defender-security / vendor / web-auth / webauthn-lib / src / TokenBinding / SecTokenBindingHandler.php

SecTokenBindingHandler.php in Defender Security – Malware Scanner, Login Security & Firewall 3.1.0, at vendor/web-auth/webauthn-lib/src/TokenBinding/SecTokenBindingHandler.php

34 lines 1.1 KB

Raw Download Zip

1	<?php
2
3	declare(strict_types=1);
4
5	/*
6	* The MIT License (MIT)
7	*
8	* Copyright (c) 2014-2021 Spomky-Labs
9	*
10	* This software may be modified and distributed under the terms
11	* of the MIT license. See the LICENSE file for details.
12	*/
13
14	namespace Webauthn\TokenBinding;
15
16	use Assert\Assertion;
17	use Psr\Http\Message\ServerRequestInterface;
18
19	final class SecTokenBindingHandler implements TokenBindingHandler
20	{
21	public function check(TokenBinding $tokenBinding, ServerRequestInterface $request): void
22	{
23	if (TokenBinding::TOKEN_BINDING_STATUS_PRESENT !== $tokenBinding->getStatus()) {
24	return;
25	}
26
27	Assertion::true($request->hasHeader('Sec-Token-Binding'), 'The header parameter "Sec-Token-Binding" is missing.');
28	$tokenBindingIds = $request->getHeader('Sec-Token-Binding');
29	Assertion::count($tokenBindingIds, 1, 'The header parameter "Sec-Token-Binding" is invalid.');
30	$tokenBindingId = reset($tokenBindingIds);
31	Assertion::eq($tokenBindingId, $tokenBinding->getId(), 'The header parameter "Sec-Token-Binding" is invalid.');
32	}
33	}
34