
||
| 31 | $key = OIDplus::baseConfig()->getValue('SERVER_SECRET', ''); |
||
| 32 | $key = hash_pbkdf2('sha512', $key, '', 10000, 64/*256bit*/, false); |
||
| 33 | $this->content = (array) \Firebase\JWT\JWT::decode($jwt, $key, array('HS256', 'HS384', 'HS512')); |
||
| 34 | } |
||
| 566 | daniel-mar | 35 | } |
| 36 | |||
| 570 | daniel-mar | 37 | public function getJWTToken($lifetime=100*365*24*60*60) { |
| 566 | daniel-mar | 38 | $payload = $this->content; |
| 39 | $payload["iss"] = "http://oidplus.com"; |
||
| 40 | $payload["aud"] = "http://oidplus.com"; |
||
| 570 | daniel-mar | 41 | $payload["jti"] = gen_uuid(); |
| 566 | daniel-mar | 42 | $payload["iat"] = time(); |
| 43 | $payload["exp"] = time() + $lifetime; |
||
| 570 | daniel-mar | 44 | |
| 45 | if (OIDplus::getPkiStatus()) { |
||
| 46 | $privKey = OIDplus::config()->getValue('oidplus_private_key'); |
||
| 47 | return \Firebase\JWT\JWT::encode($payload, $privKey, 'RS512'); |
||
| 48 | } else { |
||
| 49 | $key = OIDplus::baseConfig()->getValue('SERVER_SECRET', ''); |
||
| 50 | $key = hash_pbkdf2('sha512', $key, '', 10000, 64/*256bit*/, false); |
||
| 51 | return \Firebase\JWT\JWT::encode($payload, $key, 'HS512'); |
||
| 52 | } |
||
| 566 | daniel-mar | 53 | } |
| 54 | |||
| 570 | daniel-mar | 55 | } |