curviate webhook verify
Verify a webhook signature offline (no network call). A valid signature prints the parsed event to stdout and exits 0; a mismatch prints a structured error to stdout, a summary to stderr, and exits 2.
Usage
curviate webhook verify --secret <secret> --header <header> --body <body> [flags]Examples
curviate webhook verify --secret "$CURVIATE_WEBHOOK_SECRET" --header "$SIGNATURE_HEADER" --body payload.jsonFlags
| Flag | Type | Required | Description |
|---|---|---|---|
--secret | string | yes | The webhook signing secret from your webhook registration. |
--header | string | yes | The full Curviate-Signature header value from the delivery (t=...,v1=...). |
--body | string | yes | The raw webhook body: inline JSON, a path to a file containing it, or - to read it from stdin. |
--max-age-secs | string | no | Maximum event age in seconds before rejecting as replay (default: 300). |
Also accepts these global flags: --json.
Exit codes: the exit code table. More commands: Webhook.