com.stripe.net

Class Webhook.Util

java.lang.Object

com.stripe.net.Webhook.Util

Enclosing class:

Webhook

public static final class Webhook.Util
extends Object

Constructor Summary

Constructors

Constructor and Description
Util()

Method Summary

Modifier and Type	Method and Description
static String	computeHmacSHA256(String key, String message) Computes the HMAC/SHA-256 code for a given key and message.
static long	getTimeNow() Returns the current UTC timestamp in seconds.
static boolean	secureCompare(String a, String b) Compares two strings for equality.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Util

public Util()

Method Detail

computeHmacSHA256

public static String computeHmacSHA256(String key,
                                       String message)
                                throws NoSuchAlgorithmException,
                                       InvalidKeyException

Computes the HMAC/SHA-256 code for a given key and message.

Parameters:

key - the key used to generate the code.

message - the message.

Returns:

the code as a string.

Throws:

NoSuchAlgorithmException

InvalidKeyException

secureCompare

public static boolean secureCompare(String a,
                                    String b)

Compares two strings for equality. The time taken is independent of the number of characters that match. Java actually has MessageDigest.isEqual() for this, but the implementation in very old Java 6 versions does not protect against timing attacks. Once we drop support for Java 6, we'll be able to just use MessageDigest.isEqual().

Parameters:

a - one of the strings to compare.

b - the other string to compare.

Returns:

true if the strings are equal, false otherwise.

getTimeNow

public static long getTimeNow()

Returns the current UTC timestamp in seconds.

Returns:

the timestamp as a long.