n8n-nodes-base 2.2.1 → 2.3.0

package/dist/nodes/Stripe/StripeTriggerHelpers.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifySignature = verifySignature;
+const crypto_1 = require("crypto");
+async function verifySignature() {
+    const credential = await this.getCredentials('stripeApi');
+    if (!credential?.signatureSecret) {
+        return true; // No signature secret provided, skip verification
+    }
+    const req = this.getRequestObject();
+    const signature = req.header('stripe-signature');
+    if (!signature) {
+        return false;
+    }
+    // Parse the Stripe signature header
+    const elements = signature.split(',');
+    let timestamp;
+    let signatureValue;
+    for (const element of elements) {
+        if (element.startsWith('t=')) {
+            timestamp = element.substring(2);
+        }
+        else if (element.startsWith('v1=')) {
+            signatureValue = element.substring(3);
+        }
+    }
+    if (!timestamp || !signatureValue) {
+        return false;
+    }
+    // Verify timestamp
+    const currentTimestamp = Math.floor(Date.now() / 1000);
+    const webhookTimestamp = parseInt(timestamp, 10);
+    const TIMESTAMP_TOLERANCE_SECONDS = 300; // 5 minutes
+    if (Math.abs(currentTimestamp - webhookTimestamp) > TIMESTAMP_TOLERANCE_SECONDS) {
+        return false;
+    }
+    try {
+        if (typeof credential.signatureSecret !== 'string') {
+            return false;
+        }
+        if (!req.rawBody) {
+            return false;
+        }
+        let rawBodyString;
+        if (Buffer.isBuffer(req.rawBody)) {
+            rawBodyString = req.rawBody.toString();
+        }
+        else {
+            rawBodyString = typeof req.rawBody === 'string' ? req.rawBody : JSON.stringify(req.rawBody);
+        }
+        const signedPayload = `${timestamp}.${rawBodyString}`;
+        const hmac = (0, crypto_1.createHmac)('sha256', credential.signatureSecret);
+        hmac.update(signedPayload);
+        const computedSignature = hmac.digest('hex');
+        const computedBuffer = Buffer.from(computedSignature);
+        const providedBuffer = Buffer.from(signatureValue);
+        return (computedBuffer.length === providedBuffer.length &&
+            (0, crypto_1.timingSafeEqual)(computedBuffer, providedBuffer));
+    }
+    catch (error) {
+        return false;
+    }
+}
+//# sourceMappingURL=StripeTriggerHelpers.js.map

package/dist/nodes/Stripe/StripeTriggerHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StripeTriggerHelpers.js","sourceRoot":"","sources":["../../../nodes/Stripe/StripeTriggerHelpers.ts"],"names":[],"mappings":";;AAGA,0CAsEC;AAzED,mCAAqD;AAG9C,KAAK,UAAU,eAAe;IACpC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,CAAC,kDAAkD;IAChE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAEpC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,SAA6B,CAAC;IAClC,IAAI,cAAkC,CAAC;IAEvC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;IACF,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACd,CAAC;IAED,mBAAmB;IACnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,2BAA2B,GAAG,GAAG,CAAC,CAAC,YAAY;IAErD,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,2BAA2B,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACJ,IAAI,OAAO,UAAU,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,aAAqB,CAAC;QAC1B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxC,CAAC;aAAM,CAAC;YACP,aAAa,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,aAAa,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3B,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE7C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEnD,OAAO,CACN,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;YAC/C,IAAA,wBAAe,EAAC,cAAc,EAAE,cAAc,CAAC,CAC/C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC"}