cleanup

Author: maticzav

src/lib/bin/commands/listen.ts

@@ -121,7 +121,7 @@ export const listen = new Command('listen')
       const promises = queue.current.map(async (update) => {
         const body = JSON.stringify(update);
 
-        const signature = await createWebhookSignature({
+        const signature = createWebhookSignature({
           payload: update.payload,
           timestamp: update.timestamp,
           secret,

src/lib/webhooks.ts

@@ -79,24 +79,18 @@ export async function verifyWebhookEventSignature(
       return { ok: false };
     }
 
-    const e = event.data;
-
-    // Create message in the same format as Python: timestamp.payload
-    // Note: Using JSON.stringify with separators and sort_keys equivalent
-    const dump = stringify(e.payload);
-    const message = `${evt.timestamp}.${dump}`;
-
-    // Create HMAC with SHA-256 using the secret
-    const hmac = createHmac('sha256', cfg.secret);
-    hmac.update(message);
-    const signature = hmac.digest('hex');
+    const signature = createWebhookSignature({
+      payload: event.data.payload,
+      timestamp: evt.timestamp,
+      secret: cfg.secret,
+    });
 
     // Compare signatures using timing-safe comparison
     if (evt.signature !== signature) {
       return { ok: false };
     }
 
-    return { ok: true, event: e };
+    return { ok: true, event: event.data };
   } catch (err) {
     console.error(err);
     return { ok: false };
@@ -106,15 +100,15 @@ export async function verifyWebhookEventSignature(
 /**
  * Creates a webhook signature for the given payload, timestamp, and secret.
  */
-export async function createWebhookSignature({
+export function createWebhookSignature({
   payload,
   timestamp,
   secret,
 }: {
   payload: unknown;
   timestamp: string;
   secret: string;
-}): Promise<string> {
+}): string {
   const dump = stringify(payload);
   const message = `${timestamp}.${dump}`;
 

tests/lib/webhooks.test.ts

@@ -73,7 +73,7 @@ describe('webhooks', () => {
         },
       };
 
-      const signature = await createWebhookSignature({
+      const signature = createWebhookSignature({
         payload: MOCK.payload,
         secret: 'secret',
         timestamp,