Skip to main content

VerifyWebhookSignatureArgs

type VerifyWebhookSignatureArgs = {
  clientSecret: string;
  rawBody: string | Uint8Array;
  signature: string;
};

Arguments for verifyWebhookSignature.

Properties​

clientSecret​

clientSecret: string;

The app's OAuth client secret, used as the HMAC key.

rawBody​

rawBody: string | Uint8Array;

The raw (unparsed) request body exactly as received. Parsing and re-serialising JSON before hashing will change whitespace and byte order and cause verification to fail.

signature​

signature: string;

The value of the X-Todoist-Hmac-SHA256 request header — a base64 encoded HMAC-SHA256 digest.