class Rack::SendGridWebhookVerification
Middleware that verifies webhooks from SendGrid
using the EventWebhook verifier.
The middleware takes a public key with which to set up the request validator and any number of paths. When a path matches the incoming request path, the request will be verified using the signature and timestamp of the request.
Example:
require 'rack' use Rack::SendGridWebhookVerification
, ENV, //emails/
The above appends this middleware to the stack, using a public key saved in the ENV and only against paths that match //emails/. If the request validates then it gets passed on to the action as normal. If the request doesn't validate then the middleware responds immediately with a 403 status.
Public Class Methods
new(app, public_key, *paths)
click to toggle source
# File lib/rack/sendgrid_webhook_verification.rb, line 22 def initialize(app, public_key, *paths) @app = app @public_key = public_key @path_regex = Regexp.union(paths) end
Public Instance Methods
call(env)
click to toggle source
# File lib/rack/sendgrid_webhook_verification.rb, line 28 def call(env) return @app.call(env) unless env['PATH_INFO'].match(@path_regex) request = Rack::Request.new(env) event_webhook = SendGrid::EventWebhook.new ec_public_key = event_webhook.convert_public_key_to_ecdsa(@public_key) verified = event_webhook.verify_signature( ec_public_key, request.body.read, request.env[SendGrid::EventWebhookHeader::SIGNATURE], request.env[SendGrid::EventWebhookHeader::TIMESTAMP] ) request.body.rewind if verified @app.call(env) else [ 403, { 'Content-Type' => 'text/plain' }, ['SendGrid Request Verification Failed.'] ] end end