Module: OffsitePayments::Integrations::Dwolla::Common

Included in:
Notification, Return
Defined in:
lib/offsite_payments/integrations/dwolla.rb

Instance Method Summary collapse

Instance Method Details

#verify_signature(checkoutId, amount, notification_signature, secret) ⇒ Object



16
17
18
19
20
21
22
23
24
25
26
# File 'lib/offsite_payments/integrations/dwolla.rb', line 16

def verify_signature(checkoutId, amount, notification_signature, secret)
  if secret.nil?
    raise ArgumentError, "You need to provide the Application secret as the option :credential3 to verify that the notification originated from Dwolla"
  end

  expected_signature = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA1.new, secret, "%s&%.2f" % [checkoutId, amount])

  if notification_signature != expected_signature
    raise StandardError, "Dwolla signature verification failed."
  end
end