Function verifyAuth

apps/sim/lib/webhooks/providers/loops.ts:61–88

({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext)

export const loopsHandler: WebhookProviderHandler = {
  async verifyAuth({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext): Promise<NextResponse | null> {
    const signingSecret = providerConfig.signingSecret as string | undefined
    if (!signingSecret?.trim()) {
      logger.warn(`[${requestId}] Loops webhook missing signing secret in provider configuration`)
      return new NextResponse('Unauthorized - Loops signing secret is required', { status: 401 })
    }

    const webhookId = request.headers.get('webhook-id')
    const timestamp = request.headers.get('webhook-timestamp')
    const signature = request.headers.get('webhook-signature')

    if (!webhookId || !timestamp || !signature) {
      logger.warn(`[${requestId}] Loops webhook missing signature headers`)
      return new NextResponse('Unauthorized - Missing Loops signature headers', { status: 401 })
    }

    if (!verifyLoopsSignature(signingSecret, webhookId, timestamp, signature, rawBody)) {
      logger.warn(`[${requestId}] Loops signature verification failed`)
      return new NextResponse('Unauthorized - Invalid Loops signature', { status: 401 })
    }

    return null
  },

  async matchEvent({ body, requestId, providerConfig }: EventMatchContext): Promise<boolean> {
    const triggerId = providerConfig.triggerId as string | undefined