This is a real pain point. Webhook signature verification is one of those things that looks simple until you actually try to implement it - the raw body handling alone has tripped me up more times than I'd like to admit. Having verified working examples per provider is super valuable. Are you planning to add Twilio? Their signature scheme is particularly annoying.
Twilio is definitely on the list. The thing I'm thinking about is that, while signature verification is likely the same across products, handling the events is different. For example, SMS and Voice support responses; the webhooks also fetch instructions. So, is that a single skill or multiple skills?
1 comments