Sha256: 5e36f2edd121b740aac083c9cc36ec0b563a6bc4ee08de30066dd76bfdc4ef90
Contents?: true
Size: 602 Bytes
Versions: 15
Compression:
Stored size: 602 Bytes
Contents
class DiscoApp::RequestValidationService
def self.hmac_valid?(query_string, secret)
query_hash = Rack::Utils.parse_query(query_string)
hmac = query_hash.delete('hmac').to_s
ActiveSupport::SecurityUtils.variable_size_secure_compare(self.calculated_hmac(query_hash, secret), hmac)
end
# Return the calculated hmac for the given query hash and secret.
def self.calculated_hmac(query_hash, secret)
sorted_params = query_hash.collect{ |k, v| "#{k}=#{Array(v).join(',')}" }.sort.join('&')
OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), secret, sorted_params)
end
end
Version data entries
15 entries across 15 versions & 1 rubygems