timesigner.php

<?php
namespace Bitrix\Main\Security\Sign;
 
use Bitrix\Main\ArgumentException;
use Bitrix\Main\ArgumentTypeException;
 
class TimeSigner
{
    protected $signer = null;
 
    public function __construct(SigningAlgorithm $algorithm = null)
    {
        $this->signer = new Signer($algorithm);
    }
 
    public function setKey($value)
    {
        $this->signer->setKey($value);
        return $this;
    }
 
    public function getSeparator()
    {
        return $this->signer->getSeparator();
    }
 
    public function setSeparator($value)
    {
        $this->signer->setSeparator($value);
        return $this;
    }
 
    public function sign($value, $time, $salt = null)
    {
        $timestamp = $this->getTimeStamp($time);
        $signature = $this->getSignature($value, $timestamp, $salt);
        return $this->pack(array($value, $timestamp, $signature));
    }
 
    public function unsign($signedValue, $salt = null)
    {
        $timedValue = $this->signer->unsign($signedValue, $salt);
 
        if (mb_strpos($signedValue, $timedValue) === false)
            throw new BadSignatureException('Timestamp missing');
 
        list($value, $time) = $this->unpack($timedValue);
        $time = (int) $time;
 
        if ($time <= 0)
            throw new BadSignatureException(sprintf('Malformed timestamp %d', $time));
 
        if ($time < time())
            throw new BadSignatureException(sprintf('Signature timestamp expired (%d < %d)', $time, time()));
 
        return $value;
    }
 
    public function getSignature($value, $timestamp, $salt = null)
    {
        if (!is_string($value))
            throw new ArgumentTypeException('value', 'string');
 
        $timedValue = $this->pack(array($value, $timestamp));
        return $this->signer->getSignature($timedValue, $salt);
    }
 
    public function validate($value, $timestamp, $signature, $salt = null)
    {
        try
        {
            $signedValue = $this->pack(array($value, $timestamp, $signature));
            $this->unsign($signedValue, $salt);
            return true;
        }
        catch(BadSignatureException $e)
        {
            return false;
        }
    }
 
    protected function getTimeStamp($time)
    {
        if (!is_string($time) && !is_int($time))
            throw new ArgumentTypeException('time');
 
        if (is_string($time) && !is_numeric($time))
        {
            $timestamp = strtotime($time);
            if (!$timestamp)
                throw new ArgumentException(sprintf('Invalid time "%s" format. See "Date and Time Formats"', $time));
        }
        else
        {
            $timestamp = (int) $time;
        }
 
        if ($timestamp < time())
            throw new ArgumentException(sprintf('Timestamp %d must be greater than now()', $timestamp));
 
        return $timestamp;
    }
 
    public function pack(array $values)
    {
        return $this->signer->pack($values);
    }
 
    public function unpack($value, $limit = 2)
    {
        return $this->signer->unpack($value, $limit);
    }
}