- Header: X-Gaiia-Webhook-Signature with t=timestamp,v1=signature format - Signed payload: timestamp.body (not just body) - 5-minute timestamp tolerance to prevent replay attacks - Updated tests to match new 4-arity verify_signature/4 |
||
|---|---|---|
| .. | ||
| channels | ||
| components | ||
| controllers | ||
| graphql | ||
| helpers | ||
| live | ||
| plugs | ||
| changelog_parser.ex | ||
| endpoint.ex | ||
| gettext.ex | ||
| gettext_helpers.ex | ||
| permissions.ex | ||
| plug_exceptions.ex | ||
| router.ex | ||
| telemetry.ex | ||
| user_auth.ex | ||