fix: verifyQstashHeader now returns false when SignatureError is thrown

This commit is contained in:
2024-09-02 13:19:50 -04:00
parent 9694c0ee0d
commit 690b5aa426
2 changed files with 19 additions and 12 deletions

View File

@@ -16,7 +16,6 @@ import { getUpcomingTitlesFromAnilist } from "./anilist";
const app = new Hono();
app.post("/titles", async (c) => {
console.log(c.req.path);
if (
!(await verifyQstashHeader(
env<Env, typeof c>(c, "workerd"),

View File

@@ -1,8 +1,8 @@
import { Receiver } from "@upstash/qstash";
import { Receiver, SignatureError } from "@upstash/qstash";
import type { Env } from "~/types/env";
export function verifyQstashHeader(
export async function verifyQstashHeader(
env: Env,
route: string,
signature: string | undefined,
@@ -12,14 +12,22 @@ export function verifyQstashHeader(
return Promise.resolve(false);
}
const receiver = new Receiver({
currentSigningKey: env.QSTASH_CURRENT_SIGNING_KEY,
nextSigningKey: env.QSTASH_NEXT_SIGNING_KEY,
});
try {
const receiver = new Receiver({
currentSigningKey: env.QSTASH_CURRENT_SIGNING_KEY,
nextSigningKey: env.QSTASH_NEXT_SIGNING_KEY,
});
return receiver.verify({
body,
signature,
url: `https://aniplay-v2.rururu.workers.dev${route}`,
});
return await receiver.verify({
body,
signature,
url: `https://aniplay-v2.rururu.workers.dev${route}`,
});
} catch (error) {
if (error instanceof SignatureError) {
return Promise.resolve(false);
}
throw error;
}
}