Postpay\Http\Signature::verify()

Complexity

Conditions	5
Paths	2

Size

Total Lines

15

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	7
CRAP Score	5

Importance

Changes

0

<?php
    public static function verify(
        $payload,
        $header,
        $secret,
        $tolerance = self::DEFAULT_TOLERANCE
    ) {
        list($timestamp, $signature) = explode(':', trim($header), 2);

        if (!is_numeric($timestamp) || empty($signature) ||
                (($tolerance > 0) && (abs(time() - $timestamp) > $tolerance))) {
            return false;
        }
        $expected = hash_hmac('sha256', "{$timestamp}:{$payload}", $secret);
        return hash_equals($expected, $signature);
    }
}