HMACSigner.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

namespace ILIAS\FileDelivery\Token\Signer;

use ILIAS\FileDelivery\Token\Signer\Key\DigestMethod\DigestMethod;
use ILIAS\FileDelivery\Token\Signer\Algorithm\Algorithm;
use ILIAS\FileDelivery\Token\Signer\Key\Signing\SigningKey;

class HMACSigner implements Signer
{
    public function __construct(
        private Algorithm $algorithm
    ) {
    }

    protected function getAlgorithm(): string
    {
        return $this->algorithm->getName();
    }

    public function sign(
        string $signable_payload,
        SigningKey $signing_key
    ): string {
        // sign the payload using hmac_hash
        return hash_hmac(
            $this->getAlgorithm(),
            $signable_payload,
            $signing_key->get(),
            false
        );
    }

    public function verify(
        string $data,
        string $signature,
        int $validity,
        SigningKey $signing_key
    ): bool {
        $signature_check = $this->sign($data, $signing_key);
        if ($signature_check !== $signature) {
            return false;
        }
        if ($validity > 0 && $validity < time()) {
            return false;
        }

        return true;
    }
}