Class JwtAuthenticator

Namespace: Authentication\Authenticator

Property Summary

$_config protected

array<string, mixed>

Runtime config
$_configInitialized protected

bool

Whether the config property has already been configured with defaults
$_defaultConfig protected

array
Default config for this object.
- fields The fields to use to identify a user by.
$_identifier protected

Authentication\Identifier\IdentifierInterface

Identifier or identifiers collection.
$payload protected

object|null

Payload data.

Method Summary

__construct() public

Constructor
_configDelete() protected

Deletes a single config key.
_configRead() protected

Reads a config key.
_configWrite() protected

Writes a config key.
authenticate() public

Authenticates the identity based on a JWT token contained in a request.
configShallow() public

Merge provided config with existing config. Unlike config() which does a recursive merge for nested keys, this method does a simple merge.
decodeToken() protected

Decode JWT token.
getConfig() public

Returns the config.
getConfigOrFail() public

Returns the config for this specific key.
getIdentifier() public

Gets the identifier.
getPayload() public

Get payload data.
getToken() protected

Checks if the token is in the headers or a request parameter
getTokenFromHeader() protected

Gets the token from the request headers
getTokenFromQuery() protected

Gets the token from the request query
setConfig() public

Sets the config.
setIdentifier() public

Sets the identifier.
stripTokenPrefix() protected

Strips a prefix from a token
unauthorizedChallenge() public

No-op method.

Method Detail

__construct() ¶ public

__construct(Authentication\Identifier\IdentifierInterface $identifier, array $config = [])

Constructor

Parameters

Authentication\Identifier\IdentifierInterface $identifier
array $config optional

_configDelete() ¶ protected

_configDelete(string $key): void

Deletes a single config key.

Parameters

string $key: Key to delete.

Returns

void

Throws

Cake\Core\Exception\CakeException
if attempting to clobber existing config

_configRead() ¶ protected

_configRead(string|null $key): mixed

Reads a config key.

Parameters

string|null $key: Key to read.

Returns

mixed

_configWrite() ¶ protected

_configWrite(array<string, mixed>|string $key, mixed $value, string|bool $merge = false): void

Writes a config key.

Parameters

array<string, mixed>|string $key: Key to write to.
mixed $value: Value to write.
string|bool $merge optional: True to merge recursively, 'shallow' for simple merge, false to overwrite, defaults to false.

Returns

void

Throws

Cake\Core\Exception\CakeException
if attempting to clobber existing config

authenticate() ¶ public

authenticate(Psr\Http\Message\ServerRequestInterface $request): Authentication\Authenticator\ResultInterface

Authenticates the identity based on a JWT token contained in a request.

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request that contains login information.

Returns

Authentication\Authenticator\ResultInterface

Links

https://jwt.io/

configShallow() ¶ public

configShallow(array<string, mixed>|string $key, mixed|null $value = null): $this

Merge provided config with existing config. Unlike config() which does a recursive merge for nested keys, this method does a simple merge.

Setting a specific value:

$this->configShallow('key', $value);

Setting a nested value:

$this->configShallow('some.nested.key', $value);

Updating multiple config settings at the same time:

$this->configShallow(['one' => 'value', 'another' => 'value']);

Parameters

array<string, mixed>|string $key: The key to set, or a complete array of configs.
mixed|null $value optional: The value to set.

Returns

$this

decodeToken() ¶ protected

decodeToken(string $token): object|null

Decode JWT token.

Parameters

string $token: JWT token to decode.

Returns

object|null

getConfig() ¶ public

getConfig(string|null $key = null, mixed $default = null): mixed

Returns the config.

Usage

Reading the whole config:

$this->getConfig();

Reading a specific value:

$this->getConfig('key');

Reading a nested value:

$this->getConfig('some.nested.key');

Reading with default value:

$this->getConfig('some-key', 'default-value');

Parameters

string|null $key optional: The key to get or null for the whole config.
mixed $default optional: The return value when the key does not exist.

Returns

mixed

getConfigOrFail() ¶ public

getConfigOrFail(string $key): mixed

Returns the config for this specific key.

The config value for this key must exist, it can never be null.

Parameters

string $key: The key to get.

Returns

mixed

Throws

InvalidArgumentException

getIdentifier() ¶ public

getIdentifier(): Authentication\Identifier\IdentifierInterface

Gets the identifier.

Returns

Authentication\Identifier\IdentifierInterface

getPayload() ¶ public

getPayload(Psr\Http\Message\ServerRequestInterface|null $request = null): object|null

Get payload data.

Parameters

Psr\Http\Message\ServerRequestInterface|null $request optional: Request to get authentication information from.

Returns

object|null

getToken() ¶ protected

getToken(Psr\Http\Message\ServerRequestInterface $request): string|null

Checks if the token is in the headers or a request parameter

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request that contains login information.

Returns

string|null

getTokenFromHeader() ¶ protected

getTokenFromHeader(Psr\Http\Message\ServerRequestInterface $request, string|null $headerLine): string|null

Gets the token from the request headers

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request that contains login information.
string|null $headerLine: Header name

Returns

string|null

getTokenFromQuery() ¶ protected

getTokenFromQuery(Psr\Http\Message\ServerRequestInterface $request, string $queryParam): string|null

Gets the token from the request query

Parameters

Psr\Http\Message\ServerRequestInterface $request: The request that contains login information.
string $queryParam: Request query parameter name

Returns

string|null

setConfig() ¶ public

setConfig(array<string, mixed>|string $key, mixed|null $value = null, bool $merge = true): $this

Sets the config.

Usage

Setting a specific value:

$this->setConfig('key', $value);

Setting a nested value:

$this->setConfig('some.nested.key', $value);

Updating multiple config settings at the same time:

$this->setConfig(['one' => 'value', 'another' => 'value']);

Parameters

array<string, mixed>|string $key: The key to set, or a complete array of configs.
mixed|null $value optional: The value to set.
bool $merge optional: Whether to recursively merge or overwrite existing config, defaults to true.

Returns

$this

Throws

Cake\Core\Exception\CakeException
When trying to set a key that is invalid.

setIdentifier() ¶ public

setIdentifier(Authentication\Identifier\IdentifierInterface $identifier): $this

Sets the identifier.

Parameters

Authentication\Identifier\IdentifierInterface $identifier: IdentifierInterface instance.

Returns

$this

stripTokenPrefix() ¶ protected

stripTokenPrefix(string $token, string $prefix): string

Strips a prefix from a token

Parameters

string $token: Token string
string $prefix: Prefix to strip

Returns

string

unauthorizedChallenge() ¶ public

unauthorizedChallenge(Psr\Http\Message\ServerRequestInterface $request): void

No-op method.

Create an exception with the appropriate headers and response body to challenge a request that has missing or invalid credentials.

This is primarily used by authentication methods that use the WWW-Authorization header.

Parameters

Psr\Http\Message\ServerRequestInterface $request: A request object.

Returns

void

Property Detail

`$_config` ¶ protected

Runtime config

Type

array<string, mixed>

`$_configInitialized` ¶ protected

Whether the config property has already been configured with defaults

Type

bool

`$_defaultConfig` ¶ protected

Default config for this object.

fields The fields to use to identify a user by.

Type

array

`$_identifier` ¶ protected

Identifier or identifiers collection.

Type

Authentication\Identifier\IdentifierInterface

`$payload` ¶ protected

Payload data.

Type

object|null

Namespaces

Class JwtAuthenticator

Property Summary

Method Summary

__construct() public

_configDelete() protected

_configRead() protected

_configWrite() protected

authenticate() public

configShallow() public

decodeToken() protected

getConfig() public

getConfigOrFail() public

getIdentifier() public

getPayload() public

getToken() protected

getTokenFromHeader() protected

getTokenFromQuery() protected

setConfig() public

setIdentifier() public

stripTokenPrefix() protected

unauthorizedChallenge() public

Method Detail

__construct() ¶ public

Parameters

_configDelete() ¶ protected

Parameters

Returns

Throws

_configRead() ¶ protected

Parameters

Returns

_configWrite() ¶ protected

Parameters

Returns

Throws

authenticate() ¶ public

Parameters

Returns

Links

configShallow() ¶ public

Parameters

Returns

decodeToken() ¶ protected

Parameters

Returns

getConfig() ¶ public

Usage

Parameters

Returns

getConfigOrFail() ¶ public

Parameters

Returns

Throws

getIdentifier() ¶ public

Returns

getPayload() ¶ public

Parameters

Returns

getToken() ¶ protected

Parameters

Returns

getTokenFromHeader() ¶ protected

Parameters

Returns

getTokenFromQuery() ¶ protected

Parameters

Returns

setConfig() ¶ public

Usage

Parameters

Returns

Throws

setIdentifier() ¶ public

Parameters

Returns

stripTokenPrefix() ¶ protected

Parameters

Returns

unauthorizedChallenge() ¶ public

`$_config` ¶ protected

`$_configInitialized` ¶ protected

`$_defaultConfig` ¶ protected

`$_identifier` ¶ protected

`$payload` ¶ protected