Andras Bacsai bafb9a5a8b refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification ... - Auto-generate a 40-char random secret for each manual_webhook_secret_* column on Application creation so new apps are never left with an empty secret. - Add encrypted cast for the four webhook-secret columns; backfill migration re-encrypts existing plaintext values and fills missing ones. - Reject webhook deliveries when the stored secret is empty (GitHub, GitLab, Bitbucket, Gitea manual endpoints). - Bitbucket: require the sha256 algorithm prefix on X-Hub-Signature instead of trusting the client-supplied algo. - GitLab: drop the ?? '' fallback on the token comparison. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-04-19 12:52:23 +02:00
..
Controllers	refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification	2026-04-19 12:52:23 +02:00
Middleware	fix(subscription): harden quantity updates and proxy trust behavior	2026-03-03 12:28:16 +01:00
Kernel.php	feat: implement TrustHosts middleware to handle FQDN and IP address trust logic	2025-10-15 15:28:21 +02:00