Gecko [ www.foryou-vip.com ]

Name	Size	Permission	Date
ApiOperations	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Checkout	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Error	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
HttpClient	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Issuing	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Radar	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Reporting	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Sigma	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Terminal	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Util	[ DIR ]	drwxr-xr-x	2025-11-08 11:15
Account.php	12.98 KB	-rw-r--r--	2020-09-03 11:42
AccountLink.php	302 B	-rw-r--r--	2020-09-03 11:42
AlipayAccount.php	2.22 KB	-rw-r--r--	2020-09-03 11:42
ApiRequestor.php	15.88 KB	-rw-r--r--	2020-09-03 11:42
ApiResource.php	3.22 KB	-rw-r--r--	2020-09-03 11:42
ApiResponse.php	549 B	-rw-r--r--	2020-09-03 11:42
ApplePayDomain.php	550 B	-rw-r--r--	2020-09-03 11:42
ApplicationFee.php	2.77 KB	-rw-r--r--	2020-09-03 11:42
ApplicationFeeRefund.php	1.29 KB	-rw-r--r--	2020-09-03 11:42
Balance.php	505 B	-rw-r--r--	2020-09-03 11:42
BalanceTransaction.php	2.65 KB	-rw-r--r--	2020-09-03 11:42
BankAccount.php	3.48 KB	-rw-r--r--	2020-09-03 11:42
BitcoinReceiver.php	1.31 KB	-rw-r--r--	2020-09-03 11:42
BitcoinTransaction.php	181 B	-rw-r--r--	2020-09-03 11:42
Capability.php	2.26 KB	-rw-r--r--	2020-09-03 11:42
Card.php	4.24 KB	-rw-r--r--	2020-09-03 11:42
Charge.php	7.87 KB	-rw-r--r--	2020-09-03 11:42
Collection.php	2.89 KB	-rw-r--r--	2020-09-03 11:42
CountrySpec.php	560 B	-rw-r--r--	2020-09-03 11:42
Coupon.php	743 B	-rw-r--r--	2020-09-03 11:42
CreditNote.php	2.05 KB	-rw-r--r--	2020-09-03 11:42
Customer.php	9.91 KB	-rw-r--r--	2020-09-03 11:42
CustomerBalanceTransaction.php	2.83 KB	-rw-r--r--	2020-09-03 11:42
Discount.php	320 B	-rw-r--r--	2020-09-03 11:42
Dispute.php	2.63 KB	-rw-r--r--	2020-09-03 11:42
EphemeralKey.php	894 B	-rw-r--r--	2020-09-03 11:42
Event.php	11 KB	-rw-r--r--	2020-09-03 11:42
ExchangeRate.php	223 B	-rw-r--r--	2020-09-03 11:42
File.php	1.67 KB	-rw-r--r--	2020-09-03 11:42
FileLink.php	523 B	-rw-r--r--	2020-09-03 11:42
FileUpload.php	154 B	-rw-r--r--	2020-09-03 11:42
Invoice.php	6.42 KB	-rw-r--r--	2020-09-03 11:42
InvoiceItem.php	870 B	-rw-r--r--	2020-09-03 11:42
InvoiceLineItem.php	705 B	-rw-r--r--	2020-09-03 11:42
IssuerFraudRecord.php	436 B	-rw-r--r--	2020-09-03 11:42
LoginLink.php	236 B	-rw-r--r--	2020-09-03 11:42
OAuth.php	3.13 KB	-rw-r--r--	2020-09-03 11:42
Order.php	1.61 KB	-rw-r--r--	2020-09-03 11:42
OrderItem.php	355 B	-rw-r--r--	2020-09-03 11:42
OrderReturn.php	471 B	-rw-r--r--	2020-09-03 11:42
PaymentIntent.php	3.19 KB	-rw-r--r--	2020-09-03 11:42
PaymentMethod.php	1.44 KB	-rw-r--r--	2020-09-03 11:42
Payout.php	3 KB	-rw-r--r--	2020-09-03 11:42
Person.php	3.06 KB	-rw-r--r--	2020-09-03 11:42
Plan.php	871 B	-rw-r--r--	2020-09-03 11:42
Product.php	1.09 KB	-rw-r--r--	2020-09-03 11:42
Recipient.php	1.04 KB	-rw-r--r--	2020-09-03 11:42
RecipientTransfer.php	919 B	-rw-r--r--	2020-09-03 11:42
Refund.php	1.77 KB	-rw-r--r--	2020-09-03 11:42
RequestTelemetry.php	559 B	-rw-r--r--	2020-09-03 11:42
Review.php	1.61 KB	-rw-r--r--	2020-09-03 11:42
SKU.php	692 B	-rw-r--r--	2020-09-03 11:42
SetupIntent.php	2.12 KB	-rw-r--r--	2020-09-03 11:42
SingletonApiResource.php	937 B	-rw-r--r--	2020-09-03 11:42
Source.php	4.38 KB	-rw-r--r--	2020-09-03 11:42
SourceTransaction.php	415 B	-rw-r--r--	2020-09-03 11:42
Stripe.php	6.59 KB	-rw-r--r--	2020-09-03 11:42
StripeObject.php	17.34 KB	-rw-r--r--	2020-09-03 11:42
Subscription.php	2.7 KB	-rw-r--r--	2020-09-03 11:42
SubscriptionItem.php	1.09 KB	-rw-r--r--	2020-09-03 11:42
SubscriptionSchedule.php	3.23 KB	-rw-r--r--	2020-09-03 11:42
SubscriptionScheduleRevision.php	2.15 KB	-rw-r--r--	2020-09-03 11:42
TaxId.php	2.2 KB	-rw-r--r--	2020-09-03 11:42
TaxRate.php	600 B	-rw-r--r--	2020-09-03 11:42
ThreeDSecure.php	334 B	-rw-r--r--	2020-09-03 11:42
Token.php	767 B	-rw-r--r--	2020-09-03 11:42
Topup.php	1.52 KB	-rw-r--r--	2020-09-03 11:42
Transfer.php	3.62 KB	-rw-r--r--	2020-09-03 11:42
TransferReversal.php	1.42 KB	-rw-r--r--	2020-09-03 11:42
UsageRecord.php	1.21 KB	-rw-r--r--	2020-09-03 11:42
UsageRecordSummary.php	383 B	-rw-r--r--	2020-09-03 11:42
Webhook.php	1.46 KB	-rw-r--r--	2020-09-03 11:42
WebhookEndpoint.php	550 B	-rw-r--r--	2020-09-03 11:42
WebhookSignature.php	4.14 KB	-rw-r--r--	2020-09-03 11:42

Rename

<?php

namespace Stripe;

abstract class WebhookSignature
{
    const EXPECTED_SCHEME = "v1";

/**
     * Verifies the signature header sent by Stripe. Throws a
     * SignatureVerification exception if the verification fails for any
     * reason.
     *
     * @param string $payload the payload sent by Stripe.
     * @param string $header the contents of the signature header sent by
     *  Stripe.
     * @param string $secret secret used to generate the signature.
     * @param int $tolerance maximum difference allowed between the header's
     *  timestamp and the current time
     * @throws \Stripe\Error\SignatureVerification if the verification fails.
     * @return bool
     */
    public static function verifyHeader($payload, $header, $secret, $tolerance = null)
    {
        // Extract timestamp and signatures from header
        $timestamp = self::getTimestamp($header);
        $signatures = self::getSignatures($header, self::EXPECTED_SCHEME);
        if ($timestamp == -1) {
            throw new Error\SignatureVerification(
                "Unable to extract timestamp and signatures from header",
                $header,
                $payload
            );
        }
        if (empty($signatures)) {
            throw new Error\SignatureVerification(
                "No signatures found with expected scheme",
                $header,
                $payload
            );
        }

// Check if expected signature is found in list of signatures from
        // header
        $signedPayload = "$timestamp.$payload";
        $expectedSignature = self::computeSignature($signedPayload, $secret);
        $signatureFound = false;
        foreach ($signatures as $signature) {
            if (Util\Util::secureCompare($expectedSignature, $signature)) {
                $signatureFound = true;
                break;
            }
        }
        if (!$signatureFound) {
            throw new Error\SignatureVerification(
                "No signatures found matching the expected signature for payload",
                $header,
                $payload
            );
        }

// Check if timestamp is within tolerance
        if (($tolerance > 0) && (abs(time() - $timestamp) > $tolerance)) {
            throw new Error\SignatureVerification(
                "Timestamp outside the tolerance zone",
                $header,
                $payload
            );
        }

return true;
    }

/**
     * Extracts the timestamp in a signature header.
     *
     * @param string $header the signature header
     * @return int the timestamp contained in the header, or -1 if no valid
     *  timestamp is found
     */
    private static function getTimestamp($header)
    {
        $items = explode(",", $header);

foreach ($items as $item) {
            $itemParts = explode("=", $item, 2);
            if ($itemParts[0] == "t") {
                if (!is_numeric($itemParts[1])) {
                    return -1;
                }
                return intval($itemParts[1]);
            }
        }

return -1;
    }

/**
     * Extracts the signatures matching a given scheme in a signature header.
     *
     * @param string $header the signature header
     * @param string $scheme the signature scheme to look for.
     * @return array the list of signatures matching the provided scheme.
     */
    private static function getSignatures($header, $scheme)
    {
        $signatures = [];
        $items = explode(",", $header);

foreach ($items as $item) {
            $itemParts = explode("=", $item, 2);
            if ($itemParts[0] == $scheme) {
                array_push($signatures, $itemParts[1]);
            }
        }

return $signatures;
    }

/**
     * Computes the signature for a given payload and secret.
     *
     * The current scheme used by Stripe ("v1") is HMAC/SHA-256.
     *
     * @param string $payload the payload to sign.
     * @param string $secret the secret used to generate the signature.
     * @return string the signature as a string.
     */
    private static function computeSignature($payload, $secret)
    {
        return hash_hmac("sha256", $payload, $secret);
    }
}