Middleware should only check POST requests

alexa-js / alexa-verifier-middleware

An express middleware that verifies HTTP requests sent to an Alexa skill are sent from Amazon.

MIT License

31 stars 6 forks source link

Middleware should only check POST requests #12

Closed tejashah88 closed 7 years ago

tejashah88 commented 7 years ago

Re-directed from here

One issue that I just found while testing is that when you do a GET request and the alexa-verifier-middleware is enabled with strict header checking, it gives me a 401 error, which shouldn't happen at all.

One possible fix is that the alexa-verifier-middleware should check what request method is being sent and if it is a POST request, then process the request accordingly. Here is a way to access the request's method from expressjs.

mreinstein commented 7 years ago

@tejashah88 I think this supposed to be an issue for alexa-app

dblock commented 7 years ago

Closed via https://github.com/alexa-js/alexa-app/pull/145.