Rust (`reqwest` + `tokio` + `hmac`) Embedded & Flasher Gateway SDK

use hmac::{Hmac, Mac};
use reqwest::multipart::{Form, Part};
use sha2::Sha256;

pub async fn submit_virgin_ecu(
    api_key: &str,
    bin_bytes: Vec<u8>,
    file_name: String,
    brand: &str,
    family: &str,
) -> Result<serde_json::Value, reqwest::Error> {
    let part = Part::bytes(bin_bytes)
        .file_name(file_name)
        .mime_str("application/octet-stream")?;
    let form = Form::new()
        .part("file", part)
        .text("ecu_brand", brand.to_owned())
        .text("ecu_family", family.to_owned())
        .text("services", "["dpf_off","egr_off","adblue_off"]");

    reqwest::Client::new()
        .post("https://www.davincideluxe.fr/api/v1/cloud/jobs")
        .bearer_auth(api_key)
        .multipart(form)
        .send()
        .await?
        .error_for_status()?
        .json()
        .await
}

pub fn verify_webhook(raw: &[u8], sig_header: &str, secret: &str) -> bool {
    let Ok(mut mac) = Hmac::<Sha256>::new_from_slice(secret.as_bytes()) else { return false };
    mac.update(raw);
    let hex_sig = format!("sha256={}", hex::encode(mac.finalize().into_bytes()));
    sig_header == hex_sig
}