Signing the webhooks you send us

import crypto from 'node:crypto'

async function sendWebhook(url, credentials, payload) {
  // Serialize once. These are the bytes we sign AND the bytes we send.
  const rawBody = JSON.stringify(payload)
  const timestamp = Math.floor(Date.now() / 1000).toString()

  const digest = crypto
    .createHmac('sha256', credentials)
    .update(`${timestamp}.${rawBody}`, 'utf8')
    .digest('hex')

  return fetch(url, {
    method: 'POST',
    headers: {
      'content-type': 'application/json',
      'x-adcp-timestamp': timestamp,
      'x-adcp-signature': `sha256=${digest}`,
    },
    body: rawBody,
  })
}

import hashlib
import hmac
import json
import time

import requests


def send_webhook(url: str, credentials: str, payload: dict):
    # Serialize once. These are the bytes we sign AND the bytes we send.
    raw_body = json.dumps(payload)
    timestamp = str(int(time.time()))

    digest = hmac.new(
        credentials.encode("utf-8"),
        f"{timestamp}.{raw_body}".encode("utf-8"),
        hashlib.sha256,
    ).hexdigest()

    return requests.post(
        url,
        data=raw_body.encode("utf-8"),
        headers={
            "content-type": "application/json",
            "x-adcp-timestamp": timestamp,
            "x-adcp-signature": f"sha256={digest}",
        },
    )

package webhook

import (
	"bytes"
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"encoding/json"
	"fmt"
	"net/http"
	"strconv"
	"time"
)

func SendWebhook(url, credentials string, payload any) (*http.Response, error) {
	// Marshal once. These are the bytes we sign AND the bytes we send.
	rawBody, err := json.Marshal(payload)
	if err != nil {
		return nil, err
	}
	timestamp := strconv.FormatInt(time.Now().Unix(), 10)

	mac := hmac.New(sha256.New, []byte(credentials))
	fmt.Fprintf(mac, "%s.%s", timestamp, rawBody)
	digest := hex.EncodeToString(mac.Sum(nil))

	req, err := http.NewRequest("POST", url, bytes.NewReader(rawBody))
	if err != nil {
		return nil, err
	}
	req.Header.Set("content-type", "application/json")
	req.Header.Set("x-adcp-timestamp", timestamp)
	req.Header.Set("x-adcp-signature", "sha256="+digest)

	return http.DefaultClient.Do(req)
}