viscous/espocrm
1
0
Fork 0
mirror of https://github.com/espocrm/espocrm.git synced 2026-06-28 15:06:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

hmac api key check with hex

Browse Source
This commit is contained in:
Yuri Kuznetsov
2024-09-12 13:00:56 +03:00
parent 408a161595
commit 628e7e8131
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
application/Espo/Core/Authentication/Logins/Hmac.php
View File

@@ -70,10 +70,16 @@ class Hmac implements Login
$string = $request->getMethod() . ' ' . $request->getResourcePath();
// To become a legacy.
if ($hash === ApiKey::hash($secretKey, $string)) {
return Result::success($user);
}
// As of v8.4.1.
if ($hash === hash_hmac('sha256', $string, $secretKey)) {
return Result::success($user);
}
return Result::fail(FailReason::HASH_NOT_MATCHED);
}
}