Hmac.php

Go to the documentation of this file.

<?php
 
namespace Elgg\Security;
 
use Elgg\Exceptions\InvalidArgumentException;
 
class Hmac {
 
    protected $comparator;
 
    protected string $data;
 
    public function __construct(protected string $key, callable $comparator, $data, protected string $algo = 'sha256') {
        $this->comparator = $comparator;
        if (!$data) {
            throw new InvalidArgumentException('$data cannot be empty');
        }
        
        if (!is_string($data)) {
            $data = serialize($data);
        }
        
        $this->data = $data;
    }
 
    public function getToken(): string {
        $bytes = hash_hmac($this->algo, $this->data, $this->key, true);
        return Base64Url::encode($bytes);
    }
 
    public function matchesToken($token): bool {
        $expected_token = $this->getToken();
        return call_user_func($this->comparator, $expected_token, $token);
    }
}