@wix/app-extensions 1.0.162 → 1.0.164

package/build/trusted/es/index.d.mts

@@ -27420,11 +27420,18 @@ declare enum SignedPayload {
      * "v0" + ":" + timestamp + ":" + body, where timestamp is the value of timestamp_header
      * verbatim. Requires timestamp_header.
      */
-    VERSION_TIMESTAMP_BODY = "VERSION_TIMESTAMP_BODY"
+    VERSION_TIMESTAMP_BODY = "VERSION_TIMESTAMP_BODY",
+    /**
+     * method + uri + body + timestamp, where method is the HTTP method, uri is the callback URL
+     * Wix issued plus the delivery's query string with HubSpot's twelve reserved escapes decoded,
+     * and timestamp is the value of timestamp_header verbatim, read as epoch milliseconds.
+     * Requires timestamp_header.
+     */
+    METHOD_URI_BODY_TIMESTAMP = "METHOD_URI_BODY_TIMESTAMP"
 }
 /** @enumType */
 /** @internal */
-type SignedPayloadWithLiterals = SignedPayload | 'UNKNOWN_SIGNED_PAYLOAD' | 'RAW_BODY' | 'TIMESTAMP_DOT_RAW_BODY' | 'VERSION_TIMESTAMP_BODY';
+type SignedPayloadWithLiterals = SignedPayload | 'UNKNOWN_SIGNED_PAYLOAD' | 'RAW_BODY' | 'TIMESTAMP_DOT_RAW_BODY' | 'VERSION_TIMESTAMP_BODY' | 'METHOD_URI_BODY_TIMESTAMP';
 /**
  * Per-method payload for the `verification` oneof above. Shared by HMAC_SHA256,
  * HMAC_SHA1, and (wrapped) PUBLIC_KEY - the three methods signatureMethods already groups
@@ -27906,13 +27913,15 @@ interface WebhookConfig extends WebhookConfigVerificationOneOf, WebhookConfigRep
     /**
      * Header carrying the delivery timestamp, used to reject stale and replayed deliveries. For
      * example: "X-Slack-Request-Timestamp". Required by the signed_payload recipes that include a
-     * timestamp, and must be set together with timestamp_tolerance_seconds.
+     * timestamp, and must be set together with timestamp_tolerance_seconds. The header value is read
+     * as epoch seconds, except under METHOD_URI_BODY_TIMESTAMP, which reads it as epoch milliseconds.
      * @maxLength 120
      */
     timestampHeader?: string;
     /**
      * How far the delivery timestamp may be from server time before the delivery is rejected. Must
-     * be greater than zero when timestamp_header is set, and zero when it is not.
+     * be greater than zero when timestamp_header is set, and zero when it is not. Always in seconds,
+     * whatever unit the signed_payload recipe reads timestamp_header in.
      *
      * The tolerance is a floor on replay-protection retention, not only a freshness bound: whatever
      * remembers seen deliveries has to outlive this window, or a delivery still inside its accepted

package/build/trusted/es/index.mjs

@@ -3209,6 +3209,7 @@ var SignedPayload = /* @__PURE__ */ ((SignedPayload2) => {
   SignedPayload2["RAW_BODY"] = "RAW_BODY";
   SignedPayload2["TIMESTAMP_DOT_RAW_BODY"] = "TIMESTAMP_DOT_RAW_BODY";
   SignedPayload2["VERSION_TIMESTAMP_BODY"] = "VERSION_TIMESTAMP_BODY";
+  SignedPayload2["METHOD_URI_BODY_TIMESTAMP"] = "METHOD_URI_BODY_TIMESTAMP";
   return SignedPayload2;
 })(SignedPayload || {});
 var VerificationMethod = /* @__PURE__ */ ((VerificationMethod2) => {