Error in the v3 request signature docs

Hello,

I believe there is an error in the documentation regarding the validation of V3 request signatures: Webhooks | Validating Requests - HubSpot docs
I am receiving HTTP requests from the new hubspot.fetch() function: Fetching data for UI extensions - HubSpot docs

My signatures never matched the provided signature. After trying to modify all possible values without success, I ran the code from hubspot-api-nodejs/src/utils/signature.ts at master · HubSpot/hubspot-api-nodejs · GitHub locally to understand the individual steps. The string to be hashed is not decoded as described in the documentation. The “@” sign in the user’s email address must remain as “%40” for the signature to be correct:

POSThttp://localhost:9876/api/hubspot/ping?userEmail=max.power%40example.com&userId=65555555&portalId=145333333&appId=4166666{“message”:“Hello World!”}1729605403190

Can you confirm this? Or did I somehow misunderstand the part about decoding?

Hi, @hkorte :waving_hand: Welcome to our community! Thanks for including your details. I’d like to invite some of our community members to the conversation — hey @Teun @Anton @zach_threadint have you run into anything similar in your project work?

Thanks for taking a look! — Jaycee