KeyRotatingSigner.php

Go to the documentation of this file.

<?php
 
declare(strict_types=1);
 
namespace ILIAS\FileDelivery\Token\Signer;
 
use ILIAS\FileDelivery\Token\Signer\Key\Signing\SigningKeyGenerator;
use ILIAS\FileDelivery\Token\Signer\Key\Secret\SecretKeyRotation;
use ILIAS\FileDelivery\Token\Signer\Salt\Salt;
use ILIAS\FileDelivery\Token\Signer\Key\Secret\SecretKey;
 
final class KeyRotatingSigner
{
    private SecretKey $current_secret_key;
 
    public function __construct(
        private SecretKeyRotation $key_rotation,
        private Signer $signer,
        private SigningKeyGenerator $signing_key_generator,
    ) {
        $this->current_secret_key = $key_rotation->getCurrentKey();
    }
 
    public function sign(string $signable_payload, Salt $salt): string
    {
        return $this->signer->sign(
            $signable_payload,
            $this->signing_key_generator->generate(
                $this->current_secret_key,
                $salt
            )
        );
    }
 
    public function verify(
        string $data,
        string $signature,
        int $validity,
        Salt $salt
    ): bool {
        foreach ($this->key_rotation->getAllKeys() as $secret_key) {
            $signing_key = $this->signing_key_generator->generate($secret_key, $salt);
            if ($this->signer->verify(
                $data,
                $signature,
                $validity,
                $signing_key
            )) {
                return true;
            }
        }
        return false;
    }
}