Уведомления обратного вызова

package ru.bpc.test;
 
 
 
import org.apache.commons.codec.binary.Base64;
 
import org.apache.commons.codec.binary.Hex;
 
 
 
import java.io.ByteArrayInputStream;
 
import java.io.InputStream;
 
import java.security.Signature;
 
import java.security.cert.CertificateFactory;
 
import java.security.cert.X509Certificate;
 
import java.util.Comparator;
 
import java.util.Map;
 
import java.util.stream.Collector;
 
import java.util.stream.Collectors;
 
import java.util.stream.Stream;
 
 
 
public class App99 {
 
    public static void main(String[] args) throws Exception {
 
        String callbackParamsString = "amount=35000099, sign_alias=SHA-256 with RSA, checksum=163BD9FAE437B5DCDAAC4EB5ECEE5E533DAC7BD2C8947B0719F7A8BD17C101EBDBEACDB295C10BF041E903AF3FF1E6101FF7DB9BD024C6272912D86382090D5A7614E174DC034EBBB541435C80869CEED1F1E1710B71D6EE7F52AE354505A83A1E279FBA02572DC4661C1D75ABF5A7130B70306CAFA69DABC2F6200A698198F8, mdOrder=12b59da8-f68f-7c8d-12b5-9da8000826ea, operation=deposited, status=1";
 
 
 
        Map<String, String> callbackParamsMap = Stream.of(callbackParamsString.split(","))
 
                .map(String::trim)
 
                .map(s -> s.split("="))
 
                .collect(Collectors.toMap(s -> s[0].trim(), s -> s[1].trim()));
 
 
 
        String checksum = callbackParamsMap.get("checksum");
 
        callbackParamsMap.remove("checksum");
 
        callbackParamsMap.remove("sign_alias");
 
 
 
        String signString = callbackParamsMap.entrySet().stream()
 
                .sorted(Map.Entry.comparingByKey(Comparator.naturalOrder()))
 
                .collect(Collector.of(
 
                        StringBuilder::new,
 
                        (accumulator, element) -> accumulator
 
                                .append(element.getKey()).append(";")
 
                                .append(element.getValue()).append(";"),
 
                        StringBuilder::append,
 
                        StringBuilder::toString
 
                ));
 
 
 
        String cert = "MIICcTCCAdqgAwIBAgIGAWAnZt3aMA0GCSqGSIb3DQEBCwUAMHwxIDAeBgkqhkiG9w0BCQEWEWt6\n" +
 
                "bnRlc3RAeWFuZGV4LnJ1MQswCQYDVQQGEwJSVTESMBAGA1UECBMJVGF0YXJzdGFuMQ4wDAYDVQQH\n" +
 
                "EwVLYXphbjEMMAoGA1UEChMDUkJTMQswCQYDVQQLEwJRQTEMMAoGA1UEAxMDUkJTMB4XDTE3MTIw\n" +
 
                "NTE2MDEyMFoXDTE4MTIwNTE2MDExOVowfDEgMB4GCSqGSIb3DQEJARYRa3pudGVzdEB5YW5kZXgu\n" +
 
                "cnUxCzAJBgNVBAYTAlJVMRIwEAYDVQQIEwlUYXRhcnN0YW4xDjAMBgNVBAcTBUthemFuMQwwCgYD\n" +
 
                "VQQKEwNSQlMxCzAJBgNVBAsTAlFBMQwwCgYDVQQDEwNSQlMwgZ8wDQYJKoZIhvcNAQEBBQADgY0A\n" +
 
                "MIGJAoGBAJNgxgtWRFe8zhF6FE1C8s1t/dnnC8qzNN+uuUOQ3hBx1CHKQTEtZFTiCbNLMNkgWtJ/\n" +
 
                "CRBBiFXQbyza0/Ks7FRgSD52qFYUV05zRjLLoEyzG6LAfihJwTEPddNxBNvCxqdBeVdDThG81zC0\n" +
 
                "DiAhMeSwvcPCtejaDDSEYcQBLLhDAgMBAAEwDQYJKoZIhvcNAQELBQADgYEAfRP54xwuGLW/Cg08\n" +
 
                "ar6YqhdFNGq5TgXMBvQGQfRvL7W6oH67PcvzgvzN8XCL56dcpB7S8ek6NGYfPQ4K2zhgxhxpFEDH\n" +
 
                "PcgU4vswnhhWbGVMoVgmTA0hEkwq86CA5ZXJkJm6f3E/J6lYoPQaKatKF24706T6iH2htG4Bkjre\n" +
 
                "gUA=";
 
 
 
        byte[] b = Base64.decodeBase64(cert);
 
        CertificateFactory certFactory = CertificateFactory.getInstance("X.509");
 
 
 
        InputStream in = new ByteArrayInputStream(b);
 
        X509Certificate x509Cert = (X509Certificate)certFactory.generateCertificate(in);
 
 
 
        Signature sig = Signature.getInstance("SHA512withRSA");
 
        sig.initVerify(x509Cert.getPublicKey());
 
 
 
        sig.update(signString.getBytes());
 
        boolean verifies = sig.verify(Hex.decodeHex(checksum.toLowerCase().toCharArray()));
 
        System.out.println("signature verifies: " + verifies);
 
    }
 
}

import org.apache.commons.codec.binary.Hex;
 
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.nio.charset.StandardCharsets;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
 
public class Example {
 
    public static String generateHMacSHA256(final String key, final String data) throws InvalidKeyException, NoSuchAlgorithmException {
 
        final Mac hMacSHA256 = Mac.getInstance("HmacSHA256");
        byte[] hmacKeyBytes = key.getBytes(StandardCharsets.UTF_8);
 
        final SecretKeySpec secretKey = new SecretKeySpec(hmacKeyBytes, "HmacSHA256");
        hMacSHA256.init(secretKey);
 
        byte[] dataBytes = data.getBytes(StandardCharsets.UTF_8);
        byte[] res = hMacSHA256.doFinal(dataBytes);
 
        return new String(Hex.encodeHex(res));
    }
 
    public static void main(String[] args) throws NoSuchAlgorithmException, InvalidKeyException {
        String secretToken = "123";
        String message = "amount;1500;mdOrder;ed6f3abf-cea0-427e-afdf-0ba43ead124f;operation;deposited;orderNumber;89312;status;1;";
 
        String signature = Expample.generateHMacSHA256(secretToken, message).toUpperCase();
        System.out.println(signature);
    }

<?php
 
$data = 'amount;123456;mdOrder;3ff6962a-7dcc-4283-ab50-a6d7dd3386fe;operation;deposited;orderNumber;10747;status;1;';
$key = 'yourSecretToken';
$hmac = hash_hmac ( 'sha256' , $data , $key);
 
echo "[$hmac]\n";
?>

1. Пропишите строку в переменную data.
2. В переменную key пропишите закрытый ключ.
3. Функция hash_hmac ( 'sha256', $data, $key) вычисляет контрольную сумму от переданной строки, с помощью закрытого ключа по алгоритму SHA-256.
4. Сохраните результат работы функции в переменной hmac.
5. Выведите результат работы функции функцией echo.
6. Сравните это значение с тем, что передано в уведомлении о состоянии заказа.

<?php
// data from response
$data = 'amount;35000099;mdOrder;12b59da8-f68f-7c8d-12b5-9da8000826ea;operation;deposited;status;1;';
$checksum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

// your public key (e.g. SHA-512 with RSA)
// if you have a CERT, please see openssl_get_publickey()
$publicKey = <<<EOD
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtuGKbQ4WmfdV1gjWWys
5jyHKTWXnxX3zVa5/Cx5aKwJpOsjrXnHh6l8bOPQ6Sgj3iSeKJ9plZ3i7rPjkfmw
qUOJ1eLU5NvGkVjOgyi11aUKgEKwS5Iq5HZvXmPLzu+U22EUCTQwjBqnE/Wf0hnI
wYABDgc0fJeJJAHYHMBcJXTuxF8DmDf4DpbLrQ2bpGaCPKcX+04POS4zVLVCHF6N
6gYtM7U2QXYcTMTGsAvmIqSj1vddGwvNGeeUVoPbo6enMBbvZgjN5p6j3ItTziMb
Vba3m/u7bU1dOG2/79UpGAGR10qEFHiOqS6WpO7CuIR2tL9EznXRc7D9JZKwGfoY
/QIDAQAB
-----END PUBLIC KEY-----
EOD;

$binarySignature = hex2bin(strtolower($checksum));
$isVerify = openssl_verify($data, $binarySignature, $publicKey, OPENSSL_ALGO_SHA512);
if ($isVerify == 1) {
    echo "signature ok\n";
} elseif ($isVerify == 0) {
    echo "bad (there's something wrong)\n";
} else {
    echo "error checking signature\n";
}
?>

const fs = require("fs");
const crypto = require("crypto");
const CRT = fs.readFileSync("config/test-cert.cer");
const string =  "amount;100;mdOrder;efc638e8-f869-7e2a-a00f-b84c5e1f6325;operation;deposited;orderNumber;15531113133;status;1;";
const checksum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
const verifier = crypto.createVerify("RSA-SHA512");
verifier.update(string);
const isVerify = verifier.verify(CRT, checksum, "hex");
console.log(isVerify);