Webhook Signature Verifier
Verifies HMAC signatures on incoming webhooks before processing.
import hmac
import hashlib
def verify_signature(payload: bytes, secret: str, signature: str) -> bool:
expected = hmac.new(secret.encode(), payload, hashlib.sha256).hexdigest()
return hmac.compare_digest(expected, signature)
Oct 27, 2026 python