discourse_webhooks::signature

Function verify_signature

Source 
pub fn verify_signature(
    secret: &str,
    payload: &str,
    signature: &str,
) -> Result<(), SignatureVerificationError>
Expand description

Verify HMAC-SHA256 signature for webhook payload

§Arguments

  • secret - The shared secret key
  • payload - The JSON payload as a string
  • signature - The signature header from Discourse (format: “sha256=…”)

§Returns

  • Ok(()) if signature is valid
  • Err(SignatureVerificationError) if verification fails