Dokploy/dokploy
1
0
Fork 0
mirror of https://github.com/Dokploy/dokploy.git synced 2026-06-15 20:25:23 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(webhook): return 401 when signature header is missing

Browse Source
This commit is contained in:
Maks Pikov
2026-04-21 22:03:55 +00:00
parent 4a1b42899b
commit ba3591b3ac
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
apps/dokploy/pages/api/deploy/github.ts
View File

@@ -24,6 +24,11 @@ export default async function handler(
res: NextApiResponse,
) {
const signature = req.headers["x-hub-signature-256"];
if (!signature) {
res.status(401).json({ message: "Missing signature header" });
return;
}
const githubBody = req.body;
if (!githubBody?.installation?.id) {
@@ -50,7 +55,7 @@ export default async function handler(
const verified = await webhooks.verify(
JSON.stringify(githubBody),
signature as string,
signature,
);
if (!verified) {