vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 14:50:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

test(voice-call): cover cloudflare twilio signatures

Browse Source
This commit is contained in:
Peter Steinberger
2026-04-25 03:52:29 +01:00
parent 355c92d69b
commit 250acdd2a2
1 changed files with 31 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
extensions/voice-call/src/webhook-security.test.ts
View File

@@ -618,6 +618,37 @@ describe("verifyTwilioWebhook", () => {
expect(result.verificationUrl).toBe(webhookUrl);
});
it("verifies Twilio signatures for Cloudflare Tunnel publicUrl requests", () => {
const authToken = "test-auth-token";
const postBody = "CallSid=CA123&CallStatus=ringing&Direction=inbound&From=%2B15550000000";
const webhookUrl = "https://oc1.example.com/voice/webhook";
const signature = twilioSignature({ authToken, url: webhookUrl, postBody });
const result = verifyTwilioWebhook(
{
headers: {
host: "localhost:8765",
"cf-connecting-ip": "203.0.113.42",
"x-forwarded-proto": "https",
"x-twilio-signature": signature,
},
rawBody: postBody,
url: "http://localhost:8765/voice/webhook",
method: "POST",
remoteAddress: "127.0.0.1",
},
authToken,
{
publicUrl: webhookUrl,
allowedHosts: ["oc1.example.com"],
trustForwardingHeaders: true,
},
);
expect(result.ok).toBe(true);
expect(result.verificationUrl).toBe(webhookUrl);
});
it("rejects X-Forwarded-Host not in allowedHosts whitelist", () => {
const authToken = "test-auth-token";
const postBody = "CallSid=CS123&CallStatus=completed&From=%2B15550000000";