Verify an incoming webhook HMAC-SHA256 signature.
The raw request body string received by the webhook endpoint.
The signature header string (e.g. X-Sorokeep-Signature), with or without sha256= prefix.
X-Sorokeep-Signature
sha256=
The webhook signing secret.
true if the signature is valid, false otherwise.
true
false
Verify an incoming webhook HMAC-SHA256 signature.