Module: GraphQLAuthorizer::Validator::Signature

Included in:
Request
Defined in:
lib/graphql_authorizer/validator/signature.rb

Overview

Module for Validating Signature

Instance Method Summary collapse

Instance Method Details

#request_signature_is_valid?(sig:, timestamp:) ⇒ Boolean

Returns:

  • (Boolean) 


7
8
9
10
11
12
13
 
# File 'lib/graphql_authorizer/validator/signature.rb', line 7

def request_signature_is_valid?(sig:, timestamp:)
  access_key    = GraphQLAuthorizer.configuration.access_key
  digest        = OpenSSL::Digest.new("sha256")
  generated_sig = OpenSSL::HMAC.hexdigest(digest, access_key, timestamp)

  secure_compare(generated_sig, sig)
end