u

packages/mango/Jose/CustomClaimChecker.php

@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Mango\Jose;
+
+use Jose\Component\Checker\ClaimChecker;
+use Jose\Component\Checker\InvalidClaimException;
+
+final class CustomClaimChecker implements ClaimChecker
+{
+    public function __construct(
+        private readonly string $name,
+        private readonly mixed $value,
+    ) {
+    }
+
+    public function checkClaim(mixed $value): void
+    {
+        if ($value !== $this->value) {
+            throw new InvalidClaimException('Invalid value.', $this->name, $value);
+        }
+    }
+
+    public function supportedClaim(): string
+    {
+        return $this->name;
+    }
+}

packages/mango/Jose/JWTHandler.php

@@ -11,7 +11,6 @@
 use Jose\Component\Core\Util\JsonConverter;
 use Jose\Component\Signature\JWSVerifier;
 use Jose\Component\Signature\Serializer\CompactSerializer as JWSCompactSerializer;
-use LogicException;
 use Psr\Log\LoggerInterface;
 use RuntimeException;
 use Symfony\Component\DependencyInjection\Attribute\Autowire;
@@ -32,6 +31,7 @@ public function __construct(
         private ClaimCheckerManager $claimCheckerManager,
         #[Autowire(service: 'jose.jws_verifier.access_token')]
         private JWSVerifier $jwsLoader,
+        #[Autowire(param: 'jose.access_token.mandatory_claims')]
         private array $mandatoryClaims = [],
         private ?LoggerInterface $logger = null,
         private string $userIdClaim = 'sub',