82dd75d2e9
Fix Gaiia webhook (no signature), sites page with table + insights
2026-02-14 16:07:26 -06:00
05cdc79124
Fix Gaiia webhook: eventName field, payload extraction, add header logging
2026-02-14 15:40:06 -06:00
a028695d3b
format
2026-02-14 13:57:25 -06:00
950f4d9ae0
fix: implement Gaiia webhook signature verification per their spec
...
- Header: X-Gaiia-Webhook-Signature with t=timestamp,v1=signature format
- Signed payload: timestamp.body (not just body)
- 5-minute timestamp tolerance to prevent replay attacks
- Updated tests to match new 4-arity verify_signature/4
2026-02-14 13:37:26 -06:00
bad1590fed
add gaiia webhook listener with per-org signature verification
...
Stage 3 of Gaiia integration: webhook event processing for real-time
incremental updates from Gaiia. HMAC-SHA256 signature verification
using per-organization secrets stored in integration credentials.
Handles account, billing subscription, and inventory item events.
2026-02-13 10:40:49 -06:00
