From 3cb7fd11fcedc223484467d208a84c724b6d856f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marcel=20M=C3=BCller?= Date: Wed, 14 Feb 2024 15:11:06 +0100 Subject: [PATCH] fix(docs): Change order of how the HMAC is calculated for bots MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Marcel Müller --- docs/bots.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/bots.md b/docs/bots.md index 11ae66c25e6..42613636bba 100644 --- a/docs/bots.md +++ b/docs/bots.md @@ -16,7 +16,7 @@ Webhook based bots are available with the Nextcloud 27.1 compatible Nextcloud Ta ## Receiving chat messages Messages are signed using the shared secret that is specified when installing a bot on the server. -Create a HMAC with SHA256 over the request body and the `RANDOM` header using the shared secret. +Create a HMAC with SHA256 over the `RANDOM` header and the request body using the shared secret. Only when the `SIGNATURE` matches the request should be accepted and handled. **Sample PHP code:**