Sha256: 7f4486686dba47cd3a376f528e7df75c3a73b2abd1aaf56d89045c8d98f9d9ac
Contents?: true
Size: 1.1 KB
Versions: 10
Compression:
Stored size: 1.1 KB
Contents
#
# validator.rb
# ConstantContact
#
# Copyright (c) 2013 Constant Contact. All rights reserved.
module ConstantContact
module Webhooks
module Helpers
class Validator
class << self
# Validate the request received from Constant Contact.
# Compute the HMAC digest and compare it to the value in the x-ctct-hmac-sha256 header.
# If they match, you can be sure that the webhook was sent by Constant Contact and the message has not been compromised.
# @param [String] secret The Constant Contact secret key
# @param [String] hmac The value received in the x-ctct-hmac-sha256 header.
# @param [String] data The body message from the POST received from ConstantContact in Webhook callback.
# @return true if the computed vs. received values match; false otherwise.
def validate(secret, hmac, data)
digest = OpenSSL::Digest.new('sha256')
calculated_hmac = Base64.encode64(OpenSSL::HMAC.digest(digest, secret, data)).strip
calculated_hmac == hmac
end
end
end
end
end
end
Version data entries
10 entries across 10 versions & 2 rubygems