SignifyD Webhook JSON Validation (PHP)

signifyd-webhook.php

<?php

function validatePostedJson() {
	$json = file_get_contents('php://input');
	if ($json == null) {
		header('HTTP/1.1 400 Bad Request', true, 400);
		die('No Data Found');
	}

	//Check the Hash
	if (!isset($_SERVER['HTTP_X_SIGNIFYD_SEC_HMAC_SHA256']) || base64_encode(hex2bin(hash_hmac('sha256', $json, TEAM_API_KEY))) != $_SERVER['HTTP_X_SIGNIFYD_SEC_HMAC_SHA256']) {
		header('HTTP/1.1 403 Forbidden', true, 403);
		die('Unauthorized Request');
	}

	//Check Data
	$data = json_decode($json, 1);
	if (!is_array($data)) {
		header('HTTP/1.1 400 Bad Request', true, 400);
		die('Invalid Data');
	}
	return $data;
}

?>