rustauth-stripe 0.3.0

Stripe integration for RustAuth.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

use base64::Engine as _;
use hmac::{Hmac, Mac};
use http::{Method, Request};
use sha2::Sha256;
use time::OffsetDateTime;

pub fn sign_webhook_payload(
    secret: &str,
    payload: &[u8],
    timestamp: i64,
) -> Result<String, Box<dyn std::error::Error>> {
    let signed_payload = format!("{timestamp}.{}", String::from_utf8_lossy(payload));
    let mut mac = Hmac::<Sha256>::new_from_slice(secret.as_bytes())?;
    mac.update(signed_payload.as_bytes());
    let signature = hex::encode(mac.finalize().into_bytes());
    Ok(format!("t={timestamp},v1={signature}"))
}

pub fn dashboard_webhook_secret(raw_key: &[u8]) -> String {
    format!(
        "whsec_{}",
        base64::engine::general_purpose::STANDARD.encode(raw_key)
    )
}

pub fn signed_webhook_request(
    secret: &str,
    payload: &[u8],
) -> Result<Request<Vec<u8>>, Box<dyn std::error::Error>> {
    let timestamp = OffsetDateTime::now_utc().unix_timestamp();
    let signature = sign_webhook_payload(secret, payload, timestamp)?;
    Ok(Request::builder()
        .method(Method::POST)
        .uri("http://localhost:3000/api/auth/stripe/webhook")
        .header("stripe-signature", signature)
        .body(payload.to_vec())?)
}