Function verifyLinqSignature

apps/sim/lib/webhooks/providers/linq.ts:30–60

* Verify a Linq webhook signature using the Standard Webhooks scheme. * Linq signs `${webhook-id}.${webhook-timestamp}.${rawBody}` with HMAC-SHA256 using * the base64-decoded `whsec_...` signing secret, and delivers the result as one or * more space-separated `v1, ` signatures in the `webh

(
  secret: string,
  msgId: string,
  timestamp: string,
  signatures: string,
  rawBody: string
)

 * more space-separated `v1,<base64>` signatures in the `webhook-signature` header.
 */
function verifyLinqSignature(
  secret: string,
  msgId: string,
  timestamp: string,
  signatures: string,
  rawBody: string
): boolean {
  try {
    const ts = Number.parseInt(timestamp, 10)
    const now = Math.floor(Date.now() / 1000)
    if (Number.isNaN(ts) || Math.abs(now - ts) > MAX_TIMESTAMP_SKEW_SECONDS) {
      return false
    }

    const secretBytes = Buffer.from(secret.replace(/^whsec_/, ''), 'base64')
    const toSign = `${msgId}.${timestamp}.${rawBody}`
    const expectedSignature = hmacSha256Base64(toSign, secretBytes)

    for (const versionedSig of signatures.split(' ')) {
      const parts = versionedSig.split(',')
      if (parts.length !== 2) continue
      if (safeCompare(parts[1], expectedSignature)) {
        return true
      }
    }
    return false
  } catch (error) {
    logger.error('Error verifying Linq webhook signature:', error)
    return false
  }
}

/** Parse a comma/whitespace-separated list of phone numbers into a clean array. */
function parsePhoneNumbers(value: unknown): string[] {