Extract TrustedEsiaAccessToken for operations without sign/verify

src/Token/EsiaAccessToken.php

@@ -2,41 +2,18 @@
 
 namespace Ekapusta\OAuth2Esia\Token;
 
-use Ekapusta\OAuth2Esia\Interfaces\Token\ScopedTokenInterface;
 use InvalidArgumentException;
-use Lcobucci\JWT\Parser;
 use Lcobucci\JWT\Signer;
 use Lcobucci\JWT\Signer\Key;
-use Lcobucci\JWT\ValidationData;
-use League\OAuth2\Client\Token\AccessToken;
 
-class EsiaAccessToken extends AccessToken implements ScopedTokenInterface
+class EsiaAccessToken extends TrustedEsiaAccessToken
 {
-    private $parsedToken;
-
     public function __construct(array $options, $publicKeyPath, Signer $signer)
     {
         parent::__construct($options);
 
-        $this->parsedToken = (new Parser())->parse($this->accessToken);
-        $this->resourceOwnerId = $this->parsedToken->getClaim('urn:esia:sbj_id');
-
-        if (!$this->parsedToken->validate(new ValidationData())) {
-            throw new InvalidArgumentException('Access token is invalid: '.var_export($options, true));
-        }
-
         if (!$this->parsedToken->verify($signer, new Key(file_get_contents($publicKeyPath)))) {
             throw new InvalidArgumentException('Access token can not be verified: '.var_export($options, true));
         }
     }
-
-    public function getScopes()
-    {
-        $scopes = [];
-        foreach (explode(' ', $this->parsedToken->getClaim('scope', '')) as $scope) {
-            $scopes[] = parse_url($scope, PHP_URL_PATH);
-        }
-
-        return $scopes;
-    }
 }

src/Token/TrustedEsiaAccessToken.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace Ekapusta\OAuth2Esia\Token;
+
+use Ekapusta\OAuth2Esia\Interfaces\Token\ScopedTokenInterface;
+use InvalidArgumentException;
+use Lcobucci\JWT\Parser;
+use Lcobucci\JWT\ValidationData;
+use League\OAuth2\Client\Token\AccessToken;
+
+class TrustedEsiaAccessToken extends AccessToken implements ScopedTokenInterface
+{
+    protected $parsedToken;
+
+    public function __construct(array $options)
+    {
+        parent::__construct($options);
+
+        $this->parsedToken = (new Parser())->parse($this->accessToken);
+        $this->resourceOwnerId = $this->parsedToken->getClaim('urn:esia:sbj_id');
+
+        if (!$this->parsedToken->validate(new ValidationData())) {
+            throw new InvalidArgumentException('Access token is invalid: '.var_export($options, true));
+        }
+    }
+
+    public function getScopes()
+    {
+        $scopes = [];
+        foreach (explode(' ', $this->parsedToken->getClaim('scope', '')) as $scope) {
+            $scopes[] = parse_url($scope, PHP_URL_PATH);
+        }
+
+        return $scopes;
+    }
+}