dpay 0.1.0 → 0.2.0

data/lib/dpay/webhook/webhook_verifier.rb

@@ -0,0 +1,110 @@
+# frozen_string_literal: true
+
+require "json"
+require "openssl"
+
+module DPay
+  # Verifies dpay webhooks (Standard Webhooks):
+  # "webhook-signature" = "v1," + base64(HMAC-SHA256(key, id.timestamp.body)), where the key is the base64-decoded
+  # secret without the "whsec_" prefix. During a secret rotation dpay sends two signatures separated by a space -
+  # one match is enough.
+  module WebhookVerifier
+    DEFAULT_TOLERANCE = 300
+    SECRET_PREFIX = "whsec_"
+    SIGNATURE_VERSION = "v1"
+    ID_HEADER = "webhook-id"
+    TIMESTAMP_HEADER = "webhook-timestamp"
+    SIGNATURE_HEADER = "webhook-signature"
+    RACK_PREFIX = "http-"
+    TIMESTAMP = /\A\d+\z/
+    BASE64 = %r{\A([A-Za-z0-9+/]*)(=*)\z}
+    BASE64_WHITESPACE = " \t\r\n"
+    INVALID_SECRET = "Webhook secret must be the whsec_ value from the dpay panel"
+
+    module_function
+
+    # Verifies the signature and returns the event. Pass the raw request body exactly as received. headers: Hash
+    # (or anything with #each yielding name and value) with String or Symbol names in any letter case, also in
+    # the Rack format (HTTP_WEBHOOK_ID); a value may be an Array (the first element counts). secrets: the "whsec_..."
+    # secret or an Array of secrets during a rotation.
+    def construct_event(raw_body, headers, secrets, tolerance = DEFAULT_TOLERANCE, now = nil)
+      verify(raw_body, headers, secrets, tolerance, now)
+
+      payload = begin
+        JSON.parse(raw_body.to_s)
+      rescue JSON::ParserError
+        nil
+      end
+      raise SignatureVerificationError, "Invalid webhook payload" unless payload.is_a?(Hash)
+
+      WebhookEvent.from_api(payload)
+    end
+
+    def verify(raw_body, headers, secrets, tolerance = DEFAULT_TOLERANCE, now = nil)
+      id = header(headers, ID_HEADER)
+      timestamp = header(headers, TIMESTAMP_HEADER)
+      signature = header(headers, SIGNATURE_HEADER)
+      if id.nil? || timestamp.nil? || signature.nil?
+        raise SignatureVerificationError, "Missing webhook-id, webhook-timestamp or webhook-signature header"
+      end
+      raise SignatureVerificationError, "Invalid webhook-timestamp header" unless TIMESTAMP.match?(timestamp)
+      if ((now || Time.now.to_i) - timestamp.to_i).abs > tolerance
+        raise SignatureVerificationError, "Webhook timestamp is outside the tolerance zone"
+      end
+
+      signed = "#{id}.#{timestamp}.".b + raw_body.to_s.b
+      expected = (secrets.is_a?(Array) ? secrets : [secrets]).map do |secret|
+        OpenSSL::HMAC.base64digest("SHA256", key(secret), signed)
+      end
+      return nil if signature_matches?(signature, expected)
+
+      raise SignatureVerificationError, "No valid webhook signature found"
+    end
+
+    def header(headers, name)
+      headers.each do |key, value|
+        next unless header_name(key) == name
+
+        value = value.first if value.is_a?(Array)
+        return value.is_a?(String) && !value.empty? ? value : nil
+      end
+
+      nil
+    end
+
+    def header_name(key)
+      key.to_s.downcase.tr("_", "-").delete_prefix(RACK_PREFIX)
+    end
+
+    def signature_matches?(header_value, expected)
+      header_value.strip.split(/\s+/).any? do |entry|
+        version, value = entry.split(",", 2)
+        next false unless version == SIGNATURE_VERSION && value.is_a?(String)
+
+        expected.any? { |candidate| secure_compare(candidate, value) }
+      end
+    end
+
+    def secure_compare(expected, actual)
+      expected.bytesize == actual.bytesize && OpenSSL.fixed_length_secure_compare(expected, actual)
+    end
+
+    # Decodes the secret like PHP base64_decode($secret, true): whitespace is skipped, the padding may be missing,
+    # any other character outside the alphabet makes the secret invalid.
+    def key(secret)
+      raise InvalidArgumentError, INVALID_SECRET unless secret.is_a?(String)
+
+      match = BASE64.match(secret.delete_prefix(SECRET_PREFIX).delete(BASE64_WHITESPACE))
+      data = match.nil? ? "" : match[1].to_s
+      padding = match.nil? ? "" : match[2].to_s
+      if data.empty? || data.length % 4 == 1 || padding.length > 2 ||
+         (!padding.empty? && (data.length + padding.length) % 4 != 0)
+        raise InvalidArgumentError, INVALID_SECRET
+      end
+
+      "#{data}#{"=" * (-data.length % 4)}".unpack1("m").to_s
+    end
+
+    private_class_method :header, :header_name, :signature_matches?, :secure_compare, :key
+  end
+end

data/lib/dpay.rb

@@ -35,11 +35,19 @@ require_relative "dpay/card/card_service"
 require_relative "dpay/blik/blik_alias_type"
 require_relative "dpay/blik/blik_app"
 require_relative "dpay/blik/blik_alias"
-require_relative "dpay/blik/blik_recurring_registration_info"
-require_relative "dpay/blik/blik_recurring_status"
 require_relative "dpay/blik/blik_alias_registration"
-require_relative "dpay/blik/blik_recurring_registration"
 require_relative "dpay/blik/blik_service"
+require_relative "dpay/recurring/recurring_registration"
+require_relative "dpay/recurring/recurring_registration_info"
+require_relative "dpay/recurring/recurring_status"
+require_relative "dpay/recurring/recurring_retry_result"
+require_relative "dpay/recurring/recurring_service"
+require_relative "dpay/webhook/webhook_event_type"
+require_relative "dpay/webhook/webhook_target"
+require_relative "dpay/webhook/webhook_event"
+require_relative "dpay/webhook/webhook_verifier"
+require_relative "dpay/webhook/event_page"
+require_relative "dpay/webhook/event_service"
 require_relative "dpay/ipn/ipn_type"
 require_relative "dpay/ipn/ipn_event"
 require_relative "dpay/ipn/ipn_verifier"

data/sig/dpay/blik/blik_alias_type.rbs

@@ -1,7 +1,6 @@
 module DPay
   module BlikAliasType
     UID: String
-    PAYID: String
 
     ALL: Array[String]
 

data/sig/dpay/blik/blik_service.rbs

@@ -3,7 +3,6 @@ module DPay
     def initialize: (Internal::ApiRequestor api) -> void
     def alias: (String alias_value, ?String alias_type) -> BlikAlias
     def unregister_alias: (String alias_value, ?String alias_type, ?String? reason) -> nil
-    def recurring_status: (String alias_value) -> BlikRecurringStatus
 
     private
 

data/sig/dpay/card/card_service.rbs

@@ -4,7 +4,7 @@ module DPay
     def public_key: () -> String
     def pay_otp: (String transaction_id, CardPaymentRequest request) -> CardPaymentResult
     def pre_auth: (String transaction_id, CardPaymentRequest request) -> CardPaymentResult
-    def capture: (String transaction_id, Money amount) -> CardPaymentResult
+    def capture: (String transaction_id, Money amount, ?WebhookTarget? webhook) -> CardPaymentResult
     def cancel: (String transaction_id, ?Money? amount) -> CardPaymentResult
     def google_pay: (String transaction_id, GooglePayRequest request) -> CardPaymentResult
     def apple_pay: (String transaction_id, ApplePayRequest request) -> CardPaymentResult

data/sig/dpay/client.rbs

@@ -9,6 +9,8 @@ module DPay
     attr_reader blik: BlikService
     attr_reader cards: CardService
     attr_reader payouts: PayoutService
+    attr_reader recurring: RecurringService
+    attr_reader events: EventService
 
     def initialize: (
       service: String,

data/sig/dpay/errors.rbs

@@ -25,13 +25,15 @@ module DPay
     attr_reader error_code: String?
     attr_reader field_errors: Hash[String, Array[String]]
     attr_reader raw_body: String
+    attr_reader reason: String?
 
     def initialize: (
       String message,
       Integer http_status,
       ?String? error_code,
       ?Hash[String, Array[String]] field_errors,
-      ?String raw_body
+      ?String raw_body,
+      ?String? reason
     ) -> void
   end
 
@@ -67,6 +69,7 @@ module DPay
 
   class PaymentRejectedError < ApiError
     attr_reader transaction_id: String?
+    attr_reader error_description: String?
 
     def self.from_api: (Hash[String, untyped] data) -> PaymentRejectedError
 
@@ -76,7 +79,8 @@ module DPay
       ?String? error_code,
       ?Hash[String, Array[String]] field_errors,
       ?String raw_body,
-      ?String? transaction_id
+      ?String? transaction_id,
+      ?String? error_description
     ) -> void
   end
 

data/sig/dpay/internal/checksum_calculator.rbs

@@ -1,9 +1,16 @@
 module DPay
   module Internal
     class ChecksumCalculator
+      CHECKSUM_KEY: String
+
       def initialize: (String secret_hash) -> void
       def secret_second: (String service, Array[untyped] fields) -> String
-      def ordered_body: (Array[untyped] values) -> String
+      def ordered_body: (Hash[untyped, untyped] | Array[untyped] body) -> String
+      def operation: (String operation, String service, String transaction_id, String? amount) -> String
+
+      private
+
+      def leaves: (untyped value) -> Array[untyped]
     end
   end
 end

data/sig/dpay/internal/error_mapper.rbs

@@ -4,6 +4,7 @@ module DPay
       DEFAULT_MESSAGE: String
 
       def self?.map: (HTTP::Response response) -> ApiError
+      def self?.extract_code: (Hash[String, untyped] data) -> String?
       def self?.error_class: (Integer status) -> singleton(ApiError)
       def self?.extract_message: (Hash[String, untyped] data) -> String
       def self?.rate_limit: (HTTP::Response response, String message) -> RateLimitError

data/sig/dpay/internal/php.rbs

@@ -3,7 +3,9 @@ module DPay
     module PHP
       SAFE_INTEGRAL_FLOAT: Integer
       NON_UNRESERVED: Regexp
+      TRIM_EDGES: Regexp
 
+      def self?.trim: (String value) -> String
       def self?.strval: (untyped value) -> String
       def self?.round: (Float value) -> Integer
       def self?.json_encode: (untyped data, ?escape_slashes: bool) -> String

data/sig/dpay/ipn/ipn_event.rbs

@@ -13,10 +13,12 @@ module DPay
     def signature: () -> String
     def email: () -> String?
     def custom: () -> String?
+    %a{deprecated: dpay no longer sends capture IPNs - use the payment.captured webhook event}
     def capture_payment_id: () -> String?
     def attempt: () -> Integer
     def version: () -> Integer
     def transfer?: () -> bool
+    %a{deprecated: dpay no longer sends capture IPNs - use the payment.captured webhook event}
     def capture?: () -> bool
     def dcb?: () -> bool
 

data/sig/dpay/ipn/ipn_type.rbs

@@ -1,6 +1,7 @@
 module DPay
   module IpnType
     TRANSFER: String
+    # Deprecated: dpay no longer sends capture IPNs - use the payment.captured webhook event.
     CAPTURE: String
     DCB: String
 

data/sig/dpay/payment/register_payment_request.rbs

@@ -3,9 +3,14 @@ module DPay
     BLIK_CODE: Regexp
     PARTNER_PLATFORM: Regexp
     HTTP_URL: Regexp
+    CONTROL_CHARACTERS: Regexp
+    RECURRING_ALIAS_MAX: Integer
+    REFERENCE_MAX: Integer
     TOGGLES: Hash[String, Symbol]
+    RECURRING_CONFLICTS: Array[String]
 
     @optional: Hash[String, untyped]
+    @recurring_registration: RecurringRegistration?
 
     attr_reader amount: Money
 
@@ -30,7 +35,11 @@ module DPay
     def with_blik_code: (String blik_code, String user_agent, String user_ip) -> self
     def with_blik_alias: (String alias_value, String user_agent, String user_ip) -> self
     def with_register_blik_alias: (BlikAliasRegistration registration) -> self
-    def with_register_blik_recurring_alias: (BlikRecurringRegistration registration) -> self
+    def with_recurring_registration: (RecurringRegistration registration) -> self
+    def with_recurring_alias: (String alias_value) -> self
+    def with_client_context: (String user_agent, String user_ip) -> self
+    def with_webhook: (WebhookTarget webhook) -> self
+    def with_reference: (String reference) -> self
     def with_alias_ipn_url: (String url) -> self
     def with_no_delay: (bool no_delay) -> self
     def with_card_recurring: (CardRecurringRegistration registration) -> self
@@ -52,5 +61,8 @@ module DPay
     def append: (Hash[String, untyped] body, String key) -> void
     def append_payer: (Hash[String, untyped] body) -> void
     def append_toggles: (Hash[String, untyped] body) -> void
+    def ip_address?: (untyped value) -> bool
+    def assert_recurring_combination: () -> void
+    def assert_recurring_requirements: (bool charge) -> void
   end
 end

data/sig/dpay/payment/registered_payment.rbs

@@ -16,5 +16,11 @@ module DPay
     def paid?: () -> bool
     def internal_processing?: () -> bool
     def card_recurring_alias: () -> String?
+    def recurring_alias: () -> String?
+    def recurring_methods: () -> Array[String]
+
+    private
+
+    def recurring_registration: () -> Hash[String, untyped]
   end
 end

data/sig/dpay/payment/return_urls.rbs

@@ -4,8 +4,8 @@ module DPay
 
     attr_reader success: String
     attr_reader fail: String
-    attr_reader ipn: String
+    attr_reader ipn: String?
 
-    def initialize: (String success, String fail, String ipn) -> void
+    def initialize: (String success, String fail, ?String? ipn) -> void
   end
 end

data/sig/dpay/payment/transaction_type.rbs

@@ -4,8 +4,6 @@ module DPay
     DCB_GATEWAY: String
     CARD_AUTH: String
     MB_WAY_DIRECT: String
-    BIZUM_DIRECT: String
-    BLIK_RECURRING: String
     CARD_RECURRING: String
 
     ALL: Array[String]

data/sig/dpay/recurring/recurring_registration.rbs

@@ -0,0 +1,45 @@
+module DPay
+  class RecurringRegistration
+    MODEL_A: String
+    MODEL_M: String
+    MODEL_O: String
+    MODELS: Array[String]
+    METHOD_BLIK: String
+    METHODS: Array[String]
+    FREQUENCY: Regexp
+    DATE: Regexp
+    HTTP_URL: Regexp
+    TERMS_URL_MAX: Integer
+    ALIAS_MAX: Integer
+    MODEL_O_FORBIDDEN: Array[String]
+    MODEL_A_REQUIRED: Array[String]
+    OPTIONAL_ORDER: Array[String]
+
+    @label: String
+    @terms_url: String
+    @optional: Hash[String, untyped]
+
+    attr_reader model: String
+
+    def self.create: (String label, String model, String terms_url) -> RecurringRegistration
+
+    def initialize: (String label, String model, String terms_url) -> void
+    def with_alias: (String alias_value) -> self
+    def with_terms_version: (String terms_version) -> self
+    def with_methods: (Array[String] names) -> self
+    def with_frequency: (String frequency) -> self
+    def with_limit_amt: (Integer limit_amt) -> self
+    def with_tot_limit_amt: (Integer tot_limit_amt) -> self
+    def with_limit_amt_fixed: (bool fixed) -> self
+    def with_expiration_date: (String expiration_date) -> self
+    def with_init_date: (String init_date) -> self
+    def to_h: () -> Hash[String, untyped]
+
+    private
+
+    def set: (String key, untyped value) -> self
+    def assert_model_rules: () -> void
+    def assert_positive: (untyped value, String field) -> Integer
+    def assert_date: (untyped date) -> String
+  end
+end

data/sig/dpay/{blik/blik_recurring_registration_info.rbs → recurring/recurring_registration_info.rbs}

@@ -1,17 +1,27 @@
 module DPay
-  class BlikRecurringRegistrationInfo
+  class RecurringRegistrationInfo
+    DIGITS: Regexp
+
+    attr_reader transaction_id: String?
+    attr_reader label: String?
     attr_reader model: String?
     attr_reader frequency: String?
     attr_reader limit_amt: Integer?
     attr_reader tot_limit_amt: Integer?
     attr_reader limit_amt_fixed: bool?
     attr_reader init_date: String?
-    attr_reader label: String?
+    attr_reader terms_url: String?
+    attr_reader terms_version: String?
     attr_reader registered_at: String?
     attr_reader raw: Hash[String, untyped]
 
-    def self.from_api: (Hash[String, untyped] data) -> BlikRecurringRegistrationInfo
+    def self.from_api: (Hash[String, untyped] data) -> RecurringRegistrationInfo
 
     def initialize: (Hash[String, untyped] data) -> void
+
+    private
+
+    def string: (untyped value) -> String?
+    def integer: (untyped value) -> Integer?
   end
 end

data/sig/dpay/recurring/recurring_retry_result.rbs

@@ -0,0 +1,24 @@
+module DPay
+  class RecurringRetryResult
+    STATUS_PENDING: String
+    STATUS_FAILED: String
+    STATUS_SUCCESS: String
+
+    attr_reader transaction_id: String
+    attr_reader status: String?
+    attr_reader count: Integer?
+    attr_reader error_code: String?
+    attr_reader error_description: String?
+    attr_reader raw: Hash[String, untyped]
+
+    def self.from_api: (Hash[String, untyped] data) -> RecurringRetryResult
+
+    def initialize: (Hash[String, untyped] data) -> void
+    def pending?: () -> bool
+    def failed?: () -> bool
+
+    private
+
+    def string: (untyped value) -> String?
+  end
+end

data/sig/dpay/recurring/recurring_service.rbs

@@ -0,0 +1,15 @@
+module DPay
+  class RecurringService
+    CANCEL: String
+
+    def initialize: (Internal::ApiRequestor api) -> void
+    def status: (String alias_value) -> RecurringStatus
+    def retry: (String transaction_id) -> RecurringRetryResult
+    def cancel: (String alias_value, ?String? reason) -> String
+
+    private
+
+    def post: (String path, Hash[String, untyped] body) -> Hash[String, untyped]
+    def payload: (Hash[String, untyped] data) -> Hash[String, untyped]
+  end
+end

data/sig/dpay/recurring/recurring_status.rbs

@@ -0,0 +1,27 @@
+module DPay
+  class RecurringStatus
+    ACTIVE: String
+    INACTIVE: String
+    UNREGISTERED: String
+    EXPIRED: String
+    DECLINED: String
+
+    ALL: Array[String]
+
+    attr_reader alias: String
+    attr_reader payment_method: String?
+    attr_reader status: String?
+    attr_reader expiration_date: String?
+    attr_reader registration: RecurringRegistrationInfo?
+    attr_reader raw: Hash[String, untyped]
+
+    def self.from_api: (Hash[String, untyped] data) -> RecurringStatus
+
+    def initialize: (Hash[String, untyped] data) -> void
+    def active?: () -> bool
+
+    private
+
+    def string: (untyped value) -> String?
+  end
+end

data/sig/dpay/refund/refund_service.rbs

@@ -3,12 +3,12 @@ module DPay
     AVAILABILITY_STATUSES: Array[Integer]
 
     def initialize: (Internal::ApiRequestor api) -> void
-    def create: (String transaction_id, ?Money? amount, ?String? reason) -> Refund
+    def create: (String transaction_id, ?Money? amount, ?String? reason, ?WebhookTarget? webhook) -> Refund
     def check_availability: (String transaction_id, ?Money? amount, ?String? reason) -> RefundAvailability
 
     private
 
     def availability_outcome?: (Integer status, Hash[String, untyped] data) -> bool
-    def signed_body: (String transaction_id, Money? amount, String? reason) -> Hash[String, untyped]
+    def signed_body: (String transaction_id, Money? amount, String? reason, ?WebhookTarget? webhook) -> Hash[String, untyped]
   end
 end

data/sig/dpay/webhook/event_page.rbs

@@ -0,0 +1,14 @@
+module DPay
+  class EventPage
+    attr_reader data: Array[WebhookEvent]
+    attr_reader next_starting_after: String?
+    attr_reader raw: Hash[String, untyped]
+
+    @has_more: bool
+
+    def self.from_api: (Hash[String, untyped] response) -> EventPage
+
+    def initialize: (Hash[String, untyped] response) -> void
+    def has_more?: () -> bool
+  end
+end

data/sig/dpay/webhook/event_service.rbs

@@ -0,0 +1,21 @@
+module DPay
+  class EventService
+    PATH: String
+    STARTING_AFTER: Regexp
+    DATE_FIELDS: Array[String]
+    LIMIT: Range[Integer]
+
+    type params = Hash[String | Symbol, untyped]
+
+    def initialize: (Internal::ApiRequestor api) -> void
+    def list: (?params params, ?Integer? timestamp) -> EventPage
+    def iterate: (?params params) { (WebhookEvent event) -> void } -> nil
+               | (?params params) -> Enumerator[WebhookEvent, nil]
+
+    private
+
+    def append_types: (Hash[String, untyped] body, untyped types) -> void
+    def append_starting_after: (Hash[String, untyped] body, untyped starting_after) -> void
+    def append_limit: (Hash[String, untyped] body, untyped limit) -> void
+  end
+end

data/sig/dpay/webhook/webhook_event.rbs

@@ -0,0 +1,24 @@
+module DPay
+  class WebhookEvent
+    attr_reader id: String
+    attr_reader type: String
+    attr_reader api_version: String?
+    attr_reader created: String?
+    attr_reader service: String?
+    attr_reader merchant_ref: String?
+    attr_reader object: Hash[String, untyped]
+    attr_reader object_type: String?
+    attr_reader raw: Hash[String, untyped]
+
+    @livemode: bool
+
+    def self.from_api: (Hash[String, untyped] data) -> WebhookEvent
+
+    def initialize: (Hash[String, untyped] data) -> void
+    def livemode?: () -> bool
+
+    private
+
+    def string: (untyped value) -> String?
+  end
+end

data/sig/dpay/webhook/webhook_event_type.rbs

@@ -0,0 +1,23 @@
+module DPay
+  module WebhookEventType
+    PAYMENT_SUCCEEDED: String
+    PAYMENT_FAILED: String
+    PAYMENT_CAPTURED: String
+    REFUND_SUCCEEDED: String
+    REFUND_FAILED: String
+    RECURRING_PAYMENT_ACTIVATED: String
+    RECURRING_PAYMENT_CANCELED: String
+    RECURRING_PAYMENT_EXPIRED: String
+    RECURRING_PAYMENT_DECLINED: String
+    PAYOUT_PAID: String
+    PAYOUT_FAILED: String
+    WEBHOOK_TEST: String
+
+    PAYMENT_REGISTRATION: Array[String]
+    MERCHANT: Array[String]
+    REFUND: Array[String]
+    CAPTURE: Array[String]
+
+    def self.assert_allowed: (Array[untyped] events, Array[String] allowed, String context) -> nil
+  end
+end

data/sig/dpay/webhook/webhook_target.rbs

@@ -0,0 +1,15 @@
+module DPay
+  class WebhookTarget
+    HTTPS_URL: Regexp
+    URL_MAX: Integer
+
+    attr_reader url: String
+    attr_reader events: Array[String]
+
+    def self.create: (String url, ?Array[String] events) -> WebhookTarget
+
+    def initialize: (String url, ?Array[String] events) -> void
+    def assert_events_allowed: (Array[String] allowed, String context) -> nil
+    def to_h: () -> Hash[String, untyped]
+  end
+end

data/sig/dpay/webhook/webhook_verifier.rbs

@@ -0,0 +1,37 @@
+module DPay
+  module WebhookVerifier
+    DEFAULT_TOLERANCE: Integer
+    SECRET_PREFIX: String
+    SIGNATURE_VERSION: String
+    ID_HEADER: String
+    TIMESTAMP_HEADER: String
+    SIGNATURE_HEADER: String
+    RACK_PREFIX: String
+    TIMESTAMP: Regexp
+    BASE64: Regexp
+    BASE64_WHITESPACE: String
+    INVALID_SECRET: String
+
+    # headers: a Hash (or anything with #each yielding name and value), names as String or Symbol in any letter
+    # case or in the Rack format (HTTP_WEBHOOK_ID), values as String or Array[String].
+    def self?.construct_event: (
+      untyped raw_body,
+      untyped headers,
+      String | Array[String] secrets,
+      ?Integer tolerance,
+      ?Integer? now
+    ) -> WebhookEvent
+    def self?.verify: (
+      untyped raw_body,
+      untyped headers,
+      String | Array[String] secrets,
+      ?Integer tolerance,
+      ?Integer? now
+    ) -> nil
+    def self?.header: (untyped headers, String name) -> String?
+    def self?.header_name: (untyped key) -> String
+    def self?.signature_matches?: (String header_value, Array[String] expected) -> bool
+    def self?.secure_compare: (String expected, String actual) -> bool
+    def self?.key: (untyped secret) -> String
+  end
+end