Hmac verification on customers/redact

[waynefurmidge]

Hi All,

Try to implement the GDPR webhook. Have a few questions about how the HMAC is generated etc.

Is the hmac generated from the whole response json? or the headers?

Assuming it is the JSON, is white space been sanitized, \r\n and trailing white space?

If I think of any thing else I will update more, thanks in advanced! 

[mikedasilva]

Hi,

The HMAC is generated based on the body of the webhook. You can refer to these docs for examples of how to verify.

Cheers,