Contents

class DiscoApp::RequestValidationService

  def self.hmac_valid?(query_string, secret)
    query_hash = Rack::Utils.parse_query(query_string)
    hmac = query_hash.delete('hmac').to_s
    ActiveSupport::SecurityUtils.secure_compare(calculated_hmac(query_hash, secret), hmac)
  end

  # Return the calculated hmac for the given query hash and secret.
  def self.calculated_hmac(query_hash, secret)
    sorted_params = query_hash.map{ |k, v| "#{k}=#{Array(v).join(',')}" }.sort.join('&')
    OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), secret, sorted_params)
  end

end

Version data entries

7 entries across 7 versions & 1 rubygems

Version	Path
disco_app-0.17.0	app/services/disco_app/request_validation_service.rb
disco_app-0.18.0	app/services/disco_app/request_validation_service.rb
disco_app-0.18.2	app/services/disco_app/request_validation_service.rb
disco_app-0.18.3	app/services/disco_app/request_validation_service.rb
disco_app-0.18.6	app/services/disco_app/request_validation_service.rb
disco_app-0.18.4	app/services/disco_app/request_validation_service.rb
disco_app-0.18.1	app/services/disco_app/request_validation_service.rb