Application::verifySignature() - Code Metrics - Inspection of "New feature" - overtrue/wechat - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Pull Request — master (#1556)

by wannanbigpig

created 2019-06-06 07:50 UTC

Application::verifySignature() A

↳ Parent: Application

Complexity

Conditions	6
Paths	9

Size

Total Lines	24
Code Lines	14

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	12
CRAP Score	6

Importance

Changes

Metric	Value
cc	6
eloc	14
nc	9
nop	1
dl	0
loc	24
rs	9.2222
c	0
b	0
f	0
ccs	12
cts	12
cp	1
crap	6

<?php

/*
 * This file is part of the overtrue/wechat.
 *
 * (c) overtrue <[email protected]>
 *
 * This source file is subject to the MIT license that is bundled
 * with this source code in the file LICENSE.
 */

namespace EasyWeChat\MicroMerchant;

use EasyWeChat\BasicService;
use EasyWeChat\Kernel\Exceptions\InvalidArgumentException;
use EasyWeChat\Kernel\ServiceContainer;
use EasyWeChat\Kernel\Support;
use EasyWeChat\MicroMerchant\Kernel\Exceptions\InvalidSignException;

/**
 * Class Application.
 *
 * @author liuml <[email protected]>
 *
 * @property \EasyWeChat\MicroMerchant\Certficates\Client    $certficates
 * @property \EasyWeChat\MicroMerchant\Material\Client       $material
 * @property \EasyWeChat\MicroMerchant\MerchantConfig\Client $merchantConfig
 * @property \EasyWeChat\MicroMerchant\Withdraw\Client       $withdraw
 *
 * @method mixed applyForEnter(array $params)
 * @method mixed getStatus(string $applymentId, string $businessCode = '')
 * @method mixed upgrade(array $params)
 * @method mixed getUpgradeStatus(string $subMchId = '')
 */
class Application extends ServiceContainer
{
    /**
     * @var array
     */
    protected $providers = [
        // Base services
        BasicService\Media\ServiceProvider::class,
        Base\ServiceProvider::class,
        Certficates\ServiceProvider::class,
        MerchantConfig\ServiceProvider::class,
        Material\ServiceProvider::class,
        Withdraw\ServiceProvider::class,
    ];

    /**
     * @var array
     */
    protected $defaultConfig = [
        'http' => [
            'base_uri' => 'https://api.mch.weixin.qq.com/',
        ],
        'log' => [
            'default' => 'dev', // 默认使用的 channel，生产环境可以改为下面的 prod
            'channels' => [
                // 测试环境
                'dev' => [
                    'driver' => 'single',
                    'path' => '/tmp/easywechat.log',
                    'level' => 'debug',
                ],
                // 生产环境
                'prod' => [
                    'driver' => 'daily',
                    'path' => '/tmp/easywechat.log',
                    'level' => 'info',
                ],
            ],
        ],
    ];

    /**
     * @return string
     *
     * @throws \EasyWeChat\Kernel\Exceptions\InvalidArgumentException
     */
    public function getKey()
    {
        $key = $this['config']->key;

        if (empty($key)) {
            throw new InvalidArgumentException('config key connot be empty.');
        }

        if (32 !== strlen($key)) {
            throw new InvalidArgumentException(sprintf("'%s' should be 32 chars length.", $key));
        }

        return $key;
    }

    /**
     * get certficates.
     *
     * @throws \EasyWeChat\Kernel\Exceptions\InvalidArgumentException
     * @throws \EasyWeChat\Kernel\Exceptions\InvalidConfigException
     * @throws \EasyWeChat\MicroMerchant\Kernel\Exceptions\InvalidExtensionException
     * @throws \EasyWeChat\MicroMerchant\Kernel\Exceptions\InvalidSignException
     * @throws \Psr\SimpleCache\InvalidArgumentException
     */
    public function getCertficates()
    {
        return $this->certficates->get();
    }

    /**
     * set sub-mch-id and appid.
     *
     * @param string $sub_mch_id Identification Number of Small and Micro Businessmen Reported by Service Providers
     * @param string $appid      Public Account ID of Service Provider
     *
     * @return $this
     */
    public function setSubMchId(string $sub_mch_id, string $appid = '')
    {
        $this['config']->set('sub_mch_id', $sub_mch_id);
        $this['config']->set('appid', $appid);

        return $this;
    }

    /**
     * Returning true indicates that the verification is successful, returning false indicates that the signature field does not exist or is empty, and if the signature verification is wrong, the InvalidSignException will be thrown directly.

     *
     * @param array $data
     *
     * @return bool
     *
     * @throws \EasyWeChat\Kernel\Exceptions\InvalidArgumentException
     * @throws \EasyWeChat\MicroMerchant\Kernel\Exceptions\InvalidSignException
     */
    public function verifySignature(array $data)
    {
        if (!isset($data['sign']) || empty($data['sign'])) {
            return false;
        }

        $sign = $data['sign'];
$a = "a";
$ab = "ab";
$abc = "abc";
        strlen($sign) > 32 && $signType = 'HMAC-SHA256';
        unset($data['sign']);
        $secretKey = $this->getKey();

        if ('HMAC-SHA256' === ($signType ?? 'MD5')) {
            $encryptMethod = function ($str) use ($secretKey) {
                return hash_hmac('sha256', $str, $secretKey);
            };
        } else {
            $encryptMethod = 'md5';
        }

        if (Support\generate_sign($data, $secretKey, $encryptMethod) === $sign) {
        if (/** @scrutinizer ignore-call */ Support\generate_sign($data, $secretKey, $encryptMethod) === $sign) {
            return true;
        }

        throw new InvalidSignException('return value signature verification error');
    }

    /**
     * @param string $name
     * @param array  $arguments
     *
     * @return mixed
     */
    public function __call($name, $arguments)
    {
        return call_user_func_array([$this['base'], $name], $arguments);
    }
}


overtrue / wechat

Pull Request — master (#1556)

Application::verifySignature() A

Complexity

Size

Duplication

Code Coverage

Importance

Duplication Side-by-Side

Filter issues like