benchmarks

```
go test -bench .
goos: darwin
goarch: amd64
pkg: github.com/asoorm/tyk-mashery-auth/hook
BenchmarkSha256_Sha256Sum-4              5000000               341 ns/op
48 B/op          2 allocs/op
BenchmarkSha256_ValidateSignature-4      1000000              1635 ns/op
823 B/op         13 allocs/op
PASS
ok      github.com/asoorm/tyk-mashery-auth/hook 3.720s
```

Author: asoorm

hook/hook.go

@@ -27,7 +27,7 @@ func (s *Sha256) Init(sharedSecret string, allowedClockSkew int64, headerAuthKey
 
 func (s Sha256) ValidateSignature(obj *coprocess.Object) (*coprocess.Object, error) {
 
-	log.Info("ValidateSignature called")
+	//log.Info("ValidateSignature called")
 
 	authHeader, ok := obj.Request.Headers[s.headerAuthKey]
 	if !ok {
@@ -60,7 +60,7 @@ func (s Sha256) validate(tokenAttempt string, signatureAttempt string) error {
 	for i := int64(0); i <= s.allowedClockSkew; i++ {
 		attempts++
 		if hex.EncodeToString(s.Sha256Sum(tokenAttempt, now+i)) == signatureAttempt {
-			log.Info("attempts: ", attempts)
+			//log.Info("attempts: ", attempts)
 			return nil
 		}
 
@@ -70,12 +70,12 @@ func (s Sha256) validate(tokenAttempt string, signatureAttempt string) error {
 
 		attempts++
 		if hex.EncodeToString(s.Sha256Sum(tokenAttempt, now-i)) == signatureAttempt {
-			log.Info("attempts: ", attempts)
+			//log.Info("attempts: ", attempts)
 			return nil
 		}
 	}
 
-	log.Info("attempts: ", attempts)
+	//log.Info("attempts: ", attempts)
 	return errors.New("invalid signature" + signatureAttempt)
 }
 

hook/hook_test.go

@@ -1,8 +1,11 @@
 package hook
 
 import (
+	"encoding/hex"
 	"testing"
 	"time"
+
+	"github.com/TykTechnologies/tyk-protobuf/bindings/go"
 )
 
 func BenchmarkSha256_Sha256Sum(b *testing.B) {
@@ -17,3 +20,43 @@ func BenchmarkSha256_Sha256Sum(b *testing.B) {
 		_ = s.Sha256Sum("foobarbaz", now)
 	}
 }
+
+func BenchmarkSha256_ValidateSignature(b *testing.B) {
+
+	b.ReportAllocs()
+
+	sharedSecret := "foobarbaz"
+	authToken := "4321knj8fqgm5ffq64tdzifato6fb5p5rkqze933ehivqelctivti8qs0xnzmpq3"
+
+	s := Sha256{}
+	s.Init(sharedSecret, 600, "Authorization", "X-Signature")
+	signatureAttempt := s.Sha256Sum(authToken, time.Now().Unix())
+
+	coprocessObj := coprocess.Object{
+		Request: &coprocess.MiniRequestObject{
+			Headers: map[string]string{
+				"Authorization": authToken,
+				"X-Signature":   hex.EncodeToString(signatureAttempt),
+			},
+		},
+		Session: &coprocess.SessionState{
+			Metadata: map[string]string{
+				"secret": sharedSecret,
+			},
+		},
+	}
+
+	//requestJsBytes, _ := json.MarshalIndent(coprocessObj, "", "")
+	//println(string(requestJsBytes))
+
+	for n := 0; n < b.N; n++ {
+		t := Sha256{}
+		t.Init(sharedSecret, 600, "Authorization", "X-Signature")
+		//s.Init(sharedSecret, 600, )
+		_, err := s.ValidateSignature(&coprocessObj)
+		if err != nil {
+			b.Log(err.Error())
+			b.FailNow()
+		}
+	}
+}