@railhook/node 2.12.0

package/dist/__tests__/webhooks.test.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const webhooks_1 = require("../webhooks");
+const errors_1 = require("../errors");
+describe('Webhook Signature Verification', () => {
+    const secret = 'whsec_test_secret_key_123';
+    const payload = JSON.stringify({ type: 'order.completed', data: { orderId: '12345' } });
+    describe('generateSignature', () => {
+        it('should generate valid signature format', () => {
+            const signature = (0, webhooks_1.generateSignature)(payload, secret);
+            expect(signature).toMatch(/^t=\d+,v1=[a-f0-9]{64}$/);
+        });
+        it('should use provided timestamp', () => {
+            const timestamp = 1700000000000;
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            expect(signature).toContain(`t=${timestamp}`);
+        });
+        it('should generate consistent signatures for same inputs', () => {
+            const timestamp = 1700000000000;
+            const sig1 = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const sig2 = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            expect(sig1).toBe(sig2);
+        });
+        it('should generate different signatures for different payloads', () => {
+            const timestamp = 1700000000000;
+            const sig1 = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const sig2 = (0, webhooks_1.generateSignature)('different payload', secret, timestamp);
+            expect(sig1).not.toBe(sig2);
+        });
+        it('should generate different signatures for different secrets', () => {
+            const timestamp = 1700000000000;
+            const sig1 = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const sig2 = (0, webhooks_1.generateSignature)(payload, 'different_secret', timestamp);
+            expect(sig1).not.toBe(sig2);
+        });
+    });
+    /**
+     * After a rotation Railhook signs each delivery with the new secret and the retired one
+     * for the endpoint's grace window, so a receiver that has not deployed the new secret yet
+     * keeps working. The parser used to keep only the last v1 and rejected whichever half of
+     * the pair the receiver was holding.
+     */
+    describe('a header carrying two signatures (secret rotation)', () => {
+        const newSecret = 'whsec_new';
+        const retiredSecret = 'whsec_retired';
+        const dualHeader = (body, at = Date.now()) => {
+            const retiredV1 = (0, webhooks_1.generateSignature)(body, retiredSecret, at).split('v1=')[1];
+            return `${(0, webhooks_1.generateSignature)(body, newSecret, at)},v1=${retiredV1}`;
+        };
+        it('verifies with the new secret', () => {
+            expect((0, webhooks_1.verifySignature)(payload, dualHeader(payload), newSecret)).toBe(true);
+        });
+        it('verifies with the retired secret', () => {
+            expect((0, webhooks_1.verifySignature)(payload, dualHeader(payload), retiredSecret)).toBe(true);
+        });
+        it('still rejects an unrelated secret', () => {
+            expect(() => (0, webhooks_1.verifySignature)(payload, dualHeader(payload), 'whsec_someone_else'))
+                .toThrow(errors_1.RailhookError);
+        });
+        it('still rejects a tampered body', () => {
+            expect(() => (0, webhooks_1.verifySignature)(`${payload} `, dualHeader(payload), newSecret))
+                .toThrow(errors_1.RailhookError);
+        });
+    });
+    describe('verifySignature', () => {
+        it('should verify valid signature', () => {
+            const timestamp = Date.now();
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            expect((0, webhooks_1.verifySignature)(payload, signature, secret)).toBe(true);
+        });
+        it('should throw on missing signature', () => {
+            expect(() => (0, webhooks_1.verifySignature)(payload, '', secret)).toThrow(errors_1.RailhookError);
+            expect(() => (0, webhooks_1.verifySignature)(payload, '', secret)).toThrow('Missing signature header');
+        });
+        it('should throw on invalid signature format', () => {
+            expect(() => (0, webhooks_1.verifySignature)(payload, 'invalid', secret)).toThrow('Invalid signature format');
+        });
+        it('should throw on missing timestamp', () => {
+            expect(() => (0, webhooks_1.verifySignature)(payload, 'v1=abc123', secret)).toThrow('Invalid signature format');
+        });
+        it('should throw on missing v1 signature', () => {
+            expect(() => (0, webhooks_1.verifySignature)(payload, 't=1700000000000', secret)).toThrow('Invalid signature format');
+        });
+        it('should throw on expired timestamp', () => {
+            const oldTimestamp = Date.now() - 600000; // 10 minutes ago
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, oldTimestamp);
+            expect(() => (0, webhooks_1.verifySignature)(payload, signature, secret)).toThrow('outside tolerance window');
+        });
+        it('should throw on future timestamp outside tolerance', () => {
+            const futureTimestamp = Date.now() + 600000; // 10 minutes in future
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, futureTimestamp);
+            expect(() => (0, webhooks_1.verifySignature)(payload, signature, secret)).toThrow('outside tolerance window');
+        });
+        it('should accept timestamp within tolerance', () => {
+            const recentTimestamp = Date.now() - 60000; // 1 minute ago
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, recentTimestamp);
+            expect((0, webhooks_1.verifySignature)(payload, signature, secret)).toBe(true);
+        });
+        it('should throw on invalid signature value', () => {
+            const timestamp = Date.now();
+            const signature = `t=${timestamp},v1=invalid_signature_that_will_not_match`;
+            expect(() => (0, webhooks_1.verifySignature)(payload, signature, secret)).toThrow('Invalid signature');
+        });
+        it('should throw on tampered payload', () => {
+            const timestamp = Date.now();
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const tamperedPayload = JSON.stringify({ type: 'order.cancelled', data: {} });
+            expect(() => (0, webhooks_1.verifySignature)(tamperedPayload, signature, secret)).toThrow('Invalid signature');
+        });
+        it('should respect custom tolerance', () => {
+            const oldTimestamp = Date.now() - 60000; // 1 minute ago
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, oldTimestamp);
+            // Should fail with 30s tolerance
+            expect(() => (0, webhooks_1.verifySignature)(payload, signature, secret, { tolerance: 30000 }))
+                .toThrow('outside tolerance window');
+            // Should pass with 2min tolerance
+            expect((0, webhooks_1.verifySignature)(payload, signature, secret, { tolerance: 120000 })).toBe(true);
+        });
+    });
+    describe('constructEvent', () => {
+        it('should construct event from valid request', () => {
+            const timestamp = Date.now();
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const headers = {
+                'x-signature': signature,
+                'x-timestamp': timestamp.toString(),
+                'x-event-id': 'evt_123',
+                'x-delivery-id': 'dlv_456',
+            };
+            const event = (0, webhooks_1.constructEvent)(payload, headers, secret);
+            expect(event.eventId).toBe('evt_123');
+            expect(event.deliveryId).toBe('dlv_456');
+            expect(event.timestamp).toBe(timestamp);
+            expect(event.type).toBe('order.completed');
+            expect(event.data).toEqual({ orderId: '12345' });
+        });
+        it('should handle uppercase headers', () => {
+            const timestamp = Date.now();
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const headers = {
+                'X-Signature': signature,
+                'X-Timestamp': timestamp.toString(),
+                'X-Event-Id': 'evt_123',
+                'X-Delivery-Id': 'dlv_456',
+            };
+            const event = (0, webhooks_1.constructEvent)(payload, headers, secret);
+            expect(event.eventId).toBe('evt_123');
+        });
+        it('should throw on missing signature header', () => {
+            const headers = {
+                'x-timestamp': Date.now().toString(),
+            };
+            expect(() => (0, webhooks_1.constructEvent)(payload, headers, secret))
+                .toThrow('Missing X-Signature header');
+        });
+        it('should throw on invalid JSON payload', () => {
+            const timestamp = Date.now();
+            const invalidPayload = 'not valid json';
+            const signature = (0, webhooks_1.generateSignature)(invalidPayload, secret, timestamp);
+            const headers = {
+                'x-signature': signature,
+                'x-timestamp': timestamp.toString(),
+            };
+            expect(() => (0, webhooks_1.constructEvent)(invalidPayload, headers, secret))
+                .toThrow('Invalid JSON payload');
+        });
+        it('should handle payload without nested data field', () => {
+            const flatPayload = JSON.stringify({ type: 'test.event', value: 123 });
+            const timestamp = Date.now();
+            const signature = (0, webhooks_1.generateSignature)(flatPayload, secret, timestamp);
+            const headers = {
+                'x-signature': signature,
+                'x-timestamp': timestamp.toString(),
+            };
+            const event = (0, webhooks_1.constructEvent)(flatPayload, headers, secret);
+            expect(event.type).toBe('test.event');
+            expect(event.data).toEqual({ type: 'test.event', value: 123 });
+        });
+        it('should use current timestamp if not provided in headers', () => {
+            const timestamp = Date.now();
+            const signature = (0, webhooks_1.generateSignature)(payload, secret, timestamp);
+            const headers = {
+                'x-signature': signature,
+            };
+            const event = (0, webhooks_1.constructEvent)(payload, headers, secret);
+            expect(event.timestamp).toBeGreaterThan(0);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/client.d.ts

@@ -0,0 +1,103 @@
+import { RailhookConfig, Event, EventResponse, Endpoint, EndpointCreateParams, EndpointUpdateParams, EndpointListParams, Subscription, SubscriptionCreateParams, Delivery, DeliveryAttempt, DeliveryListParams, PaginatedResponse, EndpointTestResult, IncomingSource, IncomingSourceCreateParams, IncomingSourceUpdateParams, IncomingDestination, IncomingDestinationCreateParams, IncomingDestinationUpdateParams, IncomingEvent, IncomingEventListParams, IncomingForwardAttempt, ReplayEventResponse } from './types';
+export declare class Railhook {
+    private readonly apiKey;
+    private readonly baseUrl;
+    private readonly timeout;
+    readonly events: Events;
+    readonly endpoints: Endpoints;
+    readonly subscriptions: Subscriptions;
+    readonly deliveries: Deliveries;
+    readonly incomingSources: IncomingSources;
+    readonly incomingEvents: IncomingEvents;
+    constructor(config: RailhookConfig);
+    request<T>(method: string, path: string, body?: unknown, idempotencyKey?: string): Promise<T>;
+    /**
+     * Generic GET request to any API path.
+     * Use this for endpoints not yet covered by the SDK.
+     */
+    get<T = unknown>(path: string): Promise<T>;
+    /**
+     * Generic POST request to any API path.
+     * Use this for endpoints not yet covered by the SDK.
+     */
+    post<T = unknown>(path: string, body?: unknown, idempotencyKey?: string): Promise<T>;
+    /**
+     * Generic PUT request to any API path.
+     * Use this for endpoints not yet covered by the SDK.
+     */
+    put<T = unknown>(path: string, body?: unknown): Promise<T>;
+    /**
+     * Generic PATCH request to any API path.
+     * Use this for endpoints not yet covered by the SDK.
+     */
+    patch<T = unknown>(path: string, body?: unknown): Promise<T>;
+    /**
+     * Generic DELETE request to any API path.
+     * Use this for endpoints not yet covered by the SDK.
+     */
+    delete<T = void>(path: string): Promise<T>;
+    private extractRateLimitInfo;
+    private handleError;
+}
+declare class Events {
+    private client;
+    constructor(client: Railhook);
+    send(event: Event, idempotencyKey?: string): Promise<EventResponse>;
+}
+declare class Endpoints {
+    private client;
+    constructor(client: Railhook);
+    create(projectId: string, params: EndpointCreateParams): Promise<Endpoint>;
+    get(projectId: string, endpointId: string): Promise<Endpoint>;
+    /**
+     * Lists a project's endpoints.
+     *
+     * The API returns a Spring page envelope here, not a bare array — the
+     * endpoints themselves are in `.content`.
+     */
+    list(projectId: string, params?: EndpointListParams): Promise<PaginatedResponse<Endpoint>>;
+    update(projectId: string, endpointId: string, params: EndpointUpdateParams): Promise<Endpoint>;
+    delete(projectId: string, endpointId: string): Promise<void>;
+    rotateSecret(projectId: string, endpointId: string): Promise<Endpoint>;
+    test(projectId: string, endpointId: string): Promise<EndpointTestResult>;
+}
+declare class Subscriptions {
+    private client;
+    constructor(client: Railhook);
+    create(projectId: string, params: SubscriptionCreateParams): Promise<Subscription>;
+    get(projectId: string, subscriptionId: string): Promise<Subscription>;
+    list(projectId: string): Promise<Subscription[]>;
+    update(projectId: string, subscriptionId: string, params: Partial<SubscriptionCreateParams>): Promise<Subscription>;
+    delete(projectId: string, subscriptionId: string): Promise<void>;
+}
+declare class Deliveries {
+    private client;
+    constructor(client: Railhook);
+    get(deliveryId: string): Promise<Delivery>;
+    list(projectId: string, params?: DeliveryListParams): Promise<PaginatedResponse<Delivery>>;
+    getAttempts(deliveryId: string): Promise<DeliveryAttempt[]>;
+    replay(deliveryId: string): Promise<void>;
+}
+declare class IncomingSources {
+    private client;
+    constructor(client: Railhook);
+    create(projectId: string, params: IncomingSourceCreateParams): Promise<IncomingSource>;
+    get(projectId: string, sourceId: string): Promise<IncomingSource>;
+    list(projectId: string): Promise<PaginatedResponse<IncomingSource>>;
+    update(projectId: string, sourceId: string, params: IncomingSourceUpdateParams): Promise<IncomingSource>;
+    delete(projectId: string, sourceId: string): Promise<void>;
+    createDestination(projectId: string, sourceId: string, params: IncomingDestinationCreateParams): Promise<IncomingDestination>;
+    getDestination(projectId: string, sourceId: string, destinationId: string): Promise<IncomingDestination>;
+    listDestinations(projectId: string, sourceId: string): Promise<PaginatedResponse<IncomingDestination>>;
+    updateDestination(projectId: string, sourceId: string, destinationId: string, params: IncomingDestinationUpdateParams): Promise<IncomingDestination>;
+    deleteDestination(projectId: string, sourceId: string, destinationId: string): Promise<void>;
+}
+declare class IncomingEvents {
+    private client;
+    constructor(client: Railhook);
+    list(projectId: string, params?: IncomingEventListParams): Promise<PaginatedResponse<IncomingEvent>>;
+    get(projectId: string, eventId: string): Promise<IncomingEvent>;
+    getAttempts(projectId: string, eventId: string): Promise<PaginatedResponse<IncomingForwardAttempt>>;
+    replay(projectId: string, eventId: string): Promise<ReplayEventResponse>;
+}
+export {};