Function linearWebhook

apps/hash-api/src/integrations/linear/webhook.ts:40–188

(req, res)

  string,
  string
> = async (req, res) => {
  const secret = process.env.LINEAR_WEBHOOK_SECRET;

  if (!secret) {
    throw new Error("LINEAR_WEBHOOK_SECRET is not set");
  }

  const expectedSignature = crypto
    .createHmac("sha256", secret)
    .update(req.body)
    .digest("hex");

  const linearSignature = req.headers["linear-signature"];
  if (
    typeof linearSignature !== "string" ||
    !timingSafeCompare(expectedSignature, linearSignature)
  ) {
    res.sendStatus(400);
    return;
  }

  const payload = JSON.parse(req.body) as LinearWebhookPayload;

  const temporalClient = await createTemporalClient();

  const organizationId = payload.organizationId;

  if (!payload.data) {
    res
      .status(400)
      .send(
        `No data sent with ${payload.action} ${payload.type} webhook payload`,
      );
    return;
  }

  const linearId = payload.data.id;

  if (!linearId) {
    res
      .status(400)
      .send(`No ID found in ${payload.action} ${payload.type} webhook payload`);
    return;
  }

  const { graphApi, vaultClient } = req.context;

  if (!vaultClient) {
    logger.error("No vault client found in Linear webhook");
    res.sendStatus(500);
    return;
  }

  const linearBotAccountId = await getMachineIdByIdentifier(
    req.context,
    { actorId: systemAccountId },
    { identifier: "linear" },
  ).then((maybeMachineId) => {