djkato/saleor-app-sdk-REDIS_APL
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix unhandled exception when JWS is malformed

Browse source
This commit is contained in:
Jonatan Witoszek 2022-07-14 14:04:27 +02:00
parent 7a04785dcf
commit 8e1e100a02
No known key found for this signature in database
GPG key ID: 17DB8509239AB834
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/middleware.ts
View file

@ -95,12 +95,12 @@ export const withWebhookSignatureVerified = (
signature, signature,
}; };
const jwksKey = await jose.createRemoteJWKSet( const jwks = jose.createRemoteJWKSet(
new URL(jwksUrl(saleorDomain)) new URL(jwksUrl(saleorDomain))
)(jose.decodeProtectedHeader(payloadSignature), jws); ) as jose.FlattenedVerifyGetKey;
try { try {
await jose.flattenedVerify(jws, jwksKey); await jose.flattenedVerify(jws, jwks);
} catch { } catch {
return Response.BadRequest({ return Response.BadRequest({
success: false, success: false,