Hmac.php

Go to the documentation of this file.

<?php

namespace Elgg\Security;

use Elgg\Exceptions\InvalidArgumentException;

class Hmac {

    protected $comparator;

    protected string $data;

    public function __construct(protected string $key, callable $comparator, $data, protected string $algo = 'sha256') {
        $this->comparator = $comparator;
        if (!$data) {
            throw new InvalidArgumentException('$data cannot be empty');
        }
        
        if (!is_string($data)) {
            $data = serialize($data);
        }
        
        $this->data = $data;
    }

    public function getToken(): string {
        $bytes = hash_hmac($this->algo, $this->data, $this->key, true);
        return Base64Url::encode($bytes);
    }

    public function matchesToken($token): bool {
        $expected_token = $this->getToken();
        return call_user_func($this->comparator, $expected_token, $token);
    }
}