lib/razorpay/utility.rb in razorpay-2.0.0 vs lib/razorpay/utility.rb in razorpay-2.0.1

- old
+ new

@@ -8,22 +8,22 @@ order_id = attributes[:razorpay_order_id] payment_id = attributes[:razorpay_payment_id] data = [order_id, payment_id].join '|' - verify_signature(signature, data) + secret = Razorpay.auth[:password] + + verify_signature(data, signature, secret) end - def self.verify_webhook_signature(signature, body) - verify_signature(signature, body) + def self.verify_webhook_signature(body, signature, secret) + verify_signature(body, signature, secret) end class << self private - def verify_signature(signature, data) - secret = Razorpay.auth[:password] - + def verify_signature(data, signature, secret) expected_signature = OpenSSL::HMAC.hexdigest('SHA256', secret, data) verified = secure_compare(expected_signature, signature) raise SecurityError, 'Signature verification failed' unless verified