Manipulating algorithm in hydrator

When only one algorithm is passed into the configuration but multiple secrets are provided the algorithm
array then needs to be manipulated into a key value store, using the key from the secrets list and the
algorithm being used for the value.

for example:
```
[
    'secret' => [
        'foo' => 'keepItSecret',
        'bar' => 'tooManySecrets',
    ],
    'algorithm' => [
        'HS256',
    ],
]
```

will become
```
[
    'secret' => [
        'foo' => 'keepItSecret',
        'bar' => 'tooManySecrets',
    ],
    'algorithm' => [
        'foo' => 'HS256',
        'bar' => 'HS256',
    ],
]
```

src/JwtAuthentication.php

@@ -54,6 +54,11 @@
 use Tuupola\Middleware\JwtAuthentication\RequestPathRule;
 use Tuupola\Middleware\JwtAuthentication\RuleInterface;
 
+use function array_fill_keys;
+use function array_keys;
+use function count;
+use function is_array;
+
 final class JwtAuthentication implements MiddlewareInterface
 {
     use DoublePassTrait;
@@ -332,6 +337,16 @@ private function decodeToken(string $token): array
      */
     private function hydrate(array $data = []): void
     {
+        $data['algorithm'] = $data['algorithm'] ?? $this->options['algorithm'];
+        if ((is_array($data['secret']) || $data['secret'] instanceof ArrayAccess)
+            && is_array($data['algorithm'])
+            && count($data['algorithm']) === 1
+            && count($data['secret']) > count($data['algorithm'])
+        ) {
+            $secretIndex = array_keys((array) $data['secret']);
+            $data['algorithm'] = array_fill_keys($secretIndex, $data['algorithm'][0]);
+        }
+
         foreach ($data as $key => $value) {
             /* https://github.com/facebook/hhvm/issues/6368 */
             $key = str_replace(".", " ", $key);

tests/JwtAuthenticationTest.php

@@ -32,9 +32,8 @@
 
 namespace Tuupola\Middleware;
 
+use ArrayObject;
 use Equip\Dispatch\MiddlewareCollection;
-use Firebase\JWT\JWT;
-use Firebase\JWT\Key;
 use PHPUnit\Framework\TestCase;
 use Psr\Http\Message\ServerRequestInterface;
 use Psr\Http\Message\ResponseInterface;
@@ -108,7 +107,6 @@ public function testShouldReturn200WithTokenFromHeader(): void
         $collection = new MiddlewareCollection([
             new JwtAuthentication([
                 "secret" => "supersecretkeyyoushouldnotcommittogithub",
-                "algorithm" => ['HS256'],
                 "header" => "X-Token"
             ])
         ]);
@@ -134,7 +132,6 @@ public function testShouldReturn200WithTokenFromHeaderWithCustomRegexp(): void
         $collection = new MiddlewareCollection([
             new JwtAuthentication([
                 "secret" => "supersecretkeyyoushouldnotcommittogithub",
-                "algorithm" => ['HS256'],
                 "header" => "X-Token",
                 "regexp" => "/(.*)/"
             ])
@@ -161,7 +158,6 @@ public function testShouldReturn200WithTokenFromCookie(): void
         $collection = new MiddlewareCollection([
             new JwtAuthentication([
                 "secret" => "supersecretkeyyoushouldnotcommittogithub",
-                "algorithm" => ['HS256'],
                 "cookie" => "nekot",
             ])
         ]);
@@ -187,7 +183,6 @@ public function testShouldReturn200WithTokenFromBearerCookie(): void
         $collection = new MiddlewareCollection([
             new JwtAuthentication([
                 "secret" => "supersecretkeyyoushouldnotcommittogithub",
-                "algorithm" => ['HS256'],
                 "cookie" => "nekot",
             ])
         ]);
@@ -217,7 +212,6 @@ public function testShouldReturn200WithSecretArray(): void
                     "acme" =>"supersecretkeyyoushouldnotcommittogithub",
                     "beta" =>"anothersecretkeyfornevertocommittogithub"
                 ],
-                "algorithm" => ['acme' => 'HS256', 'beta' => 'HS256'],
             ])
         ]);
 
@@ -264,14 +258,13 @@ public function testShouldReturn200WithSecretArrayAccess(): void
             return $response;
         };
 
-        $secret = new ArrayAccessImpl();
+        $secret = new ArrayObject();
         $secret["acme"] = "supersecretkeyyoushouldnotcommittogithub";
         $secret["beta"] ="anothersecretkeyfornevertocommittogithub";
 
         $collection = new MiddlewareCollection([
             new JwtAuthentication([
                 "secret" => $secret,
-                "algorithm" => ['acme' => 'HS256', 'beta' => 'HS256'],
             ])
         ]);
 
@@ -292,14 +285,13 @@ public function testShouldReturn401WithSecretArrayAccess(): void
             return $response;
         };
 
-        $secret = new ArrayAccessImpl();
+        $secret = new ArrayObject();
         $secret["xxxx"] = "supersecretkeyyoushouldnotcommittogithub";
         $secret["yyyy"] = "anothersecretkeyfornevertocommittogithub";
 
         $collection = new MiddlewareCollection([
             new JwtAuthentication([
                 "secret" => $secret,
-                "algorithm" => ['xxxx' => 'HS256', 'yyyy' => 'HS256',],
             ])
         ]);