refactor: rollback signature verification

actions/webhook.ts

@@ -23,6 +23,15 @@ export default async function action(
   req: Request,
   ctx: AppContext & DrizzleContext,
 ) {
+  const signature = req.headers.get("x-hub-signature-256");
+
+  if (!signature) {
+    console.error("Signature is missing. Request Headers:", req.headers);
+    return new Response("Signature is missing", {
+      status: STATUS_CODE.BadRequest,
+    });
+  }
+
   if (!("repository" in props) || !props.repository) {
     console.error("Repository is missing. Request Body:", props);
     return new Response("Repository is missing", {
@@ -60,11 +69,9 @@ export default async function action(
   }
 
   const secret = project.github.webhook_secret?.get();
-  const signature = req.headers.get("x-hub-signature-256");
 
   if (
     secret &&
-    signature &&
     !(await verify(secret, JSON.stringify(props), signature))
   ) {
     console.error("Invalid signature. Data:", { project, props });

deno.json

@@ -66,6 +66,6 @@
     "jsx": "react-jsx",
     "jsxImportSource": "preact"
   },
-  "version": "0.2.1",
+  "version": "0.2.2",
   "lock": false
 }