Code Coverage for /app/src/Webhook/WebhookVerifier.php

1	<?php
2
3	namespace Fingerprint\ServerAPI\Webhook;
4
5	final class WebhookVerifier
6	{
7	public static function IsValidWebhookSignature(string $header, string $data, string $secret): bool
8	{
9	$signatures = explode(',', $header);
10	foreach ($signatures as $signature) {
11	$parts = explode('=', $signature);
12	if (2 === count($parts) && 'v1' === $parts[0]) {
13	$hash = $parts[1];
14	if (self::checkSignature($hash, $data, $secret)) {
15	return true;
16	}
17	}
18	}
19
20	return false;
21	}
22
23	private static function checkSignature(string $signature, string $data, string $secret): bool
24	{
25	$hash = hash_hmac('sha256', $data, $secret);
26
27	return hash_equals($hash, $signature);
28	}
29	}