Merge pull request #542 from FatchipRobert/MAG2-310-Server-API-hash

MAG2-310 - Changed default hash algorithm for key param to sha2-384
PAYONE-GmbH · Jun 18, 2024 · b2f2baa · b2f2baa
2 parents f9b9922 + f9926fd
commit b2f2baa
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/Helper/Toolkit.php b/Helper/Toolkit.php
@@ -108,7 +108,7 @@ public function isKeyValid($sKey)
     {
         $aKeyValues = $this->getAllPayoneSecurityKeys();
         foreach ($aKeyValues as $sConfigKey) {
-            if ($this->hashString($sConfigKey ?? '') == $sKey) {
+            if ($this->hashString($sConfigKey ?? '', 'md5') == $sKey) {
                 return true;
             }
         }
@@ -266,7 +266,7 @@ public function generateUUIDv4()
      * @param  string $sString
      * @return string
      */
-    public function hashString($sString, $sAlgorithm = 'md5', $sKey = false)
+    public function hashString($sString, $sAlgorithm = 'sha384', $sKey = false)
     {
         if ($sAlgorithm == "sha384" && $sKey !== false) {
             return hash_hmac($sAlgorithm, $sString, $sKey);