From 2cbdcf7876a3e6bc9510bc0542fdc854f796375c Mon Sep 17 00:00:00 2001
From: Mat Manna <matmanna@outlook.com>
Date: Tue, 14 Jul 2026 22:55:06 -0400
Subject: [PATCH] fix: challenge sig

---
 src/app.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/app.ts b/src/app.ts
index 646fa6c..9740d2e 100644
--- a/src/app.ts
+++ b/src/app.ts
@@ -154,16 +154,16 @@ app.use("/api/*", async (c, next) => {
 // === Slack Events ===
 app.post("/events", async (c) => {
   const body = await c.req.text();
-  if (!verifySignature(c.req.raw, body)) {
-    return c.json({ error: "invalid signature" }, 401);
-  }
-
   const payload = JSON.parse(body);
 
   if (payload.type === "url_verification") {
     return c.text(payload.challenge, 200, { "Content-Type": "text/plain" });
   }
 
+  if (!verifySignature(c.req.raw, body)) {
+    return c.json({ error: "invalid signature" }, 401);
+  }
+
   if (payload.type === "event_callback") {
     const ev = payload.event;
     const store = await getStore();
-- 
2.51.2