Webhook signature verifier
webhook-verifyVerifies Stripe, GitHub, Slack, Shopify or generic HMAC-SHA256 webhook signatures exactly as the provider computes them, with timestamp tolerance. Returns { provider, valid, timestamp?, age_s?, within_tolerance? } Price: 1 credit (1 credit = 1 CAD cent) per successful call; input that does not match the schema is rejected before billing.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| secret | Yes | Webhook signing secret. Use a test secret; it is not stored. | |
| payload | Yes | Raw request body exactly as received. | |
| provider | Yes | Signature scheme. | |
| signature | Yes | Signature header value (Stripe-Signature, X-Hub-Signature-256, X-Slack-Signature, X-Shopify-Hmac-Sha256, or hex/base64). | |
| timestamp | No | Slack only: X-Slack-Request-Timestamp. | |
| tolerance_s | No | Allowed clock skew for Stripe and Slack, default 300. |