Function expectedHMAC

internal/agent/billing_hook_test.go:69–73

expectedHMAC re-derives the X-E2A-Internal-Signature for the recorded body. Independent computation, so a bug in either side shows up.

(secret string, body []byte)

// expectedHMAC re-derives the X-E2A-Internal-Signature for the recorded body.
// Independent computation, so a bug in either side shows up.
func expectedHMAC(secret string, body []byte) string {
	h := hmac.New(sha256.New, []byte(secret))
	h.Write(body)
	return hex.EncodeToString(h.Sum(nil))
}

// TestDeleteUser_FiresBillingHook: deletion notifies billing with the user_id
// body + a matching HMAC signature, then the cascade removes the user.