fix: bad firebase call (#2245)

googleapis · Apr 18, 2022 · 506c488 · 506c488
1 parent cb5250c
commit 506c488
Showing 1 changed file with 10 additions and 5 deletions.
diff --git a/src/AccessToken/Verify.php b/src/AccessToken/Verify.php
@@ -20,6 +20,7 @@
 
 use Firebase\JWT\ExpiredException as ExpiredExceptionV3;
 use Firebase\JWT\SignatureInvalidException;
+use Firebase\JWT\Key;
 use GuzzleHttp\Client;
 use GuzzleHttp\ClientInterface;
 use InvalidArgumentException;
@@ -99,11 +100,15 @@ public function verifyIdToken($idToken, $audience = null)
     $certs = $this->getFederatedSignOnCerts();
     foreach ($certs as $cert) {
       try {
-        $payload = $this->jwt->decode(
-            $idToken,
-            $this->getPublicKey($cert),
-            array('RS256')
-        );
+        $args = [$idToken];
+        $publicKey = $this->getPublicKey($cert);
+        if (class_exists(Key::class)) {
+            $args[] = new Key($publicKey, 'RS256');
+        } else {
+            $args[] = $publicKey;
+            $args[] = ['RS256'];
+        }
+        $payload = \call_user_func_array([$this->jwt, 'decode'], $args);
 
         if (property_exists($payload, 'aud')) {
           if ($audience && $payload->aud != $audience) {