7 releases
0.1.6 | Dec 20, 2022 |
---|---|
0.1.5 | Aug 15, 2022 |
0.1.4 | Jul 18, 2022 |
0.1.3 | Feb 16, 2022 |
0.1.0 | Oct 14, 2021 |
#142 in Cryptography
2,380 downloads per month
29KB
525 lines
truelayer-signing
Rust crate to produce & verify TrueLayer API requests signatures.
// `Tl-Signature` value to send with the request.
let tl_signature = truelayer_signing::sign_with_pem(kid, private_key)
.method("POST")
.path("/payouts")
.header("Idempotency-Key", idempotency_key)
.body(body)
.sign()?;
See full example.
Prerequisites
- OpenSSL (see here for instructions).
Verifying webhooks
The verify_with_jwks
function may be used to verify webhook Tl-Signature
header signatures.
// `jku` field is included in webhook signatures
let jku = truelayer_signing::extract_jws_header(webhook_signature)?.jku?;
// check `jku` is an allowed TrueLayer url & fetch jwks JSON (not provided by this lib)
ensure_jku_allowed(jku)?;
let jwks = fetch_jwks(jku);
// jwks may be used directly to verify a signature
truelayer_signing::verify_with_jwks(jwks)
.method("POST")
.path(path)
.headers(all_webhook_headers)
.body(body)
.verify(webhook_signature)?;
Dependencies
~3–4.5MB
~92K SLoC