Function verifyAuth

apps/sim/lib/webhooks/providers/clerk.ts:56–83

({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext)

export const clerkHandler: WebhookProviderHandler = {
  async verifyAuth({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext): Promise<NextResponse | null> {
    const signingSecret = providerConfig.signingSecret as string | undefined
    if (!signingSecret?.trim()) {
      logger.warn(`[${requestId}] Clerk webhook missing signing secret in provider configuration`)
      return new NextResponse('Unauthorized - Clerk signing secret is required', { status: 401 })
    }

    const svixId = request.headers.get('svix-id')
    const svixTimestamp = request.headers.get('svix-timestamp')
    const svixSignature = request.headers.get('svix-signature')

    if (!svixId || !svixTimestamp || !svixSignature) {
      logger.warn(`[${requestId}] Clerk webhook missing Svix signature headers`)
      return new NextResponse('Unauthorized - Missing Clerk signature headers', { status: 401 })
    }

    if (!verifySvixSignature(signingSecret, svixId, svixTimestamp, svixSignature, rawBody)) {
      logger.warn(`[${requestId}] Clerk Svix signature verification failed`)
      return new NextResponse('Unauthorized - Invalid Clerk signature', { status: 401 })
    }

    return null
  },

  async matchEvent({ body, providerConfig, requestId }: EventMatchContext): Promise<boolean> {
    const triggerId = providerConfig.triggerId as string | undefined