Omise::WebhookSignature
Constants
DEFAULT_TOLERANCE = 5.minutes
Class methods
verify!(raw_body : String, signature_header : String, timestamp_header : String, secret : String, now : Time = Time.utc, tolerance : Time::Span = DEFAULT_TOLERANCE) : Nil
Verifies Omise's HMAC-SHA256 signature over <timestamp>.<raw body>.
The webhook secret displayed by Omise is Base64 encoded. During secret
rotation Omise can send multiple comma-separated signatures; any valid
signature is accepted.