Fixing JWKS remove key resolving logic
This commit is contained in:
parent
8d75699f45
commit
0e1eb8f1e1
2 changed files with 6 additions and 1 deletions
|
@ -41,6 +41,11 @@
|
|||
"import": "./middleware.mjs",
|
||||
"require": "./middleware.js"
|
||||
},
|
||||
"./urls": {
|
||||
"types": "./urls.d.ts",
|
||||
"import": "./urls.mjs",
|
||||
"require": "./urls.js"
|
||||
},
|
||||
".": {
|
||||
"types": "./index.d.ts",
|
||||
"import": "./index.mjs",
|
||||
|
|
|
@ -97,7 +97,7 @@ export const withWebhookSignatureVerified = (
|
|||
|
||||
const jwksKey = await jose.createRemoteJWKSet(
|
||||
new URL(jwksUrl(saleorDomain))
|
||||
)(header, payloadSignature);
|
||||
)(jose.decodeProtectedHeader(payloadSignature), jws);
|
||||
|
||||
try {
|
||||
await jose.flattenedVerify(jws, jwksKey);
|
||||
|
|
Loading…
Reference in a new issue