Page MenuHomeDevCentral
Files F3766997

No OneTemporary
Actions

View Options

diff --git a/XHubSignature.php b/XHubSignature.php
index 7743666..5994419 100644
--- a/XHubSignature.php
+++ b/XHubSignature.php
@@ -1,131 +1,132 @@
<?php
+
namespace Keruald\GitHub;
class XHubSignature {
///
/// Properties
///
/**
* The secret token to secure messages
*
* @var string
*/
private $secret;
/**
* The hash algorithm
*
* @var string
*/
private $hashAlgo;
/**
* The payload
*
* @var string
*/
public $payload;
/**
* The signature delivered with the payload, to validate it
*
* @var string
*/
public $signature;
///
/// Constants
///
/**
* The default hash algorithm to use if none is offered
*/
const DEFAULT_HASH_ALGO = 'sha1';
///
/// Constructor
///
/**
* Initializes a new instance of the XHubSignature class
*
* @param string $secret the secret token
* @param string $algo the algorithm to use to compute hashs [facultative]
*/
- public function __construct ($secret, $algo = DEFAULT_HASH_ALGO) {
+ public function __construct ($secret, $algo = self::DEFAULT_HASH_ALGO) {
$this->secret = $secret;
$this->hashAlgo = $algo;
}
///
/// Signature methods
///
/**
* Computes the signature for the current payload
*
* @return string the payload signature
*/
public function compute () {
- return hash_hmac($this->algo, $this->payload, $this->secret);
+ return hash_hmac($this->hashAlgo, $this->payload, $this->secret);
}
/**
* Validates the signature
*
* @return bool true if the signature is correct; otherwise, false.
*/
public function validate () {
// Comparison with hash_equals allows to mitigate timing attacks.
return hash_equals($this->compute(), $this->signature);
}
///
/// Static helper methods
///
/**
* Computes a signature for the specified secret and payload
*
* @param string $secret the secret token to secure messages
* @param string $payload the payload
* @param string $algo the hash algorithm [facultative]
*
* @return string the payload signature
*/
public static function hashPayload(
$secret,
$payload,
$algo = DEFAULT_HASH_ALGO
) {
$instance = new static($secret, $algo = DEFAULT_HASH_ALGO);
$instance->payload = $payload;
return $instance->compute();
}
/**
* Validates a payload against specified secret
*
* @param string $secret the secret token to secure messages
* @param string $payload the payload
* @param string $signature the signature delivered with the payload
* @param string $algo the hash algorithm [facultative]
*
* @return bool true if the signature is correct; otherwise, false.
*/
public static function validatePayload (
$secret,
$payload,
$signature,
- $algo = DEFAULT_HASH_ALGO
+ $algo = self::DEFAULT_HASH_ALGO
) {
- $instance = new static($secret, $algo = DEFAULT_HASH_ALGO);
+ $instance = new static($secret, $algo = self::DEFAULT_HASH_ALGO);
$instance->payload = $payload;
$instance->signature = $signature;
return $instance->validate();
}
}

File Metadata

Mime Type
text/x-diff
Expires
Sun, Nov 24, 21:45 (8 h, 50 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2258969
Default Alt Text
(3 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator