Change TokenGenerator so Token expiration is settable from the outside.

Author: Potherca

src/TokenGenerator.php

@@ -18,15 +18,19 @@ class TokenGenerator
 
     use CryptTrait;
 
-    /** @var Config */
-    public $config;
+    public Config $config;
+
+    private \DateInterval $validFor;
 
     //////////////////////////////// PUBLIC API \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
 
     final public function __construct(
-        Config $config
+        Config $config,
+        \DateInterval $validFor
     ) {
         $this->config = $config;
+        $this->validFor = $validFor;
+
         $this->setEncryptionKey($this->config->getKeys()->getEncryptionKey());
     }
 
@@ -54,7 +58,8 @@ public function generateIdToken($accessToken, $clientId, $subject, $nonce, $priv
                 $jwtConfig = Configuration::forSymmetricSigner(new Sha256(), InMemory::plainText($privateKey));
                 $now = new DateTimeImmutable();
                 $useAfter = $now->sub(new \DateInterval('PT1S'));
-                $expire = $now->add(new \DateInterval('PT' . 14*24*60*60 . 'S'));
+
+                $expire = $now->add($this->validFor);
 
                 $token = $jwtConfig->builder()
                         ->issuedBy($issuer)

tests/unit/TokenGeneratorTest.php

@@ -78,6 +78,22 @@ final public function testInstantiateWithoutConfig(): void
         new TokenGenerator();
     }
 
+    /**
+     * @testdox Token Generator SHOULD complain WHEN instantiated without validity period
+     *
+     * @coversNothing
+     */
+    final public function testInstantiateWithoutValidFor(): void
+    {
+        $this->expectArgumentCountError(2);
+
+        $mockConfig = $this->getMockBuilder(Config::class)
+            ->disableOriginalConstructor()
+            ->getMock();
+
+        new TokenGenerator($mockConfig);
+    }
+
     /**
      * @testdox Token Generator SHOULD be created WHEN instantiated with Config and validity period
      *