Webhook Signature Debug API

Verify webhook signatures and get provider-specific diagnostics for raw-body, timestamp, header, and secret mistakes.

curl -X POST https://webhook-signature-debug-api.linkridge.net/v1/webhooks/verify \
  -H 'content-type: application/json' \
  -H 'X-API-Key: YOUR_API_KEY' \
  -d '{"provider":"github","payload":"Hello, World!","headers":{"X-Hub-Signature-256":"sha256=..."},"secret":"..."}'

Provider-aware

GitHub, Slack, Stripe, Shopify, and generic HMAC-SHA256 verification paths.

Debuggable

Separate checks for missing headers, bad formats, timestamp drift, and signature mismatches.

Privacy-first

No payload or secret storage. Logs include route, status, timing, and hashed API key only.