graphhook

package

v0.4.5 Latest Latest Go to latest Published: Jul 25, 2026 License: MIT Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/OrdalieTech/pigo

Links

Open Source Insights

Documentation ¶

Overview ¶

Package graphhook holds the Meta Graph webhook plumbing shared by the Cloud API chat adapters (WhatsApp today, Messenger next): the one-time hub.challenge subscribe handshake and the X-Hub-Signature-256 raw-body HMAC check. Both compare in constant time via hmac.Equal.

Index ¶

func HandleVerify(w http.ResponseWriter, r *http.Request, verifyToken string)
func ValidSignature(header string, body []byte, secret string) bool

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func HandleVerify ¶

func HandleVerify(w http.ResponseWriter, r *http.Request, verifyToken string)

HandleVerify answers the subscribe handshake: it echoes the raw hub.challenge with a 200 iff hub.mode is "subscribe" and hub.verify_token matches verifyToken (constant time), and replies 403 otherwise.

func ValidSignature ¶

func ValidSignature(header string, body []byte, secret string) bool

ValidSignature checks header = "sha256=" + hex(HMAC-SHA256(body, secret)) in constant time, as Meta signs every webhook POST over the raw body.

Types ¶

This section is empty.

Source Files ¶

View all Source files

graphhook.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL