standardwebhooks_signature_verification_with_secret.py

1from standardwebhooks import Webhook
2
3# The payload is the raw body of the HTTP request
4payload = '{"test": "value"}'
5
6# The headers are the HTTP headers from the request
7# In a real application, these would come from your web framework (e.g., Django, Flask, FastAPI)
8headers = {
9    "webhook-id": "msg_p5jXNttS7vYbw7X03xUu8609",
10    "webhook-timestamp": "1614265330",
11    "webhook-signature": "v1,g0hM9L9QpDwhS7K2S_vLp_9mO6_L96tWzB"
12}
13
14# The secret is obtained from your webhook provider's settings
15secret = "whsec_MfKQ9r8GKY1B9gL_8X8_09"
16
17def main():
18    wh = Webhook(secret)
19    try:
20        # verify() returns the parsed payload if the signature is valid
21        # It raises an exception if the signature is invalid
22        wh.verify(payload, headers)
23        print("Webhook verified successfully")
24    except Exception as e:
25        print(f"Webhook verification failed: {e}")
26
27if __name__ == "__main__":
28    main()