misc_pterodactyl-panel/app/Services/Nodes/NodeJWTService.php

100 lines
2.3 KiB
PHP
Raw Normal View History

<?php
namespace Pterodactyl\Services\Nodes;
use DateTimeImmutable;
use Carbon\CarbonImmutable;
use Illuminate\Support\Str;
use Pterodactyl\Models\Node;
use Lcobucci\JWT\Configuration;
use Lcobucci\JWT\Signer\Hmac\Sha256;
use Lcobucci\JWT\Signer\Key\InMemory;
use Pterodactyl\Extensions\Lcobucci\JWT\Encoding\TimestampDates;
class NodeJWTService
{
/**
* @var array
*/
private $claims = [];
/**
* @var \DateTimeImmutable|null
*/
private $expiresAt;
/**
* @var string|null
*/
private $subject;
/**
* Set the claims to include in this JWT.
*
* @return $this
*/
public function setClaims(array $claims)
{
$this->claims = $claims;
return $this;
}
/**
* @return $this
*/
public function setExpiresAt(DateTimeImmutable $date)
{
$this->expiresAt = $date;
return $this;
}
/**
* @return $this
*/
public function setSubject(string $subject)
{
$this->subject = $subject;
return $this;
}
/**
* Generate a new JWT for a given node.
*
* @param string|null $identifiedBy
2021-01-23 20:33:34 +00:00
*
* @return \Lcobucci\JWT\Token\Plain
*/
public function handle(Node $node, string $identifiedBy, string $algo = 'md5')
{
$identifier = hash($algo, $identifiedBy);
2021-01-23 20:33:34 +00:00
$config = Configuration::forSymmetricSigner(new Sha256(), InMemory::plainText($node->getDecryptedKey()));
2021-01-23 20:33:34 +00:00
$builder = $config->builder(new TimestampDates())
->issuedBy(config('app.url'))
->permittedFor($node->getConnectionAddress())
->identifiedBy($identifier)
->withHeader('jti', $identifier)
->issuedAt(CarbonImmutable::now())
->canOnlyBeUsedAfter(CarbonImmutable::now()->subMinutes(5));
if ($this->expiresAt) {
$builder = $builder->expiresAt($this->expiresAt);
}
2021-01-23 20:33:34 +00:00
if (!empty($this->subject)) {
$builder = $builder->relatedTo($this->subject)->withHeader('sub', $this->subject);
}
foreach ($this->claims as $key => $value) {
$builder = $builder->withClaim($key, $value);
}
return $builder
->withClaim('unique_id', Str::random(16))
->getToken($config->signer(), $config->signingKey());
}
}