![]() Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/corals/old/vendor/web-token/jwt-framework/src/Component/Console/ |
<?php declare(strict_types=1); namespace Jose\Component\Console; use InvalidArgumentException; use Jose\Component\Core\JWKSet; use Jose\Component\Core\Util\JsonConverter; use Jose\Component\KeyManagement\Analyzer\KeyAnalyzerManager; use Jose\Component\KeyManagement\Analyzer\KeysetAnalyzerManager; use Jose\Component\KeyManagement\Analyzer\MessageBag; use Symfony\Component\Console\Attribute\AsCommand; use Symfony\Component\Console\Command\Command; use Symfony\Component\Console\Formatter\OutputFormatterStyle; use Symfony\Component\Console\Input\InputArgument; use Symfony\Component\Console\Input\InputInterface; use Symfony\Component\Console\Output\OutputInterface; use function is_array; use function is_string; #[AsCommand(name: 'keyset:analyze', description: 'JWKSet quality analyzer.',)] final class KeysetAnalyzerCommand extends Command { protected static $defaultName = 'keyset:analyze'; protected static $defaultDescription = 'JWKSet quality analyzer.'; public function __construct( private readonly KeysetAnalyzerManager $keysetAnalyzerManager, private readonly KeyAnalyzerManager $keyAnalyzerManager, string $name = null ) { parent::__construct($name); } protected function configure(): void { parent::configure(); $this->setHelp('This command will analyze a JWKSet object and find security issues.') ->addArgument('jwkset', InputArgument::REQUIRED, 'The JWKSet object'); } protected function execute(InputInterface $input, OutputInterface $output): int { $output->getFormatter() ->setStyle('success', new OutputFormatterStyle('white', 'green')); $output->getFormatter() ->setStyle('high', new OutputFormatterStyle('white', 'red', ['bold'])); $output->getFormatter() ->setStyle('medium', new OutputFormatterStyle('yellow')); $output->getFormatter() ->setStyle('low', new OutputFormatterStyle('blue')); $jwkset = $this->getKeyset($input); $messages = $this->keysetAnalyzerManager->analyze($jwkset); $this->showMessages($messages, $output); foreach ($jwkset as $kid => $jwk) { $output->writeln(sprintf('Analysing key with index/kid "%s"', $kid)); $messages = $this->keyAnalyzerManager->analyze($jwk); $this->showMessages($messages, $output); } return self::SUCCESS; } private function showMessages(MessageBag $messages, OutputInterface $output): void { if ($messages->count() === 0) { $output->writeln(' <success>All good! No issue found.</success>'); } else { foreach ($messages->all() as $message) { $output->writeln( ' <' . $message->getSeverity() . '>* ' . $message->getMessage() . '</' . $message->getSeverity() . '>' ); } } } private function getKeyset(InputInterface $input): JWKSet { $jwkset = $input->getArgument('jwkset'); if (! is_string($jwkset)) { throw new InvalidArgumentException('Invalid JWKSet'); } $json = JsonConverter::decode($jwkset); if (! is_array($json)) { throw new InvalidArgumentException('Invalid JWKSet'); } return JWKSet::createFromKeyData($json); } }