svix_test.go

package trusthook

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/base64"
	"net/http"
	"strconv"
	"testing"
	"time"
)

func TestSvixValidSignature(t *testing.T) {
	rawKey := []byte("supersecretkey")
	secret := "whsec_" + base64.StdEncoding.EncodeToString(rawKey)

	id := "msg_123"
	ts := strconv.FormatInt(time.Now().Unix(), 10)
	body := []byte(`{"id":"evt_123"}`)

	mac := hmac.New(sha256.New, rawKey)
	mac.Write([]byte(id + "." + ts + "." + string(body)))
	sig := base64.StdEncoding.EncodeToString(mac.Sum(nil))

	headers := http.Header{}
	headers.Set("svix-id", id)
	headers.Set("svix-timestamp", ts)
	headers.Set("svix-signature", "v1,"+sig)

	err := Verify(Svix, body, headers, secret)

	if err != nil {
		t.Errorf("got %v, expected %v", err, nil)
	}
}