The signing secret and verification limits.
Verifies a request's signature.
The body is read from a clone, so the caller can still read the original request body afterwards.
The incoming request.
An optional cancellation signal.
InvalidSignatureError When the signature does not match.
WebhookRequestError When required headers are missing, the timestamp is stale, or the signing key is unknown.
PayloadTooLargeError When the body exceeds the configured limit.
Verifies a request and decodes its payload.
The incoming request.
An optional cancellation signal.
The decoded event.
InvalidSignatureError When the signature does not match.
WebhookRequestError When verification or decoding fails.
PayloadTooLargeError When the body exceeds the configured limit.
Verifies the signature of an mxRaven webhook request.
A verifier is safe for concurrent use once constructed. Configure it with a signing secret or with per-key secrets for rotation. For typed dispatch and HTTP status handling, use WebhookHandler, which composes a verifier.
Example