Validator functionality for mandrill webhook signatures.
npm install mandrill-webhook-validatorValidator functionality for Mandrill's somewhat complex webhook request signing.
npm install mandrill-webhook-validator --savejavascript
var validator = require('mandrill-webhook-validator')
, signature = request.get('X-Mandrill-Signature')
;if (signature === validator.makeSignature(WEBHOOK_KEY, WEBHOOK_URL, request.body)) {
// signed correctly!
}
`$3
A middleware generator is provided for quick use with express. On a successful
authentication, it'll set on the request object.By default, it will forward an error with proper HTTP status codes on invalid
webhook requests for the application to handle however. If you would like for
it to bypass default error handling and end the response immediately (with a
plain text status message), use the option
{ end_on_failure: true }.`javascript
var validator = require('mandrill-webhook-validator')
, express = require('express')
, router = express.router()
;// To use the normal express
next(err) on authentication failure
router.use(validator.createExpressMiddleware({ key: WEBHOOK_KEY, url: WEBHOOK_URL }));// To end the respone immediately on a failed authentication, use
end_on_failure
router.use(validator.createExpressMiddleware({ key: WEBHOOK_KEY, url: WEBHOOK_URL, end_on_failure: true }));