Convert to SHA256 signatures for the invoke command

This is a convenience option for invoking functions along with
a signature, if a function accepts one. They should all have been
moved to sha256 now if they were even using it

Signed-off-by: Alex Ellis (OpenFaaS Ltd) <[email protected]>

Author: alexellis

commands/invoke.go

@@ -5,6 +5,7 @@ package commands
 
 import (
 	"bytes"
+	"crypto"
 	"encoding/hex"
 	"fmt"
 	"io"
@@ -14,7 +15,7 @@ import (
 	"runtime"
 	"strings"
 
-	"github.com/alexellis/hmac"
+	"github.com/alexellis/hmac/v2"
 	"github.com/openfaas/faas-cli/stack"
 	"github.com/openfaas/faas-cli/version"
 	"github.com/spf13/cobra"
@@ -205,10 +206,10 @@ func runInvoke(cmd *cobra.Command, args []string) error {
 }
 
 func generateSignature(message []byte, key string) string {
-	hash := hmac.Sign(message, []byte(key))
+	hash := hmac.Sign(message, []byte(key), crypto.SHA256.New)
 	signature := hex.EncodeToString(hash)
 
-	return fmt.Sprintf(`%s=%s`, "sha1", string(signature[:]))
+	return fmt.Sprintf(`%s=%s`, "sha256", string(signature[:]))
 }
 
 func missingSignFlag(header string, key string) bool {

commands/invoke_test.go

@@ -98,19 +98,19 @@ func Test_generateHeader(t *testing.T) {
 			name:    "Empty key",
 			message: []byte("This is a message"),
 			key:     "",
-			want:    "sha1=cdefd604e685e5c8b31fbcf6621a6e8282770dfe",
+			want:    "sha256=7fb67a61acd7a9fa2541bbde51cef1bd4086a5a3acec0a0c821b40e06e824cfc",
 		},
 		{
 			name:    "Key with empty message",
 			message: []byte(""),
 			key:     "KeySet",
-			want:    "sha1=33dcd94ffaf13fce58615585c030c1a39d100b3c",
+			want:    "sha256=51846d8900847a40a129743c98742c83a56c3cbc4f5aec188d7eb2de629d11df",
 		},
 		{
 			name:    "Empty key and message",
 			message: []byte(""),
 			key:     "",
-			want:    "sha1=fbdb1d1b18aa6c08324b7d64b71fb76370690e1d",
+			want:    "sha256=b613679a0814d9ec772f95d778c35fc5ff1697c493715653c6c712144292c5ad",
 		},
 	}
 	for _, test := range tests {