Viewing file:  v3SignatureValidation.php (4.71 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
<?php
namespace Plivo\Util;
use Plivo\Exceptions\PlivoValidationException;
class v3SignatureValidation
{
private static function stringifyParams($params)
{
foreach ($params as $key => $value)
{
$params[$key] = strval($value);
}
return $params;
}
private static function getMapFromQuery($queryString)
{
$queryMap = array();
if ($queryString == null) {
return $queryMap;
}
$queryArray = explode("&", $queryString);
foreach ($queryArray as $param)
{
$keyValue = explode("=", $param);
$key = $keyValue[0];
$value = $keyValue[1];
if (array_key_exists($key, $queryMap))
{
array_push($queryMap[$key], $value);
}
else
{
$queryMap[$key] = array($value);
}
}
return $queryMap;
}
private static function getSortedQueryString($queryMap)
{
$queryString = array();
ksort($queryMap, SORT_NATURAL);
foreach ($queryMap as $key => $value)
{
if (gettype($value) === "array")
{
sort($value, SORT_NATURAL);
foreach ($value as $val)
{
array_push($queryString, strval($key)."=".strval($val));
}
}
else
{
array_push($queryString, strval($key)."=".strval($value));
}
}
return implode("&", $queryString);
}
private static function getSortedParamsString($params)
{
$keys = array_keys($params);
sort($keys, SORT_NATURAL);
$paramsString = array();
foreach ($keys as $key)
{
$value = $params[$key];
if (gettype($value) === "array")
{
$value = sort($value, SORT_NATURAL);
foreach ($value as $val)
{
array_push($paramsString, strval($key).strval($val));
}
}
else
{
array_push($paramsString, strval($key).strval($value));
}
}
return implode("", $paramsString);
}
private static function constructGetUrl($uri, $params, $emptyPostParams=true)
{
$parsedURI = parse_url($uri);
$baseURL = $parsedURI['scheme'].'://'.$parsedURI['host'];
if (isset($parsedURI['port'])) {
$baseURL .= ':'.$parsedURI['port'];
}
if (isset($parsedURI['path'])) {
$baseURL .= $parsedURI['path'];
}
if (isset($parsedURI['query'])) {
$queryString = $parsedURI['query'];
$params = array_merge_recursive($params, self::getMapFromQuery($queryString));
}
$queryParams = self::getSortedQueryString($params);
if (strlen($queryParams) > 0 or !$emptyPostParams)
{
$baseURL .= '?'.$queryParams;
}
if (strlen($queryParams) > 0 and !$emptyPostParams)
{
$baseURL .= '.';
}
return $baseURL;
}
private static function constructPostUrl($uri, $params)
{
$baseURL = self::constructGetUrl($uri, array(),count($params) > 0 ? false : true);
return $baseURL.self::getSortedParamsString($params);
}
private static function getSignatureV3($authToken, $baseURL, $nonce)
{
$baseURL = utf8_encode($baseURL.".".$nonce);
$hmac = hash_hmac('SHA256', $baseURL, $authToken, true);
return base64_encode($hmac);
}
/**
* Return a recording instance
*
* @param string $method
* @param string $uri
* @param string $nonce
* @param string $auth_token
* @param string $v3_signature
* @param array $params
* @return boolean
* @throws PlivoValidationException
*/
public static function validateV3Signature($method, $uri, $nonce, $auth_token, $v3_signature, $params=[])
{
$auth_token = utf8_encode($auth_token);
$nonce = utf8_encode($nonce);
$v3_signature = utf8_encode($v3_signature);
$uri = utf8_encode($uri);
$params = self::stringifyParams($params);
if ($method == 'GET')
{
$base_url = self::constructGetUrl($uri, $params);
}
elseif ($method == 'POST')
{
$base_url = self::constructPostUrl($uri, $params);
}
else
{
throw new PlivoValidationException('method not allowed for signature validation');
}
$signature = self::getSignatureV3($auth_token, $base_url, $nonce);
return in_array($signature, explode(',', $v3_signature));
}
}
|