kalibora/google-cloud-iap-jwt-validator

Google Cloud Identity-Aware Proxy JWT (Json Web Token) 验证器

v0.1.1 2018-09-30 12:02 UTC

This package is auto-updated.

Last update: 2024-08-29 04:57:30 UTC


README

查看: https://cloud.google.com/iap/docs/signed-headers-howto

安装

使用curl客户端的示例。

$ composer require kalibora/google-cloud-iap-jwt-validator php-http/curl-client guzzlehttp/psr7 php-http/message

您还可以选择以下链接中列出的其他客户端。

http://docs.php-http.org/en/latest/clients.html

用法

<?php

require __DIR__ . '/vendor/autoload.php';

use Kalibora\GoogleCloud\IdentityAwareProxy\TokenValidator\{TokenValidator, InvalidTokenException};
use Http\Client\Curl\Client;
use Http\Message\MessageFactory\GuzzleMessageFactory;

$audience = '/projects/{YOUR_PROJECT_NUMBER}/apps/{YOUR_PROJECT_ID};
$tokenValidator = new TokenValidator(new Client(), new GuzzleMessageFactory(), $audience);

$jwt = 'FOO.BAR.BAZ'; // HTTP request header `x-goog-iap-jwt-assertion`
try {
    $claims = $tokenValidator->validate($jwt);
} catch (InvalidTokenException $e) {
    // Invalid or expired token
    die($e->getMessage() . PHP_EOL);
}

echo $claims['sub'], PHP_EOL;
echo $claims['email'], PHP_EOL;