Webhooks

Payload signature

Each delivery includes X-AlgoVoi-Signature. Verify with HMAC-SHA256:

import hmac, hashlib, base64

def verify(raw_body: bytes, sig: str, secret: str) -> bool:
    expected = base64.b64encode(
        hmac.new(secret.encode(), raw_body, hashlib.sha256).digest()
    ).decode()
    return hmac.compare_digest(expected, sig)