unitpost 0.0.0 → 0.2.1

data/lib/unitpost/webhooks.rb

@@ -0,0 +1,76 @@
+# frozen_string_literal: true
+
+require "openssl"
+require "base64"
+require "json"
+require_relative "errors"
+
+module Unitpost
+  # Webhook signature verification (svix-compatible). Mirrors the engine signer:
+  #   signed content: "<svix-id>.<svix-timestamp>.<raw-body>"
+  #   signature:      base64( HMAC_SHA256(secret_bytes, signed_content) )
+  #   header:         svix-signature = "v1,<base64>" (space-separated list allowed)
+  #   secret:         "whsec_<base64url>" — bytes after the prefix are the key.
+  #
+  # Verify the RAW request body string (not a re-serialized hash).
+  module Webhooks
+    SECRET_PREFIX = "whsec_"
+
+    module_function
+
+    def verify(payload:, secret:, headers:, tolerance_seconds: 300)
+      msg_id = header(headers, "svix-id")
+      timestamp = header(headers, "svix-timestamp")
+      signature = header(headers, "svix-signature")
+
+      if msg_id.nil? || timestamp.nil? || signature.nil?
+        raise WebhookVerificationError, "Missing svix-id, svix-timestamp, or svix-signature header."
+      end
+
+      ts = Integer(timestamp, exception: false)
+      raise WebhookVerificationError, "Invalid svix-timestamp header." if ts.nil?
+
+      now = Time.now.to_i
+      if (now - ts).abs > tolerance_seconds
+        raise WebhookVerificationError, "Webhook timestamp is outside the tolerance window (possible replay)."
+      end
+
+      signed_content = "#{msg_id}.#{ts}.#{payload}"
+      expected = Base64.strict_encode64(
+        OpenSSL::HMAC.digest("SHA256", secret_key_bytes(secret), signed_content)
+      )
+
+      matched = signature.split(" ").any? do |part|
+        _, sig = part.split(",", 2)
+        sig && secure_compare(sig, expected)
+      end
+      raise WebhookVerificationError, "Webhook signature verification failed." unless matched
+
+      begin
+        JSON.parse(payload)
+      rescue JSON::ParserError
+        raise WebhookVerificationError, "Webhook payload is not valid JSON."
+      end
+    end
+
+    def header(headers, name)
+      headers[name] || headers[name.downcase] || headers[name.split("-").map(&:capitalize).join("-")]
+    end
+
+    def secret_key_bytes(secret)
+      raw = secret.start_with?(SECRET_PREFIX) ? secret[SECRET_PREFIX.length..] : secret
+      Base64.urlsafe_decode64(raw + ("=" * ((4 - (raw.length % 4)) % 4)))
+    end
+
+    def secure_compare(a, b)
+      return false unless a.bytesize == b.bytesize
+
+      OpenSSL.fixed_length_secure_compare(a, b)
+    rescue StandardError
+      # Fallback for older OpenSSL without fixed_length_secure_compare.
+      res = 0
+      a.bytes.zip(b.bytes) { |x, y| res |= x ^ y }
+      res.zero?
+    end
+  end
+end

data/lib/unitpost.rb

@@ -1,6 +1,14 @@
-# Name reserved for Unitpost (https://unitpost.com).
-# Placeholder gem; the official Unitpost Ruby SDK will be published under this name.
+# frozen_string_literal: true
+
 require_relative "unitpost/version"
+require_relative "unitpost/errors"
+require_relative "unitpost/client"
+require_relative "unitpost/webhooks"
 
+# unitpost — Official Unitpost SDK for Ruby.
 module Unitpost
+  # Convenience: Unitpost.verify_webhook(...) delegates to Unitpost::Webhooks.verify.
+  def self.verify_webhook(payload:, secret:, headers:, tolerance_seconds: 300)
+    Webhooks.verify(payload: payload, secret: secret, headers: headers, tolerance_seconds: tolerance_seconds)
+  end
 end

metadata

@@ -1,31 +1,89 @@
 --- !ruby/object:Gem::Specification
 name: unitpost
 version: !ruby/object:Gem::Version
-  version: 0.0.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Unitpost
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-06-26 00:00:00.000000000 Z
-dependencies: []
-description: Intentionally empty placeholder. The official Unitpost Ruby SDK will
-  be published under this name.
-email: 
+date: 2026-07-31 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: faraday
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.0'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.19'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.19'
+description: Send email and manage contacts, segments, campaigns, templates, brand
+  kits, domains, suppressions, webhooks, and usage with the Unitpost API.
+email:
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
 - README.md
 - lib/unitpost.rb
+- lib/unitpost/client.rb
+- lib/unitpost/errors.rb
+- lib/unitpost/generated/operations.rb
+- lib/unitpost/http_client.rb
+- lib/unitpost/resources.rb
 - lib/unitpost/version.rb
-homepage: https://unitpost.com
+- lib/unitpost/webhooks.rb
+homepage: https://www.unitpost.com
 licenses:
 - MIT
 metadata:
-  homepage_uri: https://unitpost.com
-post_install_message: 
+  homepage_uri: https://www.unitpost.com
+  documentation_uri: https://www.unitpost.com/docs
+  source_code_uri: https://github.com/unitpostcom/unitpost
+  bug_tracker_uri: https://github.com/unitpostcom/unitpost/issues
+  rubygems_mfa_required: 'true'
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -33,15 +91,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.7'
+      version: '3.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 3.4.19
+signing_key:
 specification_version: 4
-summary: Name reserved for Unitpost. Official Ruby SDK will be published here.
+summary: Official Unitpost SDK for Ruby.
 test_files: []