refactor: simplify webhook secret headers

This commit is contained in:
Peter Steinberger
2026-04-10 23:49:51 +01:00
parent 8e45398e1d
commit d96c5767c5

View File

@@ -308,15 +308,13 @@ function writeJson(res: ServerResponse, statusCode: number, body: unknown): void
function extractSharedSecret(req: IncomingMessage): string {
const authHeader = Array.isArray(req.headers.authorization)
? String(req.headers.authorization[0] ?? "")
: String(req.headers.authorization ?? "");
? (req.headers.authorization[0] ?? "")
: (req.headers.authorization ?? "");
if (normalizeLowercaseStringOrEmpty(authHeader).startsWith("bearer ")) {
return authHeader.slice("bearer ".length).trim();
}
const sharedHeader = req.headers["x-openclaw-webhook-secret"];
return Array.isArray(sharedHeader)
? String(sharedHeader[0] ?? "").trim()
: String(sharedHeader ?? "").trim();
return Array.isArray(sharedHeader) ? (sharedHeader[0] ?? "").trim() : (sharedHeader ?? "").trim();
}
function timingSafeEquals(left: string, right: string): boolean {