Skip to content

Conversation

@francoisledroff
Copy link

No description provided.

…, fixed a few issues, and trimmed down the code
sig.initVerify(getPublicKey(publicKeyPaths[i]));
sig.update(data);
result = result && sig.verify(sign);
// TODO may be this is not the behavior you had in mind ?
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

may be just providing a public interface such as boolean verifySignature(String message, String publicKeyPaths, String signatures) would be enough this aio-lib-java webhook module.
we could the let our end-user decide how she/he want to cache key-pair and validate using both or just one key-pair

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant