nested-consume.php

<?php
/**
 * Decrypt and verify signature of the JWT created by nested-create.php.
 *
 * php nested-consume.php $(php nested-create.php)
 */

declare(strict_types = 1);

use Sop\CryptoEncoding\PEM;
use Sop\JWX\JWK\EC\ECPublicKeyJWK;
use Sop\JWX\JWK\JWKSet;
use Sop\JWX\JWK\Symmetric\SymmetricKeyJWK;
use Sop\JWX\JWT\Claim\RegisteredClaim;
use Sop\JWX\JWT\JWT;
use Sop\JWX\JWT\ValidationContext;

require dirname(__DIR__) . '/vendor/autoload.php';

// load EC public key
$ec_pub_jwk = ECPublicKeyJWK::fromPEM(
    PEM::fromFile(dirname(__DIR__) . '/test/assets/ec/public_key_P-256.pem'));
// initialize symmetric key for key management algorithm
$kek_jwk = SymmetricKeyJWK::fromKey('0123456789abcdef');
// compose JWK set with identified keys
$keys = new JWKSet(
    $ec_pub_jwk->withKeyID('sig-key'),
    $kek_jwk->withKeyID('enc-key'));
// read JWT token from the first argument
$jwt = new JWT($argv[1]);
// initialize validation context
$ctx = new ValidationContext([RegisteredClaim::NAME_ISSUER => 'joe'], $keys);
// decrypt, verify signature and validate claims
$claims = $jwt->claims($ctx);
// print claims
foreach ($claims as $claim) {
    printf("%s: %s\n", $claim->name(), $claim->value());
}