VerifyResult

@rotorsoft/act-root

---

@rotorsoft/act-root / act-http/src/receiver / VerifyResult

Type Alias: VerifyResult

VerifyResult = { ok: true; } | { ok: false; reason: "missing-signature" | "missing-timestamp" | "stale" | "future" | "bad-signature"; }

Defined in: libs/act-http/src/receiver/verify.ts:10

Outcome of verifyWebhook. Either the request signature checks out, or one of five distinct failure reasons applies. Each reason maps to an operator-meaningful telemetry bucket — separated deliberately so dashboards can distinguish "client lost its secret" from "client clock is wrong" from "this is a replay attack."