@upstash/qstash 0.0.10 → 0.0.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/esm/consumer.js +3 -1
- package/package.json +1 -1
- package/script/consumer.js +3 -1
package/esm/consumer.js
CHANGED
|
@@ -73,7 +73,9 @@ export class Consumer {
|
|
|
73
73
|
throw new SignatureError("token is not yet valid");
|
|
74
74
|
}
|
|
75
75
|
const bodyHash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(req.body));
|
|
76
|
-
|
|
76
|
+
const padding = new RegExp(/=+$/);
|
|
77
|
+
if (p.body.replace(padding, "") !=
|
|
78
|
+
base64url.encode(bodyHash).replace(padding, "")) {
|
|
77
79
|
throw new SignatureError(`body hash does not match, want: ${p.body}, got: ${base64url.encode(bodyHash)}`);
|
|
78
80
|
}
|
|
79
81
|
return true;
|
package/package.json
CHANGED
package/script/consumer.js
CHANGED
|
@@ -100,7 +100,9 @@ class Consumer {
|
|
|
100
100
|
throw new SignatureError("token is not yet valid");
|
|
101
101
|
}
|
|
102
102
|
const bodyHash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(req.body));
|
|
103
|
-
|
|
103
|
+
const padding = new RegExp(/=+$/);
|
|
104
|
+
if (p.body.replace(padding, "") !=
|
|
105
|
+
base64url.encode(bodyHash).replace(padding, "")) {
|
|
104
106
|
throw new SignatureError(`body hash does not match, want: ${p.body}, got: ${base64url.encode(bodyHash)}`);
|
|
105
107
|
}
|
|
106
108
|
return true;
|