Package com.stripe.net

Class Webhook.Signature

java.lang.Object

com.stripe.net.Webhook.Signature

Enclosing class:

Webhook

public static final class Webhook.Signature
extends Object

Field Summary

Fields

Modifier and Type	Field	Description
static final String	EXPECTED_SCHEME

Constructor Summary

Constructors

Constructor	Description
Signature()

Method Summary

Modifier and Type	Method	Description
static boolean	verifyHeader(String payload, String sigHeader, String secret, long tolerance)	Verifies the signature header sent by Stripe.
static boolean	verifyHeader(String payload, String sigHeader, String secret, long tolerance, Clock clock)	Verifies the signature header sent by Stripe.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

EXPECTED_SCHEME

public static final String EXPECTED_SCHEME

See Also:

• Constant Field Values

Constructor Details

Signature

public Signature()

Method Details

verifyHeader

public static boolean verifyHeader(String payload,
 String sigHeader,
 String secret,
 long tolerance)
                            throws SignatureVerificationException

Verifies the signature header sent by Stripe. Throws a SignatureVerificationException if the verification fails for any reason.

Parameters:

payload - the payload sent by Stripe.

sigHeader - the contents of the signature header sent by Stripe.

secret - secret used to generate the signature.

tolerance - maximum difference allowed between the header's timestamp and the current time

Throws:

SignatureVerificationException - if the verification fails.

verifyHeader

public static boolean verifyHeader(String payload,
 String sigHeader,
 String secret,
 long tolerance,
 Clock clock)
                            throws SignatureVerificationException

Verifies the signature header sent by Stripe. Throws a SignatureVerificationException if the verification fails for any reason.

Parameters:

payload - the payload sent by Stripe.

sigHeader - the contents of the signature header sent by Stripe.

secret - secret used to generate the signature.

tolerance - maximum difference allowed between the header's timestamp and the current time

clock - instance of clock if you want to use custom time instance

Throws:

SignatureVerificationException - if the verification fails.