test: cover missing timestamp header in StandardWebhook

Author: eben-vranken

standardwebhook_test.go

@@ -223,3 +223,24 @@ func TestStandardWebhookMultipleSignatures(t *testing.T) {
 		t.Errorf("got %v, expected %v", err, nil)
 	}
 }
+
+func TestStandardWebhookMissingTimestamp(t *testing.T) {
+	rawKey := []byte("supersecretkey")
+	secret := "whsec_" + base64.StdEncoding.EncodeToString(rawKey)
+
+	id := "msg_123"
+	ts := strconv.FormatInt(time.Now().Unix(), 10)
+	body := []byte(`{"id":"evt_123"}`)
+
+	mac := hmac.New(sha256.New, rawKey)
+	mac.Write([]byte(id + "." + ts + "." + string(body)))
+
+	headers := http.Header{}
+	headers.Set("webhook-id", id)
+
+	err := Verify(StandardWebhook, body, headers, secret)
+
+	if !errors.Is(err, ErrMissingHeader) {
+		t.Errorf("got %v, expected %v", err, ErrMissingHeader)
+	}
+}