Skip to content

Re-introduce a Webhook endpoint to receive async updates#121

Merged
exarkun merged 12 commits intoPrivateStorageio:mainfrom
wuan:new_payment
Nov 2, 2022
Merged

Re-introduce a Webhook endpoint to receive async updates#121
exarkun merged 12 commits intoPrivateStorageio:mainfrom
wuan:new_payment

Conversation

@wuan
Copy link
Copy Markdown
Contributor

@wuan wuan commented Oct 12, 2022

No description provided.

@meejah
Copy link
Copy Markdown
Collaborator

meejah commented Oct 13, 2022

Not sure if there's a corresponding OP ticket, but I think we should definitely do "signature verification" on all incoming webhooks (this or otherwise) before deploying for real. (github webhooks also have a signature header, didn't check how different it is to stripe's)

@wuan
Copy link
Copy Markdown
Contributor Author

wuan commented Oct 19, 2022

That is what we are going to do. Unfortunately we have to implement it on our side or use another dependency implementing it.

@meejah
Copy link
Copy Markdown
Collaborator

meejah commented Oct 23, 2022

If there's a library, great.
I implemented the github webhook verification in crossbar if you need help (I assume/hope it's similar for Stripe).

@exarkun exarkun merged commit 8f76ae7 into PrivateStorageio:main Nov 2, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants