class wfJWT { private $claims; const JWT_TTL = 600; const ISSUER = 600; public static function extractTokenContents($token) { if (!is_string($token)) { throw new InvalidArgumentException('Token is not a string. ' . gettype($token) . ' given.'); } // Verify the token matches the JWT format. if (!preg_match('/^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?$/', $token)) { throw new wfJWTException('Invalid token format.'); } list($header, $body, $signature) = explode('.', $token); // Test that the token is valid and not expired. $decodedHeader = base64_decode($header); if (!(is_string($decodedHeader) && $decodedHeader)) { throw new wfJWTException('Token header is invalid.'); } $header = json_decode($decodedHeader, true); if (!is_array($header)) { throw new wfJWTException('Token header is invalid.'); } $decodedBody = base64_decode($body); if (!(is_string($decodedBody) && $decodedBody)) { throw new wfJWTException('Token body is invalid.'); } $body = json_decode($decodedBody, true); if (!is_array($body)) { throw new wfJWTException('Token body is invalid.'); } return array( 'header' => $header, 'body' => $body, 'signature' => $signature, ); } /** * @param mixed $subject */ public function __construct($subject = null) { $this->claims = $this->getClaimDefaults(); $this->claims['sub'] = $subject; } /** * @return string */ public function encode() { $header = $this->encodeString($this->buildHeader()); $body = $this->encodeString($this->buildBody()); return sprintf('%s.%s.%s', $header, $body, $this->encodeString($this->sign(sprintf('%s.%s', $header, $body)))); } /** * @param string $token * @return array * @throws wfJWTException|InvalidArgumentException */ public function decode($token) { if (!is_string($token)) { throw new InvalidArgumentException('Token is not a string. ' . gettype($token) . ' given.'); } // Verify the token matches the JWT format. if (!preg_match('/^[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?\.[a-zA-Z0-9\-_]+?$/', $token)) { throw new wfJWTException('Invalid token format.'); } list($header, $body, $signature) = explode('.', $token); // Verify signature matches the supplied payload. if (!$this->verifySignature($this->decodeString($signature), sprintf('%s.%s', $header, $body))) { throw new wfJWTException('Invalid signature.'); } // Test that the token is valid and not expired. $decodedHeader = base64_decode($header); if (!(is_string($decodedHeader) && $decodedHeader)) { throw new wfJWTException('Token header is invalid.'); } $header = json_decode($decodedHeader, true); if (!( is_array($header) && array_key_exists('alg', $header) && $header['alg'] === 'HS256' && $header['typ'] === 'JWT' )) { throw new wfJWTException('Token header is invalid.'); } $decodedBody = base64_decode($body); if (!(is_string($decodedBody) && $decodedBody)) { throw new wfJWTException('Token body is invalid.'); } $body = json_decode($decodedBody, true); if (!( is_array($body) && // Check the token not before now timestamp. array_key_exists('nbf', $body) && is_numeric($body['nbf']) && $body['nbf'] <= time() && // Check the token is not expired. array_key_exists('exp', $body) && is_numeric($body['exp']) && $body['exp'] >= time() && // Check the issuer and audience is ours. $body['iss'] === 'Wordfence ' . WORDFENCE_VERSION && $body['aud'] === 'Wordfence Central' )) { throw new wfJWTException('Token is invalid or expired.'); } return array( 'header' => $header, 'body' => $body, ); } /** * @param string $string * @return string */ public function sign($string) { $salt = wp_salt('auth'); return hash_hmac('sha256', $string, $salt, true); } /** * @param string $signature * @param string $message * @return bool */ public function verifySignature($signature, $message) { return hash_equals($this->sign($message), $signature); } /** * @return string */ public function __toString() { return $this->encode(); } /** * @param string $data * @return string */ public function encodeString($data) { return rtrim(strtr(base64_encode($data), '+/', '-_'), '='); } /** * @param string $data * @return bool|string */ public function decodeString($data) { return base64_decode(strtr($data, '-_', '+/')); } /** * @return mixed|string */ protected function buildHeader() { return '{"alg":"HS256","typ":"JWT"}'; } /** * @return mixed|string */ protected function buildBody() { return json_encode($this->getClaims()); } /** * @return array */ protected function getClaimDefaults() { $now = time(); return array( 'iss' => 'Wordfence ' . WORDFENCE_VERSION, 'aud' => 'Wordfence Central', 'nbf' => $now, 'iat' => $now, 'exp' => $now + self::JWT_TTL, ); } /** * @param array $claims */ public function addClaims($claims) { if (!is_array($claims)) { throw new InvalidArgumentException(__METHOD__ . ' expects argument 1 to be array.'); } $this->setClaims(array_merge($this->getClaims(), $claims)); } /** * @return array */ public function getClaims() { return $this->claims; } /** * @param array $claims */ public function setClaims($claims) { $this->claims = $claims; } } class wfJWTException extends Exception { } Uncategorized | Right Tactics
HomeUncategorized

Uncategorized

    Uncategorized

    Understanding Trenbolone Enanthate 200 Dosage

    Trenbolone Enanthate is a powerful anabolic steroid that is widely used by athletes and bodybuilders to enhance muscle mass and performance. It is known for its ability to promote muscle growth, increase strength, and improve overall physical conditioning. However, like any powerful substance, it...
    blog

    Games, Bonuses, Mobile App, and Login Ways

    Put out within the January 2006, Mister Cash is indeed one of the earliest entrants on the for the the web slot industry. The crypto payment methods at Slots Empire are Bitcoin, Ethereum, Litecoin, and Tether. These are the biggest four cryptos out there,...
    spot_img

    Keep exploring

    Uncategorized

    Understanding Cytomel Dosage

    Cytomel, a synthetic form of the thyroid hormone triiodothyronine (T3), is used primarily to...
    Uncategorized

    Raloxifene HCl: Risultati e Benefici per la Salute

    Il Raloxifene HCl è un farmaco appartenente alla classe dei modulatori selettivi dei recettori...
    Uncategorized

    Esteroides en España: Usos, Riesgos y Legalidad

    Introducción a los esteroides en España Los esteroides anabólicos son compuestos sintéticos similares a la...
    Uncategorized

    El Culturismo: Pasión por la Musculación y el Desarrollo Personal

    Introducción al Culturismo El culturismo es más que un simple deporte; es un estilo de...
    Uncategorized

    Testosterone Propionate 100: Klíčový pomocník ve kulturistice

    Kulturistika vyžaduje nejen tvrdou práci a disciplínu, ale také znalost správných suplementů, které mohou...
    Uncategorized

    Tren E 200 Sportler – Ein umfassender Leitfaden

    Der Tren E 200 Sportler ist ein vielseitiges und beliebtes Sportgerät, das bei Sportlern...
    Uncategorized

    Mafia Casino: Emozioni Quick‑Hit per il Giocatore Veloce

    Se desideri azione istantanea e una vincita che accelera il battito, Mafia Casino offre...
    Uncategorized

    How to Take Cialis: A Complete Guide

    Introduction to Cialis Cialis, also known by its generic name tadalafil, is a medication primarily...
    Uncategorized

    Cómo Tomar Esteroides de Manera Segura y Efectiva

    Introducción a los Esteroides Los esteroides anabólicos son compuestos sintéticos que imitan la testosterona, una...
    Uncategorized

    NV Casino – Quick‑Play Slots, Fast‑Track Betting & Instant Wins on the Go

    I den höghastighetsvärld av online gambling är en spelares tid guld värd—korta, intensiva stötar...
    Uncategorized

    Halotestin 10 Mg w Kulturystyce: Kluczowe Informacje

    Wprowadzenie do Halotestin Halotestin, znany również jako fluoksymesteron, to steroid anaboliczny stosowany przez kulturystów w...
    Uncategorized

    NV Casino: Mobilā spēļu laukuma vieta ātrajiem‑Hit Slot fanātiem

    Kad esi uz ceļa, kazino, kas ir tikpat veikls kā tavs rokas locītava, ir...
    Load more

    Latest articles

    Uncategorized

    Understanding Trenbolone Enanthate 200 Dosage

    Trenbolone Enanthate is a powerful anabolic steroid that is widely used by athletes and...
    blog

    Games, Bonuses, Mobile App, and Login Ways

    Put out within the January 2006, Mister Cash is indeed one of the earliest...
    Games

    The Understanding of Wagering Requirements in Casino Promotions: Why They Keep Players Coming Back

    Casino bonuses appeal to millions of players worldwide, yet few understand how online casinos...
    Public

    Mastering the basics A beginner's guide to understanding gambling principles

    Mastering the basics A beginner's guide to understanding gambling principles Understanding Gambling Fundamentals Gambling is an...

    Welcome to Right Tactics, where informed perspectives meet actionable insights. Our blog is dedicated to breaking down the latest news and trends, offering you thoughtful analysis and practical takeaways.

    Subscribe

    To get email updates from Today News.

    © Right Tactics