Hugh Brown 528a2483b7 feat: add configurable signature_header for webhook HMAC verification ...

Not all webhook providers use X-Hub-Signature-256 or X-Webhook-Signature.
Add an optional signature_header field so users can specify which header
carries the HMAC signature. When set, that exact header is checked;
when unset, the existing auto-detect fallback is preserved. The custom
header is also excluded from stored/exposed payload headers.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:35:10 +05:30

..

api

feat: add configurable signature_header for webhook HMAC verification

2026-03-07 23:35:10 +05:30

core

fix: apply rate limiting to optional agent auth path

2026-03-07 23:35:10 +05:30

db

refactor: reorganize imports and improve code formatting for readability

2026-02-15 13:20:46 +05:30

models

feat: add configurable signature_header for webhook HMAC verification

2026-03-07 23:35:10 +05:30

schemas

feat: add configurable signature_header for webhook HMAC verification

2026-03-07 23:35:10 +05:30

services

chore: simplify and harden security review changes

2026-03-07 23:35:10 +05:30

__init__.py

refactor: update module docstrings for clarity and consistency

2026-02-09 15:49:50 +05:30

main.py

fix: make security headers configurable and add tests

2026-02-24 17:36:44 +01:00