feat(webhook): log signature rejections before returning 401 #76
Loading…
Reference in a new issue
No description provided.
Delete branch "feat/webhook-signature-logging"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Emit a Warn log at the VerifySignature call site so client 401s
(missing vs bad signature) are visible in the server log, with
remote address and whether a signature header was present.
Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com
Automated review by pr-reviewer v0.35.0 | Safety Check | Mistral Small | tracking id
r-603670-a0d796This is an AI-generated review and may contain mistakes.
Status: ❌ Failed
Review failed. Tracking id
r-603670-a0d796— see logs for details.Comment
@pr-reviewer-bot retryto try again.5545ca2baea9258ccdfd