Webhooks

import cn.hutool.core.util.HexUtil;
import cn.hutool.core.util.StrUtil;
import org.apache.commons.codec.binary.Base64;

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;

public class HmacSHA256Util {

    // Signing
    public static String signHmacSHA256(String plainCert, String content)
            throws NoSuchAlgorithmException, InvalidKeyException {
        try {
            Mac mac = Mac.getInstance("HmacSHA256");
            SecretKeySpec keySpec = new SecretKeySpec(
                    Base64.decodeBase64(plainCert), "HmacSHA256");
            mac.init(keySpec);
            byte[] result = mac.doFinal(content.getBytes());
            return HexUtil.encodeHexStr(result);
        } catch (Exception e) {
            throw e;
        }
    }

    // Verification
    private static boolean verifyHmacSHA256(String plainCert, String sign, String signed)
            throws NoSuchAlgorithmException, InvalidKeyException {
        String hmacSHA256Str = signHmacSHA256(plainCert, sign);
        return StrUtil.equalsAnyIgnoreCase(hmacSHA256Str, signed);
    }
}

import hmac
import hashlib
import base64


def sign_hmac_sha256(plain_cert: str, content: str) -> str:
    """Sign"""
    key = base64.b64decode(plain_cert)
    signature = hmac.new(key, content.encode("utf-8"), hashlib.sha256).hexdigest()
    return signature


def verify_hmac_sha256(plain_cert: str, content: str, signed: str) -> bool:
    """Verify"""
    expected = sign_hmac_sha256(plain_cert, content)
    return hmac.compare_digest(expected.lower(), signed.lower())

<?php

class HmacSHA256Util
{
    // Signing
    public static function signHmacSHA256(string $plainCert, string $content): string
    {
        $key = base64_decode($plainCert);
        return hash_hmac('sha256', $content, $key);
    }

    // Verification
    public static function verifyHmacSHA256(string $plainCert, string $content, string $signed): bool
    {
        $expected = self::signHmacSHA256($plainCert, $content);
        return hash_equals(strtolower($expected), strtolower($signed));
    }
}