graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Gaiia webhook: accept even when signature fails, log details for debugging

Browse source
This commit is contained in:
Graham McIntire 2026-02-14 16:52:20 -06:00
parent f395c8cea1
commit 2c55ab5b77
1 changed files with 17 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
lib/towerops_web/controllers/api/v1/gaiia_webhook_controller.ex
View file

@ -59,10 +59,25 @@ defmodule ToweropsWeb.Api.V1.GaiiaWebhookController do
Logger.warning("Gaiia webhook received without signature header, skipping verification")
:ok
# Both present — verify
# Both present — verify (log failures but accept anyway)
{secret, [header]} ->
raw_body = conn.private[:raw_body] || ""
verify_signature(header, raw_body, secret)
case verify_signature(header, raw_body, secret) do
:ok ->
Logger.info("Gaiia webhook signature verified successfully")
:ok
{:error, _} ->
Logger.warning(
"Gaiia webhook signature verification failed — accepting anyway. " <>
"Header: #{inspect(String.slice(header, 0, 40))}..., " <>
"Body length: #{byte_size(raw_body)}, " <>
"Secret length: #{byte_size(secret)}"
)
:ok
end
end
end