@beel_es/sdk 1.0.0 → 1.1.0

package/dist/webhooks/index.js

@@ -1,70 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.WebhookVerificationError = exports.WebhookVerifier = void 0;
-const crypto_1 = require("crypto");
-class WebhookVerifier {
-    constructor(secret, toleranceSeconds = 300) {
-        if (!secret || secret.trim().length === 0) {
-            throw new Error('Webhook secret is required');
-        }
-        this.secret = secret;
-        this.toleranceSeconds = toleranceSeconds;
-    }
-    verify(rawBody, signatureHeader) {
-        if (!signatureHeader) {
-            throw new WebhookVerificationError('Missing BeeL-Signature header');
-        }
-        const { timestamp, signature } = this.parseSignatureHeader(signatureHeader);
-        const now = Math.floor(Date.now() / 1000);
-        const age = Math.abs(now - timestamp);
-        if (age > this.toleranceSeconds) {
-            throw new WebhookVerificationError(`Webhook timestamp too old (${age}s ago, max ${this.toleranceSeconds}s allowed)`);
-        }
-        const bodyString = Buffer.isBuffer(rawBody) ? rawBody.toString('utf8') : rawBody;
-        const expectedSignature = this.computeSignature(timestamp, bodyString);
-        if (!this.secureCompare(signature, expectedSignature)) {
-            throw new WebhookVerificationError('Invalid webhook signature');
-        }
-        try {
-            return JSON.parse(bodyString);
-        }
-        catch {
-            throw new WebhookVerificationError('Invalid JSON in webhook body');
-        }
-    }
-    parseSignatureHeader(header) {
-        const parts = header.split(',');
-        let timestamp;
-        let signature;
-        for (const part of parts) {
-            const [key, value] = part.split('=', 2);
-            if (key === 't')
-                timestamp = parseInt(value, 10);
-            else if (key === 'v1')
-                signature = value;
-        }
-        if (!timestamp || !signature || isNaN(timestamp)) {
-            throw new WebhookVerificationError('Invalid signature header format');
-        }
-        return { timestamp, signature };
-    }
-    computeSignature(timestamp, body) {
-        return (0, crypto_1.createHmac)('sha256', this.secret)
-            .update(`${timestamp}.${body}`, 'utf8')
-            .digest('hex');
-    }
-    secureCompare(a, b) {
-        if (a.length !== b.length)
-            return false;
-        return (0, crypto_1.timingSafeEqual)(Buffer.from(a, 'utf8'), Buffer.from(b, 'utf8'));
-    }
-}
-exports.WebhookVerifier = WebhookVerifier;
-class WebhookVerificationError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'WebhookVerificationError';
-    }
-}
-exports.WebhookVerificationError = WebhookVerificationError;
-//# sourceMappingURL=index.js.map

package/dist/webhooks/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/webhooks/index.ts"],"names":[],"mappings":";;;AAAA,mCAAqD;AAUrD,MAAa,eAAe;IAI1B,YAAY,MAAc,EAAE,mBAA2B,GAAG;QACxD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAED,MAAM,CACJ,OAAwB,EACxB,eAAmC;QAEnC,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,wBAAwB,CAAC,+BAA+B,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;QAEtC,IAAI,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,MAAM,IAAI,wBAAwB,CAChC,8BAA8B,GAAG,cAAc,IAAI,CAAC,gBAAgB,YAAY,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACjF,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAEvE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,wBAAwB,CAAC,2BAA2B,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,wBAAwB,CAAC,8BAA8B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,MAAc;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,SAA6B,CAAC;QAClC,IAAI,SAA6B,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,GAAG,KAAK,GAAG;gBAAE,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;iBAC5C,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS,GAAG,KAAK,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IAEO,gBAAgB,CAAC,SAAiB,EAAE,IAAY;QACtD,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;aACrC,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC;aACtC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEO,aAAa,CAAC,CAAS,EAAE,CAAS;QACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,IAAA,wBAAe,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;CACF;AAzED,0CAyEC;AAED,MAAa,wBAAyB,SAAQ,KAAK;IACjD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC"}