Files
optimclaw/src
ZakiandClaude Opus 4.6 c41e9c899f feat: add POST /api/webhooks/{path} endpoint for routine webhook triggers (#651)
Public endpoint (no auth token) protected by per-routine webhook secrets
with constant-time comparison via subtle::ConstantTimeEq.

Matches path against routines with Trigger::Webhook, validates
X-Webhook-Secret header, and fires the routine through the message
pipeline. Returns 404/401/200 as appropriate.

2 unit tests for secret comparison and path matching.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
2026-03-07 18:02:32 -08:00
..