Skip to content

Glitter Connect v1.1.0

Latest
Latest

Choose a tag to compare

View all tags
@glitter-gim glitter-gim released this 25 Oct 08:31
v1.1.0
01b1248

Secure Event Integration & Webhook Management for Gnuboard7

Glitter Connect v1.1.0 introduces enhanced HMAC authentication, secure outbound webhook delivery, and backward-compatible signature protocol versioning.

Highlights

HMAC-SHA256 Signature Protocol v1

  • Added signature protocol v1 for inbound and outbound webhooks.
  • Includes the timestamp, Idempotency-Key, and raw HTTP body in the signature.
  • Uses the v1=<hex> signature format.
  • Enforces a ±300-second timestamp tolerance for inbound requests.
  • Validates event identifiers and prevents conflicting duplicate requests.
  • Rejects invalid v1 signatures without falling back to v0.
  • Preserves legacy v0 compatibility.

New Endpoints and Subscriptions use v1 by default.

Enhanced Outbound Webhook Security

  • HTTPS-only webhook destinations.
  • Private and reserved IP address blocking.
  • DNS resolution validation and destination IP pinning.
  • HTTP redirect prevention.
  • Connection and request timeouts.
  • Response body size limits.
  • Strict outbound v1 event identifier validation.

Invalid v1 events are rejected before transmission.

Reliable Event Delivery

  • Transactional Outbox and Delivery creation.
  • Database-backed event deduplication.
  • Asynchronous Queue processing.
  • Automatic retries for eligible failures.
  • Dead Letter handling.
  • Manual delivery replay.
  • Persistent delivery attempt records.
  • Signature protocol version snapshots for consistent retries and replays.

Connection Signature Policy

Introduced the signature_required configuration.

  • New Connections require signed outbound requests by default.
  • Existing Connections preserve their legacy optional-signature behavior.
  • Missing credentials cannot silently downgrade signature-required deliveries to unsigned requests.

Database Migrations

Four incremental migrations extend the existing schema.

Migration Description Existing Records
000002 Endpoint signature_version v0
000003 Receipt body_sha256 NULL
000004 Connection signature_required false
000005 Subscription and Delivery outbound_signature_version v0

Existing data and legacy protocol configurations are preserved.

Compatibility

Component Value
Platform Gnuboard7
Module ID glitter-connect
Version 1.1.0
PHP Namespace Glitter\Connect
JavaScript Namespace GlitterConnect
License MIT
Developer Glitter.kr

Upgrade Instructions

Back up your database and active module files before upgrading.

For Gnuboard7 installations using the bundled module update workflow:

/usr/local/bin/php83 artisan module:update glitter-connect \
  --source=bundled \
  --vendor-mode=bundled \
  --layout-strategy=keep \
  --force \
  --no-interaction

Adjust the PHP executable path for your environment.

The keep layout strategy is recommended when existing administrator layouts must be preserved.

Important: MariaDB schema changes may not be fully reversible through a module file rollback. Avoid destructive migration rollback commands on production databases.

Operational Requirements

  • Configure the Gnuboard7 Queue Worker and Scheduler.
  • Use HTTPS for outbound webhook destinations.
  • Configure and protect webhook signing Secrets.
  • Verify signature protocol compatibility with connected systems.
  • Protect administrative API traffic and browser network records containing Secrets.
  • Test webhook delivery and retry behavior before enabling production integrations.

Repository

Source: https://github.com/glitter-node/glitter-connect

Release Tag: https://github.com/glitter-node/glitter-connect/releases/tag/v1.1.0

License

Glitter Connect is released under the MIT License.

Copyright © Glitter.kr

Glitter Connect v1.1.0
Secure, reliable, and extensible webhook integration for Gnuboard7.

Assets 4
Loading