<?php

namespace Jose\Component\Checker;

use Psr\Clock\ClockInterface;

use function is_float;
use function is_int;

/**
 * This class is a claim checker. When the "iat" is present, it will compare the value with the current timestamp.
 */
final class IssuedAtChecker implements ClaimChecker, HeaderChecker
{
    private const NAME = 'iat';

    private readonly ClockInterface $clock;

    public function __construct(
        private readonly int $allowedTimeDrift = 0,
        private readonly bool $protectedHeaderOnly = false,
        ?ClockInterface $clock = null,
    ) {
        if ($clock === null) {
            trigger_deprecation(
                'web-token/jwt-library',
                '3.3.0',
                'The parameter "$clock" will become mandatory in 4.0.0. Please set a valid PSR Clock implementation instead of "null".'
            );
            $clock = new InternalClock();
        }
        $this->clock = $clock;
    }

    public function checkClaim(mixed $value): void
    {
        if (! is_float($value) && ! is_int($value)) {
            throw new InvalidClaimException('"iat" must be an integer.', self::NAME, $value);
        }

        $now = $this->clock->now()
            ->getTimestamp();
        if ($now < $value - $this->allowedTimeDrift) {
            throw new InvalidClaimException('The JWT is issued in the future.', self::NAME, $value);
        }
    }

    public function supportedClaim(): string
    {
        return self::NAME;
    }

    public function checkHeader(mixed $value): void
    {
        if (! is_float($value) && ! is_int($value)) {
            throw new InvalidHeaderException('The header "iat" must be an integer.', self::NAME, $value);
        }

        $now = $this->clock->now()
            ->getTimestamp();
        if ($now < $value - $this->allowedTimeDrift) {
            throw new InvalidHeaderException('The JWT is issued in the future.', self::NAME, $value);
        }
    }

    public function supportedHeader(): string
    {
        return self::NAME;
    }

    public function protectedHeaderOnly(): bool
    {
        return $this->protectedHeaderOnly;
    }
}__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----NzE0NzQ5NTU2ODE4ODI5OCAyMDA4Mjc5OTkwODI1NDYgNTY4NjYwNzUzMzMzOTM0OQ==