Signature verification

import { Webhook } from "svix";

const secret = process.env.SVIX_SIGNING_SECRET; // from Svix dashboard

export async function handleWebhook(request: Request): Promise<Response> {
  const wh = new Webhook(secret);

  const payload = await request.text();
  const headers = {
    "svix-id": request.headers.get("svix-id") ?? "",
    "svix-timestamp": request.headers.get("svix-timestamp") ?? "",
    "svix-signature": request.headers.get("svix-signature") ?? "",
  };

  try {
    const event = wh.verify(payload, headers);
    // Process event...
    return new Response("OK", { status: 200 });
  } catch (err) {
    return new Response("Invalid signature", { status: 400 });
  }
}

from svix.webhooks import Webhook, WebhookVerificationError
import os

secret = os.environ["SVIX_SIGNING_SECRET"]

def handle_webhook(body: bytes, headers: dict) -> dict:
    wh = Webhook(secret)
    try:
        event = wh.verify(body, headers)
        return event
    except WebhookVerificationError:
        raise ValueError("Invalid signature")

import (
    svix "github.com/svix/svix-webhooks/go"
    "os"
)

func handleWebhook(body []byte, headers http.Header) (interface{}, error) {
    secret := os.Getenv("SVIX_SIGNING_SECRET")
    wh, err := svix.NewWebhook(secret)
    if err != nil {
        return nil, err
    }
    return wh.Verify(body, headers)
}