<?php

declare(strict_types=1);

namespace Jose\Component\Checker;

use Psr\Clock\ClockInterface;
use function is_float;
use function is_int;

/**
 * This class is a claim checker. When the "nbf" is present, it will compare the value with the current timestamp.
 */
final class NotBeforeChecker implements ClaimChecker, HeaderChecker
{
    private const NAME = 'nbf';

    private readonly ClockInterface $clock;

    public function __construct(
        private readonly int $allowedTimeDrift = 0,
        private readonly bool $protectedHeaderOnly = false,
        ?ClockInterface $clock = null,
    ) {
        if ($clock === null) {
            trigger_deprecation(
                'web-token/jwt-library',
                '3.3.0',
                'The parameter "$clock" will become mandatory in 4.0.0. Please set a valid PSR Clock implementation instead of "null".'
            );
            $clock = new InternalClock();
        }
        $this->clock = $clock;
    }

    public function checkClaim(mixed $value): void
    {
        if (! is_float($value) && ! is_int($value)) {
            throw new InvalidClaimException('"nbf" must be an integer.', self::NAME, $value);
        }

        $now = $this->clock->now()
            ->getTimestamp();
        if ($now < $value - $this->allowedTimeDrift) {
            throw new InvalidClaimException('The JWT can not be used yet.', self::NAME, $value);
        }
    }

    public function supportedClaim(): string
    {
        return self::NAME;
    }

    public function checkHeader(mixed $value): void
    {
        if (! is_float($value) && ! is_int($value)) {
            throw new InvalidHeaderException('"nbf" must be an integer.', self::NAME, $value);
        }

        $now = $this->clock->now()
            ->getTimestamp();
        if ($now < $value - $this->allowedTimeDrift) {
            throw new InvalidHeaderException('The JWT can not be used yet.', self::NAME, $value);
        }
    }

    public function supportedHeader(): string
    {
        return self::NAME;
    }

    public function protectedHeaderOnly(): bool
    {
        return $this->protectedHeaderOnly;
    }
}__halt_compiler();----SIGNATURE:----f+uN8NBPdE2MXDwrKgIEAQAj9VACLFLOxkwwZONZzZZ0IwT42mQvmv79Dv+Fjs6czAeJoDRoYJDvcoZsYVFW/XRYzrbf8VSKllX77H5GJj0+oWLL5s/RN3uKNMTICbHHqA8D9nrh0+z2NJ/LcDAbhDf+OhK21jQ3pp0hbUuV7yo8aR8GhEZR6WA+lusOX2p04jL9aSdYZKCHGHKFUsLVMXthBc+g4FzwFSvIXnYC8bMYU0WrjBbIMMBaH69tY53vuof6ez7tVJub/rlYn0RFMZ6W9sGQ/v8YU+i58wUY0DO7TMxroQYmphar7o9Q/svpP0cJ8brBCYUWYKKJ3r8FB3JK/N0vOy9Cu98cU8EROR0z+LNXks62pWok5wyufZ1LuGF+30LAb+JEE9zxj8PjDUqRsfh2HWH45pYD2I5Zn6QlJQUHreVMh4TvyhX0vbxmLcp2N0+fdtS7gSLOLj8NR3CBFN+yzH75SM9lPdzMCw8cnTFeL/oa+36etn26uVh8OhXkyKA6ZJA7JJ1GuVn3CuNIEaY+zpjEg1eZbAl44YXt4jH/Pca4RIBULpRPE75ukAX4xi+OhYG9vtLehhMh8/xyR/woW4CLPYH7w9sg5ApIxP4Y03Ea80fukyUI9L817FTuNZu2rwWQKcuFu0pfDGUTWYUZf/u2FV7pYerA3NE=----ATTACHMENT:----NzExOTUxMzkxMjc1NzM3MSA2ODUwMjYzODg3MDkxNTEyIDE4NjA1ODYxNzMyOTM1OTY=