App\Security\RequestDecoder

Complexity

Total Complexity

3

Size/Duplication

Total Lines	19
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	__construct()	0	3	1
A	decode()	0	8	2

<?php

namespace App\Security;

use Symfony\Component\HttpFoundation\Request;

final class RequestDecoder implements RequestDecoderInterface
{
    public const REQUEST_TOKEN_KEY = 'X-AUTH-TOKEN';

    private $securitySecret;

    public function __construct(string $securitySecret)
    {
        $this->securitySecret = $securitySecret;
    }

    public function decode(Request $request): bool
    {
        $token = hash_hmac('sha1', $request->getContent(), $this->securitySecret);
        if ($request->headers->get(self::REQUEST_TOKEN_KEY) !== 'sha1='.$token) {
            return false;
        }

        return true;
    }
}