Pronamic\WordPress\Pay\Gateways\OmniKassa2\Security

Complexity

Total Complexity

7

Size/Duplication

Total Lines	52
Duplicated Lines	0 %

Test Coverage

Coverage

80%

Importance

Changes

0

2 Methods

Rating	Name	Duplication	Size	Complexity
A	get_signature()	0	28	4
A	validate_signature()	0	7	3

<?php
/**
 * Security
 *
 * @author    Pronamic <info@pronamic.eu>
 * @copyright 2005-2018 Pronamic
 * @license   GPL-3.0-or-later
 * @package   Pronamic\WordPress\Pay\Gateways\OmniKassa2
 */

namespace Pronamic\WordPress\Pay\Gateways\OmniKassa2;

/**
 * Security
 *
 * @author  Remco Tolsma
 * @version 2.0.2
 * @since   1.0.0
 */
class Security {
	/**
	 * Calculdate signature for specific data.
	 *
	 * @param Signable $signable    Signable object.
	 * @param string   $signing_key Signing Key.
	 * @return string|null
	 */
	public static function get_signature( Signable $signable, $signing_key ) {
		$data = $signable->get_signature_data();

		if ( empty( $data ) ) {
			return null;
		}

		if ( empty( $signing_key ) ) {
			return null;
		}

		$decoded_signing_key = base64_decode( $signing_key );

		if ( false === $decoded_signing_key ) {
			return null;
		}

		$combined = implode( ',', $data );

		var_dump( $combined );

var_dump($combined) looks like debug code. Are you sure you do not want to remove it?

		$signature = hash_hmac(
			'sha512',
			$combined,
			$decoded_signing_key
		);

		return $signature;
	}

	/**
	 * Validate signature.
	 *
	 * @param string $signature_a Signature A.
	 * @param string $signature_b Signature B.
	 * @return bool True if valid, false otherwise.
	 */
	public static function validate_signature( $signature_a, $signature_b ) {
		if ( empty( $signature_a ) || empty( $signature_b ) ) {
			// Empty signature string or null from calculation.
			return false;
		}

		return ( 0 === strcasecmp( $signature_a, $signature_b ) );
	}
}