kovakmedya/isletmem-kovakcrm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: strip polar_whs_ prefix from webhook secret before base64 decode

Browse Source
This commit is contained in:
kovakmedya
2026-05-04 18:26:30 +03:00
parent e8a766c60a
commit 106c33d1b4
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/lib/payments/polar.ts
+3 -2
View File
@@ -70,10 +70,11 @@ export function verifyPolarWebhook(
const signedContent = `${webhookId}.${webhookTimestamp}.${rawBody}`; const signedContent = `${webhookId}.${webhookTimestamp}.${rawBody}`;
// Secret base64 olabilir // Polar secret: "polar_whs_<base64>" — prefix soyulup base64 decode edilir
let secretBytes: Buffer; let secretBytes: Buffer;
try { try {
secretBytes = Buffer.from(WEBHOOK_SECRET.replace(/^whsec_/, ""), "base64"); const raw = WEBHOOK_SECRET.replace(/^(whsec_|polar_whs_)/, "");
secretBytes = Buffer.from(raw, "base64");
} catch { } catch {
secretBytes = Buffer.from(WEBHOOK_SECRET); secretBytes = Buffer.from(WEBHOOK_SECRET);
} }