hmacsig

const (
	AlgorithmSHA256 = "sha256"
	AlgorithmSHA1   = "sha1"
	AlgorithmSHA512 = "sha512"
)

const (
	EncodingHex    = "hex"
	EncodingBase64 = "base64"
)

const (
	// SignedBody signs the raw body.
	SignedBody = "body"
	// SignedTimestampBody signs the timestamp, a ".", and the raw body,
	// which is what makes a replayed request with an old timestamp fail
	// even though its signature once verified.
	SignedTimestampBody = "timestamp.body"
	// SignedIDTimestampBody signs the delivery id, a ".", the timestamp, a
	// ".", and the raw body: the Standard Webhooks form.
	SignedIDTimestampBody = "id.timestamp.body"
)

const (
	// FormatPlain writes the prefix and the signature. A header may carry
	// several, separated by spaces, which is how a sender rotating its
	// secret signs with both (Standard Webhooks' "v1,<a> v1,<b>").
	FormatPlain = ""
	// FormatStripe writes "t=<timestamp>,v1=<signature>": the timestamp is
	// in the signature header rather than a header of its own, and the
	// signed bytes are always the timestamp, a ".", and the body.
	FormatStripe = "stripe"
)

const (
	// SecretRaw uses the secret's text as the key.
	SecretRaw = ""
	// SecretBase64 uses the bytes the secret's base64 decodes to, as a
	// Microsoft Teams outgoing webhook's security token is used.
	SecretBase64 = "base64"
)

const (
	PresetStandardWebhooks = "standard_webhooks"
	PresetGitHub           = "github"
	PresetStripe           = "stripe"
	// PresetPlatform is what the platform's own inbound webhook
	// documentation configures a source with, so a deployment's script can
	// deliver to another deployment's source with one setting.
	PresetPlatform = "platform"

	// The senders #2223 added whose proof is an HMAC.
	PresetSlack   = "slack"
	PresetZoom    = "zoom"
	PresetTeams   = "teams"
	PresetShopify = "shopify"
	PresetLinear  = "linear"
	PresetGitLab  = "gitlab"
	PresetJira    = "jira"
)

const (
	PlaceholderID        = "{id}"
	PlaceholderTimestamp = "{timestamp}"
	PlaceholderBody      = "{body}"
)

const (
	PlaceholderSignature = "{signature}"
)