sendara 0.1.0

data/lib/sendara/webhooks.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+require "json"
+require "openssl"
+
+module Sendara
+  module Webhooks
+    SIGNATURE_HEADER = "Sendara-Signature"
+    TIMESTAMP_HEADER = "Sendara-Timestamp"
+    EVENT_ID_HEADER = "Sendara-Event-Id"
+    EVENT_TYPE_HEADER = "Sendara-Event-Type"
+
+    module_function
+
+    def verify(payload, headers, secret, tolerance: 300)
+      raise WebhookVerificationError, "A signing secret is required" if secret.nil? || secret.empty?
+
+      raw_body = payload.to_s
+      signature = header_value(headers, SIGNATURE_HEADER)
+      timestamp = header_value(headers, TIMESTAMP_HEADER)
+
+      raise WebhookVerificationError, "Missing #{SIGNATURE_HEADER} header" if signature.nil? || signature.empty?
+      raise WebhookVerificationError, "Missing #{TIMESTAMP_HEADER} header" if timestamp.nil? || timestamp.empty?
+
+      if tolerance.positive?
+        raise WebhookVerificationError, "Invalid timestamp header" unless timestamp.match?(/\A-?\d+\z/)
+
+        skew = (Time.now.to_i - timestamp.to_i).abs
+        raise WebhookVerificationError, "Timestamp outside tolerance window" if skew > tolerance
+      end
+
+      expected = sign(secret, timestamp, raw_body)
+      raise WebhookVerificationError, "Signature mismatch" unless secure_compare(expected, signature)
+
+      begin
+        JSON.parse(raw_body)
+      rescue JSON::ParserError
+        raise WebhookVerificationError, "Body is not valid JSON"
+      end
+    end
+
+    def sign(secret, timestamp, raw_body)
+      OpenSSL::HMAC.hexdigest("SHA256", secret, "#{timestamp}.#{raw_body}")
+    end
+
+    def secure_compare(expected, provided)
+      expected_bytes = expected.to_s.b
+      provided_bytes = provided.to_s.b
+      return false unless expected_bytes.bytesize == provided_bytes.bytesize
+
+      OpenSSL.fixed_length_secure_compare(expected_bytes, provided_bytes)
+    end
+
+    def header_value(headers, name)
+      return nil if headers.nil?
+
+      if headers.respond_to?(:[]) && !headers.is_a?(Array)
+        direct = headers[name] || headers[name.downcase] || headers[name.upcase]
+        return scalar_header(direct) unless direct.nil?
+      end
+
+      lower = name.downcase
+      headers.each do |key, value|
+        return scalar_header(value) if key.to_s.downcase == lower
+      end
+      nil
+    end
+
+    def scalar_header(value)
+      value = value.first if value.is_a?(Array)
+      value.nil? ? nil : value.to_s
+    end
+  end
+end

data/lib/sendara.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require_relative "sendara/version"
+require_relative "sendara/errors"
+require_relative "sendara/message_page"
+require_relative "sendara/resource"
+require_relative "sendara/resources/emails"
+require_relative "sendara/resources/broadcasts"
+require_relative "sendara/resources/messages"
+require_relative "sendara/resources/contacts"
+require_relative "sendara/resources/lists"
+require_relative "sendara/resources/domains"
+require_relative "sendara/resources/templates"
+require_relative "sendara/resources/suppressions"
+require_relative "sendara/resources/usage"
+require_relative "sendara/resources/api_keys"
+require_relative "sendara/resources/billing"
+require_relative "sendara/client"
+require_relative "sendara/webhooks"
+
+module Sendara
+  def self.new(api_key, **options)
+    Client.new(api_key, **options)
+  end
+end
+
+require_relative "sendara/railtie" if defined?(Rails::Railtie)

data/sendara.gemspec

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+require_relative "lib/sendara/version"
+
+Gem::Specification.new do |spec|
+  spec.name = "sendara"
+  spec.version = Sendara::VERSION
+  spec.authors = ["Sendara"]
+  spec.email = ["support@sendara.dev"]
+
+  spec.summary = "Sendara — email & marketing API client for Ruby."
+  spec.description = "Email-first Ruby client for the Sendara API: transactional email, " \
+                     "broadcasts, contacts, templates, domains, and signed webhooks. " \
+                     "Pure stdlib HTTP, zero runtime dependencies."
+  spec.homepage = "https://sendara.dev"
+  spec.license = "MIT"
+  spec.required_ruby_version = ">= 3.0"
+
+  spec.metadata = {
+    "homepage_uri" => spec.homepage,
+    "source_code_uri" => "https://github.com/sendara/sendara-ruby",
+    "documentation_uri" => "https://sendara.dev/docs",
+    "rubygems_mfa_required" => "true"
+  }
+
+  spec.files = Dir.glob("lib/**/*.rb") + %w[README.md LICENSE sendara.gemspec].select { |f| File.exist?(f) }
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "rspec", "~> 3"
+end

metadata

@@ -0,0 +1,86 @@
+--- !ruby/object:Gem::Specification
+name: sendara
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Sendara
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2026-06-18 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3'
+description: 'Email-first Ruby client for the Sendara API: transactional email, broadcasts,
+  contacts, templates, domains, and signed webhooks. Pure stdlib HTTP, zero runtime
+  dependencies.'
+email:
+- support@sendara.dev
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- lib/sendara.rb
+- lib/sendara/client.rb
+- lib/sendara/errors.rb
+- lib/sendara/generators/install_generator.rb
+- lib/sendara/generators/templates/sendara.rb
+- lib/sendara/message_page.rb
+- lib/sendara/railtie.rb
+- lib/sendara/resource.rb
+- lib/sendara/resources/api_keys.rb
+- lib/sendara/resources/billing.rb
+- lib/sendara/resources/broadcasts.rb
+- lib/sendara/resources/contacts.rb
+- lib/sendara/resources/domains.rb
+- lib/sendara/resources/emails.rb
+- lib/sendara/resources/lists.rb
+- lib/sendara/resources/messages.rb
+- lib/sendara/resources/suppressions.rb
+- lib/sendara/resources/templates.rb
+- lib/sendara/resources/usage.rb
+- lib/sendara/version.rb
+- lib/sendara/webhooks.rb
+- sendara.gemspec
+homepage: https://sendara.dev
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://sendara.dev
+  source_code_uri: https://github.com/sendara/sendara-ruby
+  documentation_uri: https://sendara.dev/docs
+  rubygems_mfa_required: 'true'
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.22
+signing_key:
+specification_version: 4
+summary: Sendara — email & marketing API client for Ruby.
+test_files: []