svix 2.6.2 → 2.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fe89cb5d8971fdad2ddbde11b67036dedcde034cac1009628dce96e762361b96
-  data.tar.gz: 8f4025f16edbc61f5a1cd87fd906bb94610c1eb9a4b3c44772ef188d402430d7
+  metadata.gz: 60771bc17c0373445147a1d0e99f14e54832360034886934a75041b1534db278
+  data.tar.gz: b50ca6ac15036c6a156363f2a38b41cbcc65a4dcf941f54ba9757e806db2122d
 SHA512:
-  metadata.gz: 793e92aa68ea92db38be15824998cfdf2815fc9f3b7972e793b844da45cbacd728a265d02a03b8f84a973ede601e18cb18901ca7fae788eaa95e31390a5db80f
-  data.tar.gz: 5306a258f6a82fb0803156e88f60c6d1d8120f04e3412037a28506426fdf9a8fcea33de2483e55f99a842295486d784781e60f14b6214e98fc6b70e2fb2eb171
+  metadata.gz: 5c688347d70e2fc86f6343b4955deda84fa372a3d35477bc8f16531a3f37aeb6fc80ddb936d01e2902dd9f279a0b008cb5b8f102c26743ba3542a1716e6291fe
+  data.tar.gz: a2854d721ea7a863cb5e161f8f9b56565ef038cd617cd7aa248c499ba0bdeb9d8fda8213bf8bafad8fbb3fe8a63f199d85d7e714c3e4470a7c4984c61e71df28

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    svix (2.6.2)
+    svix (2.8.0)
       base64 (~> 0.3.0)
       logger (~> 1.0)
 

data/lib/svix/api/destination.rb

@@ -71,5 +71,18 @@ module Svix
       DestinationOut.deserialize(res)
     end
 
+    def rotate_secret(app_id, destination_id, endpoint_secret_rotate_in, options = {})
+      options = options.transform_keys(&:to_s)
+      res = @client.execute_request(
+        "POST",
+        "/api/v1/app/#{app_id}/destination/#{destination_id}/secret/rotate",
+        headers: {
+          "idempotency-key" => options["idempotency-key"]
+        },
+        body: endpoint_secret_rotate_in
+      )
+      DestinationSecretRotateOut.deserialize(res)
+    end
+
   end
 end

data/lib/svix/api/endpoint.rb

@@ -81,7 +81,7 @@ module Svix
 
     def rotate_secret(app_id, endpoint_id, endpoint_secret_rotate_in, options = {})
       options = options.transform_keys(&:to_s)
-      @client.execute_request(
+      res = @client.execute_request(
         "POST",
         "/api/v1/app/#{app_id}/endpoint/#{endpoint_id}/secret/rotate",
         headers: {
@@ -89,6 +89,7 @@ module Svix
         },
         body: endpoint_secret_rotate_in
       )
+      EndpointSecretOut.deserialize(res)
     end
 
     def get_headers(app_id, endpoint_id)

data/lib/svix/api/streaming_sink.rb

@@ -89,7 +89,7 @@ module Svix
         },
         body: endpoint_secret_rotate_in
       )
-      EmptyResponse.deserialize(res)
+      SinkSecretRotateOut.deserialize(res)
     end
 
   end

data/lib/svix/models/destination_secret_rotate_out.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+# This file is @generated
+require "json"
+
+module Svix
+  class DestinationSecretRotateOut
+    # The endpoint's verification secret.
+    #
+    # Format: `base64` encoded random bytes optionally prefixed with `whsec_`.
+    # It is recommended to not set this and let the server generate the secret.
+    attr_accessor :key
+
+    ALL_FIELD ||= ["key"].freeze
+    private_constant :ALL_FIELD
+
+    def initialize(attributes = {})
+      unless attributes.is_a?(Hash)
+        fail(
+          ArgumentError,
+          "The input argument (attributes) must be a hash in `Svix::DestinationSecretRotateOut` new method"
+        )
+      end
+
+      attributes.each do |k, v|
+        unless ALL_FIELD.include?(k.to_s)
+          fail(ArgumentError, "The field #{k} is not part of Svix::DestinationSecretRotateOut")
+        end
+
+        instance_variable_set("@#{k}", v)
+        instance_variable_set("@__#{k}_is_defined", true)
+      end
+    end
+
+    def self.deserialize(attributes = {})
+      attributes = attributes.transform_keys(&:to_s)
+      attrs = Hash.new
+      attrs["key"] = attributes["key"]
+      new(attrs)
+    end
+
+    def serialize
+      out = Hash.new
+      out["key"] = Svix::serialize_primitive(@key) unless @key.nil?
+      out
+    end
+
+    # Serializes the object to a json string
+    # @return String
+    def to_json(*args)
+      serialize.to_json(*args)
+    end
+  end
+end

data/lib/svix/models/sink_secret_rotate_out.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+# This file is @generated
+require "json"
+
+module Svix
+  class SinkSecretRotateOut
+    # The endpoint's verification secret.
+    #
+    # Format: `base64` encoded random bytes optionally prefixed with `whsec_`.
+    # It is recommended to not set this and let the server generate the secret.
+    attr_accessor :key
+
+    ALL_FIELD ||= ["key"].freeze
+    private_constant :ALL_FIELD
+
+    def initialize(attributes = {})
+      unless attributes.is_a?(Hash)
+        fail(ArgumentError, "The input argument (attributes) must be a hash in `Svix::SinkSecretRotateOut` new method")
+      end
+
+      attributes.each do |k, v|
+        unless ALL_FIELD.include?(k.to_s)
+          fail(ArgumentError, "The field #{k} is not part of Svix::SinkSecretRotateOut")
+        end
+
+        instance_variable_set("@#{k}", v)
+        instance_variable_set("@__#{k}_is_defined", true)
+      end
+    end
+
+    def self.deserialize(attributes = {})
+      attributes = attributes.transform_keys(&:to_s)
+      attrs = Hash.new
+      attrs["key"] = attributes["key"]
+      new(attrs)
+    end
+
+    def serialize
+      out = Hash.new
+      out["key"] = Svix::serialize_primitive(@key) unless @key.nil?
+      out
+    end
+
+    # Serializes the object to a json string
+    # @return String
+    def to_json(*args)
+      serialize.to_json(*args)
+    end
+  end
+end

data/lib/svix/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Svix
-  VERSION = "2.6.2"
+  VERSION = "2.8.0"
 end

data/lib/svix/webhook.rb

@@ -3,19 +3,28 @@
 module Svix
   class Webhook
 
+    # `secret` is the raw key as an array of bytes, used as the HMAC key as-is.
     def self.new_using_raw_bytes(secret, tolerance: DEFAULT_TOLERANCE)
-      self.new(secret.pack("C*").force_encoding("UTF-8"), tolerance: tolerance)
+      self.new(raw_secret: secret.pack("C*"), tolerance: tolerance)
     end
 
+    # `secret` is the base64-encoded signing secret, with or without the
+    # `whsec_` prefix. Pass `raw_secret:` instead to use a binary string as the
+    # key as-is.
+    #
     # `tolerance` is the maximum difference allowed, in seconds, between the
     # webhook's timestamp and the current time. Defaults to 5 minutes.
-    def initialize(secret, tolerance: DEFAULT_TOLERANCE)
-      if secret.start_with?(SECRET_PREFIX)
-        secret = secret[SECRET_PREFIX.length..-1]
+    def initialize(secret = nil, raw_secret: nil, tolerance: DEFAULT_TOLERANCE)
+      if !secret.nil? && !raw_secret.nil?
+        raise ArgumentError, "pass either secret or raw_secret, not both"
+      elsif !secret.nil?
+        @secret = Base64.decode64(secret.delete_prefix(SECRET_PREFIX))
+      elsif !raw_secret.nil?
+        @secret = raw_secret.b
+      else
+        raise ArgumentError, "must pass secret or raw_secret"
       end
 
-      @secret = Base64.decode64(secret)
-
       if @secret.empty?
         raise EmptyWebhookSecretError, "Webhook secret must not be blank"
       end

data/lib/svix.rb

@@ -87,6 +87,7 @@ require "svix/models/cron_config"
 require "svix/models/destination_in"
 require "svix/models/destination_out"
 require "svix/models/destination_patch"
+require "svix/models/destination_secret_rotate_out"
 require "svix/models/destination_status"
 require "svix/models/destination_status_in"
 require "svix/models/destination_transform_in"
@@ -241,6 +242,7 @@ require "svix/models/sink_http_config_in"
 require "svix/models/sink_http_config_out"
 require "svix/models/sink_http_config_patch"
 require "svix/models/sink_secret_out"
+require "svix/models/sink_secret_rotate_out"
 require "svix/models/sink_status"
 require "svix/models/sink_status_in"
 require "svix/models/sink_transform_in"

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: svix
 version: !ruby/object:Gem::Version
-  version: 2.6.2
+  version: 2.8.0
 platform: ruby
 authors:
 - Svix
 bindir: exe
 cert_chain: []
-date: 2026-10-05 00:00:00.000000000 Z
+date: 2026-10-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -198,6 +198,7 @@ files:
 - lib/svix/models/destination_in.rb
 - lib/svix/models/destination_out.rb
 - lib/svix/models/destination_patch.rb
+- lib/svix/models/destination_secret_rotate_out.rb
 - lib/svix/models/destination_status.rb
 - lib/svix/models/destination_status_in.rb
 - lib/svix/models/destination_transform_in.rb
@@ -356,6 +357,7 @@ files:
 - lib/svix/models/sink_http_config_patch.rb
 - lib/svix/models/sink_in_common.rb
 - lib/svix/models/sink_secret_out.rb
+- lib/svix/models/sink_secret_rotate_out.rb
 - lib/svix/models/sink_status.rb
 - lib/svix/models/sink_status_in.rb
 - lib/svix/models/sink_transform_in.rb