New Features
- Added
webhookVerifierfor trusted forwarding gateways. 馃攼 You can now verify incoming iMessage webhooks yourself, reject bad requests, accept the original body, or return a verified replacement body before parsing.
Bug Fixes
- Webhook verification now follows one consistent path for Spectrum signatures and trusted forwarders. Failed custom verification returns
401and does not process the message.
Improvement
- Updated webhook docs and setup errors to make it clear that you need either
IMESSAGE_WEBHOOK_SECRETorwebhookVerifier. Custom verifiers take priority when both are configured.
Version: 3.2.0