fix: secure twilio webhook verification

2026-01-26 16:18:29 +00:00
parent b623557a2e
commit 97200984f8
8 changed files with 41 additions and 23 deletions
--- a/extensions/voice-call/src/webhook-security.ts
+++ b/extensions/voice-call/src/webhook-security.ts
@@ -195,18 +195,6 @@ export function verifyTwilioWebhook(
    verificationUrl.includes(".ngrok-free.app") ||
    verificationUrl.includes(".ngrok.io");

-  if (isNgrokFreeTier && options?.allowNgrokFreeTier) {
-    console.warn(
-      "[voice-call] Twilio signature validation failed (proceeding for ngrok free tier compatibility)",
-    );
-    return {
-      ok: true,
-      reason: "ngrok free tier compatibility mode",
-      verificationUrl,
-      isNgrokFreeTier: true,
-    };
-  }
-
  return {
    ok: false,
    reason: `Invalid signature for URL: ${verificationUrl}`,