Struct WebhookVerifier 

pub struct WebhookVerifier { /* private fields */ }

Verifies Paymos webhook signatures over the exact raw request bytes.

Implementations

impl WebhookVerifier

pub fn new(secret: impl Into<String>) -> Result<Self, WebhookError>

Creates a verifier with the default five-minute replay window.

Errors

Returns WebhookError::Configuration when the secret is empty.

pub fn with_tolerance( secret: impl Into<String>, tolerance_seconds: u64, ) -> Result<Self, WebhookError>

Creates a verifier with an explicit replay window in seconds.

Errors

Returns WebhookError::Configuration when the secret is empty.

pub fn verify( &self, signature_header: &str, raw_body: &[u8], ) -> Result<(), WebhookError>

Verifies a signature using the current system clock.

Errors

Returns a WebhookError for a malformed header, stale timestamp, signature mismatch, or invalid local clock.

pub fn verify_at( &self, signature_header: &str, raw_body: &[u8], now: i64, ) -> Result<(), WebhookError>

Verifies a signature against an explicit Unix timestamp.

Errors

Returns a WebhookError for a malformed header, stale timestamp, or signature mismatch.

Panics

The underlying HMAC constructor accepts keys of every length, so its error branch is unreachable for this algorithm.

pub fn construct_event<T: DeserializeOwned>( &self, signature_header: &str, raw_body: &[u8], ) -> Result<WebhookEvent<T>, WebhookError>

Verifies and deserializes a typed event using the current system clock.

Errors

Returns a WebhookError when verification or event decoding fails.

pub fn construct_event_at<T: DeserializeOwned>( &self, signature_header: &str, raw_body: &[u8], now: i64, ) -> Result<WebhookEvent<T>, WebhookError>

Verifies and deserializes a typed event against an explicit Unix timestamp.

Errors

Returns a WebhookError when verification or event decoding fails.