multipleof4/KalBot
1
0
Fork 0
mirror of https://github.com/multipleof4/KalBot.git synced 2026-03-16 21:41:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix: Strip query params from path before signing

Browse Source
This commit is contained in:
multipleof4
2026-03-16 12:12:44 -07:00
parent 4b403e4aba
commit 00e613e27a
1 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
lib/kalshi/auth.js
View File

@@ -5,18 +5,13 @@ const KALSHI_API_BASE = (process.env.KALSHI_API_BASE || DEFAULT_KALSHI_API_BASE)
function normalizePrivateKey(value) {
if (!value) return '';
let key = String(value).trim();
// Strip accidental wrapping quotes from env UIs
if (
(key.startsWith('"') && key.endsWith('"')) ||
(key.startsWith("'") && key.endsWith("'"))
) {
key = key.slice(1, -1);
}
// Normalize line breaks from various env formats
return key
.replace(/\\r\\n/g, '\n')
.replace(/\r\n/g, '\n')
@@ -36,10 +31,17 @@ export function signRequest(method, path, timestampMs = Date.now()) {
throw new Error('Missing KALSHI_API_KEY_ID or KALSHI_RSA_PRIVATE_KEY');
}
const ts = String(timestampMs);
const message = `${ts}${method.toUpperCase()}${path}`;
// Strip query parameters before signing per Kalshi docs
const pathWithoutQuery = path.split('?')[0];
const signature = crypto.sign('sha256', Buffer.from(message), {
const ts = String(timestampMs);
const message = `${ts}${method.toUpperCase()}${pathWithoutQuery}`;
const sign = crypto.createSign('RSA-SHA256');
sign.update(message);
sign.end();
const signature = sign.sign({
key: privateKeyPem,
padding: crypto.constants.RSA_PKCS1_PSS_PADDING,
saltLength: crypto.constants.RSA_PSS_SALTLEN_DIGEST