Verify Webhook Signatures | Dataford Interview Questions

Implement a function to verify a webhook signature given the request body, timestamp, and shared secret.

The function receives the supplied hexadecimal signature as an additional argument and returns True only when it matches the expected HMAC-SHA256 digest. Compute the digest over timestamp + body, then compare signatures using a constant-time comparison.

Function signature: def verify_webhook_signature(body, timestamp, signature, secret): Inputs are strings, and the output is a Boolean.

Constraints

body, timestamp, signature, and secret are strings
The request body must be verified exactly as received
signature is represented as a hexadecimal SHA-256 digest
The shared secret is non-empty
Return a Boolean and do not raise an exception for a non-matching signature

Function Signature

def verify_webhook_signature(body, timestamp, signature, secret):

Your question is Verify Webhook Signatures. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem

Implement a function to verify a webhook signature given the request body, timestamp, and shared secret.

Function signature: def verify_webhook_signature(body, timestamp, signature, secret): Inputs are strings, and the output is a Boolean.

Constraints

body, timestamp, signature, and secret are strings
The request body must be verified exactly as received
signature is represented as a hexadecimal SHA-256 digest
The shared secret is non-empty
Return a Boolean and do not raise an exception for a non-matching signature

Function Signature

def verify_webhook_signature(body, timestamp, signature, secret):

Your question is Verify Webhook Signatures. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.