Jeffrey Paul sneak
sneak closed issue sneak/webhooker#63 2026-08-07 16:15:14 +02:00
Enforce per-webhook event retention (RetentionDays reaper)
sneak merged pull request sneak/webhooker#78 2026-08-07 16:15:14 +02:00
Add per-webhook event retention reaper (closes #63)
sneak pushed to fix/gosec-findings at sneak/pixa 2026-08-07 16:14:22 +02:00
02ca16a68a fix: always set Secure/HttpOnly/SameSite on session cookies (closes #47)
ca15f52dcc test: require Secure/HttpOnly/SameSite on all session cookies
Compare 2 commits »
sneak created branch fix/gosec-findings in sneak/pixa 2026-08-07 16:14:22 +02:00
sneak pushed to issue-63-retention-reaper at sneak/webhooker 2026-08-07 15:45:45 +02:00
d0e73c7e7f Fail startup on an unparseable RETENTION_SWEEP_INTERVAL
sneak deleted branch issue-61-no-store from sneak/webhooker 2026-08-07 15:33:46 +02:00
sneak pushed to main at sneak/webhooker 2026-08-07 15:33:45 +02:00
8ea7f76540 Add NoCache middleware for authenticated pages (closes #61) (#75)
sneak closed issue sneak/webhooker#61 2026-08-07 15:33:45 +02:00
Set Cache-Control: no-store on authenticated pages
sneak merged pull request sneak/webhooker#75 2026-08-07 15:33:45 +02:00
Add NoCache middleware for authenticated pages (closes #61)
sneak commented on issue sneak/webhooker#79 2026-08-07 15:32:54 +02:00
RetentionDays cannot be set to 0 (retain forever) via the normal create path

attempting to set retentiondays to 0 should rewrite this on insert/update to be the 365*1000 value in the db

sneak commented on issue sneak/webhooker#79 2026-08-07 15:32:10 +02:00
RetentionDays cannot be set to 0 (retain forever) via the normal create path

let's use 365*1000 days as the retain-forever value.

sneak commented on pull request sneak/webhooker#78 2026-08-07 15:25:33 +02:00
Add per-webhook event retention reaper (closes #63)

this should fail loudly and prevent server startup if it can't parse the duration string in the env var. your implementation silently fails. bad.

sneak commented on issue sneak/webhooker#77 2026-08-07 15:21:57 +02:00
Refactor delivery targets to a Target interface

why do you think B can't be durable? just give the database to the targets so they can do the same thing the delivery engine could, and they can own their retries. you're being obtuse here.

sneak pushed to issue-63-retention-reaper at sneak/webhooker 2026-08-07 15:19:04 +02:00
f6abc9b392 Add per-webhook event retention reaper (closes #63)
sneak created branch issue-63-retention-reaper in sneak/webhooker 2026-08-07 15:19:04 +02:00
sneak commented on issue sneak/webhooker#77 2026-08-07 15:08:14 +02:00
Refactor delivery targets to a Target interface

No, we have fire-and-forget targets as well as retry targets. The target itself should be responsible for retries and backoff (as required). The log target should log the entire inbound webhook…

sneak commented on pull request sneak/webhooker#76 2026-08-07 15:04:10 +02:00
Implement the log delivery target (closes #70)

the target dispatch should be an interface, and the log target (and all other targets) should be implementations of that interface. i don't want it to just be a function in the dispatcher.

sneak pushed to issue-70-log-target at sneak/webhooker 2026-08-07 14:57:19 +02:00
ed81db137e Implement the log delivery target (closes #70)
sneak created branch issue-70-log-target in sneak/webhooker 2026-08-07 14:57:19 +02:00
sneak pushed to issue-61-no-store at sneak/webhooker 2026-08-07 14:48:58 +02:00
995d1e7a8f Add NoCache middleware for authenticated pages (closes #61)