Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 4 commits
- 7 files changed
- 2 contributors
Commits on May 13, 2026
-
Add WebhookSignatureValidator utility
Verifies MercadoPago webhook notifications by recomputing the HMAC-SHA256 signature locally and comparing it in constant time (MessageDigest.isEqual) against the value in the x-signature header. Stateless, performs no outbound HTTP calls. - com.mercadopago.webhook.WebhookSignatureValidator - com.mercadopago.exceptions.MPInvalidWebhookSignatureException (extends MPException; checked; Lombok @Getter) - com.mercadopago.exceptions.SignatureFailureReason enum - Optional Duration tolerance for replay protection - Forward-compatible supportedVersions parameter (default List.of("v1")) - 16 JUnit 5 tests covering the canonical cases Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>
Commits on May 21, 2026
-
-
-
Merge pull request #340 from mercadopago/feature/webhook-signature
Add WebhookSignatureValidator utility
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 3.0.2...3.1.0