validate_webhook_signature

1
from fastapi import FastAPI, Request, Response, status
2
from signalwire.core.security import validate_webhook_signature
3
4
app = FastAPI()
5
SIGNING_KEY = "PSK_your_signing_key"
6
7
@app.post("/webhook")
8
async def webhook(request: Request):
9
    raw_body = (await request.body()).decode("utf-8")
10
    signature = request.headers.get("x-signalwire-signature", "")
11
12
    if not validate_webhook_signature(
13
        signing_key=SIGNING_KEY,
14
        signature=signature,
15
        url=str(request.url),
16
        raw_body=raw_body,
17
    ):
18
        return Response(status_code=status.HTTP_403_FORBIDDEN)
19
20
    # Signature is valid — safe to process the request.
21
    return {"ok": True}