Function verifyUploadToken

apps/sim/lib/uploads/core/upload-token.ts:49–96

(token: string)

  | { valid: false }

export function verifyUploadToken(token: string): UploadTokenVerification {
  if (typeof token !== 'string') {
    return { valid: false }
  }
  const parts = token.split('.')
  if (parts.length !== 2) return { valid: false }
  const [encoded, signature] = parts
  if (!encoded || !signature) return { valid: false }

  const expected = sign(encoded)
  if (!safeCompare(signature, expected)) {
    return { valid: false }
  }

  let parsed: SignedPayload
  try {
    parsed = JSON.parse(fromBase64Url(encoded)) as SignedPayload
  } catch {
    return { valid: false }
  }

  if (
    parsed.v !== 1 ||
    typeof parsed.exp !== 'number' ||
    parsed.exp < Math.floor(Date.now() / 1000) ||
    typeof parsed.uploadId !== 'string' ||
    typeof parsed.key !== 'string' ||
    typeof parsed.userId !== 'string' ||
    typeof parsed.workspaceId !== 'string' ||
    typeof parsed.context !== 'string'
  ) {
    return { valid: false }
  }

  return {
    valid: true,
    payload: {
      uploadId: parsed.uploadId,
      key: parsed.key,
      userId: parsed.userId,
      workspaceId: parsed.workspaceId,
      context: parsed.context as StorageContext,
      ...(typeof parsed.fileName === 'string' ? { fileName: parsed.fileName } : {}),
      ...(typeof parsed.contentType === 'string' ? { contentType: parsed.contentType } : {}),
      ...(typeof parsed.fileSize === 'number' ? { fileSize: parsed.fileSize } : {}),
    },
  }
}