Generate HMAC Signature on PHP












-3















how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,










share|improve this question




















  • 1





    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?

    – user10226920
    Nov 21 '18 at 4:03











  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"

    – Azivans
    Nov 21 '18 at 4:18











  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe

    – miken32
    Nov 21 '18 at 4:51
















-3















how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,










share|improve this question




















  • 1





    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?

    – user10226920
    Nov 21 '18 at 4:03











  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"

    – Azivans
    Nov 21 '18 at 4:18











  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe

    – miken32
    Nov 21 '18 at 4:51














-3












-3








-3








how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,










share|improve this question
















how do you apply the system below to php?



StringToSign = HTTPMethod+":"+RelativeUrl+":"+AccessToken+":"+
Lowercase(HexEncode(SHA-256(RequestBody)))+":"+Timestamp

Signature = HMAC-SHA256(apiSecret, StringToSign)


my script :



$encoderData = json_encode($bodyToHash, JSON_UNESCAPED_SLASHES);
$hash = hash("sha256", $encoderData);
$stringToSign = $Method. ":" .$url . ":" . $auth_token . ":" . $hash . ":" . $Timestamp;
$auth_signature = hash_hmac('sha256', $secret_key, $stringToSign,false);


Thank you,







php sha256 hmac






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Nov 21 '18 at 4:41







Azivans

















asked Nov 21 '18 at 3:59









AzivansAzivans

12




12








  • 1





    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?

    – user10226920
    Nov 21 '18 at 4:03











  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"

    – Azivans
    Nov 21 '18 at 4:18











  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe

    – miken32
    Nov 21 '18 at 4:51














  • 1





    php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?

    – user10226920
    Nov 21 '18 at 4:03











  • how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"

    – Azivans
    Nov 21 '18 at 4:18











  • strtolower(bin2hex(hash("sha256", $encoderData))) maybe

    – miken32
    Nov 21 '18 at 4:51








1




1





php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?

– user10226920
Nov 21 '18 at 4:03





php.net/manual/en/function.hash-hmac.php, the rest looks relatively obvious, what have you tried?

– user10226920
Nov 21 '18 at 4:03













how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"

– Azivans
Nov 21 '18 at 4:18





how to do this system "Lowercase(HexEncode(SHA-256(RequestBody)))"

– Azivans
Nov 21 '18 at 4:18













strtolower(bin2hex(hash("sha256", $encoderData))) maybe

– miken32
Nov 21 '18 at 4:51





strtolower(bin2hex(hash("sha256", $encoderData))) maybe

– miken32
Nov 21 '18 at 4:51












2 Answers
2






active

oldest

votes


















0














I don't know what you mean but
You can try this;



<?php
$stringToSign = 'abcd';
$apiSecret = 'secretkey';

$hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
?>





share|improve this answer
























  • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

    – Azivans
    Nov 21 '18 at 4:19



















0














doing some BCA stuff? :p



you can use this function if you wan to use GET:



strtolower(hash('sha256', ''));





share|improve this answer
























  • can you share full script to get signature? Thanks

    – Azivans
    Jan 22 at 7:55











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53405081%2fgenerate-hmac-signature-on-php%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























2 Answers
2






active

oldest

votes








2 Answers
2






active

oldest

votes









active

oldest

votes






active

oldest

votes









0














I don't know what you mean but
You can try this;



<?php
$stringToSign = 'abcd';
$apiSecret = 'secretkey';

$hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
?>





share|improve this answer
























  • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

    – Azivans
    Nov 21 '18 at 4:19
















0














I don't know what you mean but
You can try this;



<?php
$stringToSign = 'abcd';
$apiSecret = 'secretkey';

$hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
?>





share|improve this answer
























  • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

    – Azivans
    Nov 21 '18 at 4:19














0












0








0







I don't know what you mean but
You can try this;



<?php
$stringToSign = 'abcd';
$apiSecret = 'secretkey';

$hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
?>





share|improve this answer













I don't know what you mean but
You can try this;



<?php
$stringToSign = 'abcd';
$apiSecret = 'secretkey';

$hashed = hash_hmac('sha256', $stringToSign, $apiSecret);
?>






share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 21 '18 at 4:09









Warren ClarinWarren Clarin

18110




18110













  • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

    – Azivans
    Nov 21 '18 at 4:19



















  • We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

    – Azivans
    Nov 21 '18 at 4:19

















We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

– Azivans
Nov 21 '18 at 4:19





We must get the "StringToSign" result I don't understand in the section "Lowercase (HexEncode (SHA-256 (RequestBody)))" how do I apply it to php

– Azivans
Nov 21 '18 at 4:19













0














doing some BCA stuff? :p



you can use this function if you wan to use GET:



strtolower(hash('sha256', ''));





share|improve this answer
























  • can you share full script to get signature? Thanks

    – Azivans
    Jan 22 at 7:55
















0














doing some BCA stuff? :p



you can use this function if you wan to use GET:



strtolower(hash('sha256', ''));





share|improve this answer
























  • can you share full script to get signature? Thanks

    – Azivans
    Jan 22 at 7:55














0












0








0







doing some BCA stuff? :p



you can use this function if you wan to use GET:



strtolower(hash('sha256', ''));





share|improve this answer













doing some BCA stuff? :p



you can use this function if you wan to use GET:



strtolower(hash('sha256', ''));






share|improve this answer












share|improve this answer



share|improve this answer










answered Dec 5 '18 at 8:42









cyberneocyberneo

278




278













  • can you share full script to get signature? Thanks

    – Azivans
    Jan 22 at 7:55



















  • can you share full script to get signature? Thanks

    – Azivans
    Jan 22 at 7:55

















can you share full script to get signature? Thanks

– Azivans
Jan 22 at 7:55





can you share full script to get signature? Thanks

– Azivans
Jan 22 at 7:55


















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53405081%2fgenerate-hmac-signature-on-php%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Guess what letter conforming each word

Port of Spain

Run scheduled task as local user group (not BUILTIN)