Postpay\Http\Signature

Complexity

Total Complexity

5

Size/Duplication

Total Lines	33
Duplicated Lines	0 %

Coupling/Cohesion

Components	0
Dependencies	0

Test Coverage

Coverage

100%

Importance

Changes

0

1 Method

Rating	Name	Duplication	Size	Complexity
A	verify()	0	15	5

<?php

namespace Postpay\Http;

class Signature
{
    /**
     * @const int Default tolarence in seconds.
     */
    const DEFAULT_TOLERANCE = 300;

    /**
     * Verifies the signature header.
     *
     * @param string $payload
     * @param string $header
     * @param string $secret
     * @param int    $tolerance
     *
     * @return bool
     */
    public static function verify(
        $payload,
        $header,
        $secret,
        $tolerance = self::DEFAULT_TOLERANCE
    ) {
        list($timestamp, $signature) = explode(':', trim($header), 2);

        if (!is_numeric($timestamp) || empty($signature) ||
                (($tolerance > 0) && (abs(time() - $timestamp) > $tolerance))) {
            return false;
        }
        $expected = hash_hmac('sha256', "{$timestamp}:{$payload}", $secret);
        return hash_equals($expected, $signature);
    }
}