Skip to main content
nestrs-webhooks implements Standard Webhooks signing and verification, plus optional durable outbound dispatch through nestrs-outbox.

Install

Sign and verify

Verify on the raw body before JSON parsing. Parsed-then-re-serialized bodies break signatures.

Outbox-backed dispatch

Your relay PublishFn should HTTP POST with Standard Webhooks headers from sign.

Free functions

Security

  • Prefer whsec_-encoded secrets; never log them.
  • Allowlist outbound URLs (SSRF).
  • Property tests live in nestrs-webhooks/tests/sign_verify_prop.rs.

See also