hisend 1.0.0 → 1.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8cf15bd446a532daa5f3d6037ba959697017299c1ab53d9e0d0d5428b2607ae
-  data.tar.gz: b105cc09f5cd95fbf0f05ba0121c859ff21bae60cfa2a36653f71773711a9666
+  metadata.gz: 933abf8d75845cc7d2263d3fb6fcfd837e38a0a8efbe54f72473b2f4679bec47
+  data.tar.gz: 24b118ff75d7d37503d2aca0b7a4ac08f721e90d55f82d40ed196e7d1eccd784
 SHA512:
-  metadata.gz: 4bde86c3c218112b8a668f2315d5f27f8ff9c9aca7e38675c2760ca632e73021b2c235a0fa3ddc3c0fc3ce806749159767e60e020f1edde36eb4358419e9048e
-  data.tar.gz: 55b06063de5c084426cc5dd69898a9deb5dd33b80c5248df23a7ac15715efc5b6c698ca259c65924b5a7f6ff0796e47fc5aaf7e73a8613a3370b302b3d526e96
+  metadata.gz: 13ba139f58e303a6aeefb130395740b9403ea9781a12ea4b93de486c089c86003b551d7a0d13bd0ace5c434d85fbcfed0e8f982c01e9cbc039b54c51a6225319
+  data.tar.gz: 6fc1416bfc169cc2e83aaa2f5a6154904782c425da78f83ad51014a7acc2f872f6fb57387ee552b1a210abbd4b880a6dddc71da07594b8949e9ded70aafb5a5d

data/lib/hisend/webhook.rb

@@ -0,0 +1,47 @@
+require 'openssl'
+
+module Hisend
+  # Hisend Webhook signature verification helper.
+  #
+  # Example (Rails):
+  #
+  #   class WebhooksController < ApplicationController
+  #     skip_before_action :verify_authenticity_token
+  #
+  #     def hisend
+  #       payload   = request.raw_post
+  #       signature = request.headers['X-Hisend-Signature']
+  #       secret    = ENV['HISEND_WEBHOOK_SECRET']
+  #
+  #       unless Hisend::Webhook.verify(payload, signature, secret)
+  #         render json: { error: 'Invalid signature' }, status: :unauthorized
+  #         return
+  #       end
+  #
+  #       event = JSON.parse(payload)
+  #       head :ok
+  #     end
+  #   end
+  module Webhook
+    # Verify the HMAC-SHA256 signature of an incoming Hisend webhook.
+    #
+    # @param payload   [String] Raw request body exactly as received.
+    # @param signature [String] Value of the X-Hisend-Signature header.
+    # @param secret    [String] Your Webhook Signing Secret (starts with whsec_).
+    #
+    # @return [Boolean] true if the signature is valid, false otherwise.
+    def self.verify(payload, signature, secret)
+      return false if [payload, signature, secret].any?(&:nil?)
+      return false if payload.empty? || signature.empty? || secret.empty?
+
+      expected = OpenSSL::HMAC.hexdigest('SHA256', secret, payload)
+
+      # Rack / ActiveSupport provides secure_compare – fall back to plain == if unavailable.
+      if defined?(ActiveSupport::SecurityUtils)
+        ActiveSupport::SecurityUtils.secure_compare(expected, signature)
+      else
+        OpenSSL.fixed_length_secure_compare(expected, signature)
+      end
+    end
+  end
+end

data/lib/hisend.rb

@@ -8,6 +8,7 @@ require_relative 'hisend/resources/domains'
 require_relative 'hisend/resources/emails'
 require_relative 'hisend/resources/routing'
 require_relative 'hisend/resources/threads'
+require_relative 'hisend/webhook'
 
 module Hisend
   # Entry point is Hisend::Client

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hisend
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.2.0
 platform: ruby
 authors:
 - Hisend
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2026-03-24 00:00:00.000000000 Z
+date: 2026-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: minitest
@@ -37,6 +37,7 @@ files:
 - lib/hisend/resources/emails.rb
 - lib/hisend/resources/routing.rb
 - lib/hisend/resources/threads.rb
+- lib/hisend/webhook.rb
 homepage: https://hisend.app
 licenses:
 - MIT