validate the signature in PHP

[rasxod]

Dear gentlemen,
I can't validate the signature in PHP

$nonce_mesage = $this->generate_message($message); // message $_POST['message'] parametrs
$this->verify_signature($nonce_mesage, $signature, $address); // no work(((
       public function verify_signature( string $message, string $signature, string $address ): bool {
		$this->modx->log(1, print_r(['$message' => $message, '$signature' => $signature, '$address' => $address], true));
		$msglen = strlen( $message );
		$hash   = Keccak::hash( "\x19Ethereum Signed Message:\n{$msglen}{$message}", 256 );
		$sign   = [
			'r' => substr( $signature, 2, 64 ),
			's' => substr( $signature, 66, 64 ),
		];
		$recid  = ord( hex2bin( substr( $signature, 130, 2 ) ) ) - 27;
		if ( ( $recid & 1 ) !== $recid ) {
			return false;
		}
		$ec               = new EC( 'secp256k1' );
		$pubkey           = $ec->recoverPubKey( $hash, $sign, $recid );
		$inferred_address = $this->pub_key_to_address( $pubkey );
		$this->modx->log(1, print_r($inferred_address, true));

		return $address === $inferred_address;
	}
	public function pub_key_to_address( object $pubkey ): string {
		$address = '0x' . substr( Keccak::hash( substr( hex2bin( $pubkey->encode( 'hex' ) ), 1 ), 256 ), 24 );

		$this->modx->log(1, print_r($address, true));
		return $this::get_checksum_address( $address );
	}
	public static function get_checksum_address( string $address ): string {
		$address            = substr( $address, 2 );
		$address_hash       = Keccak::hash( strtolower( $address ), 256 );
		$address_array      = str_split( $address );
		$address_hash_array = str_split( $address_hash );

		$ret = '';
		for ( $i = 0; $i < 40; $i ++ ) {
			// The nth letter should be uppercase if the nth digit of casemap is 1.
			if ( intval( $address_hash_array[ $i ], 16 ) > 7 ) {
				$ret .= strtoupper( $address_array[ $i ] );
			} elseif ( intval( $address_hash_array[ $i ], 16 ) <= 7 ) {
				$ret .= strtolower( $address_array[ $i ] );
			}
		}

		return '0x' . $ret;
	}
	public function generate_message( array $siwe_payload ): string {
		return "{$siwe_payload['domain']} wants you to sign in with your Ethereum account:
{$siwe_payload['address']}

{$siwe_payload['statement']}

URI: {$siwe_payload['uri']}
Version: {$siwe_payload['version']}
Chain ID: {$siwe_payload['chainId']}
Nonce: {$siwe_payload['nonce']}
Issued At: {$siwe_payload['issuedAt']}";
	}

[DanielSinclair]

@rasxod There is likely a small implementation issue here. You can reference EIP-4361 for the spec here and Viem's SIWE implementation here to try and diagnose. You should also note that Smart Contract Wallet signatures are verified differently than an EOA. Reference Viem's docs on that here

[rasxod]

JS is a little unclear for me...
As far as I understand, my main problem is to combine message into a string...
those. I'm interested in the string format

could you show me how to finally format the message as a string?

Very helpful!

this is how I concatenate a string on PHP

public function generate_message( array $siwe_payload ): string {
		return "{$siwe_payload['domain']} wants you to sign in with your Ethereum account:
{$siwe_payload['address']}

{$siwe_payload['statement']}

URI: {$siwe_payload['uri']}
Version: {$siwe_payload['version']}
Chain ID: {$siwe_payload['chainId']}
Nonce: {$siwe_payload['nonce']}
Issued At: {$siwe_payload['issuedAt']}";
	}