The signing secret and verification limits.
Verifies a request's signature.
The body is read from a clone, so the caller can still read the original request body afterwards.
The incoming request.
An optional cancellation signal.
InvalidSignatureError When the signature does not match.
Verifies a request and decodes its payload.
The incoming request.
An optional cancellation signal.
The decoded event.
InvalidSignatureError When the signature does not match.
Verifies the signature of an mxRaven webhook request.
A verifier is safe for concurrent use once constructed. Configure it with a signing secret or with per-key secrets for rotation.
Example