Verifying an RTGS Message Signature

How to verify the RTGS.global digital signature (`verificationmaterial`) on an incoming CloudEvent webhook. This confirms the message was genuinely produced by RTGS.global and that the payload has not been tampered with.

← All recipes

# Extract both fields from the CloudEvent JSON
signature=$(echo "$event" | jq -r '.verificationmaterial')
message=$(echo "$event" | jq -r '.data_base64' | base64 --decode)

Response

{
  "Verified": true
}