Hugh Brown 4d1dbb4098 security: add HMAC signature verification to webhook ingest ...

Webhook ingest endpoint was completely unauthenticated. Add an optional
`secret` field to BoardWebhook. When configured, inbound requests must
include a valid HMAC-SHA256 signature in X-Hub-Signature-256 or
X-Webhook-Signature headers. Uses hmac.compare_digest for timing safety.
Includes migration to add the secret column.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:35:10 +05:30

..

__init__.py

feat: add skill pack management features including creation, editing, and syncing

2026-02-13 22:23:47 +00:00

activity_events.py

redesigned dashboard page

2026-03-04 16:01:56 +05:30

agents.py

style: format code for improved readability and consistency across multiple files

2026-02-15 03:02:54 +05:30

approvals.py

feat: add lead_reasoning field to ApprovalCreate and update validation logic

2026-02-13 21:34:08 +05:30

board_group_heartbeat.py

feat(heartbeat): change default target to 'last' and remove target option from UI

2026-02-15 01:37:12 +05:30

board_group_memory.py

refactor: standardize runtime annotation types across multiple files

2026-02-09 17:24:21 +05:30

board_groups.py

refactor: standardize runtime annotation types across multiple files

2026-02-09 17:24:21 +05:30

board_memory.py

refactor: standardize runtime annotation types across multiple files

2026-02-09 17:24:21 +05:30

board_onboarding.py

refactor: simplify code formatting and improve readability across multiple files

2026-02-09 20:44:05 +05:30

board_webhooks.py

security: add HMAC signature verification to webhook ingest

2026-03-07 23:35:10 +05:30

boards.py

feat(boards): add 'comment_required_for_review' rule and update related logic

2026-02-26 00:31:47 +05:30

common.py

refactor: update module docstrings for clarity and consistency

2026-02-09 15:49:50 +05:30

errors.py

Document blocked-task 409 error code in OpenAPI + add regression tests

2026-03-04 22:46:44 +05:30

gateway_api.py

refactor(gateway): update gateway parameters to use None as default #169

2026-03-03 01:51:52 +05:30

gateway_coordination.py

style: format code for improved readability and consistency across multiple files

2026-02-15 03:02:54 +05:30

gateways.py

Merge branch 'master' into copilot/feature-allow-self-signed-tls

2026-02-22 19:51:27 +05:30

health.py

feat: add health check endpoint for agent authentication status

2026-02-16 00:42:15 +05:30

metrics.py

redesigned dashboard page

2026-03-04 16:01:56 +05:30

organizations.py

refactor: standardize runtime annotation types across multiple files

2026-02-09 17:24:21 +05:30

pagination.py

refactor: replace DefaultLimitOffsetPage with LimitOffsetPage in multiple files and update timezone handling to use UTC

2026-02-09 20:40:17 +05:30

skills_marketplace.py

refactor(models): replace ConfigDict with SQLModelConfig for model configuration

2026-02-15 02:16:17 +05:30

souls_directory.py

refactor: update module docstrings for clarity and consistency

2026-02-09 15:49:50 +05:30

tags.py

feat(tags): add tag management interfaces and update related schemas

2026-02-12 18:35:48 +05:30

task_custom_fields.py

fix(agent): improve error handling for get_agent_soul method

2026-03-03 03:09:29 +05:30

tasks.py

feat: add custom-fields

2026-02-13 21:24:36 +05:30

users.py

feat(api): enhance authentication and health check endpoints with detailed responses and descriptions

2026-02-15 02:35:31 +05:30

view_models.py

feat(tags): add tag management interfaces and update related schemas

2026-02-12 18:35:48 +05:30