Skip to content

Commit f9d5f2c

Browse files
committed
fix(webhooks): read webhookSecret for jira, linear, and github signature verification
These providers define their secret subBlock with id: 'webhookSecret' but the processor was reading providerConfig.secret which is always undefined, silently skipping signature verification even when a secret is configured.
1 parent aaa9d16 commit f9d5f2c

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

apps/sim/lib/webhooks/processor.ts

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -609,7 +609,7 @@ export async function verifyProviderAuth(
609609
}
610610

611611
if (foundWebhook.provider === 'linear') {
612-
const secret = providerConfig.secret as string | undefined
612+
const secret = providerConfig.webhookSecret as string | undefined
613613

614614
if (secret) {
615615
const signature = request.headers.get('Linear-Signature')
@@ -684,7 +684,7 @@ export async function verifyProviderAuth(
684684
}
685685

686686
if (foundWebhook.provider === 'jira') {
687-
const secret = providerConfig.secret as string | undefined
687+
const secret = providerConfig.webhookSecret as string | undefined
688688

689689
if (secret) {
690690
const signature = request.headers.get('X-Hub-Signature')
@@ -734,7 +734,7 @@ export async function verifyProviderAuth(
734734
}
735735

736736
if (foundWebhook.provider === 'github') {
737-
const secret = providerConfig.secret as string | undefined
737+
const secret = providerConfig.webhookSecret as string | undefined
738738

739739
if (secret) {
740740
// GitHub supports both SHA-256 (preferred) and SHA-1 (legacy)

0 commit comments

Comments
 (0)