my website at ewancroft.uk
fix(webhook): pass tokens directly to parseWebhook instead of bridging process.env
+11
-17
+1
-1
package.json
+1
-1
package.json
+5
-5
pnpm-lock.yaml
+5
-5
pnpm-lock.yaml
···
18
18
specifier: ^0.1.0
19
19
version: 0.1.0
20
20
'@ewanc26/supporters':
21
-
specifier: ^0.1.3
22
-
version: 0.1.3(@atproto/api@0.18.21)(svelte@5.53.8)
21
+
specifier: ^0.1.4
22
+
version: 0.1.4(@atproto/api@0.18.21)(svelte@5.53.8)
23
23
'@ewanc26/tid':
24
24
specifier: ^1.1.1
25
25
version: 1.1.1
···
425
425
'@ewanc26/noise-avatar@0.1.0':
426
426
resolution: {integrity: sha512-T7a1zYaie2GkL6Fe3OKWDxJr68pu/nWrObwI8LPjRsaJiV432Tt9l5pGppb869CfNYEtUTLoGhgXL+RrPnNBKw==}
427
427
428
-
'@ewanc26/supporters@0.1.3':
429
-
resolution: {integrity: sha512-CxpKRdRlY+FOsInWXyeaLxGRLVM4IJDTQv6GoQB9Z+mlv9DJSA+Xw4d4L3WCINThkCsLLR4YX78g911SybK6RQ==}
428
+
'@ewanc26/supporters@0.1.4':
429
+
resolution: {integrity: sha512-ZsnhX4I1Z65TmisbCCAfkljEFnY0nuLDookQgly6Uz8q3NI56rjD6SYJvePDwTn3dXiHx98B+P8+occoBvL5fw==}
430
430
peerDependencies:
431
431
'@atproto/api': '>=0.13.0'
432
432
svelte: ^5.0.0
···
1511
1511
1512
1512
'@ewanc26/noise-avatar@0.1.0': {}
1513
1513
1514
-
'@ewanc26/supporters@0.1.3(@atproto/api@0.18.21)(svelte@5.53.8)':
1514
+
'@ewanc26/supporters@0.1.4(@atproto/api@0.18.21)(svelte@5.53.8)':
1515
1515
dependencies:
1516
1516
'@atproto/api': 0.18.21
1517
1517
'@ewanc26/tid': 1.1.1
+5
-11
src/routes/webhook/+server.ts
+5
-11
src/routes/webhook/+server.ts
···
10
10
userAgent: request.headers.get('user-agent')
11
11
});
12
12
13
-
// The supporters package reads auth config from process.env directly;
14
-
// bridge SvelteKit's private env into it before any calls.
15
-
process.env.KOFI_VERIFICATION_TOKEN = env.KOFI_VERIFICATION_TOKEN;
16
-
if (env.KOFI_TEST_TOKEN) process.env.KOFI_TEST_TOKEN = env.KOFI_TEST_TOKEN;
13
+
// Bridge SvelteKit's private env into process.env for the supporters package.
17
14
process.env.ATPROTO_DID = PUBLIC_ATPROTO_DID;
18
15
process.env.ATPROTO_APP_PASSWORD = env.ATPROTO_APP_PASSWORD;
19
16
20
-
console.log('[webhook] env check', {
21
-
hasVerificationToken: !!env.KOFI_VERIFICATION_TOKEN,
22
-
hasDid: !!PUBLIC_ATPROTO_DID,
23
-
hasAppPassword: !!env.ATPROTO_APP_PASSWORD
24
-
});
25
-
26
17
let payload;
27
18
try {
28
-
payload = await parseWebhook(request);
19
+
payload = await parseWebhook(request, {
20
+
secret: env.KOFI_VERIFICATION_TOKEN,
21
+
...(env.KOFI_TEST_TOKEN ? { testToken: env.KOFI_TEST_TOKEN } : {})
22
+
});
29
23
console.log('[webhook] parsed payload', {
30
24
type: payload.type,
31
25
from: payload.from_name,