Final Class Yiisoft\Yii\AuthClient\Signature\RsaSha

                public function __construct(string $algorithm = '')
{
    if (!function_exists('openssl_sign')) {
        throw new NotSupportedException('PHP "OpenSSL" extension is required.');
    }
}

            

                #[\Override]
public function generateSignature(string $baseString, string $key): string
{
    $privateCertificateContent = $this->getPrivateCertificate();
    // For PHP 8+, you can pass the PEM string directly to openssl_sign()
    openssl_sign($baseString, $signature, $privateCertificateContent, $this->algorithm);
    return base64_encode($signature);
}

            

                #[\Override]
public function getName(): string
{
    if (is_int($this->algorithm)) {
        $constants = get_defined_constants(true);
        if (isset($constants['openssl'])) {
            foreach ($constants['openssl'] as $name => $value) {
                if (!str_starts_with($name, 'OPENSSL_ALGO_')) {
                    continue;
                }
                if ($value === $this->algorithm) {
                    $algorithmName = substr($name, strlen('OPENSSL_ALGO_'));
                    break;
                }
            }
        }
        if (!isset($algorithmName)) {
            throw new InvalidConfigException("Unable to determine name of algorithm '{$this->algorithm}'");
        }
    } else {
        $algorithmName = strtoupper($this->algorithm);
    }
    return 'RSA-' . (string) $algorithmName;
}

            

                public function getPrivateCertificate(): string
{
    if ($this->privateCertificate === null) {
        $this->privateCertificate = $this->initPrivateCertificate();
    }
    return $this->privateCertificate;
}

            

                public function getPublicCertificate(): string
{
    if ($this->publicCertificate === null) {
        $this->publicCertificate = $this->initPublicCertificate();
    }
    return $this->publicCertificate;
}

            

                protected function initPrivateCertificate(): string
{
    if (!empty($this->privateCertificateFile)) {
        if (!file_exists($this->privateCertificateFile)) {
            throw new InvalidConfigException(
                "Private certificate file '{$this->privateCertificateFile}' does not exist!"
            );
        }
        $privateCertificateFile = file_get_contents($this->privateCertificateFile);
        if ($privateCertificateFile === false) {
            throw new InvalidConfigException('Failed to fetch private certificate file');
        }
        return $privateCertificateFile;
    }
    return '';
}

            

                protected function initPublicCertificate(): string
{
    $content = '';
    if (!empty($this->publicCertificateFile)) {
        if (!file_exists($this->publicCertificateFile)) {
            throw new InvalidConfigException(
                "Public certificate file '{$this->publicCertificateFile}' does not exist!"
            );
        }
        $fp = fopen($this->publicCertificateFile, 'rb');
        $fgetsFp = fgets($fp);
        while (!feof($fp) && is_string($fgetsFp)) {
            $content .= $fgetsFp;
        }
        fclose($fp);
    }
    return $content;
}

            

                public function setPrivateCertificateFile(string $privateCertificateFile): void
{
    $this->privateCertificateFile = $privateCertificateFile;
}

            

                public function setPublicCertificateFile(string $publicCertificateFile): void
{
    $this->publicCertificateFile = $publicCertificateFile;
}

            

                #[\Override]
public function verify(string $signature, string $baseString, string $key): bool
{
    $decodedSignature = base64_decode($signature);
    // Fetch the public key cert based on the request
    $publicCertificate = $this->getPublicCertificate();
    // Pull the public key ID from the certificate
    $publicKeyId = openssl_pkey_get_public($publicCertificate);
    // Check the computed signature against the one passed in the query
    $verificationResult = openssl_verify($baseString, $decodedSignature, $publicKeyId, $this->algorithm);
    // Release the key resource
    if (PHP_MAJOR_VERSION < 8) {
        openssl_pkey_free($publicKeyId);
    }
    return $verificationResult === 1;
}