<?php

declare(strict_types=1);

/*
 * The MIT License (MIT)
 *
 * Copyright (c) 2014-2020 Spomky-Labs
 *
 * This software may be modified and distributed under the terms
 * of the MIT license.  See the LICENSE file for details.
 */

namespace Jose\Component\Checker;

use function is_float;
use function is_int;

/**
 * This class is a claim checker.
 * When the "nbf" is present, it will compare the value with the current timestamp.
 */
final class NotBeforeChecker implements ClaimChecker, HeaderChecker
{
    private const NAME = 'nbf';

    /**
     * @var int
     */
    private $allowedTimeDrift;
    /**
     * @var bool
     */
    private $protectedHeaderOnly;

    public function __construct(int $allowedTimeDrift = 0, bool $protectedHeaderOnly = false)
    {
        $this->allowedTimeDrift = $allowedTimeDrift;
        $this->protectedHeaderOnly = $protectedHeaderOnly;
    }

    /**
     * {@inheritdoc}
     *
     * @throws InvalidClaimException if the claim "nbf" is not an integer
     * @throws InvalidClaimException if the claim "nbf" restrict the use of the token
     */
    public function checkClaim($value): void
    {
        if (!is_float($value) && !is_int($value)) {
            throw new InvalidClaimException('"nbf" must be an integer.', self::NAME, $value);
        }
        if (time() < $value - $this->allowedTimeDrift) {
            throw new InvalidClaimException('The JWT can not be used yet.', self::NAME, $value);
        }
    }

    public function supportedClaim(): string
    {
        return self::NAME;
    }

    /**
     * @param mixed $value
     *
     * @throws InvalidHeaderException if the claim "nbf" is not an integer
     * @throws InvalidHeaderException if the claim "nbf" restrict the use of the token
     */
    public function checkHeader($value): void
    {
        if (!is_float($value) && !is_int($value)) {
            throw new InvalidHeaderException('"nbf" must be an integer.', self::NAME, $value);
        }
        if (time() < $value - $this->allowedTimeDrift) {
            throw new InvalidHeaderException('The JWT can not be used yet.', self::NAME, $value);
        }
    }

    public function supportedHeader(): string
    {
        return self::NAME;
    }

    public function protectedHeaderOnly(): bool
    {
        return $this->protectedHeaderOnly;
    }
}