Xero Webhooks ITR Example for Ruby Sintra

index.rb

require 'sinatra'
require 'base64'
require 'openssl'

post '/webhook' do

	payload = request.body.read
	key = "WEBHOOKS_KEY"

	signature = Base64.encode64(OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), key, payload)).strip()

	puts request.env['HTTP_X_XERO_SIGNATURE']
	puts signature

	if (request.env['HTTP_X_XERO_SIGNATURE'] == signature)
		status = 200
	else
		status = 401
	end
end