slack-http-verifier

This crate implements verification of Slack's request tokens, as described here.

There is out-of-the-box support for reqwest::blocking::Request, and http::Request, but you can create a newtype implementing HTTPRequest to suit your own needs.

Use the HTTP Request API:

use slack_http_verifier::SlackHTTPVerifier;

let verifier = SlackHTTPVerifier::new("abcd1234...").unwrap();

// ... Receive a request somehow ...

assert!(verifier.verify(&req).is_ok());

Or use the raw API:

use slack_http_verifier::SlackVerifier;

let verifier = SlackVerifier::new("abcd1234...").unwrap();

// ... Receive a request somehow ...
let ts = req.get("X-Slack-Request-Timestamp");
let sig = req.get("X-Slack-Signature");
let body = req.body().as_str();

assert!(verifier.verify(&ts, &body, &sig).is_ok());