Function verifyAuth

apps/sim/lib/webhooks/providers/resend.ts:63–90

({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext)

export const resendHandler: WebhookProviderHandler = {
  async verifyAuth({
    request,
    rawBody,
    requestId,
    providerConfig,
  }: AuthContext): Promise<NextResponse | null> {
    const signingSecret = providerConfig.signingSecret as string | undefined
    if (!signingSecret?.trim()) {
      logger.warn(`[${requestId}] Resend webhook missing signing secret in provider configuration`)
      return new NextResponse('Unauthorized - Resend signing secret is required', { status: 401 })
    }

    const svixId = request.headers.get('svix-id')
    const svixTimestamp = request.headers.get('svix-timestamp')
    const svixSignature = request.headers.get('svix-signature')

    if (!svixId || !svixTimestamp || !svixSignature) {
      logger.warn(`[${requestId}] Resend webhook missing Svix signature headers`)
      return new NextResponse('Unauthorized - Missing Resend signature headers', { status: 401 })
    }

    if (!verifySvixSignature(signingSecret, svixId, svixTimestamp, svixSignature, rawBody)) {
      logger.warn(`[${requestId}] Resend Svix signature verification failed`)
      return new NextResponse('Unauthorized - Invalid Resend signature', { status: 401 })
    }

    return null
  },

  matchEvent({ body, providerConfig, requestId }: EventMatchContext): boolean {
    const triggerId = providerConfig.triggerId as string | undefined