@pluv/platform-pluv 0.37.6 → 0.37.7

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @pluv/platform-pluv@0.37.6 build /home/runner/work/pluv/pluv/packages/platform-pluv
+> @pluv/platform-pluv@0.37.7 build /home/runner/work/pluv/pluv/packages/platform-pluv
 > tsup src/index.ts --format esm,cjs --dts
 
 CLI Building entry: src/index.ts
@@ -8,11 +8,11 @@
 CLI Target: es6
 ESM Build start
 CJS Build start
-ESM dist/index.mjs 9.79 KB
-ESM ⚡️ Build success in 88ms
-CJS dist/index.js 10.68 KB
-CJS ⚡️ Build success in 88ms
+CJS dist/index.js 11.40 KB
+CJS ⚡️ Build success in 124ms
+ESM dist/index.mjs 9.86 KB
+ESM ⚡️ Build success in 132ms
 DTS Build start
-DTS ⚡️ Build success in 6253ms
+DTS ⚡️ Build success in 6308ms
 DTS dist/index.d.mts 3.56 KB
 DTS dist/index.d.ts  3.56 KB

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pluv/platform-pluv
 
+## 0.37.7
+
+### Patch Changes
+
+- c874f25: Fixed webhook signature verification.
+  - @pluv/crdt@0.37.7
+  - @pluv/io@0.37.7
+  - @pluv/types@0.37.7
+
 ## 0.37.6
 
 ### Patch Changes

package/dist/index.js

@@ -1,8 +1,10 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getOwnPropSymbols = Object.getOwnPropertySymbols;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __propIsEnum = Object.prototype.propertyIsEnumerable;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
@@ -29,6 +31,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var __async = (__this, __arguments, generator) => {
   return new Promise((resolve, reject) => {
@@ -61,6 +71,7 @@ module.exports = __toCommonJS(index_exports);
 
 // src/PluvPlatform.ts
 var import_io = require("@pluv/io");
+var import_fast_json_stable_stringify = __toESM(require("fast-json-stable-stringify"));
 var import_hono = require("hono");
 
 // src/constants.ts
@@ -208,7 +219,7 @@ var PluvPlatform = class extends import_io.AbstractPlatform {
       if (!this._webhookSecret || !signature) return c.json({ error: "Unauthorized" }, 401);
       const payload = yield c.req.json();
       const verified = yield verifyWebhook({
-        payload,
+        payload: (0, import_fast_json_stable_stringify.default)(payload),
         signature,
         secret: this._webhookSecret
       });

package/dist/index.mjs

@@ -43,6 +43,7 @@ var __async = (__this, __arguments, generator) => {
 
 // src/PluvPlatform.ts
 import { AbstractPlatform } from "@pluv/io";
+import stringify from "fast-json-stable-stringify";
 import { Hono } from "hono";
 
 // src/constants.ts
@@ -190,7 +191,7 @@ var PluvPlatform = class extends AbstractPlatform {
       if (!this._webhookSecret || !signature) return c.json({ error: "Unauthorized" }, 401);
       const payload = yield c.req.json();
       const verified = yield verifyWebhook({
-        payload,
+        payload: stringify(payload),
         signature,
         secret: this._webhookSecret
       });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pluv/platform-pluv",
-  "version": "0.37.6",
+  "version": "0.37.7",
   "description": "@pluv/io adapter for pluv.io",
   "author": "leedavidcs",
   "license": "MIT",
@@ -17,19 +17,20 @@
     "access": "public"
   },
   "dependencies": {
-    "@types/node": "^22.13.9",
+    "@types/node": "^22.13.10",
+    "fast-json-stable-stringify": "^2.1.0",
     "hono": "^4.7.4",
     "zod": "^3.24.2",
-    "@pluv/crdt": "^0.37.6",
-    "@pluv/io": "^0.37.6",
-    "@pluv/types": "^0.37.6"
+    "@pluv/crdt": "^0.37.7",
+    "@pluv/types": "^0.37.7",
+    "@pluv/io": "^0.37.7"
   },
   "devDependencies": {
     "eslint": "^8.57.1",
     "tsup": "^8.4.0",
     "typescript": "^5.8.2",
-    "@pluv/tsconfig": "^0.37.6",
-    "eslint-config-pluv": "^0.37.6"
+    "@pluv/tsconfig": "^0.37.7",
+    "eslint-config-pluv": "^0.37.7"
   },
   "scripts": {
     "build": "tsup src/index.ts --format esm,cjs --dts",

package/src/PluvPlatform.ts

@@ -7,6 +7,7 @@ import type {
     WebSocketSerializedState,
 } from "@pluv/io";
 import { AbstractPlatform } from "@pluv/io";
+import stringify from "fast-json-stable-stringify";
 import { Hono } from "hono";
 import { SIGNATURE_HEADER } from "./constants";
 import { ZodEvent } from "./schemas";
@@ -189,7 +190,7 @@ export class PluvPlatform extends AbstractPlatform<
         const payload = await c.req.json();
 
         const verified = await verifyWebhook({
-            payload,
+            payload: stringify(payload),
             signature,
             secret: this._webhookSecret,
         });