<?php
/** Produces the exact proof for a code-free session callback challenge. */
if (!defined('ABSPATH')) {
    exit;
}
class Akkedli_V2_Session_Proof
{
    public static function response(array $context)
    {
        $canonical = implode("\n", array('AKKEDLI-WC-SESSION-RESPONSE-V1',
            $context['session'], $context['callback_url'], $context['challenge']));
        $proof = Akkedli_V2_Crypto::base64url_encode(
            hash_hmac('sha256', $canonical, $context['secret'], true)
        );
        unset($canonical, $context['secret']);
        return array('success' => true, 'data' => array('proof' => $proof));
    }
}