From 2ac07d243f10d45215681648c8d2bc9ad3b3e734 Mon Sep 17 00:00:00 2001
From: ROBERT MCDOWELL <2649072+ROBERT-MCDOWELL@users.noreply.github.com>
Date: Sat, 14 May 2022 05:32:37 -0700
Subject: [PATCH 1/3] Create verify-signature.php

---
 verify-webhook-signature/verify-signature.php | 28 +++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 verify-webhook-signature/verify-signature.php

diff --git a/verify-webhook-signature/verify-signature.php b/verify-webhook-signature/verify-signature.php
new file mode 100644
index 0000000..c803e9c
--- /dev/null
+++ b/verify-webhook-signature/verify-signature.php
@@ -0,0 +1,28 @@
+<?php
+
+$sandbox_public_key = <<<EOD
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpb91cEYuyJNQepZAVfP
+ZIlPZfNUefH+n6w9SW3fykqKu938cR7WadQv87oF2VuT+fDt7kqeRziTmPSUhqPU
+ys/V2Q1rlfJuXbE+Gga37t7zwd0egQ+KyOEHQOpcTwKmtZ81ieGHynAQzsn1We3j
+wt760MsCPJ7GMT141ByQM+yW1Bx+4SG3IGjXWyqOWrcXsxAvIXkpUD/jK/L958Cg
+nZEgz0BSEh0QxYLITnW1lLokSx/dTianWPFEhMC9BgijempgNXHNfcVirg1lPSyg
+z7KqoKUN0oHqWLr2U1A+7kqrl6O2nx3CKs1bj1hToT1+p4kcMoHXA7kA+VBLUpEs
+VwIDAQAB
+-----END PUBLIC KEY-----
+EOD;
+
+$public_key_id = openssl_pkey_get_public($sandbox_public_key);
+$public_key_array = openssl_pkey_get_details($public_key_id);
+
+$webhook_body = '{"data":{"resource":{"id":49983981,"profile_id":16055450,"account_id":14124090,"type":"transfer"},"current_state":"incoming_payment_waiting","previous_state":null,"occurred_at":"2021-08-23T10:12:50Z"},"subscription_id":"90aa8e14-4ef1-4a56-861c-f3c9cde097ea","event_type":"transfers#state-change","schema_version":"2.0.0","sent_at":"2021-08-23T10:12:50Z"}';
+
+$signature_header = "wKcKCYXAzxNgiu7xmoDm943NUni7Rz33QN8JkEA9dWSGebgndonabgSj18Y4C08OrwVmueGsED2s00M7DtJVcYKOS1i3G4TMVx+mgM3aL9djMBkQtiYNBFUd6wrPI7ZUNHv/TrlKSjTMc+6JFvUvJ7owY3z85e3I4jLRLJowMFvO8kvCJ60+1pY9wDwZvtZ//WS93LrwGjk9Dvwzpmu0w+P4J75tETT5qC3Uv0y5G2yO8SEoO3yNP/tg/BOli02niHb53vEOUWUb9bly6thnfMoXoiV/osoGxgF20R58RlvkAmezyyl1Sv542TfS2DpiwVnmjjjkCyXeSUcKookYLQ==";
+
+$decoded_signature_header = base64_decode($signature_header);
+
+$is_valid = openssl_verify($webhook_body,$decoded_signature_header,$public_key_array['key'],OPENSSL_ALGO_SHA256);
+
+echo "Is signature valid? ".$is_valid."\n";
+
+?>

From e15d688399b42349c177315d731e8cdf98c09a45 Mon Sep 17 00:00:00 2001
From: ROBERT MCDOWELL <2649072+ROBERT-MCDOWELL@users.noreply.github.com>
Date: Sat, 14 May 2022 05:34:19 -0700
Subject: [PATCH 2/3] Update README.md

Added PHP  script example (compatible with php4/5/7/8)
---
 verify-webhook-signature/README.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/verify-webhook-signature/README.md b/verify-webhook-signature/README.md
index 3884af7..4232463 100644
--- a/verify-webhook-signature/README.md
+++ b/verify-webhook-signature/README.md
@@ -26,5 +26,13 @@ Source code: [verify-signature.js](https://github.com/transferwise/digital-signa
 $ node verify-signature.js
 ```
 
+### PHP implementation
+
+Source code: [verify-signature.js](https://github.com/transferwise/digital-signatures-examples/blob/main/verify-webhook-signature/verify-signature.php)
+
+```bash
+$ php verify-signature.php
+```
+
 ### API Documentation
-- [Wise API: Webhooks](https://api-docs.wise.com/#webhook-events-event-http-requests)
\ No newline at end of file
+- [Wise API: Webhooks](https://api-docs.wise.com/#webhook-events-event-http-requests)

From 2c4a29d643c1526b8178897596f78e4405e599ab Mon Sep 17 00:00:00 2001
From: ROBERT MCDOWELL <2649072+ROBERT-MCDOWELL@users.noreply.github.com>
Date: Sun, 15 May 2022 06:01:33 -0700
Subject: [PATCH 3/3] fix link name

---
 verify-webhook-signature/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/verify-webhook-signature/README.md b/verify-webhook-signature/README.md
index 4232463..45c5ecc 100644
--- a/verify-webhook-signature/README.md
+++ b/verify-webhook-signature/README.md
@@ -28,7 +28,7 @@ $ node verify-signature.js
 
 ### PHP implementation
 
-Source code: [verify-signature.js](https://github.com/transferwise/digital-signatures-examples/blob/main/verify-webhook-signature/verify-signature.php)
+Source code: [verify-signature.php](https://github.com/transferwise/digital-signatures-examples/blob/main/verify-webhook-signature/verify-signature.php)
 
 ```bash
 $ php verify-signature.php