bbs.profullstack/logicsrc
1
0
Fork 0
mirror of https://github.com/profullstack/logicsrc.git synced 2026-08-15 07:17:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Reject malformed CoinPay webhook signatures

Browse source
This commit is contained in:
Codex Microtask Operator 2026-06-13 01:38:25 +02:00
parent 8f4691584c
commit d60ceab6c2
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apps/logicsrc-web/contract/logicsrc-web.contract.test.ts
View file

@ -410,6 +410,7 @@ describe("POST /api/webhooks/coinpay", () => {
expect(verifyCoinPayWebhook(payload, `t=${timestamp},v1=${signature}`, secret)).toBe(true);
expect(verifyCoinPayWebhook(payload, `t=${timestamp}, v1=${signature}`, secret)).toBe(true);
expect(verifyCoinPayWebhook(payload, `t=${timestamp},v1=${signature}0`, secret)).toBe(false);
const response = await coinpayWebhook(
new NextRequest("http://localhost/api/webhooks/coinpay", {