tests/test_security.py
text
import hashlib
import hmac
from apps.whatsapp_control_api.app.core.security import normalize_whatsapp_number, verify_meta_signature
def test_normalize_whatsapp_number() -> None:
assert normalize_whatsapp_number("+62 812-3333-4444") == "6281233334444"
def test_verify_meta_signature() -> None:
raw_body = b'{"hello":"world"}'
secret = "topsecret"
digest = hmac.new(secret.encode("utf-8"), raw_body, hashlib.sha256).hexdigest()
assert verify_meta_signature(raw_body, f"sha256={digest}", secret) is True
assert verify_meta_signature(raw_body, "sha256=wrong", secret) is False