CanuteTheGreat/webhook-sig-verifier
Watch
1
0
Fork
You've already forked webhook-sig-verifier
 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions
1 release 3 tags
  • v1.2.0 f7b77c476f

    webhook-sig-verifier v1.2.0
    All checks were successful
    tests / test (3.13) (push) Successful in 39s
    Details
    tests / test (3.8) (push) Successful in 40s
    Details
    release / release (push) Successful in 24s
    Details
    Stable

    Ghost released this 2026-10-16 19:57:51 -07:00 | 17 commits to master since this release

    • New schemes: Standard Webhooks (Svix and others: v1, HMAC-SHA256 with whsec_ secrets and v1a,
      Ed25519 with whpk_ public keys, verified by a pure-Python RFC 8032 implementation), Shopify,
      Square, Twilio (form and JSON/bodySHA256 requests) and Zoom.
    • Generic HMAC accepts base64 signatures (--encoding base64) and SHA-512.
    • --json output.
    • Installable as a package: pipx install git+https://git.canutethegreat.com/CanuteTheGreat/webhook-sig-verifier.git
      puts a webhook-sig-verifier command on PATH (pyproject.toml, MIT license metadata).
    • --version flag.
    • Exit codes follow the shared convention: 0 = clean, 1 = findings at/above the gate, 2 = error or bad usage.
    • Every tag now publishes a Forgejo release with this changelog, the wheel, the sdist and SHA256SUMS.
    • CI installs the package with pip in a clean venv and checks --version/--help on every push.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/webhook-sig-verifier.git@v1.2.0
# or the wheel attached to this release:
pipx install https://git.canutethegreat.com/CanuteTheGreat/webhook-sig-verifier/releases/download/v1.2.0/webhook_sig_verifier-1.2.0-py3-none-any.whl
# or the single file (stdlib-only Python 3):
curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/webhook-sig-verifier/releases/download/v1.2.0/webhook_sig_verifier.py

    SHA-256

    c50f4094e7c4c86d22fb8eef69d08bb539579ad830b9ef0705aca2c6329a5758  webhook_sig_verifier.py
e6d396896fd07b75eeb4c12708e17b869cca1128b3e7644e489c61449dc25add  webhook_sig_verifier-1.2.0-py3-none-any.whl
3901fcc51919552d54b1f14f26e017e65e9d364f19f8d9c04f42a7722224cf00  webhook_sig_verifier-1.2.0.tar.gz
    Downloads