Module com.identisure.client

Package com.identisure.client

Class CallbackSignature

java.lang.Object

com.identisure.client.CallbackSignature

public final class CallbackSignature
extends Object

Verifies the X-Signature-SHA256 header sent with callback requests.

Method Summary

Modifier and Type	Method	Description
static boolean	verify(byte[] body, @Nullable String signature, String secret)	Verify a callback signature.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Details

verify

public static boolean verify(byte[] body,
 @Nullable String signature,
 String secret)

Verify a callback signature.

Parameters:

body - Raw request body as received. Verify before parsing; never re-serialize.

signature - Value of the X-Signature-SHA256 header, or null if absent.

secret - The account's HMAC secret.

Returns:

false for a missing, malformed or mismatching signature.