Readonly properties

Author: tvdijen

src/Alg/Encryption/AbstractEncryptor.php

@@ -36,8 +36,8 @@ abstract class AbstractEncryptor implements EncryptionAlgorithmInterface
      */
     public function __construct(
         #[\SensitiveParameter]
-        private KeyInterface $key,
-        protected string $algId,
+        private readonly KeyInterface $key,
+        protected readonly string $algId,
     ) {
         Assert::oneOf(
             $algId,

src/Alg/Encryption/EncryptionAlgorithmFactory.php

@@ -62,7 +62,7 @@ final class EncryptionAlgorithmFactory
      * @param string[] $blacklist A list of algorithms forbidden for their use.
      */
     public function __construct(
-        protected array $blacklist = self::DEFAULT_BLACKLIST,
+        protected readonly array $blacklist = self::DEFAULT_BLACKLIST,
     ) {
         // initialize the cache for supported algorithms per known implementation
         if (!self::$initialized) {

src/Alg/KeyTransport/AbstractKeyTransporter.php

@@ -36,8 +36,8 @@ abstract class AbstractKeyTransporter implements KeyTransportAlgorithmInterface
      */
     public function __construct(
         #[\SensitiveParameter]
-        private KeyInterface $key,
-        protected string $algId,
+        private readonly KeyInterface $key,
+        protected readonly string $algId,
     ) {
         Assert::oneOf(
             $algId,

src/Alg/KeyTransport/KeyTransportAlgorithmFactory.php

@@ -60,7 +60,7 @@ class KeyTransportAlgorithmFactory
      * @param string[] $blacklist A list of algorithms forbidden for their use.
      */
     public function __construct(
-        protected array $blacklist = self::DEFAULT_BLACKLIST,
+        protected readonly array $blacklist = self::DEFAULT_BLACKLIST,
     ) {
         // initialize the cache for supported algorithms per known implementation
         if (!self::$initialized) {

src/Alg/Signature/AbstractSigner.php

@@ -37,9 +37,9 @@ abstract class AbstractSigner implements SignatureAlgorithmInterface
      */
     public function __construct(
         #[\SensitiveParameter]
-        private KeyInterface $key,
-        protected string $algId,
-        protected string $digest,
+        private readonly KeyInterface $key,
+        protected readonly string $algId,
+        protected readonly string $digest,
     ) {
         Assert::oneOf(
             $algId,

src/Alg/Signature/SignatureAlgorithmFactory.php

@@ -64,7 +64,7 @@ final class SignatureAlgorithmFactory
      * @param string[] $blacklist A list of algorithms forbidden for their use.
      */
     public function __construct(
-        protected array $blacklist = self::DEFAULT_BLACKLIST,
+        protected readonly array $blacklist = self::DEFAULT_BLACKLIST,
     ) {
         // initialize the cache for supported algorithms per known implementation
         if (!self::$initialized) {

src/CryptoEncoding/PEM.php

@@ -59,8 +59,8 @@ class PEM
      * @param string $data Payload
      */
     public function __construct(
-        protected string $type,
-        protected string $data,
+        protected readonly string $type,
+        protected readonly string $data,
     ) {
     }
 

src/Key/AsymmetricKey.php

@@ -21,7 +21,7 @@ abstract class AsymmetricKey implements KeyInterface
      * @param \SimpleSAML\XMLSecurity\CryptoEncoding\PEM $material The associated key material.
      */
     public function __construct(
-        protected PEM $material,
+        protected readonly PEM $material,
     ) {
     }
 

src/Key/SymmetricKey.php

@@ -28,7 +28,7 @@ class SymmetricKey implements KeyInterface
      * @param string $material The associated key material.
      */
     public function __construct(
-        protected string $material,
+        protected readonly string $material,
     ) {
     }
 

src/Key/X509Certificate.php

@@ -23,7 +23,7 @@
 class X509Certificate
 {
     /** @var \SimpleSAML\XMLSecurity\Key\PublicKey */
-    protected PublicKey $publicKey;
+    protected readonly PublicKey $publicKey;
 
     /** @var array<string, string> */
     protected array $thumbprint = [];
@@ -41,7 +41,7 @@ class X509Certificate
      * @throws \SimpleSAML\XMLSecurity\Exception\OpenSSLException If the certificate cannot be exported to PEM format.
      */
     final public function __construct(
-        protected PEM $material,
+        protected readonly PEM $material,
     ) {
         Assert::oneOf($material->type(), [PEM::TYPE_CERTIFICATE], "PEM structure has the wrong type %s.");