Created wc_api_hash()

woocommerce · Jun 8, 2015 · 3f45c87 · 3f45c87
1 parent 3697ad9
commit 3f45c87
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 4 deletions.
diff --git a/includes/admin/class-wc-admin-api-keys.php b/includes/admin/class-wc-admin-api-keys.php
@@ -220,8 +220,8 @@ private function update_key() {
 						'user_id'         => $user_id,
 						'description'     => $description,
 						'permissions'     => $permissions,
-						'consumer_key'    => $consumer_key,
-						'consumer_secret' => $consumer_secret
+						'consumer_key'    => wc_api_hash( $consumer_key ),
+						'consumer_secret' => wc_api_hash( $consumer_secret )
 					),
 					array(
 						'%d',

diff --git a/includes/class-wc-auth.php b/includes/class-wc-auth.php
@@ -203,8 +203,8 @@ protected function create_keys( $app_name, $app_user_id, $scope ) {
 				'user_id'         => $user->ID,
 				'description'     => $description,
 				'permissions'     => $permissions,
-				'consumer_key'    => $consumer_key,
-				'consumer_secret' => $consumer_secret
+				'consumer_key'    => wc_api_hash( $consumer_key ),
+				'consumer_secret' => wc_api_hash( $consumer_secret )
 			),
 			array(
 				'%d',

diff --git a/includes/wc-core-functions.php b/includes/wc-core-functions.php
@@ -817,3 +817,14 @@ function wc_rand_hash() {
 		return sha1( wp_rand() );
 	}
 }
+
+/**
+ * WC API - Hash
+ *
+ * @since  2.4.0
+ * @param  string $data
+ * @return string
+ */
+function wc_api_hash( $data ) {
+	return hash_hmac( 'sha256', $data, 'wc-api' );
+}