def github.verify

bend-kit-webhooks@0.11.0.1 · webhooks.bend:424

import Base
import bend-kit-bytes@0.3.3.0/bytes.bend as Bytes

424# Done when x-hub-signature-256 is sha256=<hex> of the body under a secret's UTF-8. GitHub signs no timestamp.
425def github.verify(secrets: List<&2, String>, +headers: Map<&2, List<&2, String>>, body: Bytes.Bytes) ->
426    IO(Bytes.Bytes & Result<&1, &1, Err, Unit>):
427  run(Unit, github.check(headers), False{}, True{}, secrets, Bytes.slice(body, 0, 4294967295))