55 // @ts -ignore
66 // eslint-disable-next-line import/no-unresolved
77} from "../schema" ;
8- import crypto from "crypto" ;
98
109/* -------------------------------------------------------------------------------------------------
1110 * Client
@@ -31,7 +30,7 @@ type WorkflowSchemaMap = {
3130export const authenticateWebhook = async <
3231 Key extends `${WorkflowKeys } :${string } `,
3332> ( {
34- secret,
33+ secret : _secret ,
3534 body,
3635 signature,
3736} : {
@@ -65,6 +64,14 @@ export const authenticateWebhook = async <
6564 return { success : false , error : "Signature is required" } ;
6665 }
6766
67+ let secret : string | undefined = _secret ;
68+ if ( _secret . startsWith ( "bshb_workflow" ) ) {
69+ secret = _secret . split ( ":" ) [ 1 ] ;
70+ }
71+ if ( typeof secret !== "string" ) {
72+ return { success : false , error : "Invalid secret" } ;
73+ }
74+
6875 // Handle different body types
6976 let rawBody : string ;
7077 let parsedBody : unknown ;
@@ -131,12 +138,14 @@ export const authenticateWebhook = async <
131138 payload : parsedBody as WorkflowSchemaMap [ ExtractWorkflowKey < Key > ] ,
132139 } ;
133140 } catch ( error ) {
141+ let message =
142+ error instanceof Error ? error . message : "Signature verification failed" ;
143+ if ( message === "Unexpected end of JSON input" ) {
144+ message = "Invalid body" ;
145+ }
134146 return {
135147 success : false ,
136- error :
137- error instanceof Error
138- ? error . message
139- : "Signature verification failed" ,
148+ error : message ,
140149 } ;
141150 }
142151} ;
0 commit comments