Webhook example

[rubenofen]

No description provided.

[opimand]

The result of verifyWebhookSignature() is always false for me. Have no idea where is a problem, the code was just rewritten for Typescript

const verifyWebhookSignature = async (
    binancePayTimestamp: string,
    binancePayNonce: string,
    bianacePaySignature: string,
    data: any
): Promise<boolean> => {
    console.log("Verifying Signature...");
    const payload = `${binancePayTimestamp}\n${binancePayNonce}\n${JSON.stringify(
        data
    )}`;
    const publicKey = await getPubKey();
    console.log("PublicKey: ", publicKey);

    const decodedSignature = Buffer.from(bianacePaySignature, "base64");

    const verify = crypto.createVerify("SHA256");
    verify.write(payload);
    verify.end();

    return await verify.verify(publicKey, decodedSignature);
};

[phDooY]

any luck? also failing to verify signature

[phDooY]

In case someone stumbles upon same issue, I was trying to go through troubleshooting FAQ here and through extensive logging realized that in js/typescript bizId Binance pay returns is a very large number beyond js capabilities. So the bizId from example 29383937493038367292 turns on JSON.stringify() of the body to 29383937493038367000

[phDooY]

My version of working workaround is following:

const verifyWebhookSignature = async (
    binancePayTimestamp: string,
    binancePayNonce: string,
    bianacePaySignature: string,
    data: any
): Promise<boolean> => {
    console.log("Verifying Signature...");
    const dataModified = { ...data, bizId: data.bizIdStr };
    const payload = `${binancePayTimestamp}\n${binancePayNonce}\n${JSON.stringify(
        dataModified
    ).replace(/"bizId":"(\d+)"/g, '"bizId":$1')}\n`;
    const publicKey = await getPubKey();
    console.log("PublicKey: ", publicKey);

    const decodedSignature = Buffer.from(bianacePaySignature, "base64");

    const verify = crypto.createVerify("SHA256");
    verify.write(payload);
    verify.end();

    return await verify.verify(publicKey, decodedSignature);
};

bizIdStr is a mandatory param in webhook, so I replace bizId with it, and later on remove quotes from stringified data around bizId value