fix(webhook): replace hooks when signing secret changes #112
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/webhook-secret-rotation"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Forgejo 16 accepts webhook secret edits but does not apply them. Replace the hook when its HMAC secret changes, and roll back the replacement if old-hook removal fails.
The regression test models Forgejo 16 and proves list, create, delete behavior.