Order vendors' webhook keys stored encrypted

Shipped

November 8, 2026 at 3:12 AM UTC

Author

Kamo

Commit

809c173

Every catalogued webhookSecret is now a CONFIG_SECRET (encrypted, write-only). **************** cipher) gives a webhook verifier a detached copy with the keys decrypted; a key saved in plain text before this passes through unchanged, so existing connections keep verifying.