tbenandClaude Opus 5.5
bd9744043e
A bot hook (bot_hooks) is a secret URL, POST /api/hooks/<token>, whose calls queue the hook's brief plus the raw body as a task, per user and bot like a routine. Only the token's hash is kept (shown once, rotatable); an optional HMAC-SHA256 signing secret is stored encrypted. Calls are rate limited per address and per hook, recorded in bot_hook_events (pruned daily), deduplicated by delivery id, and a call while the last run still waits joins its brief instead of queueing another. The payload is fenced data and HookRunNote tells the bot never to take instructions from it; failed runs retry like routines. A hook can instead watch a computer's browser notifications: the app installs a small watcher that owns org.freedesktop.Notifications on the sandbox's session bus, so Chrome hands it every notification (it only looks for that service at start-up, so Chrome is restarted once, never mid-task), and it posts each one to its hooks, optionally filtered. Computers reach the app at COMPUTER_APP_URL or the app container's name. Users make hooks in the conversation's Hooks modal and manage them all on /admin/routines; bots never create or change hooks. Co-Authored-By: Claude Opus 5.5 <[email protected]>
45 lines
1.3 KiB
TypeScript
45 lines
1.3 KiB
TypeScript
import { createHmac, timingSafeEqual } from "node:crypto";
|
|
import type { BotHookSignatureFormat } from "@/src/dict/bot-hook-dict";
|
|
|
|
type Params = {
|
|
/**
|
|
* The raw request body, exactly as received.
|
|
*/
|
|
body: string;
|
|
secret: string;
|
|
/**
|
|
* The signature header's value; missing fails.
|
|
*/
|
|
signature?: string | null;
|
|
format: BotHookSignatureFormat;
|
|
};
|
|
|
|
/**
|
|
* Whether a hook call's HMAC-SHA256 signature of its raw body matches
|
|
* the hook's secret, compared in constant time.
|
|
*/
|
|
export default function verifyHookSignature({ body, secret, signature, format }: Params): boolean {
|
|
if (!signature || !secret) return false;
|
|
|
|
const digest = createHmac("sha256", secret).update(body).digest();
|
|
const given = signature.trim();
|
|
|
|
const received = (() => {
|
|
try {
|
|
if (format == "base64") return Buffer.from(given, "base64");
|
|
|
|
const hex = format == "sha256=hex" ? given.replace(/^sha256=/i, "") : given;
|
|
|
|
if (!/^[0-9a-f]+$/i.test(hex) || hex.length % 2) return null;
|
|
|
|
return Buffer.from(hex, "hex");
|
|
} catch {
|
|
return null;
|
|
}
|
|
})();
|
|
|
|
if (!received || received.length != digest.length) return false;
|
|
|
|
return timingSafeEqual(received, digest);
|
|
}
|