HTTP API: register, list and remove webhooks, kept across restarts (closes #6)

An external app can register webhooks on a chat (`POST /api/v1/chats/{id}/webhooks` with a URL), list them, and remove one. Registering the same URL again returns the existing registration. Registrations are kept in `$DATA_DIR/webhooks.json`, rewritten whole on each change through a file created 0600, synced and renamed, so a crash leaves the old file or the new one; a file present but unreadable stops startup. Delivery of incoming messages is the next unit. Disclosures: the JSON body reading is now one helper shared with the send endpoint; gosec G304 is suppressed on reading the webhooks file; the 0600-from-creation claim rests on `os.CreateTemp`'s source, not a system-call trace. Model: opus-5-5
2026-09-29 08:38:13 +02:00
parent f53b666119
commit 397fc95149
11 changed files with 1018 additions and 47 deletions
@@ -64,8 +64,9 @@ var ErrInvalidConfig = errors.New("invalid configuration")
 // later, so there is exactly one moment at which configuration can be
 // wrong, and it is before anything starts.
 type Config struct {
-	// DataDir holds the SimpleX Chat database: the bot's profile, its
-	// address and its contacts. Losing it loses the address.
+	// DataDir holds the SimpleX Chat database, with the bot's profile,
+	// its address and its contacts, and the API's webhooks. Losing it
+	// loses the address.
 	DataDir string
 	Debug   bool