Clarkeash\Shield\Services\Stripe

Complexity

Total Complexity

6

Size/Duplication

Total Lines	37
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	1

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	verify()	0	15	3
A	process()	0	13	2
A	headers()	0	4	1

<?php

namespace Clarkeash\Shield\Services;

use Clarkeash\Shield\Contracts\Service;
use Illuminate\Http\Request;

class Stripe implements Service
{
    public function verify(Request $request): bool
    {
        $processed = $this->process($request->header('Stripe-Signature'));

It seems like $request->header('Stripe-Signature') targeting Illuminate\Http\Concerns\InteractsWithInput::header() can also be of type array; however, Clarkeash\Shield\Services\Stripe::process() does only seem to accept string, maybe add an additional type check?

        $tolerance = config('shield.services.stripe.tolerance', 60 * 5);

        if(($tolerance > 0) && ((time() - $processed['t']) > $tolerance)) {
            return false;
        }

        $payload = $processed['t'] . '.' . $request->getContent();
        $generated = hash_hmac('sha256', $payload, config('shield.services.stripe.token'));

        return hash_equals($generated, $processed['v1']);
    }

    protected function process(string $header)
    {
        $sections = explode(',', $header);

        $data = [];

        foreach ($sections as $section) {
            $parts = explode('=', $section);
            $data[$parts[0]] = $parts[1];
        }

        return $data;
    }

    public function headers(): array
    {
        return ['Stripe-Signature'];
    }
}