verifyWebhook()

function verifyWebhook(
   rawBody, 
   signatureHeader, 
   secret, 
   options?
): Promise<boolean>;

true when the delivery was signed with the endpoint's secret and is not older than the tolerance. the body has to be the raw request body, re-serialized json gives a different signature. answer 401 when this is false, the signature check sends deliberately bad signatures and expects that

ParametersCopy Anchor Link

ReturnsCopy Anchor Link

Promise<boolean>