myeasycms-v2/packages/database-webhooks/src/server/services/verifier/postgres-database-webhook-verifier.service.ts

import * as z from 'zod';

import { DatabaseWebhookVerifierService } from './database-webhook-verifier.service';

const webhooksSecret = z
  .string({
    error: `Provide the variable SUPABASE_DB_WEBHOOK_SECRET. This is used to authenticate the webhook event from Supabase.`,
  })
  .min(1)
  .parse(process.env.SUPABASE_DB_WEBHOOK_SECRET);

export function createDatabaseWebhookVerifierService() {
  return new PostgresDatabaseWebhookVerifierService();
}

class PostgresDatabaseWebhookVerifierService implements DatabaseWebhookVerifierService {
  verifySignatureOrThrow(header: string) {
    if (header !== webhooksSecret) {
      throw new Error('Invalid signature');
    }

    return Promise.resolve(true);
  }
}