Created
March 27, 2020 15:10
-
-
Save Witawat/f36ee252e3a82b1db1d14f42a95e6780 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?php | |
function hashPassword($username, $password, $time) { | |
$a = hash('sha256', $username . $password); | |
$b = hash('sha256', (strlen($time) > 4) ? substr($time, 4) : $time); | |
return hash('sha256', $b . $a); | |
} | |
function generateSignature($data) { | |
return hash_hmac('sha1', $data, '9LXAVCxcITaABNK48pAVgc4muuTNJ4enIKS5YzKyGZ'); | |
} | |
class Truewallet { | |
private $phoneNumber; | |
private $password; | |
private $deviceID; | |
private $mobileTracking; | |
public function __construct($phoneNumber, $password) { | |
$this->phoneNumber = $phoneNumber; | |
$this->password = $password; | |
$this->deviceID = strtoupper('e7555fe7-b9fe-4fe5-a075-a560ab96e6e6'); | |
$this->mobileTracking = base64_encode($this->deviceID); | |
} | |
public function requestOTP() { | |
$timestamp = round(microtime(true) * 1000); | |
$ch = curl_init(); | |
curl_setopt($ch, CURLOPT_URL, 'https://mobile-api-gateway.truemoney.com/mobile-api-gateway/mobile-auth-service/v1/password/login/otp'); | |
curl_setopt($ch, CURLOPT_HTTPHEADER, [ | |
'Content-Type: application/json', | |
'User-Agent: V1/5.5.1 (com.tdcm.truemoneywallet; build:674; iOS 13.3.1) Alamofire/4.8.2', | |
'timestamp: ' . $timestamp, | |
'type: mobile', | |
'username: ' . $this->phoneNumber, | |
'password: ' . hashPassword($this->phoneNumber, $this->password, $timestamp) | |
]); | |
$result = curl_exec($ch); | |
curl_close($ch); | |
return json_decode($result, true); | |
} | |
function verifyOTP($otpRef, $otpCode) { | |
$timestamp = round(microtime(true) * 1000); | |
$password = hashPassword($this->phoneNumber, $this->password, $timestamp); | |
$signature = generateSignature(implode('|', [$this->phoneNumber, $password, $this->deviceID, $this->mobileTracking, $otpCode, $otpRef, $this->phoneNumber])); | |
$ch = curl_init(); | |
curl_setopt($ch, CURLOPT_URL, 'https://mobile-api-gateway.truemoney.com/mobile-api-gateway/mobile-auth-service/v1/password/login/otp'); | |
curl_setopt($ch, CURLOPT_HTTPHEADER, [ | |
'Content-Type: application/json', | |
'User-Agent: V1/5.5.1 (com.tdcm.truemoneywallet; build:674; iOS 13.3.1) Alamofire/4.8.2', | |
'timestamp: ' . $timestamp, | |
'X-Device: ' . $this->deviceID | |
]); | |
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([ | |
'brand' => 'apple', | |
'device_os' => 'ios', | |
'device_name' => 'chick4nnn’s iPhone', | |
'device_id' => $this->deviceID, | |
'model_number' => 'iPhone 11 Pro', | |
'model_identifier' => 'iPhone 11 Pro', | |
'app_version' => '5.5.1', | |
'type' => 'mobile', | |
'username' => $this->phoneNumber, | |
'password' => $password, | |
'mobile_tracking' => $this->mobileTracking, | |
'otp_code' => $otpCode, | |
'otp_reference' => $otpRef, | |
'timestamp' => $timestamp, | |
'mobile_number' => $this->phoneNumber | |
])); | |
$result = curl_exec($ch); | |
curl_close($ch); | |
return json_decode($result, true); | |
} | |
function getTransactions($startDate, $endDate, $accessToken) { | |
$ch = curl_init(); | |
curl_setopt($ch, CURLOPT_URL, 'https://mobile-api-gateway.truemoney.com/mobile-api-gateway/user-profile-composite/v1/users/transactions/history?start_date=' . $startDate . '&end_date=' . $endDate . '&limit=50&page=1'); | |
curl_setopt($ch, CURLOPT_HTTPHEADER, [ | |
'Content-Type: application/json', | |
'User-Agent: V1/5.5.1 (com.tdcm.truemoneywallet; build:674; iOS 13.3.1) Alamofire/4.8.2', | |
'X-Device: ' . $this->deviceID, | |
'Authorization: ' . $accessToken | |
]); | |
$result = curl_exec($ch); | |
curl_close($ch); | |
return json_decode($result, true); | |
} | |
} | |
$wallet = new Truewallet('เบอร์โทรศัพท์', 'รหัสผ่าน'); | |
var_dump($wallet->requestOTP()); | |
// var_dump($wallet->verifyOTP('OTP_REFERENCE', 'OTP_CODE')); | |
// var_dump($wallet->getTransactions('2019-12-27', '2020-03-28', 'ACCESS_TOKEN')); | |
?> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment