Fixing JWKS remove key resolving logic
This commit is contained in:
parent
8d75699f45
commit
0e1eb8f1e1
2 changed files with 6 additions and 1 deletions
|
@ -41,6 +41,11 @@
|
||||||
"import": "./middleware.mjs",
|
"import": "./middleware.mjs",
|
||||||
"require": "./middleware.js"
|
"require": "./middleware.js"
|
||||||
},
|
},
|
||||||
|
"./urls": {
|
||||||
|
"types": "./urls.d.ts",
|
||||||
|
"import": "./urls.mjs",
|
||||||
|
"require": "./urls.js"
|
||||||
|
},
|
||||||
".": {
|
".": {
|
||||||
"types": "./index.d.ts",
|
"types": "./index.d.ts",
|
||||||
"import": "./index.mjs",
|
"import": "./index.mjs",
|
||||||
|
|
|
@ -97,7 +97,7 @@ export const withWebhookSignatureVerified = (
|
||||||
|
|
||||||
const jwksKey = await jose.createRemoteJWKSet(
|
const jwksKey = await jose.createRemoteJWKSet(
|
||||||
new URL(jwksUrl(saleorDomain))
|
new URL(jwksUrl(saleorDomain))
|
||||||
)(header, payloadSignature);
|
)(jose.decodeProtectedHeader(payloadSignature), jws);
|
||||||
|
|
||||||
try {
|
try {
|
||||||
await jose.flattenedVerify(jws, jwksKey);
|
await jose.flattenedVerify(jws, jwksKey);
|
||||||
|
|
Loading…
Reference in a new issue