Fix timestamp format in signature verification

romanzipp · Feb 5, 2021 · 17585a0 · 17585a0
1 parent 42f7984
commit 17585a0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/Objects/EventSubSignature.php b/src/Objects/EventSubSignature.php
@@ -2,6 +2,7 @@
 
 namespace romanzipp\Twitch\Objects;
 
+use Carbon\Carbon;
 use romanzipp\Twitch\Exceptions\SignatureVerificationException;
 use Symfony\Component\HttpFoundation\HeaderBag;
 
@@ -23,6 +24,7 @@ class EventSubSignature
     public static function verifyHeader(string $payload, HeaderBag $headers, string $secret, int $tolerance = 60): void
     {
         $timestamp = $headers->get('twitch-eventsub-message-timestamp');
+        $timestamp = Carbon::createFromFormat('Y-m-d\TH:i:s.u\Z', $timestamp, 'UTC');
 
         if ( ! is_numeric($timestamp)) {
             throw new SignatureVerificationException('Unable to extract timestamp and signatures from header');