verifyWebhookSignature()

SIP Protocol API Reference v0.15.1

---

SIP Protocol API Reference / verifyWebhookSignature

Function: verifyWebhookSignature()

verifyWebhookSignature(rawBody, signature, secret): boolean

Defined in: @sip-protocol/sdk/dist/index-GLbkPPho.d.ts:16251

Verify Helius webhook signature using HMAC-SHA256

H-4, H-8 FIX: Implement webhook signature verification

Parameters

rawBody

string

Raw request body as string

signature

string | undefined

Signature from X-Helius-Signature header

secret

string

Webhook secret from Helius dashboard

Returns

boolean

True if signature is valid

Example

const isValid = verifyWebhookSignature(
  req.rawBody,
  req.headers['x-helius-signature'],
  process.env.HELIUS_WEBHOOK_SECRET!
)
if (!isValid) {
  res.status(401).send('Invalid signature')
  return
}