104 lines
4.1 KiB
JavaScript
104 lines
4.1 KiB
JavaScript
"use strict";
|
|
var __defProp = Object.defineProperty;
|
|
var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
|
|
var __getOwnPropNames = Object.getOwnPropertyNames;
|
|
var __hasOwnProp = Object.prototype.hasOwnProperty;
|
|
var __export = (target, all) => {
|
|
for (var name in all)
|
|
__defProp(target, name, { get: all[name], enumerable: true });
|
|
};
|
|
var __copyProps = (to, from, except, desc) => {
|
|
if (from && typeof from === "object" || typeof from === "function") {
|
|
for (let key of __getOwnPropNames(from))
|
|
if (!__hasOwnProp.call(to, key) && key !== except)
|
|
__defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
|
|
}
|
|
return to;
|
|
};
|
|
var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
|
|
|
|
// src/webhooks.ts
|
|
var webhooks_exports = {};
|
|
__export(webhooks_exports, {
|
|
verifyWebhook: () => verifyWebhook
|
|
});
|
|
module.exports = __toCommonJS(webhooks_exports);
|
|
var import_getEnvVariable = require("@clerk/shared/getEnvVariable");
|
|
|
|
// src/util/shared.ts
|
|
var import_deprecated = require("@clerk/shared/deprecated");
|
|
var import_keys = require("@clerk/shared/keys");
|
|
var import_retry = require("@clerk/shared/retry");
|
|
var import_url = require("@clerk/shared/url");
|
|
var import_error = require("@clerk/shared/error");
|
|
var import_keys2 = require("@clerk/shared/keys");
|
|
var errorThrower = (0, import_error.buildErrorThrower)({ packageName: "@clerk/backend" });
|
|
var { isDevOrStagingUrl } = (0, import_keys2.createDevOrStagingUrlCache)();
|
|
|
|
// src/webhooks.ts
|
|
var import_standardwebhooks = require("standardwebhooks");
|
|
var STANDARD_WEBHOOK_ID_HEADER = "webhook-id";
|
|
var STANDARD_WEBHOOK_TIMESTAMP_HEADER = "webhook-timestamp";
|
|
var STANDARD_WEBHOOK_SIGNATURE_HEADER = "webhook-signature";
|
|
var SVIX_ID_HEADER = "svix-id";
|
|
var SVIX_TIMESTAMP_HEADER = "svix-timestamp";
|
|
var SVIX_SIGNATURE_HEADER = "svix-signature";
|
|
function createStandardWebhookHeaders(request) {
|
|
const headers = {};
|
|
const svixId = request.headers.get(SVIX_ID_HEADER)?.trim();
|
|
const svixTimestamp = request.headers.get(SVIX_TIMESTAMP_HEADER)?.trim();
|
|
const svixSignature = request.headers.get(SVIX_SIGNATURE_HEADER)?.trim();
|
|
if (svixId) {
|
|
headers[STANDARD_WEBHOOK_ID_HEADER] = svixId;
|
|
}
|
|
if (svixTimestamp) {
|
|
headers[STANDARD_WEBHOOK_TIMESTAMP_HEADER] = svixTimestamp;
|
|
}
|
|
if (svixSignature) {
|
|
headers[STANDARD_WEBHOOK_SIGNATURE_HEADER] = svixSignature;
|
|
}
|
|
return headers;
|
|
}
|
|
async function verifyWebhook(request, options = {}) {
|
|
const secret = options.signingSecret ?? (0, import_getEnvVariable.getEnvVariable)("CLERK_WEBHOOK_SIGNING_SECRET");
|
|
if (!secret) {
|
|
return errorThrower.throw(
|
|
"Missing webhook signing secret. Set the CLERK_WEBHOOK_SIGNING_SECRET environment variable with the webhook secret from the Clerk Dashboard."
|
|
);
|
|
}
|
|
const webhookId = request.headers.get(SVIX_ID_HEADER)?.trim();
|
|
const webhookTimestamp = request.headers.get(SVIX_TIMESTAMP_HEADER)?.trim();
|
|
const webhookSignature = request.headers.get(SVIX_SIGNATURE_HEADER)?.trim();
|
|
if (!webhookId || !webhookTimestamp || !webhookSignature) {
|
|
const missingHeaders = [];
|
|
if (!webhookId) {
|
|
missingHeaders.push(SVIX_ID_HEADER);
|
|
}
|
|
if (!webhookTimestamp) {
|
|
missingHeaders.push(SVIX_TIMESTAMP_HEADER);
|
|
}
|
|
if (!webhookSignature) {
|
|
missingHeaders.push(SVIX_SIGNATURE_HEADER);
|
|
}
|
|
return errorThrower.throw(`Missing required webhook headers: ${missingHeaders.join(", ")}`);
|
|
}
|
|
const body = await request.text();
|
|
const standardHeaders = createStandardWebhookHeaders(request);
|
|
const webhook = new import_standardwebhooks.Webhook(secret);
|
|
try {
|
|
const payload = webhook.verify(body, standardHeaders);
|
|
return {
|
|
type: payload.type,
|
|
object: "event",
|
|
data: payload.data,
|
|
event_attributes: payload.event_attributes
|
|
};
|
|
} catch (e) {
|
|
return errorThrower.throw(`Unable to verify incoming webhook: ${e instanceof Error ? e.message : "Unknown error"}`);
|
|
}
|
|
}
|
|
// Annotate the CommonJS export names for ESM import in node:
|
|
0 && (module.exports = {
|
|
verifyWebhook
|
|
});
|
|
//# sourceMappingURL=webhooks.js.map
|