This verifies the webhook event with X-Neynar-Signature and the webhook secret to verify it's coming from Neynar.
Depends on D13755
Details
Details
Tested by triggering a webhook event on warpcast and verifying that isValid was true.
Verified that a webhook event with a differing body resulted in isValid evaluating as false
Diff Detail
Diff Detail
- Repository
- rCOMM Comm
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
| keyserver/src/responders/farcaster-webhook-responders.js | ||
|---|---|---|
| 16 ↗ | (On Diff #45286) | Nit |
| 20 ↗ | (On Diff #45286) | How about signature, to match naming below |
| 34 ↗ | (On Diff #45286) | Nit: don't know if we need the isValid variable... I would just inline the check on line 35 You could probably even inline signature === hmac.digest('hex') directly, to be honest |