hashService->hmac($string, self::class); } /** * Appends a hash (HMAC) to a given string and returns the result * * @param string $string The string for which a hash should be generated * @return string The original string with HMAC of the string appended * @see generateHmac() * @todo Mark as API once it is more stable */ public function appendHmac(string $string): string { trigger_error( __CLASS__ . ' has been marked as deprecated in TYPO3 v13. Use \TYPO3\CMS\Core\Crypto\HashService instead.', E_USER_DEPRECATED, ); return $this->hashService->appendHmac($string, self::class); } /** * Tests if a string $string matches the HMAC given by $hash. * * @param string $string The string which should be validated * @param string $hmac The hash of the string * @return bool TRUE if string and hash fit together, FALSE otherwise. */ public function validateHmac(string $string, string $hmac): bool { trigger_error( __CLASS__ . ' has been marked as deprecated in TYPO3 v13. Use \TYPO3\CMS\Core\Crypto\HashService instead.', E_USER_DEPRECATED, ); return $this->hashService->validateHmac($string, self::class, $hmac); } /** * Tests if the last 40 characters of a given string $string * matches the HMAC of the rest of the string and, if true, * returns the string without the HMAC. In case of a HMAC * validation error, an exception is thrown. * * @param string $string The string with the HMAC appended (in the format 'string') * @return string the original string without the HMAC, if validation was successful * @see validateHmac() * @throws \TYPO3\CMS\Extbase\Security\Exception\InvalidArgumentForHashGenerationException if the given string is not well-formatted * @throws \TYPO3\CMS\Extbase\Security\Exception\InvalidHashException if the hash did not fit to the data. * @todo Mark as API once it is more stable */ public function validateAndStripHmac(string $string): string { trigger_error( __CLASS__ . ' has been marked as deprecated in TYPO3 v13. Use \TYPO3\CMS\Core\Crypto\HashService instead.', E_USER_DEPRECATED, ); if (strlen($string) < 40) { throw new InvalidArgumentForHashGenerationException('A hashed string must contain at least 40 characters, the given string was only ' . strlen($string) . ' characters long.', 1320830276); } $stringWithoutHmac = substr($string, 0, -40); if ($this->validateHmac($stringWithoutHmac, substr($string, -40)) !== true) { throw new InvalidHashException('The given string was not appended with a valid HMAC.', 1320830018); } return $stringWithoutHmac; } }