@upstash/qstash - npm Package Compare versions

Comparing version 0.0.9 to 0.0.10

esm/consumer.js

@@ -76,3 +76,3 @@ import * as dntShim from "./_dnt.shims.js";
         const bodyHash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(req.body));
-        if (p.body != base64url.encode(bodyHash)) {
+        if (p.body.replaceAll("=", "") != base64url.encode(bodyHash).replace("=", "")) {
             throw new SignatureError(`body hash does not match, want: ${p.body}, got: ${base64url.encode(bodyHash)}`);
@@ -79,0 +79,0 @@ }

package.json

@@ -6,3 +6,3 @@ {
   "name": "@upstash/qstash",
-  "version": "v0.0.9",
+  "version": "v0.0.10",
   "description": "Official Deno/Typescript client for qStash",
@@ -9,0 +9,0 @@ "repository": {

script/consumer.js

@@ -103,3 +103,3 @@ "use strict";
         const bodyHash = await dntShim.crypto.subtle.digest("SHA-256", new TextEncoder().encode(req.body));
-        if (p.body != base64url.encode(bodyHash)) {
+        if (p.body.replaceAll("=", "") != base64url.encode(bodyHash).replace("=", "")) {
             throw new SignatureError(`body hash does not match, want: ${p.body}, got: ${base64url.encode(bodyHash)}`);
@@ -106,0 +106,0 @@ }

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

33120

increased by0.23%

No dependency changes