NestJS guard that verifies inbound HMAC-signed requests from Bondi. Apply
with @UseGuards(BondiGuard) on any controller method decorated with
BondiAction.
Critical setup requirement: the NestJS app must be created with
rawBody: true, e.g. NestFactory.create(AppModule, { rawBody: true }),
so the guard can verify against the original byte payload (re-serializing
JSON breaks signatures).
NestJS guard that verifies inbound HMAC-signed requests from Bondi. Apply with
@UseGuards(BondiGuard)on any controller method decorated with BondiAction.Critical setup requirement: the NestJS app must be created with
rawBody: true, e.g.NestFactory.create(AppModule, { rawBody: true }), so the guard can verify against the original byte payload (re-serializing JSON breaks signatures).Example