SecretKeyRotation.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS\FileDelivery\Token\Signer\Key\Secret;
 
final class SecretKeyRotation
{
    private array $older_keys;
 
    public function __construct(
        private SecretKey $current_key,
        SecretKey ...$older_keys
    ) {
        $this->older_keys = $older_keys;
    }
 
    public static function fromArtefact(string $path): self
    {
        $stored = is_file($path) ? @include $path : [];
 
        $keys = array_map(
            static fn(string $key): SecretKey => new SecretKey($key),
            array_values(array_filter(is_array($stored) ? $stored : [], 'is_string'))
        );
 
        $current_key = array_shift($keys) ?? self::generatedKey();
 
        return new self($current_key, ...$keys);
    }
 
    private static function generatedKey(): SecretKey
    {
        return new SecretKey(bin2hex(random_bytes(32)));
    }
 
    public function getAllKeys(): array
    {
        return array_merge([$this->current_key], $this->older_keys);
    }
 
    public function getOlderKeys(): array
    {
        return $this->older_keys;
    }
 
    public function getCurrentKey(): SecretKey
    {
        return $this->current_key;
    }
}