bbs.profullstack/logicsrc
1
0
Fork 0
mirror of https://github.com/profullstack/logicsrc.git synced 2026-08-14 06:47:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Accept spaced CoinPay signature parts

Browse source
This commit is contained in:
Autowebassat-blip 2026-06-12 05:14:49 +02:00
parent 850cf5ea44
commit c4f16012fe
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apps/logicsrc-web/contract/logicsrc-web.contract.test.ts
View file

@ -407,6 +407,7 @@ describe("POST /api/webhooks/coinpay", () => {
const timestamp = Math.floor(Date.now() / 1000).toString(); const timestamp = Math.floor(Date.now() / 1000).toString();
const signature = createHmac("sha256", secret).update(`${timestamp}.${payload}`).digest("hex"); const signature = createHmac("sha256", secret).update(`${timestamp}.${payload}`).digest("hex");
expect(verifyCoinPayWebhook(payload, `t=${timestamp},v1=${signature}`, secret)).toBe(true);
expect(verifyCoinPayWebhook(payload, `t=${timestamp}, v1=${signature}`, secret)).toBe(true); expect(verifyCoinPayWebhook(payload, `t=${timestamp}, v1=${signature}`, secret)).toBe(true);
const response = await coinpayWebhook( const response = await coinpayWebhook(

2
apps/logicsrc-web/src/lib/coinpay.ts
View file

@ -114,7 +114,7 @@ export function verifyCoinPayWebhook(
} }
try { try {
const parts = signatureHeader.split(","); const parts = signatureHeader.split(",").map((part) => part.trim());
const timestamp = parts.find((part) => part.startsWith("t="))?.slice(2); const timestamp = parts.find((part) => part.startsWith("t="))?.slice(2);
const signature = parts.find((part) => part.startsWith("v1="))?.slice(3); const signature = parts.find((part) => part.startsWith("v1="))?.slice(3);
if (!timestamp || !signature) { if (!timestamp || !signature) {