didww-v3 6.2.0 → 6.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cadaea9315bfa69aa413d4cbec93d08d877e538f4423141f95beda30a1242ecb
-  data.tar.gz: 1600bdbbf304e00e80b970f289ca1bdc18b77b452baec09f08799ce70ce0750f
+  metadata.gz: b1101871e7a9f40f264d7d9bfc1f3ab0f51c398fcdcc4a4154b9d8c9f061dfe5
+  data.tar.gz: 4a35ff675a731bb3d886dcbab60d0f112cbad2b8d96f1593b54f1f76c9547581
 SHA512:
-  metadata.gz: aad1243da599c25fbe2d0411804ccdcee166830ca547bab18df176f2c15fb1cc9165e158ded14a1314d626a79078fa13e07d99b57bb04327c5a5baa244aa006d
-  data.tar.gz: f1a754028e725b7d24048baa7326f46280c5f84c93939ec1e486f10dd1a9f3e98a5d1574ed79d273250acde87b7f0eb36877275c46e042374608d214017fe24f
+  metadata.gz: 49177d8bca07e63922c22b70501adbfd1000703532a55f4e3fae242dd9d61ddac874cfb0bf9182a36ab337b0dc68e08e017fa74553f8e220e2bc6f9a06e13068
+  data.tar.gz: da7bda7235b89f0024510a9824ba38ffffeb2fd8ce9de85c33ce319b8d7c3cb1c44f3a5672597496ebcbcb2faf69a9467b228b921ef508537be16467f324a120

data/CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.2.1] - 2026-10-07
+### Changed
+- `DIDWW::Callback::RequestValidator` is keyed with the callback secret enabled in the DIDWW User Panel (**APIs → DIDWW API 3 → Callback Secrets**); its constructor argument is renamed to `callback_secret`. The argument is positional, so existing code keeps working, and the signature algorithm is unchanged.
+
 ## [6.2.0] - 2026-06-14
 ### Added
 - `VoiceOutTrunk#rtp_ping` (boolean) — exposes the outbound trunk RTP ping toggle.

data/README.md

@@ -442,10 +442,12 @@ See [docs/resource_relationships.md](docs/resource_relationships.md) for a Merma
 
 Validate incoming webhook callbacks from DIDWW using HMAC-SHA1 signature verification.
 
+Initialize the validator with the callback secret that is enabled in the DIDWW User Panel (**APIs → DIDWW API 3 → Callback Secrets**). DIDWW signs every callback with it and sends callbacks only while a callback secret is enabled.
+
 ```ruby
 require 'didww/callback/request_validator'
 
-validator = DIDWW::Callback::RequestValidator.new("YOUR_API_KEY")
+validator = DIDWW::Callback::RequestValidator.new("YOUR_CALLBACK_SECRET")
 
 # In your webhook handler:
 valid = validator.validate(
@@ -464,7 +466,7 @@ class WebhooksController < ApplicationController
   skip_before_action :verify_authenticity_token
 
   def create
-    validator = DIDWW::Callback::RequestValidator.new("YOUR_API_KEY")
+    validator = DIDWW::Callback::RequestValidator.new("YOUR_CALLBACK_SECRET")
     signature = request.headers[DIDWW::Callback::RequestValidator::HEADER]
     params_hash = request.POST
 

data/lib/didww/callback/request_validator.rb

@@ -4,7 +4,7 @@ require 'openssl'
 module DIDWW
   module Callback
     # @example
-    #   validator = DIDWW::Callback::RequestValidator.new(api_key)
+    #   validator = DIDWW::Callback::RequestValidator.new(callback_secret)
     #   uri = request.original_url
     #   if request.post?
     #     # Collect all parameters passed from DIDWW.
@@ -20,8 +20,9 @@ module DIDWW
       DIGEST_ALGO = 'SHA1'
       HEADER = 'X-DIDWW-Signature'
 
-      def initialize(api_key)
-        @api_key = api_key
+      # @param callback_secret [String] the callback secret enabled in the DIDWW User Panel.
+      def initialize(callback_secret)
+        @callback_secret = callback_secret
       end
 
       # @param url [String]
@@ -41,7 +42,7 @@ module DIDWW
       # @return [String] generated signature in URL safe format.
       def valid_signature(url, payload)
         data = normalize_url(url) + normalize_payload(payload)
-        OpenSSL::HMAC.hexdigest(DIGEST_ALGO, @api_key, data)
+        OpenSSL::HMAC.hexdigest(DIGEST_ALGO, @callback_secret, data)
       end
 
       # @param payload [Hash,Array]

data/lib/didww/version.rb

@@ -1,4 +1,4 @@
 # frozen_string_literal: true
 module DIDWW
-  VERSION = '6.2.0'.freeze
+  VERSION = '6.2.1'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: didww-v3
 version: !ruby/object:Gem::Version
-  version: 6.2.0
+  version: 6.2.1
 platform: ruby
 authors:
 - Alex Korobeinikov
@@ -254,7 +254,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.7.1
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Ruby client for DIDWW API v3
 test_files: []