lazyhooks 0.2.3

A lightweight, resilient webhook sender and receiver.

LazyHooks

A lightweight, standalone Python package for sending and receiving webhooks with optional persistence.

Features

• Simple API: Send webhooks with minimal boilerplate.
• Async First: Built on asyncio and aiohttp for high performance.
• Secure: HMAC-SHA256 signing with Timestamp Replay Protection.
• Reliable: Optional SQLite storage to persist and retry failed webhooks.

Security

LazyHooks prioritizes security by design:

• Replay Protection: All webhooks include a timestamp. Requests older than 5 minutes are rejected.
• HMAC-SHA256: Signatures verify both the body and the timestamp (timestamp.body) to prevent tampering.
• Constant-Time Verification: Prevents timing attacks.
• SQL Injection Safe: Parameterized queries.

headers:

• X-Lh-Timestamp: Unix timestamp of the request.
• X-Lh-Signature: v1=... (HMAC of timestamp.body)

Documentation

Beginner Tutorials (Start Here!)

1. What are Webhooks?: The basics explained simply.
2. Installation: Quick setup guide.
3. Your First Webhook: Send "Hello World" in 2 minutes.
4. Receiving Webhooks: Listen for events securely.
5. Testing with Tunnels: Go live with ngrok.

Core Documentation

• Getting Started: Installation and quick examples.
• Sending Webhooks: Sending usage.
• Receiving Webhooks: Receiver usage.
• Storage & Retries: Persistence and reliability.
• Security: Security details.
• Comparisons: Alternatives analysis.
• API Reference: API docs.

Quick Example

Sending

import asyncio
from lazyhooks import WebhookSender

async def main():
    sender = WebhookSender(signing_secret="super-secret")
    await sender.send("https://example.com/webhook", {"event": "hello"})

asyncio.run(main())

Receiving

from lazyhooks import verify_signature

def handle_webhook(request):
    timestamp = request.headers.get("X-Lh-Timestamp")
    signature = request.headers.get("X-Lh-Signature")
    body = request.body
    
    if verify_signature(body, signature, "super-secret", timestamp):
        return "OK", 200
    else:
        return "Invalid Signature or Timestamp", 401

Links

• PyPI: https://pypi.org/project/lazyhooks
• Issues: https://github.com/StackTactician/LazyHooks/issues
• Documentation: See the GitHub repo for full docs, advanced usage, and examples.