71 lines
1.5 KiB
Go
71 lines
1.5 KiB
Go
package webhook
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"encoding/base64"
|
|
"io/ioutil"
|
|
"net/http"
|
|
|
|
"google.golang.org/protobuf/encoding/protojson"
|
|
|
|
"github.com/livekit/protocol/auth"
|
|
"github.com/livekit/protocol/livekit"
|
|
)
|
|
|
|
// Receive reads and verifies incoming webhook is signed with key/secret pair
|
|
// closes body after reading
|
|
func Receive(r *http.Request, provider auth.KeyProvider) ([]byte, error) {
|
|
defer r.Body.Close()
|
|
data, err := ioutil.ReadAll(r.Body)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
authToken := r.Header.Get(authHeader)
|
|
if authToken == "" {
|
|
return nil, ErrNoAuthHeader
|
|
}
|
|
|
|
v, err := auth.ParseAPIToken(authToken)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
secret := provider.GetSecret(v.APIKey())
|
|
if secret == "" {
|
|
return nil, ErrSecretNotFound
|
|
}
|
|
|
|
claims, err := v.Verify(secret)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// verify checksum
|
|
sha := sha256.Sum256(data)
|
|
hash := base64.StdEncoding.EncodeToString(sha[:])
|
|
|
|
if claims.Sha256 != hash {
|
|
return nil, ErrInvalidChecksum
|
|
}
|
|
|
|
return data, nil
|
|
}
|
|
|
|
// ReceiveWebhookEvent reads and verifies incoming webhook, and returns a parsed WebhookEvent
|
|
func ReceiveWebhookEvent(r *http.Request, provider auth.KeyProvider) (*livekit.WebhookEvent, error) {
|
|
data, err := Receive(r, provider)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
unmarshalOpts := protojson.UnmarshalOptions{
|
|
DiscardUnknown: true,
|
|
AllowPartial: true,
|
|
}
|
|
event := livekit.WebhookEvent{}
|
|
if err = unmarshalOpts.Unmarshal(data, &event); err != nil {
|
|
return nil, err
|
|
}
|
|
return &event, nil
|
|
}
|