Validate Forgejo HMAC-SHA256 signature instead of plain secret header

FixAPIService
Shipped
11 Aprili 2026, 21:35 UTC
Author
Kamo
Commit
6636786

Forgejo sends webhook secret as X-Gitea-Signature / X-Forgejo-Signature HMAC-SHA256 hash, not as a plain header value. Read body, verify HMAC, then forward to SecurityService.

All changes

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei