Tompec\EmailLog\Middlewares\MailgunWebhook::verify()

Complexity

Conditions	2
Paths	2

Size

Total Lines

14

Duplication

Lines	0
Ratio	0 %

Code Coverage

Tests	0
CRAP Score	6

Importance

Changes

0

<?php
    public function verify($request)
    {
        $token = $request->input('signature.token');
        $timestamp = $request->input('signature.timestamp');
        $signature = $request->input('signature.signature');

        // check if the timestamp is fresh
        if (abs(time() - $timestamp) > 15) {
            return false;
        }

        // returns true if signature is valid
        return hash_hmac('sha256', $timestamp.$token, config('services.mailgun.secret')) === $signature;
    }
}