Skip to content

BE-70: Secure Webhook Verification Service with Ed25519 Cryptographic Signatures #1137

Description

@chinweobtagaz

Problem Statement

Third-party apps integrating with KnightVerse need tamper-proof webhook notifications for match completions and wager payouts.

Proposed Solution

  1. Generate unique Ed25519 keypair for KnightVerse backend webhook signer.
  2. Include X-KnightVerse-Signature and X-KnightVerse-Timestamp headers in all outbound webhook POST requests.
  3. Provide documentation and sample verification code in Python, Rust, and TypeScript.

Acceptance Criteria

  • All outbound webhook payloads cryptographically signed with Ed25519.
  • Replay protection via 5-minute timestamp tolerance validation.
  • Unit tests validating signature generation and verification.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions