The signature scheme: HMAC-SHA256 over timestamp.body, hex, as v1=
entries in dartvel-webhook-signature.
The timestamp is signed so a captured delivery cannot be replayed a month
later; a consumer bounds its age with verify's tolerance.
Properties
- hashCode → int
-
The hash code for this object.
no setterinherited
- runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
Methods
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited
Static Methods
-
compute(
String secret, String timestamp, String body) → String -
header(
{required String timestamp, required String body, required List< String> secrets}) → String -
The header value for
secrets, current key first. -
verify(
{required String secret, required String timestamp, required String body, required String header, Duration? tolerance, DateTime? now}) → bool -
Whether
headercarries a valid signature forsecret.