webhook

Documentation

Overview

Package webhook delivers events to registered endpoints: HMAC-signed JSON POSTs with bounded retries, exponential backoff, and dead-lettering.

Index

• func ValidateURL(raw string, allowLocal bool) error
• type Deliverer
  • func New(st *store.Store, allowLocal bool, retryBase time.Duration) *Deliverer
  • func (d *Deliverer) Run(ctx context.Context)

Functions

func ValidateURL

func ValidateURL(raw string, allowLocal bool) error

ValidateURL rejects URLs a webhook must not target: non-HTTP schemes and, unless allowLocal, anything resolving to loopback, private, or link-local addresses (SSRF).

Types

type Deliverer

type Deliverer struct {
	St          *store.Store
	AllowLocal  bool
	RetryBase   time.Duration // first retry delay; doubles per attempt
	MaxAttempts int
	// contains filtered or unexported fields
}

func New

func New(st *store.Store, allowLocal bool, retryBase time.Duration) *Deliverer

New builds a deliverer whose dialer re-checks resolved addresses at connect time, so a DNS answer that changes after ValidateURL still cannot reach private space.

func (*Deliverer) Run

func (d *Deliverer) Run(ctx context.Context)

Run polls for due deliveries until ctx is done.