Unable to verify JWT claims

[kudamhazo]

There is a bit of an issue with the validation of datetimes (exp, iat, nbf, etc) claims. The library is checking if they are integers which is not correct. It should check if they are numeric (maybe is_numeric(...)method) instead because the RFC ref for JWT does not restrict those claims to integers. I am experiencing some challenges because of this issue. OpenID server I am using returns claims with format like this:

{
  "iat": 1648944303.697052,
  "exp": 1680480303.583767,
}

Hope this can be updated some time. Here is the code reference to where the issue is:

OpenID-Connect-PHP/src/OpenIDConnectClient.php

Lines 1072 to 1073 in 4ac6b24

	&& ( !isset($claims->exp) || ((gettype($claims->exp) === 'integer') && ($claims->exp >= time() - $this->leeway)))
	&& ( !isset($claims->nbf) || ((gettype($claims->nbf) === 'integer') && ($claims->nbf <= time() + $this->leeway)))

[kudamhazo]

I can take a stab at PR if you think this is worth fixing 🙂