allow to verify Alby webhook requests

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 authors = ["RSS Blue", "Dovydas Joksas"]
 name = "v4v"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2021"
 description = "Value-for-value helper utilities for Podcasting 2.0"
 license = "MIT OR Apache-2.0"
@@ -14,6 +14,8 @@ pretty_assertions = "1.4.0"
 paste = "1.0.15"
 
 [dependencies]
-
-[lib]
-doctest = false
+base64 = "0.22.1"
+hmac-sha256 = "1.1.7"
+http02 = { package = "http", version = "0.2.12" }
+http1 = { package = "http", version = "1.1.0" }
+time = "0.3.36"

src/lib.rs

@@ -2,6 +2,9 @@
 #![deny(missing_docs)]
 #![deny(rustdoc::broken_intra_doc_links)]
 
+mod svix_webhooks;
+pub use svix_webhooks::{HeaderMap, WebhookError};
+
 /// Distributes [satoshis (sats)](https://en.wikipedia.org/wiki/Bitcoin#Units_and_divisibility) to
 /// a list of recipients based on their splits.
 ///
@@ -174,3 +177,12 @@ pub fn fee_recipients_to_splits(
 
     Ok(result)
 }
+
+/// Verifies Alby webhook requests.
+pub fn verify_alby_signature<HM: HeaderMap>(
+    secret: &str,
+    payload: &[u8],
+    headers: &HM,
+) -> Result<(), WebhookError> {
+    crate::svix_webhooks::Webhook::new(secret)?.verify(payload, headers)
+}