(PHP Extension) Payeezy HMAC Computation

Demonstrates how to calculate the HMAC for a Payeezy REST request.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$crypt = new CkCrypt2();
$prng = new CkPrng();

// An API key such as y6pWAJNyJyjGv66IsVuWnklkKUPFbb0a
$apiKey = 'my_api_key';
// An API secret such as 86fbae7030253af3cd15faef2a1f4b67353e41fb6799f576b5093ae52901e6f7
$apiSecret = 'my_api_secret';
// A token such as fdoa-a480ce8951daa73262734cf102641994c1e55e7cdf4c02b6
$token = 'my_merchant_token';

// The nonce is a random number (bytes), something like "6057786719490086000"
$nonce = $prng->genRandom(8,'decimal');
print 'nonce = ' . $nonce . "\n";

$dtNow = new CkDateTime();
$dtNow->SetFromCurrentSystemTime();
$sbTimestamp = new CkStringBuilder();
// Get the epoch timestamp in seconds
$sbTimestamp->Append($dtNow->getAsUnixTimeStr(false));
// Change it to milliseconds
$sbTimestamp->Append('000');
// The timestamp is a number similar to this: 1546011905000 (which is a timestamp taken on 28-Dec-2018).
$timestamp = $sbTimestamp->getAsString();
print 'timestamp = ' . $timestamp . "\n";

// Generate the following JSON request body:
// 	{
// 	  "merchant_ref": "Astonishing-Sale",
// 	  "transaction_type": "authorize",
// 	  "method": "token",
// 	  "amount": "200",
// 	  "currency_code": "USD",
// 	  "token": {
// 	    "token_type": "FDToken",
// 	    "token_data": {
// 	      "type": "visa",
// 	      "value": "2537446225198291",
// 	      "cardholder_name": "JohnSmith",
// 	      "exp_date": "1030",
// 	      "special_payment": "B"
// 	    }
// 	  }
// 	}

$json = new CkJsonObject();
$json->UpdateString('merchant_ref','Astonishing-Sale');
$json->UpdateString('transaction_type','authorize');
$json->UpdateString('method','token');
$json->UpdateString('amount','200');
$json->UpdateString('currency_code','USD');
$json->UpdateString('token.token_type','FDToken');
$json->UpdateString('token.token_data.type','visa');
$json->UpdateString('token.token_data.value','2537446225198291');
$json->UpdateString('token.token_data.cardholder_name','JohnSmith');
$json->UpdateString('token.token_data.exp_date','1030');
$json->UpdateString('token.token_data.special_payment','B');

// string hashData = apiKey + nonce + timestamp + token + jsonString;
$sbHmacData = new CkStringBuilder();
$sbHmacData->Append($apiKey);
$sbHmacData->Append($nonce);
$sbHmacData->Append($timestamp);
$sbHmacData->Append($token);
$sbHmacData->Append($json->emit());

// HMAC the data to produce a hex string.
$crypt->put_EncodingMode('hexlower');
$crypt->put_MacAlgorithm('hmac');
$crypt->SetMacKeyString($apiSecret);
$crypt->put_HashAlgorithm('sha256');
$crypt->put_Charset('utf-8');
$hexHash = $crypt->macStringENC($sbHmacData->getAsString());

// Now base64 encode the hex string:
$sbBase64Hash = new CkStringBuilder();
$sbBase64Hash->Append($hexHash);
$sbBase64Hash->Encode('base64','utf-8');

print 'This is the Authorization header to be sent with the payeezy request:' . "\n";
print 'Authorization: ' . $sbBase64Hash->getAsString() . "\n";

?>