Sha256: 5ee647c5fc26b2edab347c9122e61fb6552749b6ecdf5ff9da7dcb5b3380e262
Contents?: true
Size: 1.15 KB
Versions: 1
Compression:
Stored size: 1.15 KB
Contents
require 'openssl' module Razorpay # Helper functions are defined here class Utility def self.verify_payment_signature(attributes) signature = attributes[:razorpay_signature] order_id = attributes[:razorpay_order_id] || attributes[:razorpay_subscription_id] payment_id = attributes[:razorpay_payment_id] data = [order_id, payment_id].join '|' secret = Razorpay.auth[:password] verify_signature(data, signature, secret) end def self.verify_webhook_signature(body, signature, secret) verify_signature(body, signature, secret) end class << self private def verify_signature(data, signature, secret) expected_signature = OpenSSL::HMAC.hexdigest('SHA256', secret, data) verified = secure_compare(expected_signature, signature) raise SecurityError, 'Signature verification failed' unless verified end def secure_compare(a, b) return false unless a.bytesize == b.bytesize l = a.unpack('C*') r = 0 i = -1 b.each_byte do |v| i += 1 r |= v ^ l[i] end r.zero? end end end end
Version data entries
1 entries across 1 versions & 1 rubygems
Version | Path |
---|---|
razorpay-2.3.0 | lib/razorpay/utility.rb |