Feat: express middleware for verifying signature

Question

Feat: express middleware for verifying signature

picsoung opened this issue 4 years ago · 3 comments

Inspired by Twilio middleware https://www.twilio.com/docs/usage/tutorials/how-to-secure-your-express-app-by-validating-incoming-twilio-requests

offer both a middleware and a verifySignature function

Answer 1 · 2023-10-09T14:29:12.000Z

Good idea. It could prevent issues some users are facing when validating the payload themselves.

Answer 2 · 2023-10-09T17:29:46.000Z

@picsoung would you mind testing the version from PR #101 in an actual express project?

Answer 3 · 2023-10-10T08:53:05.000Z

After talking with the team, we decided to move this into a separate lib. This functionality is not related to API client andit also introduces express as a dependency that is not necessary for the client.

I am closing this issue, but I will keep the draft PR #101 around and we can extract the code into a separate lib later.