<?php

declare(strict_types=1);

namespace Jose\Component\Checker;

use Override;
use Psr\Clock\ClockInterface;
use function is_float;
use function is_int;

/**
 * This class is a claim checker.
 *
 * When the "exp" is present, it will compare the value with the current timestamp.
 */
final readonly class ExpirationTimeChecker implements ClaimChecker, HeaderChecker
{
    private const NAME = 'exp';

    public function __construct(
        private ClockInterface $clock,
        private int $allowedTimeDrift = 0,
        private bool $protectedHeaderOnly = false,
    ) {
    }

    #[Override]
    public function checkClaim(mixed $value): void
    {
        if (! is_float($value) && ! is_int($value)) {
            throw new InvalidClaimException('"exp" must be an integer.', self::NAME, $value);
        }

        $now = $this->clock->now()
            ->getTimestamp();
        if ($now > $value + $this->allowedTimeDrift) {
            throw new InvalidClaimException('The token expired.', self::NAME, $value);
        }
    }

    #[Override]
    public function supportedClaim(): string
    {
        return self::NAME;
    }

    #[Override]
    public function checkHeader(mixed $value): void
    {
        if (! is_float($value) && ! is_int($value)) {
            throw new InvalidHeaderException('"exp" must be an integer.', self::NAME, $value);
        }

        $now = $this->clock->now()
            ->getTimestamp();
        if ($now > $value + $this->allowedTimeDrift) {
            throw new InvalidHeaderException('The token expired.', self::NAME, $value);
        }
    }

    #[Override]
    public function supportedHeader(): string
    {
        return self::NAME;
    }

    #[Override]
    public function protectedHeaderOnly(): bool
    {
        return $this->protectedHeaderOnly;
    }
}