diff --git a/packages/trpc/server/routers/viewer/webhook/util.ts b/packages/trpc/server/routers/viewer/webhook/util.ts index a898a8d273..971c60fb4b 100644 --- a/packages/trpc/server/routers/viewer/webhook/util.ts +++ b/packages/trpc/server/routers/viewer/webhook/util.ts @@ -45,6 +45,18 @@ export const webhookProcedure = authedProcedure }); if (webhook) { + if (teamId && teamId !== webhook.teamId) { + throw new TRPCError({ + code: "UNAUTHORIZED", + }); + } + + if (eventTypeId && eventTypeId !== webhook.eventTypeId) { + throw new TRPCError({ + code: "UNAUTHORIZED", + }); + } + if (webhook.teamId) { const user = await prisma.user.findFirst({ where: {