signedTimestamp property

DateTime? get signedTimestamp

The timestamp the client claims to have signed the request at, carried in the X-Timestamp header. This is distinct from timestamp (the server's receipt time, used for rate limiting and logging): signature verification must use the timestamp the client actually signed, not the time the server happened to receive the request, or every signature would fail to verify.

Returns null if the header is missing or not a valid ISO-8601 timestamp.

Implementation

DateTime? get signedTimestamp {
  final raw = headers['X-Timestamp'] ?? headers['x-timestamp'];
  if (raw == null) return null;
  return DateTime.tryParse(raw);
}