Struct WebhookVerifier 

pub struct WebhookVerifier { /* private fields */ }

The signature core every scheme shares: compute what a matching delivery must carry — an HMAC (SHA-256 or SHA-1) over the scheme’s signed payload, or, for a token scheme, the secret itself — compare it against every candidate in constant time with no early exit, and hold the delivery to its timestamp.

Implementations

impl WebhookVerifier

pub fn new(scheme: impl SignatureScheme + 'static) -> Self

A verifier with the default tolerance (DEFAULT_TOLERANCE_SECS).

use cratefield_core::{Svix, WebhookVerifier};
use http::HeaderMap;

let verifier = WebhookVerifier::new(Svix);
// `raw` is the body exactly as it arrived, before any parsing; the
// empty secret here means the delivery is refused, never guessed at.
assert!(!verifier.verify("", &HeaderMap::new(), b"{}", 0));

pub const fn tolerance_secs(self, secs: i64) -> Self

Overrides the replay tolerance, in seconds, in both directions.

pub fn verify( &self, secret: &str, headers: &HeaderMap, body: &[u8], now_unix: i64, ) -> bool

Whether body really was signed for this delivery with secret. Fails closed on every unreadable input; a timestamp in the future counts against the tolerance exactly as a stale one does.

Panics

Only if the HMAC refused the derived key — which it cannot: HMAC accepts keys of any length.

Trait Implementations

impl Clone for WebhookVerifier

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WebhookVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.