module WechatPayment::Sign

Constants

SIGN_TYPE_HMAC_SHA256
SIGN_TYPE_MD5

Public Class Methods

generate(params, sign_type = SIGN_TYPE_MD5) click to toggle source
# File lib/wechat_payment/sign.rb, line 9
def self.generate(params, sign_type = SIGN_TYPE_MD5)
  key = params.delete(:key)

  new_key = params["key"] #after
  key = params.delete("key") if params["key"] #after

  query = params.sort.map do |k, v|
    "#{k}=#{v}" if v.to_s != ''
  end.compact.join('&')

  string_sign_temp = "#{query}&key=#{key || new_key || WechatPayment.key}" #after

  if sign_type == SIGN_TYPE_MD5
    Digest::MD5.hexdigest(string_sign_temp).upcase
  elsif sign_type == SIGN_TYPE_HMAC_SHA256
    OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new('sha256'), key, string_sign_temp).upcase
  else
    warn("WxPay Warn: unknown sign_type : #{sign_type}")
  end
end
verify?(params, options = {}) click to toggle source
# File lib/wechat_payment/sign.rb, line 30
def self.verify?(params, options = {})
  params = params.dup
  params["appid"] = options[:appid] if options[:appid]
  params["mch_id"] = options[:mch_id]  if options[:mch_id]
  params["key"] = options[:key] if options[:key]

  sign = params.delete('sign') || params.delete(:sign)

  generate(params, options[:sign_type] || SIGN_TYPE_MD5) == sign
end