New: Add Hmac helper

Classes/EelHelper/StringHelper.php

@@ -11,6 +11,7 @@
 use Neos\Eel\FlowQuery\FlowQuery;
 use Neos\Eel\ProtectedContextAwareInterface;
 use Neos\Flow\Annotations as Flow;
+use Neos\Flow\Security\Cryptography\HashService;
 use Neos\Flow\Validation\Validator\EmailAddressValidator;
 use function implode;
 use function is_array;
@@ -23,11 +24,13 @@
 use function trim;
 use function ucwords;
 
-/**
- * @Flow\Proxy(false)
- */
 class StringHelper implements ProtectedContextAwareInterface
 {
+    /**
+     * @Flow\Inject
+     * @var HashService
+     */
+    protected $hashService;
 
     /**
      * Generates a BEM string
@@ -42,6 +45,30 @@ public function BEM($block = null, $element = null, $modifiers = []): ?string
         return BEMService::getClassNamesString($block, $element, $modifiers);
     }
 
+    /**
+     * Generate a hash (HMAC) for a given string
+     *
+     * @param string $string The string for which a hash should be generated
+     * @return string The hash of the string
+     * @throws InvalidArgumentForHashGenerationException if something else than a string was given as parameter
+     */
+    public function generateHmac($string): string
+    {
+        return $this->hashService->generateHmac((string) $string);
+    }
+
+    /**
+     * Tests if a string $string matches the HMAC given by $hash.
+     *
+     * @param string $string The string which should be validated
+     * @param string $hmac The hash of the string
+     * @return boolean true if string and hash fit together, false otherwise.
+     */
+    public function validateHmac($string, $hmac)
+    {
+        return ($this->generateHmac($string) === $hmac);
+    }
+
     /**
      * Minify JavaScript
      *

README.md

@@ -673,6 +673,23 @@ Examples:
 
 Returns the string with one occurrence replaced
 
+### `Carbon.String.generateHmac(string)`
+
+Generate a hash (HMAC) for a given string
+
+- `string` (string, required) The string for which a hash should be generated
+
+**Return** The hash of the string
+
+### `Carbon.String.validateHmac(string, hmac)`
+
+Tests if a string $string matches the HMAC given by $hash.
+
+- `string` (string, required) The string which should be validated
+- `hmac` (string, required) The hash of the string
+
+**Return** true if string and hash fit together, false otherwise.
+
 ## Number Helper
 
 ### `Carbon.Number.format(number, decimals, dec_point, thousands_sep)`