使用签名验证设置Webhook Receiver - 计算哈希有​​时会被一个字符关闭

Question

I'm trying to develop a webhook for the Xero API for when a Contact is updated.

I managed to get past the Intent to Receive validation (eventually) thanks to the answers. However it doesn't always work. Sometimes, for example, the Hash I compute using:

$yourHash = base64_encode(hash_hmac('sha256', $payload, $webHookKey, true));

is off by one character - where the Web Hook Key, for example, might start with mrj/yJ7pZKejaRrN61vAJB, the computed hash will replace the / with a Y or some other character.

What simple stupid thing am I overlooking?

Answer 1

During the setup process Xero sends several requests. Some valid and some invalid. The invalid ones require a 401 response header where the valid ones require a 200 response header. Are you sure that one is not one of the invalid ones?