Function verifyAuth

apps/sim/lib/webhooks/providers/slack.ts:452–488

({ request, rawBody, requestId, providerConfig }: AuthContext)

export const slackHandler: WebhookProviderHandler = {
  verifyAuth({ request, rawBody, requestId, providerConfig }: AuthContext) {
    const signingSecret = providerConfig.signingSecret as string | undefined
    if (!signingSecret) {
      return null
    }

    const signature = request.headers.get('x-slack-signature')
    const timestamp = request.headers.get('x-slack-request-timestamp')

    if (!signature || !timestamp) {
      logger.warn(`[${requestId}] Slack webhook missing signature or timestamp header`)
      return new NextResponse('Unauthorized - Missing Slack signature', { status: 401 })
    }

    const now = Math.floor(Date.now() / 1000)
    const parsedTimestamp = Number(timestamp)
    if (Number.isNaN(parsedTimestamp)) {
      logger.warn(`[${requestId}] Slack webhook timestamp is not a valid number`, { timestamp })
      return new NextResponse('Unauthorized - Invalid timestamp', { status: 401 })
    }
    const skew = Math.abs(now - parsedTimestamp)
    if (skew > SLACK_TIMESTAMP_MAX_SKEW) {
      logger.warn(`[${requestId}] Slack webhook timestamp too old`, {
        timestamp,
        now,
        skew,
      })
      return new NextResponse('Unauthorized - Request timestamp too old', { status: 401 })
    }

    if (!validateSlackSignature(signingSecret, signature, timestamp, rawBody)) {
      logger.warn(`[${requestId}] Slack signature verification failed`)
      return new NextResponse('Unauthorized - Invalid Slack signature', { status: 401 })
    }

    return null
  },

  handleChallenge(body: unknown) {
    return handleSlackChallenge(body)