basalt / http/src / DEFAULT_RAW_BODY_MAX_BYTES

Variable: DEFAULT_RAW_BODY_MAX_BYTES

> const DEFAULT_RAW_BODY_MAX_BYTES: number

Defined in: http/src/raw-body.ts:16

Default cap on a rawBody body: 1 MiB.

Deliberately small. Every payload this marker exists for — a Stripe, Paddle, Lemon Squeezy, Dropbox, Microsoft Graph or GitHub webhook — is measured in kilobytes, and the endpoint receiving it is unauthenticated by construction (the signature IS the authentication, and it can only be checked once the bytes are in memory). The cap is what stops such an endpoint from being a memory amplifier.