[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_165":166,"_167":168},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":49,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":31,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",30,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","e79011b6-27a6-11f0-9edc-569c3dd06744","name","fileType","http","content","import { Buffer } from \"node:buffer\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst XERO_WEBHOOK_SIGNING_KEY = Deno.env.get(\"XERO_WEBHOOK_SIGNING_KEY\");\n\nfunction forbidden() {\n return new Response(null, {\n status: 401,\n statusText: \"Forbidden\",\n });\n}\n\nfunction success(body = null) {\n return new Response(body, {\n status: 200,\n statusText: \"OK\",\n });\n}\n\ntype Handler = (request: Request) => Promise;\n\ntype Middleware = (next: Handler) => Handler;\n\nfunction requireMethod(method: Request[\"method\"]): Middleware {\n return function(next) {\n return function(request) {\n if (request.method !== method) {\n console.warn(`Require ${method} method.`);\n throw forbidden();\n }\n\n return next(request);\n };\n };\n}\n\nfunction validateSignature(signingKey: string): Middleware {\n return function(next) {\n return async function(request) {\n const xXeroSignature = request.headers.get(\"x-xero-signature\") ?? \"\";\n const body = await request.text();\n\n const calculatedSignature = createHmac(\"sha256\", signingKey).update(body).digest(\"base64\");\n\n if (!timingSafeEqual(Buffer.from(xXeroSignature), Buffer.from(calculatedSignature))) {\n console.warn(\"Signatures do not match.\");\n throw forbidden();\n }\n\n return next(request);\n };\n };\n}\n\ntype Chain = {\n add: (middleware: Middleware) => Promise;\n send: (response: Response) => Handler;\n};\n\nasync function chain(): Promise {\n const stack = new Set();\n\n const add = async (middleware: Middleware): Promise => {\n stack.add(middleware);\n return { add, send };\n };\n\n const send = (defaultResponse: Response): Handler => {\n const queue = Array.from(stack);\n let response = defaultResponse;\n\n const getCurrentResponse: Handler = async () => {\n return response;\n };\n\n return async (request) => {\n let middleware: Middleware | undefined;\n\n async function loop() {\n middleware = queue.shift();\n\n if (!middleware) {\n return;\n }\n\n const handler = middleware(getCurrentResponse);\n response = await handler(request);\n }\n\n do {\n await loop();\n } while (middleware);\n\n return response;\n };\n };\n\n return { add, send };\n}\n\nfunction add(middleware: Middleware) {\n return function({ add }: Chain) {\n return add(middleware);\n };\n}\n\nfunction send(response: Response) {\n return function({ send }: Chain) {\n return send(response);\n };\n}\n\nexport default chain()\n .then(add(requireMethod(\"POST\")))\n .then(add(validateSignature(XERO_WEBHOOK_SIGNING_KEY)))\n .then(send(success()));","import { Buffer } from \"node:buffer\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\nconst XERO_WEBHOOK_SIGNING_KEY = Deno.env.get(\"XERO_WEBHOOK_SIGNING_KEY\");\n\nfunction forbidden() {\n return new Response(null, {\n status: 401,\n statusText: \"Forbidden\",\n });\n}\n\nfunction success(body = null) {\n return new Response(body, {\n status: 200,\n statusText: \"OK\",\n });\n}\n\ntype Handler = (request: Request) => Promise;\n\ntype Middleware = (next: Handler) => Handler;\n\nfunction requireMethod(method: Request[\"method\"]): Middleware {\n return function(next) {\n return function(request) {\n if (request.method !== method) {\n console.warn(`Require ${method} method.`);\n throw forbidden();\n }\n\n return next(request);\n };\n };\n}\n\nfunction validateSignature(signingKey: string): Middleware {\n return function(next) {\n return async function(request) {\n const xXeroSignature = request.headers.get(\"x-xero-signature\") ?? \"\";\n const body = await request.text();\n\n const calculatedSignature = createHmac(\"sha256\", signingKey).update(body).digest(\"base64\");\n\n if (!timingSafeEqual(Buffer.from(xXeroSignature), Buffer.from(calculatedSignature))) {\n console.warn(\"Signatures do not match.\");\n throw forbidden();\n }\n\n return next(request);\n };\n };\n}\n\ntype Chain = {\n add: (middleware: Middleware) => Promise;\n send: (response: Response) => Handler;\n};\n\nasync function chain(): Promise {\n const stack = new Set();\n\n const add = async (middleware: Middleware): Promise => {\n stack.add(middleware);\n return { add, send };\n };\n\n const send = (defaultResponse: Response): Handler => {\n const queue = Array.from(stack);\n let response = defaultResponse;\n\n const getCurrentResponse: Handler = async () => {\n return response;\n };\n\n return async (request) => {\n let middleware: Middleware | undefined;\n\n async function loop() {\n middleware = queue.shift();\n\n if (!middleware) {\n return;\n }\n\n const handler = middleware(getCurrentResponse);\n response = await handler(request);\n }\n\n do {\n await loop();\n } while (middleware);\n\n return response;\n };\n };\n\n return { add, send };\n}\n\nfunction add(middleware: Middleware) {\n return function({ add }: Chain) {\n return add(middleware);\n };\n}\n\nfunction send(response: Response) {\n return function({ send }: Chain) {\n return send(response);\n };\n}\n\nconst handler: Handler = await chain()\n .then(add(requireMethod(\"POST\")))\n .then(add(validateSignature(XERO_WEBHOOK_SIGNING_KEY)))\n .then(send(success()));\n\nexport default handler;","createdAt",["D",1718326890409],"branchVersion","branchId","e78d2cee-27a6-11f0-9edc-569c3dd06744","id","e78ce446-27a6-11f0-9edc-569c3dd06744","IntentToReceive",["D",1746225825129],"deletedAt","legacyEnvVars",true,"privacy","public","httpPrivacy","description","imageUrl","cf7ba1fb-8992-4ecd-9ab4-4ef44cc66665","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","d7bf901e-e450-4c54-b42c-9431feb146a3","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",57,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","emarref","handle","displayName","Malcolm","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2F2YXRhcnMuZ2l0aHVidXNlcmNvbnRlbnQuY29tL3UvNTU2NTk0P3Y9NCIsInMiOiJiL2hJeklBMnYvN3czMks4M1pXZDBTcTZhcmpSTjhVWEp1ZGt0Tk9TdUMwIn0","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":161,"_47":-5,"_48":49,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":31,"_57":49,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":162,"_79":163,"_81":164,"_83":25},"tree",[152,153],"files",[152,153],"counts",{"_142":61,"_143":138,"_144":61,"_145":146,"_147":148},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":49,"_38":139,"_13":61,"_33":20,"_35":140,"_24":25,"_133":-5,"_27":141},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"e817451e-27a6-11f0-9edc-569c3dd06744","parentId","latest",["D",1718326890409],29,"label",[28],"e7901558-27a6-11f0-9edc-569c3dd06744","README.md","e79015d0-27a6-11f0-9edc-569c3dd06744",1,["D",1718249450433],"Implements Xero's \"Intent to Receive\" signature validation webhook.\n\nMigrated from folder: xero/webhooks/IntentToReceive",[136],"pulls","branches","forks","envVars",{"_149":61,"_151":61},"connections",{"_149":61,"_150":61},"count","unfilledCount","emptyCount",{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":49,"_38":158,"_13":61,"_33":20,"_35":140,"_24":25,"_133":-5,"_155":159,"_27":160},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":154,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_155":156,"_27":157},["D",1718326890409],"children",[],[28],["D",1718249450433],[],[136],["D",1746225825129],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":198,"_199":200,"_201":202,"_203":25,"_204":25,"_205":25,"_206":49,"_207":-5,"_208":-7,"_209":-7,"_210":61,"_211":25,"_212":25,"_213":-5,"_214":25,"_215":25,"_216":25,"_217":-5},"ENV",{"_169":170,"_171":172,"_173":85,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v30