HmacVerificationError (services/hmac_verify.py)

HMAC verification for AiSOC approval callbacks. Slack's own ``slack_bolt`` already verifies inbound slash-command and ``block_actions`` payloads against ``SLACK_SIGNING_SECRET`` — that path is untouched. T3.6 adds a *second* signed surface used by: * Teams Adaptive Cards (``servi

# Source: https://github.com/beenuar/AiSOC | License: MIT | Copyright 2024-present AiSOC contributors
# Provided via justclaw.it.com; keep this notice with the code.
"""
HMAC verification for AiSOC approval callbacks.

Slack's own ``slack_bolt`` already verifies inbound slash-command and
``block_actions`` payloads against ``SLACK_SIGNING_SECRET`` — that path
is untouched. T3.6 adds a *second* signed surface used by:

* Teams Adaptive Cards (``services/teams-bot``) — Microsoft delivers the
  card-action payload with a bearer JWT, but we also want to verify the
  embedded ``action_token`` we minted ourselves so a replayed action
  payload can be detected even before Microsoft's outer signature is
  checked.
* Email approvals (``services/api/app/services/email_approval.py``) —
  the recipient

... (truncated -- full source via MCP)