Clarkeash\Shield\Services\Mailgun

Complexity

Total Complexity

5

Size/Duplication

Total Lines	43
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	2

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	verify()	0	19	3
A	headers()	0	4	1
A	buildSignature()	0	8	1

<?php

namespace Clarkeash\Shield\Services;

use Illuminate\Http\Request;

class Mailgun extends BaseService
{
    public function verify(Request $request): bool
    {
        $tolerance = config('shield.services.mailgun.tolerance', 60 * 5);
        $timestamp = $request->input('timestamp');

        if (
            ! $request->isMethod('POST') ||
            abs(time() - $timestamp) > $tolerance
        ) {
            return false;
        }

        $signature = $this->buildSignature(
            $request->input('timestamp'),

It seems like $request->input('timestamp') targeting Illuminate\Http\Concerns\InteractsWithInput::input() can also be of type array; however, Clarkeash\Shield\Services\Mailgun::buildSignature() does only seem to accept string, maybe add an additional type check?

            $request->input('token')

It seems like $request->input('token') targeting Illuminate\Http\Concerns\InteractsWithInput::input() can also be of type array; however, Clarkeash\Shield\Services\Mailgun::buildSignature() does only seem to accept string, maybe add an additional type check?

        );

        return $signature === $request->input('signature');
    }

    public function headers(): array
    {
        return [];
    }

    /**
     * Build the signature for verification
     *
     * @param string $timestamp
     * @param string $token
     * @return string
     */
    protected function buildSignature(string $timestamp, string $token)
    {
        return hash_hmac(
            'sha256',
            sprintf('%s%s', $timestamp, $token),
            config('shield.services.mailgun.token')
        );
    }
}