Function Verify

internal/headers/signer.go:99–101

Verify checks a header set against any of the provided secrets and the default replay window. Returns true if any secret produces a matching signature. Used by recipients holding multiple active keys during a rotation.

(secrets []string, h AuthHeaders)

// matching signature. Used by recipients holding multiple active keys
// during a rotation.
func Verify(secrets []string, h AuthHeaders) bool {
	return VerifyWithMaxAge(secrets, h, DefaultMaxAge)
}

// VerifyWithMaxAge is the configurable-window variant of Verify.
func VerifyWithMaxAge(secrets []string, h AuthHeaders, maxAge time.Duration) bool {