Make webhook timestamp diff less awkward (#10)

userhubdev · Feb 24, 2024 · 4cd09d6 · 4cd09d6
1 parent f027f00
commit 4cd09d6
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/webhook/webhook.go b/webhook/webhook.go
@@ -140,12 +140,13 @@ func (w *Webhook) Verify(req *Request) error {
 		return types.NewError("Timestamp is invalid: %s", timestamp)
 	}
 
-	diff := time.Until(time.Unix(unixTime, 0))
+	diff := time.Since(time.Unix(unixTime, 0))
 	if diff > internal.WebhookMaxTimestampDiff {
-		return types.NewError("Timestamp is too far in the future: %s", timestamp)
-	} else if diff < -internal.WebhookMaxTimestampDiff {
 		return types.NewError("Timestamp is too far in the past: %s", timestamp)
 	}
+	if diff < -internal.WebhookMaxTimestampDiff {
+		return types.NewError("Timestamp is too far in the future: %s", timestamp)
+	}
 
 	mac := hmac.New(sha256.New, w.signingSecret)
 	mac.Write([]byte(timestamp))