v8.16.0 Add an Option to Skip Webhook Signature Verification
What's Changed
✨ Add an Option to Skip Webhook Signature Verification
- Add option to skip signature verification by @habara-k in https://github.com/line/line-bot-sdk-go/pull/595
With this release, developers can now optionally skip signature verification when parsing incoming webhook requests. This new capability is especially useful in scenarios where the channel secret may change, potentially causing temporary signature mismatches.
Example Usage:
opt := &webhook.ParseOption{
SkipSignatureValidation: func() bool { return true },
}
cb, err := webhook.ParseRequestWithOption(os.Getenv("LINE_CHANNEL_SECRET"), req, opt)
When signature verification is skipped, the signatureValidator will not be invoked. This allows webhook requests to be processed even if their signatures do not match the current channel secret used for verification.
This feature is particularly helpful in high-availability systems where avoiding downtime or message loss during configuration updates is critical.
Dependency updates
- chore(deps): update actions/setup-node action to v5 by @renovate[bot] in https://github.com/line/line-bot-sdk-go/pull/614