Not all webhook providers use X-Hub-Signature-256 or X-Webhook-Signature. Add an optional signature_header field so users can specify which header carries the HMAC signature. When set, that exact header is checked; when unset, the existing auto-detect fallback is preserved. The custom header is also excluded from stored/exposed payload headers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
964 B
964 B