Classes/Flowpack/SingleSignOn/Server/Domain/Model/SsoServer.php
public function verifyAuthenticationRequest(SsoClient $ssoClient, \TYPO3\Flow\Http\Request $request, $argumentName, $signature) {
		$uri = clone $request->getUri();
		$arguments = $uri->getArguments();
		unset($arguments[$argumentName]);
		if (isset($arguments['__csrfToken'])) {
			unset($arguments['__csrfToken']);
		}
		$uri->setQuery(http_build_query($arguments));
		$originalUri = (string)$uri;

		// TODO Check if RsaWalletService has a key stored for the fingerprint, e.g. import or use public key string from client
		return $this->rsaWalletService->verifySignature($originalUri, base64_decode($signature), $ssoClient->getPublicKey());
	}
public function verifyAuthenticationRequest(SsoClient $ssoClient, \TYPO3\Flow\Http\Request $request, $argumentName, $signature) {
		$uri = clone $request->getUri();
		$arguments = $uri->getArguments();
		unset($arguments[$argumentName]);
		if (isset($arguments['__csrfToken'])) {
			unset($arguments['__csrfToken']);
		}
		$uri->setQuery(http_build_query($arguments));
		$originalUri = (string)$uri;

		// TODO Check if RsaWalletService has a key stored for the fingerprint, e.g. import or use public key string from client
		return $this->rsaWalletService->verifySignature($originalUri, base64_decode($signature), $ssoClient->getPublicKey());
	}
public function verifyAuthenticationRequest ( SsoClient $ ssoClient , \ TYPO3 \ Flow \ Http \ Request $ request , $ argumentName , $ signature ) { $ uri = clone $ request -> getUri ( ) ; $ arguments = $ uri -> getArguments ( ) ; unset ( $ arguments [ $ argumentName ] ) ; if ( isset ( $ arguments [ '__csrfToken' ] ) ) { unset ( $ arguments [ '__csrfToken' ] ) ; } $ uri -> setQuery ( http_build_query ( $ arguments ) ) ; $ originalUri = ( string ) $ uri ; // TODO Check if RsaWalletService has a key stored for the fingerprint, e.g. import or use public key string from client return $ this -> rsaWalletService -> verifySignature ( $ originalUri , base64_decode ( $ signature ) , $ ssoClient -> getPublicKey ( ) ) ; }
Verifies the authenticity of an request to the authentication endpoint

Verifies the signature with the public key from the given SSO client excluding
the signature argument and a possible CSRF token.

@param \Flowpack\SingleSignOn\Server\Domain\Model\SsoClient $ssoClient
@param \TYPO3\Flow\Http\Request $request The original authentication endpoint request
@param string $argumentName Argument name of the signature argument (defaults to "signature")
@param string $signature Base64 encoded signature of the URI with arguments (excluding the signature argument)
@return boolean
Verifies the authenticity of an request to the authentication endpoint