function Crypt::hmacBase64

Calculates a base-64 encoded, URL-safe sha-256 hmac.

Parameters

mixed $data: Scalar value to be validated with the hmac.

mixed $key: A secret key, this can be any scalar value.

Return value

string A base-64 encoded sha-256 hmac, with + replaced with -, / with _ and any = padding characters removed.

18 calls to Crypt::hmacBase64()

AssetGroupSetHashTrait::generateHash in core/lib/Drupal/Core/Asset/AssetGroupSetHashTrait.php

Generates a hash for an array of asset groups.

ContextualController::render in core/modules/contextual/src/ContextualController.php

Returns the requested rendered contextual links.

ContextualLinksPlaceholder::preRenderPlaceholder in core/modules/contextual/src/Element/ContextualLinksPlaceholder.php

Pre-render callback: Renders a contextual links placeholder into #markup.

CsrfTokenGenerator::computeToken in core/lib/Drupal/Core/Access/CsrfTokenGenerator.php

Generates a token based on $value, the token seed, and the private key.

drupal_generate_test_ua in core/includes/bootstrap.inc

Generates a user agent string with a HMAC and timestamp for tests.

... See full list

File

core/lib/Drupal/Component/Utility/Crypt.php, line 24

Class

Crypt

Utility class for cryptographically-secure string handling routines.

Namespace

Drupal\Component\Utility

Code

public static function hmacBase64($data, $key) {
    // $data and $key being strings here is necessary to avoid empty string
    // results of the hash function if they are not scalar values. As this
    // function is used in security-critical contexts like token validation it
    // is important that it never returns an empty string.
    if (!is_scalar($data) || !is_scalar($key)) {
        throw new \InvalidArgumentException('Both parameters passed to \\Drupal\\Component\\Utility\\Crypt::hmacBase64 must be scalar values.');
    }
    $hmac = base64_encode(hash_hmac('sha256', $data, $key, TRUE));
    // Modify the hmac so it's safe to use in URLs.
    return str_replace([
        '+',
        '/',
        '=',
    ], [
        '-',
        '_',
        '',
    ], $hmac);
}