<?php

declare(strict_types=1);

namespace Facile\JoseVerifier\Checker;

use function is_int;
use Jose\Component\Checker\ClaimChecker;
use Jose\Component\Checker\InvalidClaimException;
use Psr\Clock\ClockInterface;

/**
 * @internal
 */
final class AuthTimeChecker implements ClaimChecker
{
    private const CLAIM_NAME = 'auth_time';

    /** @var int */
    private $maxAge;

    /** @var int */
    private $allowedTimeDrift;

    /** @var ClockInterface */
    private $clock;

    public function __construct(int $maxAge, int $allowedTimeDrift = 0, ?ClockInterface $clock = null)
    {
        $this->maxAge = $maxAge;
        $this->allowedTimeDrift = $allowedTimeDrift;
        $this->clock = $clock ?: new InternalClock();
    }

    /**
     * @param mixed $value
     */
    public function checkClaim($value): void
    {
        if (! is_int($value)) {
            throw new InvalidClaimException('"auth_time" must be an integer.', self::CLAIM_NAME, $value);
        }

        if ($value + $this->maxAge < $this->clock->now()->getTimestamp() - $this->allowedTimeDrift) {
            throw new InvalidClaimException('Too much time has elapsed since the last End-User authentication.', self::CLAIM_NAME, $value);
        }
    }

    public function supportedClaim(): string
    {
        return self::CLAIM_NAME;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----OTA3MDMzMzA2MTA4NzA5MiA0NTYzODc5MjgxNDQxNjE3IDc1NTI1NTEwNzMxMDg0MzE=