Function validateSentrySignature

apps/sim/lib/webhooks/providers/sentry.ts:21–32

* Sentry signs webhooks with the Internal Integration's Client Secret using * HMAC-SHA256 over the raw request body, delivered in the * `sentry-hook-signature` header as a hex digest. * * @see https://docs.sentry.io/organization/integrations/integration-platform/webhooks/

(secret: string, signature: string, body: string)

 * @see https://docs.sentry.io/organization/integrations/integration-platform/webhooks/
 */
function validateSentrySignature(secret: string, signature: string, body: string): boolean {
  try {
    if (!secret || !signature || !body) {
      return false
    }
    const computedHash = hmacSha256Hex(body, secret)
    return safeCompare(computedHash, signature)
  } catch (error) {
    logger.error('Error validating Sentry signature:', error)
    return false
  }
}

/** Header carrying the resource type that triggered the webhook. */
const SENTRY_RESOURCE_HEADER = 'sentry-hook-resource'