livekit-server-sdk/dist/WebhookReceiver.js

Server-side SDK for LiveKit

import { WebhookEvent as ProtoWebhookEvent } from '@livekit/protocol';
import { TokenVerifier } from './AccessToken.js';
export const authorizeHeader = 'Authorize';
export class WebhookEvent extends ProtoWebhookEvent {
    constructor() {
        super(...arguments);
        this.event = '';
    }
    static fromBinary(bytes, options) {
        return new WebhookEvent().fromBinary(bytes, options);
    }
    static fromJson(jsonValue, options) {
        return new WebhookEvent().fromJson(jsonValue, options);
    }
    static fromJsonString(jsonString, options) {
        return new WebhookEvent().fromJsonString(jsonString, options);
    }
}
export class WebhookReceiver {
    constructor(apiKey, apiSecret) {
        this.verifier = new TokenVerifier(apiKey, apiSecret);
    }
    /**
     *
     * @param body string of the posted body
     * @param authHeader `Authorization` header from the request
     * @param skipAuth true to skip auth validation
     * @returns
     */
    async receive(body, authHeader, skipAuth = false) {
        // verify token
        if (!skipAuth) {
            if (!authHeader) {
                throw new Error('authorization header is empty');
            }
            const claims = await this.verifier.verify(authHeader);
            // confirm sha
            const encoder = new TextEncoder();
            const hash = await crypto.subtle.digest('SHA-256', encoder.encode(body));
            const hashDecoded = btoa(Array.from(new Uint8Array(hash))
                .map((v) => String.fromCharCode(v))
                .join(''));
            if (claims.sha256 !== hashDecoded) {
                throw new Error('sha256 checksum of body does not match');
            }
        }
        return WebhookEvent.fromJson(JSON.parse(body), { ignoreUnknownFields: true });
    }
}
//# sourceMappingURL=WebhookReceiver.js.map