Nextgen webhook signature verification is missing?

[AhmedAmirK]

In the docs https://docs.mollie.com/reference/webhooks-new#2-set-up-webhook-signature-verification,

Its stated that manual signature verification is not recommended. And I should use the official library, but it seems its not available here?

Are there any plans to add it? Right now I am just doing manually as mentioned here https://docs.mollie.com/reference/webhooks-best-practices#how-to-verify-hmac-signature

[andrefpoliveira]

Hey! 😄 Thank you for reaching out.

You're correct that the documentation currently recommends using the official library for signature verification, but this feature is not yet available in our SDKs. We are currently investigating what is needed to include webhook validation functionality in our official libraries.

In the meantime, implementing manual signature verification as described in our webhooks best practices guide is the correct approach. While the documentation page suggests this is "not recommended", manual verification using HMAC is appropriate until we release SDK support.

We apologize for the confusion in our documentation, we will update it to reflect the current state more accurately and remove the inconsistency.

If you have any questions about implementing the manual HMAC verification, please let us know and we'd be happy to help.

[andrefpoliveira]

@AhmedAmirK you now have SignatureValidator available! 😄 could you give a try and provide some feedback?