for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
namespace Clarkeash\Shield\Services;
use Illuminate\Http\Request;
class Stripe extends BaseService
{
public function verify(Request $request): bool
$processed = $this->process($this->header($request, 'Stripe-Signature'));
$tolerance = config('shield.services.stripe.tolerance', 60 * 5);
if(($tolerance > 0) && ((time() - $processed['t']) > $tolerance)) {
return false;
}
$payload = $processed['t'] . '.' . $request->getContent();
$generated = hash_hmac('sha256', $payload, config('shield.services.stripe.token'));
return hash_equals($generated, $processed['v1']);
protected function process(string $header)
$sections = explode(',', $header);
$data = [];
foreach ($sections as $section) {
$parts = explode('=', $section);
$data[$parts[0]] = $parts[1];
return $data;
public function headers(): array
return ['Stripe-Signature'];
clarkeash /
shield
