lazyhooks 0.2.0

A lightweight, resilient webhook sender and receiver.

LazyHooks

A lightweight, standalone Python package for sending and receiving webhooks with optional persistence.

Full Documentation & Examples on GitHub

Features

• Simple API: Send webhooks with minimal boilerplate.
• Async First: Built on asyncio and aiohttp for high performance.
• Secure: HMAC-SHA256 signing with Timestamp Replay Protection.
• Reliable: Optional SQLite storage to persist and retry failed webhooks.

Security

LazyHooks prioritizes security by design:

• Replay Protection: All webhooks include a timestamp. Requests older than 5 minutes are rejected.
• HMAC-SHA256: Signatures verify both the body and the timestamp (timestamp.body) to prevent tampering.
• Constant-Time Verification: Prevents timing attacks.
• SQL Injection Safe: Parameterized queries.

headers:

• X-Lh-Timestamp: Unix timestamp of the request.
• X-Lh-Signature: v1=... (HMAC of timestamp.body)

Documentation

• Getting Started: Installation and basic usage.
• Comparisons: See LazyHooks vs standard FastAPI/Django/Celery.
• Advanced Usage: Persistence, retries, headers, and timeouts.
• API Reference: Detailed API documentation.

Quick Example

Sending

import asyncio
from lazyhooks import WebhookSender

async def main():
    sender = WebhookSender(signing_secret="super-secret")
    await sender.send("https://example.com/webhook", {"event": "hello"})

asyncio.run(main())

Receiving

from lazyhooks import verify_signature

def handle_webhook(request):
    timestamp = request.headers.get("X-Lh-Timestamp")
    signature = request.headers.get("X-Lh-Signature")
    body = request.body
    
    if verify_signature(body, signature, "super-secret", timestamp):
        return "OK", 200
    else:
        return "Invalid Signature or Timestamp", 401

Links

• GitHub: https://github.com/StackTactician/LazyHooks
• Issues: https://github.com/StackTactician/LazyHooks/issues
• Documentation: See the GitHub repo for full docs, advanced usage, and examples.