Overview

{
  "id": "evt_01HQX8K9M1P0R5N3Y2T7B4C6V",
  "type": "subscription.activated",
  "schema_version": "v1",
  "created_at": "2026-05-22T12:34:56.123Z",
  "tenant": {
    "id": "tnt_app123",
    "name": "ExampleApp"
  },
  "subscriber": {
    "id": "subscriber_01HQ...",
    "email": "user@example.com",
    "email_hashed": "sha256:abc123def456...",
    "created_at": "2025-03-10T00:00:00Z"
  },
  "subscription": {
    "id": "sub_01HQ...",
    "status": "active",
    "plan": "premium_monthly",
    "current_period_start": "2026-05-22T00:00:00Z",
    "current_period_end": "2026-06-22T00:00:00Z"
  },
  "data": {
    "source": "migration",
    "cohort_id": "cohort_q3_pilot",
    "first_payment_amount": 999,
    "first_payment_currency": "USD"
  }
}

X-Recurr-Signature: t=1716386096,v1=5257a869e7ecf4bd95918e7d6b4f5d0e23...

import crypto from "crypto";

function verifyRecurrSignature(rawBody, signatureHeader, signingSecret) {
  const parts = Object.fromEntries(
    signatureHeader.split(",").map((p) => p.split("=")),
  );
  if (!parts.t || !parts.v1) return false;

  // Reject if timestamp is more than 5 minutes old (replay protection)
  const ageSeconds = Math.floor(Date.now() / 1000) - Number(parts.t);
  if (ageSeconds > 300 || ageSeconds < -60) return false;

  const expected = crypto
    .createHmac("sha256", signingSecret)
    .update(`${parts.t}.${rawBody}`)
    .digest("hex");

  return crypto.timingSafeEqual(
    Buffer.from(expected, "hex"),
    Buffer.from(parts.v1, "hex"),
  );
}

import hmac
import hashlib
import time

def verify_recurr_signature(raw_body, signature_header, signing_secret):
    parts = dict(p.split("=") for p in signature_header.split(","))
    if "t" not in parts or "v1" not in parts:
        return False

    age_seconds = int(time.time()) - int(parts["t"])
    if age_seconds > 300 or age_seconds < -60:
        return False

    expected = hmac.new(
        signing_secret.encode(),
        f"{parts['t']}.{raw_body}".encode(),
        hashlib.sha256,
    ).hexdigest()

    return hmac.compare_digest(expected, parts["v1"])

-- Example dedup table
CREATE TABLE webhook_events_received (
  event_id VARCHAR(64) PRIMARY KEY,
  received_at TIMESTAMP NOT NULL DEFAULT NOW(),
  processed_at TIMESTAMP,
  event_type VARCHAR(64) NOT NULL
);

-- TTL via partitioning or scheduled cleanup
DELETE FROM webhook_events_received WHERE received_at < NOW() - INTERVAL '30 days';