https://developer.servicenow.com/blog.do?p=/tags/kmf/ Recent content in KMF on ServiceNow Developer Blog Hugo -- gohugo.io en-us Mon, 12 Dec 2022 10:00:00 -0400 https://developer.servicenow.com/blog.do?p=/post/using-kmf-for-hmac-verification/ Mon, 12 Dec 2022 10:00:00 -0400 https://developer.servicenow.com/blog.do?p=/post/using-kmf-for-hmac-verification/ Using KMF for HMAC Verification Hash-based message authentication code (or HMAC) is a common way to validate the authenticity of messages sent over the internet. For example, GitHub and Gitea rely on HMAC (SHA256) to secure webhooks. My team wanted to sync our Gitea Issues and Pull Requests to our ServiceNow instance, thus we wanted a Scripted REST API that verifies HMAC for those webhook messages. There have been a few posts describing how HMAC verification can be implemented (e.