Show HN: Trusthook – verify webhook signatures for 18 Go providers in one call

Category: library

Tags: webhook, signature-verification, go

Score: 6.0/10 (Innovation: 5, Technical: 6, Documentation: 7, Utility: 6)

Trusthook is a Go library that provides a unified API for verifying webhook signatures from 18 different providers, handling diverse signing schemes like HMAC-SHA256 and Ed25519 with replay protection. It simplifies a common, error-prone backend task by abstracting per-provider quirks into a single function call, making it a practical tool for developers dealing with multiple webhook integrations.

Target audience: backend devs

Repository: https://github.com/eben-vranken/trusthook · Go · MIT · 2 stars

View on Hacker News