class UriSigner

{

private string $secret;

private string $parameter;

/**

public function __construct(#[\SensitiveParameter] string $secret, string $parameter = '_hash', bool $skipDeprecation = false)

{

$this->secret = $secret;

$this->parameter = $parameter;

if ($skipDeprecation) {

trigger_deprecation('symfony/dependency-injection', '6.4', 'The "%s" class is deprecated, use "%s" instead.', self::class, HttpFoundationUriSigner::class);

}

}

/**

public function sign(string $uri): string

{

$url = parse_url($uri);

$params = [];

if (isset($url['query'])) {

parse_str($url['query'], $params);

}

$uri = $this->buildUrl($url, $params);

$params[$this->parameter] = $this->computeHash($uri);

return $this->buildUrl($url, $params);

}

/**

public function check(string $uri): bool

{

$url = parse_url($uri);

$params = [];

if (isset($url['query'])) {

parse_str($url['query'], $params);

}

if (empty($params[$this->parameter])) {

return false;

}

$hash = $params[$this->parameter];

unset($params[$this->parameter]);

return hash_equals($this->computeHash($this->buildUrl($url, $params)), $hash);

}

public function checkRequest(Request $request): bool

{

$qs = ($qs = $request->server->get('QUERY_STRING')) ? '?'.$qs : '';

// we cannot use $request->getUri() here as we want to work with the original URI (no query string reordering)

return $this->check($request->getSchemeAndHttpHost().$request->getBaseUrl().$request->getPathInfo().$qs);

}

private function computeHash(string $uri): string

{

return base64_encode(hash_hmac('sha256', $uri, $this->secret, true));

}

private function buildUrl(array $url, array $params = []): string

{

ksort($params, \SORT_STRING);

$url['query'] = http_build_query($params, '', '&');

$scheme = isset($url['scheme']) ? $url['scheme'].'://' : '';

$host = $url['host'] ?? '';

$port = isset($url['port']) ? ':'.$url['port'] : '';

$user = $url['user'] ?? '';

$pass = isset($url['pass']) ? ':'.$url['pass'] : '';

$pass = ($user || $pass) ? "$pass@" : '';

$path = $url['path'] ?? '';

$query = $url['query'] ? '?'.$url['query'] : '';

$fragment = isset($url['fragment']) ? '#'.$url['fragment'] : '';

return $scheme.$user.$pass.$host.$port.$path.$query.$fragment;

}

}