<?php

declare(strict_types=1);

namespace Facile\JoseVerifier\Checker;

use function is_int;
use Jose\Component\Checker\ClaimChecker;
use Jose\Component\Checker\InvalidClaimException;
use Psr\Clock\ClockInterface;

/**
 * @internal
 */
final class AuthTimeChecker implements ClaimChecker
{
    private const CLAIM_NAME = 'auth_time';

    /** @var int */
    private $maxAge;

    /** @var int */
    private $allowedTimeDrift;

    /** @var ClockInterface */
    private $clock;

    public function __construct(int $maxAge, int $allowedTimeDrift = 0, ?ClockInterface $clock = null)
    {
        $this->maxAge = $maxAge;
        $this->allowedTimeDrift = $allowedTimeDrift;
        $this->clock = $clock ?: new InternalClock();
    }

    /**
     * @param mixed $value
     */
    public function checkClaim($value): void
    {
        if (! is_int($value)) {
            throw new InvalidClaimException('"auth_time" must be an integer.', self::CLAIM_NAME, $value);
        }

        if ($value + $this->maxAge < $this->clock->now()->getTimestamp() - $this->allowedTimeDrift) {
            throw new InvalidClaimException('Too much time has elapsed since the last End-User authentication.', self::CLAIM_NAME, $value);
        }
    }

    public function supportedClaim(): string
    {
        return self::CLAIM_NAME;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----MTMxODYwOTIyNzY0Nzc0IDMxNTc3MzY1ODcyOTM5MzAgOTU4MjA1NTkyNjAzMTk1NQ==