diff --git a/src/middleware.ts b/src/middleware.ts index d454028..4ca2ed7 100644 --- a/src/middleware.ts +++ b/src/middleware.ts @@ -72,6 +72,13 @@ export const withWebhookSignatureVerified = const { domain: saleorDomain, signature: payloadSignature } = getSaleorHeaders(request.headers); + if (!payloadSignature) { + return Response.BadRequest({ + success: false, + message: "Missing payload signature.", + }); + } + if (secretKey !== undefined) { const calculatedSignature = crypto .createHmac("sha256", secretKey)