Webhook secret was stored and shown as plaintext. Use a password field, encrypt at rest (with legacy plaintext read support), and look up tokens via findByWebhookToken so encrypted values still authenticate webhooks. |
||
|---|---|---|
| .. | ||
| auth | ||
| components | ||
| emails | ||
| errors | ||
| invitation | ||
| layouts | ||
| livewire | ||
| server | ||
| source | ||
| v5 | ||
| vendor/mail | ||