1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
extern crate openssl;
use openssl::hash::MessageDigest;
use openssl::pkey::PKey;
use openssl::rsa::Rsa;
use openssl::sign::Verifier;
// https://paddle.com/docs/reference-verifying-webhooks/
fn verify_signature<'a, I>(pem: &[u8], signature: &str, params: I) -> bool
where I: IntoIterator<Item = (&'a str, &'a str)> {
let rsa = Rsa::public_key_from_pem(pem).unwrap();
let pkey = PKey::from_rsa(rsa).unwrap();
let mut verifier = Verifier::new(MessageDigest::sha1(), &pkey).unwrap();
verifier.update(signature.as_bytes()).unwrap();
let signature = php_serialize(params);
verifier.verify(signature.as_ref()).unwrap()
}
fn php_serialize<'a, I>(pairs: I) -> String
where I: IntoIterator<Item = (&'a str, &'a str)> {
let mut serialized = String::with_capacity(500);
let mut len = 0;
for (key, value) in pairs {
serialized.push_str(
&format!(
"s:{key_length}:\"{key}\";s:{value_length}:\"{value}\";",
key_length = key.len(),
key = key,
value_length = value.len(),
value = value
)
);
len += 1;
}
serialized.push_str("}");
format!(
"a:{pairs_count}:{{{rest}",
pairs_count = len,
rest = serialized
)
}
#[cfg(test)]
mod tests {
use std::collections::BTreeMap;
use super::*;
#[test]
fn php_serialize_serializes_key_values_as_php_string() {
let mut data = BTreeMap::new();
data.insert("checkout_id", "1234asdfjkl");
data.insert("currency", "USD");
data.insert("customer_name", "Senjougahara");
let expected = r#"a:3:{s:11:"checkout_id";s:11:"1234asdfjkl";s:8:"currency";s:3:"USD";s:13:"customer_name";s:12:"Senjougahara";}"#;
let serialized_data = php_serialize(data);
assert_eq!(serialized_data, expected);
}
}
|
