@blindpay/node 2.4.0 → 2.5.0

package/dist/resources/wallets/blockchain.d.ts

@@ -1,4 +1,4 @@
-import { I as InternalApiClient, B as BlindpayApiResponse, N as Network } from '../../api-client-Cw2mNJeR.js';
+import { I as InternalApiClient, B as BlindpayApiResponse, N as Network } from '../../api-client-Drd7alfK.js';
 
 type GetBlockchainWalletMessage = string;
 type GetBlockchainWalletMessageResponse = {

package/dist/resources/wallets/blockchain.test.js

@@ -18699,10 +18699,10 @@ function getImporter(name) {
 var import_expect_type = __toESM(require_dist(), 1);
 
 // src/client.ts
-var import_node_crypto = require("crypto");
+var import_svix = require("svix");
 
 // package.json
-var version = "2.4.0";
+var version = "2.5.0";
 
 // src/internal/blindpay-error.ts
 var BlindPayError = class extends Error {
@@ -18931,6 +18931,10 @@ function createPayinQuotesResource(instanceId, client) {
     },
     get(id) {
       return client.get(`/instances/${instanceId}/payin-quotes/${id}`);
+    },
+    list(params) {
+      const queryParams = params ? `?${new URLSearchParams(params)}` : "";
+      return client.get(`/instances/${instanceId}/payin-quotes${queryParams}`);
     }
   };
 }
@@ -19336,26 +19340,29 @@ var BlindPay = class {
     });
   }
   /**
-   * Verifies the BlindPay webhook signature
+   * Verifies the BlindPay webhook signature using Svix
    *
    * @param params.secret The webhook secret from BlindPay dashboard
-   * @param params.id The value of the `svix-id` header
-   * @param params.timestamp The value of the `svix-timestamp` header
-   * @param params.payload The raw request body
-   * @param params.svixSignature The value of the `svix-signature` header
+   * @param params.headers The webhook headers object containing svix-id, svix-timestamp, and svix-signature
+   * @param params.payload The raw request body as a string
    * @returns {boolean} True if the signature is valid, false otherwise
    */
   verifyWebhookSignature({
     secret,
-    id,
-    timestamp,
-    payload,
-    svixSignature
+    headers,
+    payload
   }) {
-    const signedContent = `${id}.${timestamp}.${payload}`;
-    const secretBytes = Buffer.from(secret.split("_")[1], "base64");
-    const expectedSignature = (0, import_node_crypto.createHmac)("sha256", secretBytes).update(signedContent).digest("base64");
-    return svixSignature.length === expectedSignature.length && (0, import_node_crypto.timingSafeEqual)(Buffer.from(svixSignature), Buffer.from(expectedSignature));
+    try {
+      const webhook = new import_svix.Webhook(secret);
+      webhook.verify(payload, {
+        "svix-id": headers.id,
+        "svix-timestamp": headers.timestamp,
+        "svix-signature": headers.signature
+      });
+      return true;
+    } catch (e) {
+      return false;
+    }
   }
 };
 

package/dist/resources/wallets/blockchain.test.mjs

@@ -8,20 +8,20 @@ import {
 import {
   BlindPay,
   init_client
-} from "../../chunk-4DVSRRBP.mjs";
+} from "../../chunk-CEJF5Y4K.mjs";
+import "../../chunk-UC57SCKQ.mjs";
 import "../../chunk-FG25JHDX.mjs";
 import "../../chunk-QGNLMN6Z.mjs";
-import "../../chunk-UC57SCKQ.mjs";
 import "../../chunk-TBTA7A2P.mjs";
 import "../../chunk-67XECGMJ.mjs";
 import "../../chunk-Z6EYX4D3.mjs";
 import "../../chunk-5XJJKYXE.mjs";
+import "../../chunk-U7CKUUO7.mjs";
 import "../../chunk-RC5NN5UF.mjs";
 import "../../chunk-W7NJUABI.mjs";
-import "../../chunk-OTRFWEEC.mjs";
+import "../../chunk-VRA5HP7F.mjs";
 import "../../chunk-3QQCDR3E.mjs";
 import "../../chunk-LRHWT4JU.mjs";
-import "../../chunk-U7CKUUO7.mjs";
 import "../../chunk-CPOSU35L.mjs";
 import "../../chunk-B5T7AQLH.mjs";
 import {

package/dist/resources/wallets/offramp.d.mts

@@ -1,4 +1,4 @@
-import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Cw2mNJeR.mjs';
+import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Drd7alfK.mjs';
 
 type OfframpWallet = {
     id: string;

package/dist/resources/wallets/offramp.d.ts

@@ -1,4 +1,4 @@
-import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Cw2mNJeR.js';
+import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Drd7alfK.js';
 
 type OfframpWallet = {
     id: string;

package/dist/resources/wallets/offramp.test.js

@@ -18699,10 +18699,10 @@ function getImporter(name) {
 var import_expect_type = __toESM(require_dist(), 1);
 
 // src/client.ts
-var import_node_crypto = require("crypto");
+var import_svix = require("svix");
 
 // package.json
-var version = "2.4.0";
+var version = "2.5.0";
 
 // src/internal/blindpay-error.ts
 var BlindPayError = class extends Error {
@@ -18931,6 +18931,10 @@ function createPayinQuotesResource(instanceId, client) {
     },
     get(id) {
       return client.get(`/instances/${instanceId}/payin-quotes/${id}`);
+    },
+    list(params) {
+      const queryParams = params ? `?${new URLSearchParams(params)}` : "";
+      return client.get(`/instances/${instanceId}/payin-quotes${queryParams}`);
     }
   };
 }
@@ -19336,26 +19340,29 @@ var BlindPay = class {
     });
   }
   /**
-   * Verifies the BlindPay webhook signature
+   * Verifies the BlindPay webhook signature using Svix
    *
    * @param params.secret The webhook secret from BlindPay dashboard
-   * @param params.id The value of the `svix-id` header
-   * @param params.timestamp The value of the `svix-timestamp` header
-   * @param params.payload The raw request body
-   * @param params.svixSignature The value of the `svix-signature` header
+   * @param params.headers The webhook headers object containing svix-id, svix-timestamp, and svix-signature
+   * @param params.payload The raw request body as a string
    * @returns {boolean} True if the signature is valid, false otherwise
    */
   verifyWebhookSignature({
     secret,
-    id,
-    timestamp,
-    payload,
-    svixSignature
+    headers,
+    payload
   }) {
-    const signedContent = `${id}.${timestamp}.${payload}`;
-    const secretBytes = Buffer.from(secret.split("_")[1], "base64");
-    const expectedSignature = (0, import_node_crypto.createHmac)("sha256", secretBytes).update(signedContent).digest("base64");
-    return svixSignature.length === expectedSignature.length && (0, import_node_crypto.timingSafeEqual)(Buffer.from(svixSignature), Buffer.from(expectedSignature));
+    try {
+      const webhook = new import_svix.Webhook(secret);
+      webhook.verify(payload, {
+        "svix-id": headers.id,
+        "svix-timestamp": headers.timestamp,
+        "svix-signature": headers.signature
+      });
+      return true;
+    } catch (e) {
+      return false;
+    }
   }
 };
 

package/dist/resources/wallets/offramp.test.mjs

@@ -8,20 +8,20 @@ import {
 import {
   BlindPay,
   init_client
-} from "../../chunk-4DVSRRBP.mjs";
+} from "../../chunk-CEJF5Y4K.mjs";
+import "../../chunk-UC57SCKQ.mjs";
 import "../../chunk-FG25JHDX.mjs";
 import "../../chunk-QGNLMN6Z.mjs";
-import "../../chunk-UC57SCKQ.mjs";
 import "../../chunk-TBTA7A2P.mjs";
 import "../../chunk-67XECGMJ.mjs";
 import "../../chunk-Z6EYX4D3.mjs";
 import "../../chunk-5XJJKYXE.mjs";
+import "../../chunk-U7CKUUO7.mjs";
 import "../../chunk-RC5NN5UF.mjs";
 import "../../chunk-W7NJUABI.mjs";
-import "../../chunk-OTRFWEEC.mjs";
+import "../../chunk-VRA5HP7F.mjs";
 import "../../chunk-3QQCDR3E.mjs";
 import "../../chunk-LRHWT4JU.mjs";
-import "../../chunk-U7CKUUO7.mjs";
 import "../../chunk-CPOSU35L.mjs";
 import "../../chunk-B5T7AQLH.mjs";
 import {

package/dist/resources/webhooks/index.d.mts

@@ -1,4 +1,4 @@
-import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Cw2mNJeR.mjs';
+import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Drd7alfK.mjs';
 
 type WebhookEvents = "receiver.new" | "receiver.update" | "bankAccount.new" | "payout.new" | "payout.update" | "payout.complete" | "payout.partnerFee" | "blockchainWallet.new" | "payin.new" | "payin.update" | "payin.complete" | "payin.partnerFee" | "tos.accept";
 type CreateWebhookEndpointInput = {

package/dist/resources/webhooks/index.d.ts

@@ -1,4 +1,4 @@
-import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Cw2mNJeR.js';
+import { I as InternalApiClient, B as BlindpayApiResponse } from '../../api-client-Drd7alfK.js';
 
 type WebhookEvents = "receiver.new" | "receiver.update" | "bankAccount.new" | "payout.new" | "payout.update" | "payout.complete" | "payout.partnerFee" | "blockchainWallet.new" | "payin.new" | "payin.update" | "payin.complete" | "payin.partnerFee" | "tos.accept";
 type CreateWebhookEndpointInput = {

package/dist/resources/webhooks/webhooks.test.js

@@ -18699,10 +18699,10 @@ function getImporter(name) {
 var import_expect_type = __toESM(require_dist(), 1);
 
 // src/client.ts
-var import_node_crypto = require("crypto");
+var import_svix = require("svix");
 
 // package.json
-var version = "2.4.0";
+var version = "2.5.0";
 
 // src/internal/blindpay-error.ts
 var BlindPayError = class extends Error {
@@ -18931,6 +18931,10 @@ function createPayinQuotesResource(instanceId, client) {
     },
     get(id) {
       return client.get(`/instances/${instanceId}/payin-quotes/${id}`);
+    },
+    list(params) {
+      const queryParams = params ? `?${new URLSearchParams(params)}` : "";
+      return client.get(`/instances/${instanceId}/payin-quotes${queryParams}`);
     }
   };
 }
@@ -19336,26 +19340,29 @@ var BlindPay = class {
     });
   }
   /**
-   * Verifies the BlindPay webhook signature
+   * Verifies the BlindPay webhook signature using Svix
    *
    * @param params.secret The webhook secret from BlindPay dashboard
-   * @param params.id The value of the `svix-id` header
-   * @param params.timestamp The value of the `svix-timestamp` header
-   * @param params.payload The raw request body
-   * @param params.svixSignature The value of the `svix-signature` header
+   * @param params.headers The webhook headers object containing svix-id, svix-timestamp, and svix-signature
+   * @param params.payload The raw request body as a string
    * @returns {boolean} True if the signature is valid, false otherwise
    */
   verifyWebhookSignature({
     secret,
-    id,
-    timestamp,
-    payload,
-    svixSignature
+    headers,
+    payload
   }) {
-    const signedContent = `${id}.${timestamp}.${payload}`;
-    const secretBytes = Buffer.from(secret.split("_")[1], "base64");
-    const expectedSignature = (0, import_node_crypto.createHmac)("sha256", secretBytes).update(signedContent).digest("base64");
-    return svixSignature.length === expectedSignature.length && (0, import_node_crypto.timingSafeEqual)(Buffer.from(svixSignature), Buffer.from(expectedSignature));
+    try {
+      const webhook = new import_svix.Webhook(secret);
+      webhook.verify(payload, {
+        "svix-id": headers.id,
+        "svix-timestamp": headers.timestamp,
+        "svix-signature": headers.signature
+      });
+      return true;
+    } catch (e) {
+      return false;
+    }
   }
 };
 

package/dist/resources/webhooks/webhooks.test.mjs

@@ -8,20 +8,20 @@ import {
 import {
   BlindPay,
   init_client
-} from "../../chunk-4DVSRRBP.mjs";
+} from "../../chunk-CEJF5Y4K.mjs";
+import "../../chunk-UC57SCKQ.mjs";
 import "../../chunk-FG25JHDX.mjs";
 import "../../chunk-QGNLMN6Z.mjs";
-import "../../chunk-UC57SCKQ.mjs";
 import "../../chunk-TBTA7A2P.mjs";
 import "../../chunk-67XECGMJ.mjs";
 import "../../chunk-Z6EYX4D3.mjs";
 import "../../chunk-5XJJKYXE.mjs";
+import "../../chunk-U7CKUUO7.mjs";
 import "../../chunk-RC5NN5UF.mjs";
 import "../../chunk-W7NJUABI.mjs";
-import "../../chunk-OTRFWEEC.mjs";
+import "../../chunk-VRA5HP7F.mjs";
 import "../../chunk-3QQCDR3E.mjs";
 import "../../chunk-LRHWT4JU.mjs";
-import "../../chunk-U7CKUUO7.mjs";
 import "../../chunk-CPOSU35L.mjs";
 import "../../chunk-B5T7AQLH.mjs";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@blindpay/node",
-    "version": "2.4.0",
+    "version": "2.5.0",
     "description": "Official Node.js SDK for Blindpay API - Global payments infrastructure",
     "keywords": [
         "blindpay",
@@ -59,5 +59,8 @@
             "require": "./dist/index.js"
         }
     },
-    "packageManager": "bun@1.2.18"
+    "packageManager": "bun@1.2.18",
+    "dependencies": {
+        "svix": "1.82.0"
+    }
 }