throw new InvalidSignatureException("signature does not match payload - one has been modified");
}
}
private Boolean matchSignature(String payload, String matchingSignature) {
String computedSignature = new Sha1Hasher().hmacHash(configuration.privateKey, payload);
return new Crypto().secureCompare(computedSignature, matchingSignature);
}