Function verifyAuth

apps/sim/lib/webhooks/providers/incidentio.ts:93–134

({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext)

export const incidentioHandler: WebhookProviderHandler = {
  async verifyAuth({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext): Promise<NextResponse | null> {
    const signingSecret = providerConfig.signingSecret as string | undefined
    if (!signingSecret?.trim()) {
      logger.warn(
        `[${requestId}] incident.io webhook missing signing secret in provider configuration`
      )
      return new NextResponse('Unauthorized - incident.io signing secret is required', {
        status: 401,
      })
    }

    const webhookId = request.headers.get('webhook-id')
    const webhookTimestamp = request.headers.get('webhook-timestamp')
    const webhookSignature = request.headers.get('webhook-signature')

    if (!webhookId || !webhookTimestamp || !webhookSignature) {
      logger.warn(`[${requestId}] incident.io webhook missing Svix signature headers`)
      return new NextResponse('Unauthorized - Missing incident.io signature headers', {
        status: 401,
      })
    }

    if (
      !verifyIncidentioSignature(
        signingSecret,
        webhookId,
        webhookTimestamp,
        webhookSignature,
        rawBody
      )
    ) {
      logger.warn(`[${requestId}] incident.io Svix signature verification failed`)
      return new NextResponse('Unauthorized - Invalid incident.io signature', { status: 401 })
    }

    return null
  },

  async matchEvent({ body, providerConfig, requestId }: EventMatchContext) {
    const triggerId = providerConfig.triggerId as string | undefined