HMAC implementation for signature validation

app/src/Service/HMAC.php

@@ -0,0 +1,17 @@
+<?php
+namespace Incoviba\Service;
+
+use Incoviba\Common\Ideal;
+
+class HMAC extends Ideal\Service
+{
+    public static function validate(string $timestamp, string $requestSignature, string $requestId, string $secret): bool
+    {
+        $message = "{$timestamp}.{$requestId}";
+        $encodedSecret = mb_convert_encoding($secret, 'UTF-8');
+        $encodedMessage = mb_convert_encoding($message, 'UTF-8');
+        $hmacObject = hash_hmac('sha256', $encodedMessage, $encodedSecret);
+        $computedSignature = base64_encode($hmacObject);
+        return hash_equals($computedSignature, $requestSignature);
+    }
+}