bend-kit-webhooks

Releases (13)

• 0.11.0.1 indexed
• 0.11.0.0 unindexed
• 0.10.0.0 unindexed
• 0.9.0.0 unindexed
• 0.8.0.0 unindexed
• 0.7.0.0 unindexed
• 0.6.0.0 unindexed
• 0.5.0.0 unindexed
• 0.4.0.0 unindexed
• 0.3.0.1 unindexed
• 0.3.0.0 unindexed
• 0.2.0.0 unindexed
• 0.1.0.0 unindexed

Definitions (71)

webhooks.bend

• type Err
• def field.head
• def field.of
• def field
• def need
• def strips after the prefix p, or None.
• def push
• def put
• def digits
• def ts.some
• def ts.readUnix seconds: 1 to 18 ASCII digits, no sign, so the parse never overflows.
• def window.pick
• def windowt within tol seconds of now, either way.
• def id.checkA webhook id is not empty and has no '.', so id.timestamp.body reads one way.
• def b64.same
• def b64.canon
• def b64Padded standard base64, only in its canonical text: Bytes.from_base64 alone accepts nonzero pad bits.
• def pad'=' up to a multiple of four chars.
• def nonempty.of
• def nonempty
• def key.stdA Standard Webhooks secret: whsec_ then base64 of the key, padded or not.
• def keystd: a Standard Webhooks secret.
• def decodeA signature's octets: hex (Stripe, GitHub) or canonical base64 (Standard Webhooks).
• def mac.of
• def mac
• def ct.go
• def ctA signature that does not decode matches nothing.
• def any.sigDoes any signature equal the MAC?
• def key.cmp
• def key.check
• def both.done
• def bothA bad secret fails the check, even when another secret matches.
• def any.keyDoes any signature sign the message under any secret?
• def found
• def backThe body back beside a failure.
• def run.mac
• def runc: the header checks' answer, the signed prefix before the body, and the candidate signatures.
• def std.sigsThe v1 entries of a space-separated webhook-signature; other versions are skipped.
• def std.check
• def verify.withDone with the webhook-id when a v1 signature in webhook-signature signs id.timestamp.body under a secret, and webhook-timestamp is within tol seconds of now.
• def verifyverify.with a 300 s tolerance.
• def sign.check
• def sign.headers
• def sign.mac
• def sign.key
• def sign.go
• def signThe webhook-id, webhook-timestamp, and webhook-signature ("v1,<base64 MAC>") headers for body.
• def stripe.t
• def stripe.v.push
• def stripe.v
• def stripe.item
• def stripe.itemsThe t= and v1= values of comma-separated items; other schemes (v0) are skipped.
• def stripe.single
• def stripe.oneExactly one t=: a second one would leave the signed timestamp ambiguous.
• def stripe.when
• def stripe.check
• def stripe.verify.withDone when a v1 hex signature in stripe-signature signs t.body under a secret (the whsec_ text itself, as UTF-8), and t is within tol seconds of now.
• def stripe.verifystripe.verify.with a 300 s tolerance, Stripe's default.
• def github.check
• def github.verifyDone when x-hub-signature-256 is sha256=<hex> of the body under a secret's UTF-8.
• type SendErr
• def send.result
• def send.againA timeout, a refused connect, 408, 429, or any 5xx may clear.
• def send.judge
• def send.signedReceivers deduplicate on the event ID, so the POST is safe to repeat.
• def send.at
• def send.inOne event and one signature per delivery, inside a caller's retry layer.
• def send.drop
• def send.budget
• def send.withn extra attempts, on a budget of n + 1 and the client's deadline, with Hairpin's backoff.
• def sendThree extra attempts by default.