Skip to content

test: verify against shared cross-SDK signature vectors#36

Merged
mekilis merged 1 commit into
mainfrom
oksmart/webhook-shared-vectors
Jul 13, 2026
Merged

test: verify against shared cross-SDK signature vectors#36
mekilis merged 1 commit into
mainfrom
oksmart/webhook-shared-vectors

Conversation

@mekilis

@mekilis mekilis commented Jul 13, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Adds shared vectors (tests/signature-vectors.json) + tests/shared-vectors.test.ts.
  • Existing verifier already fails closed; this locks behavior against the canonical cross-SDK matrix (valid vectors verify, forged/expired/malformed throw).

Test plan

  • jest
  • Bugbot + Security review clean

add tests/signature-vectors.json (generated from pkg/signature) and a
jest harness asserting each vector: valid signatures verify, invalid,
forged, expired and malformed ones throw. matches the canonical set
used by the other convoy SDKs.
@cursor

cursor Bot commented Jul 13, 2026

Copy link
Copy Markdown

Current version of PR was reviewed by /review-bugbot with additional instructions on Jul 13, 12:39 GMT+1. It flagged 0 findings.

Bugbot on commit 05701b3 is skipped.

@mekilis
mekilis merged commit 90145d3 into main Jul 13, 2026
2 checks passed
@mekilis
mekilis deleted the oksmart/webhook-shared-vectors branch July 13, 2026 17:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants