Skip to main content
Version: Current

CheckFailureReason

@rotorsoft/act-root


@rotorsoft/act-root / act-http/src/receiver / CheckFailureReason

Type Alias: CheckFailureReason

CheckFailureReason = "missing-key" | "empty-body" | "missing-signature" | "missing-timestamp" | "stale" | "future" | "bad-signature"

Defined in: libs/act-http/src/receiver/check.ts:15

Failure reasons returned by checkWebhook. The shape splits client/configuration errors (missing-key, empty-body โ€” HTTP 400) from the five verification failures (authentication errors, HTTP 401) so each maps to its own telemetry bucket. empty-body is the misconfigured-raw-parser signal: secret is set but the resolved body is empty, so hashing it would compute an HMAC over ${ts}. and reject every otherwise-valid signed request with a misleading bad-signature โ€” a distinct config error is far easier to diagnose.