Skip to content

1.0.1

Choose a tag to compare

View all tags
@goldnead goldnead released this 05 Aug 06:03
· 96 commits to main since this release
v1.0.1
aa837d8

Fixed

  • [fix] Inbound endpoint route (!/webhooks/inbound/{handle}) now excludes the CSRF
    middleware. It runs in the web middleware group, so real external webhook
    deliveries (which never carry a CSRF token) were rejected with a 419.
    Endpoint authentication is unaffected and still enforced by the configured
    verifier (HMAC, static header, bearer, ...).
Assets 2
Loading