Added GDPR Webhook Request Verification

README.md

@@ -30,4 +30,14 @@ require 'smoothcode'
 
 SmoothCodeAuth.new(request_hmac, client_secret).webhook_request?(webhook_data) # returns True if the request is valid
 ```
+
+* `gdpr_webhook_request?(webhook_data)` - This method verifies if the webhook request is coming from `SmoothCode`
+```ruby
+require 'smoothcode'
+
+# SmoothCode sends hmac in the Authorization Header of the request
+# It is hmac of the shop id signed by your App Client Secret
+
+SmoothCodeAuth.new(request_hmac, client_secret).gdpr_webhook_request?(webhook_data) # returns True if the request is valid
+```
 ***

lib/smoothcode/auth.rb

@@ -16,4 +16,11 @@ def webhook_request?(webhook_data)
 
         generate_hmac(@client_secret, webhook_id.to_s) == @request_hmac
     end
+
+    def gdpr_webhook_request?(webhook_data)
+        webhook_data = webhook_data.transform_keys(&:to_sym)
+        shop_id = webhook_data[:shop_id]
+
+        generate_hmac(@client_secret, shop_id.to_s) == @request_hmac
+    end
 end

smoothcode.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name        = 'smoothcode'
-  s.version     = '0.0.3'
+  s.version     = '0.0.4'
   s.summary     = 'Ruby client to interact with SmoothCode'
   s.description = 'Ruby client to interact with SmoothCode'
   s.authors     = ['SmoothCode']