This class is a utility class with static methods for calculating and validating cryptographic signatures.
When using signatures with a Gigya user key or Gigya Application key, you must use accounts.exchangeUIDSignature REST to exchange the received signature, default Gigya signature validation always uses the Partner secret, not a user or application key secret.
Methods
| Method | Description | |
| static bool | ValidateUserSignature( string UID, string timestamp, string secret, string signature ) | Use this method to verify the authenticity of a socialize.getUserInfo or accounts.getAccountInfo API methods response, to make sure that it is in fact originating from Gigya, and prevent fraud. Pass the required fields as the corresponding parameters of this method, along with your Partner's secret key. Your secret key (provided in BASE64 encoding) is located at the bottom of the Dashboard section on Gigya's website. If you do not have access to the Partner secret, you can use exchangeUIDSignature to generate a new UIDSignature that is able to be verified with a userKey secret or application secret instead. The return value of the method indicates if the signature is valid (thus, originating from Gigya) or not. Properties (standard):
Properties (when using accounts.exchangeUIDSignature):
validateUserSignature is only necessary when processing client-to-server calls (where the data in question was received from Gigya to a client and then passed from that client to your server). Server-to-server calls made directly between your server and Gigya do not receive the UIDSignature or signatureTimestamp properties. |
| static bool | ValidateFriendSignature( string UID, string timestamp, string friendUID, string secret, string signature ) | Use this method to verify the authenticity of a socialize.getFriendsInfo API method response, to make sure that it is in fact originating from Gigya, and prevent fraud. The socialize.getFriendsInfo API method response data include the following fields:
Pass these fields as the corresponding parameters of this method, along with your partner's "Secret Key". Your secret key (provided in BASE64 encoding) is located at the bottom of the Dashboard section on Gigya's website. The return value of the method indicates if the signature is valid (thus, originating from Gigya) or not. |
| static string | CalcSignature( string algorithmName, string baseString, string key ) | This is a utility method for generating a cryptographic signature. Parameters:
|
| static string | GetDynamicSessionSignature( string glt_cookie, int timeoutInSeconds, string secret ) | This is a utility method for generating the cookie value of a dynamic session expiration cookie. Use this method as part of implementing dynamic control over login session expiration, in conjunction with assigning the value '-1' to the sessionExpiration parameter of the client side login methods (i.e. showLoginUI / login). Learn more in the Control Session Expiration guide. This method's parameters:
|
| static string | getDynamicSessionSignatureUserSigned( string glt_cookie, long timeoutInSeconds, string userKey, string secret ) | This utility is the same as above, getDynamicSessionSignature, however, allows the session cookie to be generated with an application key or user key (userKey) and the corresponding application key or user key secret, instead of requiring the partner's secret. This is useful when using GConnectors or for 3rd party applications. |