Skip to content

fix(webhooks): validate Telnyx SMS payload - #196

Open
aiirvizionz wants to merge 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/telnyx-sms-payload-guard
Open

fix(webhooks): validate Telnyx SMS payload#196
aiirvizionz wants to merge 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/telnyx-sms-payload-guard

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • return a controlled 400 response when a Telnyx message.received event has a malformed payload
  • avoid reading phone/text fields from null or array payloads
  • add regression coverage that malformed payloads stop before OTP verification work

Test

  • node node_modules\vitest\vitest.mjs run --config %TEMP%\qryptchat-vitest-minimal.config.mjs "src/app/api/webhooks/telnyx/sms/route.test.js"
  • git diff --check

uGig billing

  • Expected invoice: 0.50 USD if accepted/merged
  • Counted as revenue now: no, pending review/payment

}

const payload = body.data.payload;
if (!payload || typeof payload !== 'object' || Array.isArray(payload)) {
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants