svix 2.7.0 → 2.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 473ce371b4fad4bd881f5c78f9a097aa966621224cf75799a75865e82d3b1034
-  data.tar.gz: 4fdd92b272002cb0fa770939f7310364024f38281242eff151bee692383fe6a1
+  metadata.gz: 60771bc17c0373445147a1d0e99f14e54832360034886934a75041b1534db278
+  data.tar.gz: b50ca6ac15036c6a156363f2a38b41cbcc65a4dcf941f54ba9757e806db2122d
 SHA512:
-  metadata.gz: c27e2a4e758ec3ff6cf6f182a27cffb362e948d6a8c656ce4955164484ca7473c66b2c95b3f9e3f228d40c797216a73165741073af11f62fa885703ee1782171
-  data.tar.gz: a6722c45076c6e42c956507baf4e9d6c91c0fbe923249fe8efd3295165b7300b92f01ef87c3713b4803e6a22f584599342395a7c644ba6b12a28e732ccadc7a4
+  metadata.gz: 5c688347d70e2fc86f6343b4955deda84fa372a3d35477bc8f16531a3f37aeb6fc80ddb936d01e2902dd9f279a0b008cb5b8f102c26743ba3542a1716e6291fe
+  data.tar.gz: a2854d721ea7a863cb5e161f8f9b56565ef038cd617cd7aa248c499ba0bdeb9d8fda8213bf8bafad8fbb3fe8a63f199d85d7e714c3e4470a7c4984c61e71df28

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    svix (2.7.0)
+    svix (2.8.0)
       base64 (~> 0.3.0)
       logger (~> 1.0)
 

data/lib/svix/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Svix
-  VERSION = "2.7.0"
+  VERSION = "2.8.0"
 end

data/lib/svix/webhook.rb

@@ -3,19 +3,28 @@
 module Svix
   class Webhook
 
+    # `secret` is the raw key as an array of bytes, used as the HMAC key as-is.
     def self.new_using_raw_bytes(secret, tolerance: DEFAULT_TOLERANCE)
-      self.new(secret.pack("C*").force_encoding("UTF-8"), tolerance: tolerance)
+      self.new(raw_secret: secret.pack("C*"), tolerance: tolerance)
     end
 
+    # `secret` is the base64-encoded signing secret, with or without the
+    # `whsec_` prefix. Pass `raw_secret:` instead to use a binary string as the
+    # key as-is.
+    #
     # `tolerance` is the maximum difference allowed, in seconds, between the
     # webhook's timestamp and the current time. Defaults to 5 minutes.
-    def initialize(secret, tolerance: DEFAULT_TOLERANCE)
-      if secret.start_with?(SECRET_PREFIX)
-        secret = secret[SECRET_PREFIX.length..-1]
+    def initialize(secret = nil, raw_secret: nil, tolerance: DEFAULT_TOLERANCE)
+      if !secret.nil? && !raw_secret.nil?
+        raise ArgumentError, "pass either secret or raw_secret, not both"
+      elsif !secret.nil?
+        @secret = Base64.decode64(secret.delete_prefix(SECRET_PREFIX))
+      elsif !raw_secret.nil?
+        @secret = raw_secret.b
+      else
+        raise ArgumentError, "must pass secret or raw_secret"
       end
 
-      @secret = Base64.decode64(secret)
-
       if @secret.empty?
         raise EmptyWebhookSecretError, "Webhook secret must not be blank"
       end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: svix
 version: !ruby/object:Gem::Version
-  version: 2.7.0
+  version: 2.8.0
 platform: ruby
 authors:
 - Svix
 bindir: exe
 cert_chain: []
-date: 2026-10-06 00:00:00.000000000 Z
+date: 2026-10-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64