stripe-signature

Verification of Stripe webhook signatures

https://github.com/typeclasses/stripe

LTS Haskell 22.44:1.0.0.17
Stackage Nightly 2023-12-26:1.0.0.16
Latest on Hackage:1.0.0.17

See all snapshots stripe-signature appears in

MIT licensed by Chris Martin
Maintained by Chris Martin, Julie Moronuki
This version can be pinned in stack with:stripe-signature-1.0.0.17@sha256:a81fc9a9576d2b1f66b68bc45500301eff8caa7001aa49b394f0ff1f45b5482c,1304

Module documentation for 1.0.0.17

When Stripe sends an event to your webhook, it includes an HTTP header named Stripe-Signature. You should use this to verify the authenticity of the request to ensure that you are not acting upon forged events originating from some source other than Stripe.

Changes

Changelog

1.0.0.17 - 2024-04-30

Support GHC 9.8, bytestring-0.12, text-2.1

1.0.0.16 - 2023-06-26

Update stuff

1.0.0.15 - 2023-02-01

Support GHC 9.4

1.0.0.14 - 2022-01-09

Support GHC 9.2

1.0.0.12 - 2022-01-08

Drop cryptonite and memory dependencies; HMAC is now done using the cryptohash-sha256 package instead

Add some tests for the isSigValid function

1.0.0.10 - 2021-06-05

Support GHC 9.0, cryptonite 0.29, bytestring 0.11, memory 0.16

Switch base16-bytestring version from 0.1 to 1.0

1.0.0.8 - 2021-03-08

Support cryptonite 0.28

1.0.0.6 - 2020-09-02

Support cryptonite 0.27

1.0.0.4 - 2020-05-20

Support GHC 8.10

1.0.0.2 - 2020-04-18

Tightened dependency version bounds

1.0.0.1 - 2019-05-18

Replace hex-text package dependency with slightly smaller base16-bytestring dependency

1.0.0.0 - 2018-12-20

Initial release