chore: rename timestampSeconds to timestampMs in ActionsService

[gjtorikian]

Summary

• Pure rename of a misleading local variable name in ActionsService.VerifyHeader. No behavior change.
• The variable was named timestampSeconds, but it holds the raw t= value parsed from the signature header — which WorkOS sends as a millisecond Unix timestamp — and is compared against DateTimeOffset.UtcNow.ToUnixTimeMilliseconds(). So the math was already correct in milliseconds; only the name was wrong.
• Caught while auditing other backend SDKs after the recent Go SDK fix that addressed the same millisecond-vs-seconds confusion at the parsing layer (workos-go f96ac76). The other SDKs (elixir, kotlin, php, python, ruby, dotnet) all correctly treat t= as ms; the dotnet variable name was the only lingering rough edge.

Test plan

• CI passes (no test changes — this is a rename within a method body)
• No callers reference the variable (it's a local)

🤖 Generated with Claude Code

[greptile-apps]

Greptile Summary

This PR renames the local variable timestampSeconds to timestampMs in ActionsService.VerifyHeader to accurately reflect that the t= field in the WorkOS signature header carries a millisecond Unix timestamp. The tolerance math (tolerance * 1000L) was already correct; only the name was misleading.

Confidence Score: 5/5

Safe to merge — purely a clarifying rename with no behavior change.

Single local variable rename confirmed correct: timestampMs accurately names the millisecond value, and tolerance * 1000L already converts the seconds-based tolerance to milliseconds. No logic, signature computation, or external contract is affected.

No files require special attention.

Important Files Changed

Filename	Overview
src/WorkOS.net/Services/Actions/ActionsService.cs	Pure local variable rename from timestampSeconds to timestampMs in VerifyHeader; no logic changes, no behavior impact.

Sequence Diagram

sequenceDiagram
    participant Caller
    participant VerifyHeader
    participant ParseSignatureHeader
    participant ComputeSignature

    Caller->>VerifyHeader: payload, sigHeader, secret, tolerance
    VerifyHeader->>ParseSignatureHeader: sigHeader
    ParseSignatureHeader-->>VerifyHeader: (timestamp string, signature string)
    VerifyHeader->>VerifyHeader: timestampMs = long.Parse(timestamp)
    VerifyHeader->>VerifyHeader: nowMs = UtcNow.ToUnixTimeMilliseconds()
    VerifyHeader->>VerifyHeader: check |nowMs - timestampMs| > tolerance * 1000
    VerifyHeader->>ComputeSignature: timestamp, payload, secret
    ComputeSignature-->>VerifyHeader: expectedSignature (HMAC-SHA256)
    VerifyHeader->>VerifyHeader: SecureCompare(expectedSignature, signature)
    VerifyHeader-->>Caller: OK or throws InvalidOperationException

Loading

_{Reviews (1): Last reviewed commit: "chore: rename timestampSeconds to timest..." | Re-trigger Greptile}