- Header: X-Gaiia-Webhook-Signature with t=timestamp,v1=signature format - Signed payload: timestamp.body (not just body) - 5-minute timestamp tolerance to prevent replay attacks - Updated tests to match new 4-arity verify_signature/4 |
||
|---|---|---|
| .. | ||
| v1 | ||
| account_data_controller.ex | ||
| error_helpers.ex | ||
| mobile_auth_controller.ex | ||
| mobile_controller.ex | ||