Lcobucci\JWT\FunctionalTests\EcdsaTokenTest::createMaliciousToken PHP Метод

    private function createMaliciousToken(string $token, Key $key) : string
    {
        $dec = new Parser();
        $asplode = explode('.', $token);
        // The user is lying; we insist that we're using HMAC-SHA512, with the
        // public key as the HMAC secret key. This just builds a forged message:
        $asplode[0] = $dec->base64UrlEncode('{"alg":"HS512","typ":"JWT"}');
        $hmac = hash_hmac('sha512', $asplode[0] . '.' . $asplode[1], $key->getContent(), true);
        $asplode[2] = $dec->base64UrlEncode($hmac);
        return implode('.', $asplode);
    }