stream-chat 8.5.0 → 8.7.0

package/src/client.ts

@@ -93,6 +93,7 @@ import {
   GetImportResponse,
   GetMessageAPIResponse,
   GetRateLimitsResponse,
+  GetUnreadCountAPIResponse,
   ListChannelResponse,
   ListCommandsResponse,
   ListImportsPaginationOptions,
@@ -1572,17 +1573,6 @@ export class StreamChat<StreamChatGenerics extends ExtendableGenerics = DefaultG
       channels.push(c);
     }
 
-    if (!offlineMode) {
-      // If the channels are coming from server, then clear out the
-      // previously help offline channels.
-      for (const key in this.activeChannels) {
-        const channel = this.activeChannels[key];
-        if (channel.offlineMode) {
-          delete this.activeChannels[key];
-        }
-      }
-    }
-
     return channels;
   }
 
@@ -1673,6 +1663,10 @@ export class StreamChat<StreamChatGenerics extends ExtendableGenerics = DefaultG
     );
   }
 
+  async getUnreadCount(userID?: string) {
+    return await this.get<GetUnreadCountAPIResponse>(this.baseURL + '/unread', userID ? { user_id: userID } : {});
+  }
+
   /**
    * removeDevice - Removes the device with the given id. Clientside users can only delete their own devices
    *
@@ -2648,7 +2642,13 @@ export class StreamChat<StreamChatGenerics extends ExtendableGenerics = DefaultG
     });
   };
 
-  verifyWebhook(requestBody: string, xSignature: string) {
+  /**
+   * checks signature of a request
+   * @param {string | Buffer} rawBody
+   * @param {string} signature from HTTP header
+   * @returns {boolean}
+   */
+  verifyWebhook(requestBody: string | Buffer, xSignature: string) {
     return !!this.secret && CheckSignature(requestBody, this.secret, xSignature);
   }
 

package/src/signing.ts

@@ -74,13 +74,18 @@ export function DevToken(userId: string) {
 
 /**
  *
- * @param {string} body the signed message
+ * @param {string | Buffer} body the signed message
  * @param {string} secret the shared secret used to generate the signature (Stream API secret)
  * @param {string} signature the signature to validate
  * @return {boolean}
  */
-export function CheckSignature(body: string, secret: string, signature: string) {
-  const key = Buffer.from(secret, 'ascii');
+export function CheckSignature(body: string | Buffer, secret: string, signature: string) {
+  const key = Buffer.from(secret, 'utf8');
   const hash = crypto.createHmac('sha256', key).update(body).digest('hex');
-  return hash === signature;
+
+  try {
+    return crypto.timingSafeEqual(Buffer.from(hash), Buffer.from(signature));
+  } catch {
+    return false;
+  }
 }

package/src/types.ts

@@ -476,6 +476,20 @@ export type GetRepliesAPIResponse<StreamChatGenerics extends ExtendableGenerics
   messages: MessageResponse<StreamChatGenerics>[];
 };
 
+export type GetUnreadCountAPIResponse = APIResponse & {
+  channel_type: {
+    channel_count: number;
+    channel_type: string;
+    unread_count: number;
+  }[];
+  channels: {
+    channel_id: string;
+    last_read: string;
+    unread_count: number;
+  }[];
+  total_unread_count: number;
+};
+
 export type ListChannelResponse<StreamChatGenerics extends ExtendableGenerics = DefaultGenerics> = APIResponse & {
   channel_types: Record<
     string,
@@ -599,6 +613,7 @@ export type ReactionResponse<
 export type ReadResponse<StreamChatGenerics extends ExtendableGenerics = DefaultGenerics> = {
   last_read: string;
   user: UserResponse<StreamChatGenerics>;
+  last_read_message_id?: string;
   unread_messages?: number;
 };