lib/razorpay/utility.rb in razorpay-2.0.0 vs lib/razorpay/utility.rb in razorpay-2.0.1
- old
+ new
@@ -8,22 +8,22 @@
order_id = attributes[:razorpay_order_id]
payment_id = attributes[:razorpay_payment_id]
data = [order_id, payment_id].join '|'
- verify_signature(signature, data)
+ secret = Razorpay.auth[:password]
+
+ verify_signature(data, signature, secret)
end
- def self.verify_webhook_signature(signature, body)
- verify_signature(signature, body)
+ def self.verify_webhook_signature(body, signature, secret)
+ verify_signature(body, signature, secret)
end
class << self
private
- def verify_signature(signature, data)
- secret = Razorpay.auth[:password]
-
+ def verify_signature(data, signature, secret)
expected_signature = OpenSSL::HMAC.hexdigest('SHA256', secret, data)
verified = secure_compare(expected_signature, signature)
raise SecurityError, 'Signature verification failed' unless verified