shopify_api 0.10.0

Shopify API client
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

use crate::Shopify;
use base64::prelude::*;
use hmac::{Hmac, KeyInit, Mac};
use sha2::Sha256;

impl Shopify {
    pub fn verify_hmac(&self, data: &[u8], hmac_header: &str) -> bool {
        if let Some(secret) = &self.shared_secret {
            let Ok(mut mac) = Hmac::<Sha256>::new_from_slice(secret.as_bytes()) else {
                log::info!("Failed to create webhook HMAC");
                return false;
            };

            let Ok(expected_hmac) = BASE64_STANDARD.decode(hmac_header) else {
                log::info!("Invalid webhook HMAC header encoding");
                return false;
            };

            mac.update(data);
            return mac.verify_slice(&expected_hmac).is_ok();
        }

        log::info!("No shared secret found");

        false
    }
}