When Stripe sends an event to your webhook, it
includes an HTTP header named Stripe-Signature. You should use this
to verify the authenticity of the request to ensure that you are not
acting upon forged events originating from some source other than
Stripe.
Changes
Changelog
1.0.0.0 - 2018-12-20
Initial release
1.0.0.1 - 2019-05-18
Replace hex-text package dependency with slightly smaller base16-bytestring dependency
1.0.0.2 - 2020-04-18
Tightened dependency version bounds
1.0.0.4 - 2020-05-20
Support GHC 8.10
1.0.0.6 - 2020-09-02
Support cryptonite 0.27
1.0.0.8 - 2021-03-08
Support cryptonite 0.28
1.0.0.10 - 2021-06-05
Support GHC 9.0, cryptonite 0.29, bytestring 0.11, memory 0.16
Switch base16-bytestring version from 0.1 to 1.0
1.0.0.12 - 2022-01-08
Drop cryptonite and memory dependencies; HMAC is now done using the cryptohash-sha256 package instead
