3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	8c5ab00524	Show each entrypoint's last event and event count on the webhook page (closes #393) ... Each entrypoint in the webhook page's entrypoint list now shows when its last event arrived (relative, with the full UTC time on hover), or "never", and how many events arrived through it within the webhook's retention period. Both come from one query per page, grouped by entrypoint, over a new events index on entrypoint_id, deleted_at and created_at, so the page reads only the index entries it counts. Pre-1.0: the index goes into the schema in place. A test checks the database's plan for the statement as the code builds it; another shows two entrypoints with different traffic each with their own figures, an event older than retention left out, and an unused entrypoint reading "never". Model: opus-5-5	2026-10-02 19:56:29 +00:00
clawbot	37b59f8822	Remove inbound request signature verification (closes #279)	2026-08-24 03:25:09 +02:00
clawbot	fcead5d401	Add optional inbound webhook signature verification (closes #67) (#228) ... The receiver had no inbound authentication of any kind: /webhook/{uuid} was mounted behind a rate limiter alone, so the only thing protecting an entrypoint was the secrecy of a v4 UUID in a URL path. Inbound headers are forwarded almost verbatim to the target, so anyone who learned the URL also chose the headers the downstream service received. Adds an optional per-entrypoint secret with two schemes: github (X-Hub-Signature-256, HMAC-SHA256 hex over the raw body) and gitlab (X-Gitlab-Token, a plain shared token). Comparison is constant-time, the HMAC is computed over the raw body before any parsing, and rejection happens before persistence -- an unauthenticated request creates no event row. An entrypoint with no secret behaves exactly as before, including every row that predates this change. The scheme's credential header is stripped from the header map before it is marshalled into Event.Headers, so the GitLab token reaches neither the event store nor any delivery target. SchemeInfo.HeaderIsDigest defaults to false meaning strip, so a scheme added later is protected unless its header is positively declared a digest.	2026-08-20 08:01:32 +02:00