Generate HMAC Signature on PHP












-3














how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,










share|improve this question




















  • 1




    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?
    – user10226920
    Nov 21 '18 at 4:03










  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"
    – Azivans
    Nov 21 '18 at 4:18










  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe
    – miken32
    Nov 21 '18 at 4:51
















-3














how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,










share|improve this question




















  • 1




    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?
    – user10226920
    Nov 21 '18 at 4:03










  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"
    – Azivans
    Nov 21 '18 at 4:18










  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe
    – miken32
    Nov 21 '18 at 4:51














-3












-3








-3







how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,










share|improve this question















how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,







php sha256 hmac






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 21 '18 at 4:41

























asked Nov 21 '18 at 3:59









Azivans

12




12








  • 1




    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?
    – user10226920
    Nov 21 '18 at 4:03










  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"
    – Azivans
    Nov 21 '18 at 4:18










  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe
    – miken32
    Nov 21 '18 at 4:51














  • 1




    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?
    – user10226920
    Nov 21 '18 at 4:03










  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"
    – Azivans
    Nov 21 '18 at 4:18










  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe
    – miken32
    Nov 21 '18 at 4:51








1




1




php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?
– user10226920
Nov 21 '18 at 4:03




php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?
– user10226920
Nov 21 '18 at 4:03












how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"
– Azivans
Nov 21 '18 at 4:18




how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"
– Azivans
Nov 21 '18 at 4:18












strtolower(bin2hex(hash("sha256", $encoderData))) maybe
– miken32
Nov 21 '18 at 4:51




strtolower(bin2hex(hash("sha256", $encoderData))) maybe
– miken32
Nov 21 '18 at 4:51












2 Answers
2






active

oldest

votes


















0














I don't know what you mean but
You can try this;



<?php
$stringToSign = 'abcd';
$apiSecret = 'secretkey';

$hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
?>





share|improve this answer





















  • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
    – Azivans
    Nov 21 '18 at 4:19



















0














doing some BCA stuff? :p



you can use this function if you wan to use GET:



strtolower(hash('sha256', ''));





share|improve this answer





















    Your Answer






    StackExchange.ifUsing("editor", function () {
    StackExchange.using("externalEditor", function () {
    StackExchange.using("snippets", function () {
    StackExchange.snippets.init();
    });
    });
    }, "code-snippets");

    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "1"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53405081%2fgenerate-hmac-signature-on-php%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    2 Answers
    2






    active

    oldest

    votes








    2 Answers
    2






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    I don't know what you mean but
    You can try this;



    <?php
    $stringToSign = 'abcd';
    $apiSecret = 'secretkey';

    $hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
    ?>





    share|improve this answer





















    • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
      – Azivans
      Nov 21 '18 at 4:19
















    0














    I don't know what you mean but
    You can try this;



    <?php
    $stringToSign = 'abcd';
    $apiSecret = 'secretkey';

    $hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
    ?>





    share|improve this answer





















    • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
      – Azivans
      Nov 21 '18 at 4:19














    0












    0








    0






    I don't know what you mean but
    You can try this;



    <?php
    $stringToSign = 'abcd';
    $apiSecret = 'secretkey';

    $hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
    ?>





    share|improve this answer












    I don't know what you mean but
    You can try this;



    <?php
    $stringToSign = 'abcd';
    $apiSecret = 'secretkey';

    $hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
    ?>






    share|improve this answer












    share|improve this answer



    share|improve this answer










    answered Nov 21 '18 at 4:09









    Warren Clarin

    1819




    1819












    • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
      – Azivans
      Nov 21 '18 at 4:19


















    • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
      – Azivans
      Nov 21 '18 at 4:19
















    We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
    – Azivans
    Nov 21 '18 at 4:19




    We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php
    – Azivans
    Nov 21 '18 at 4:19













    0














    doing some BCA stuff? :p



    you can use this function if you wan to use GET:



    strtolower(hash('sha256', ''));





    share|improve this answer


























      0














      doing some BCA stuff? :p



      you can use this function if you wan to use GET:



      strtolower(hash('sha256', ''));





      share|improve this answer
























        0












        0








        0






        doing some BCA stuff? :p



        you can use this function if you wan to use GET:



        strtolower(hash('sha256', ''));





        share|improve this answer












        doing some BCA stuff? :p



        you can use this function if you wan to use GET:



        strtolower(hash('sha256', ''));






        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Dec 5 '18 at 8:42









        cyberneo

        278




        278






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Stack Overflow!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53405081%2fgenerate-hmac-signature-on-php%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Costa Masnaga

            Fotorealismo

            Sidney Franklin