QRun-IO/qbit-cdn
3
0 Fork 0
Code Issues 2 Pull Requests 5 Actions Packages Projects Releases 10 Wiki Activity

feat(revalidation): core WebhookSigner + SafeHttpClient for hooks (#15) #16

Merged
KofTwentyTwo merged 1 commits from feature/arch-core-signer into develop 2026-10-14 00:36:56 +00:00
Conversation 0 Commits 1 Files Changed 10
+350 -55
1 Commits
Author SHA1 Message Date
james.maesandClaude Opus 5.5 7510392166 feat(revalidation): sign hooks with core WebhookSigner and the safe HTTP client 
Replace the hand-rolled HMAC in RevalidationHookRunner with core
WebhookSigner (Standard Webhooks) from QQQ 4.1.0-RC.5, and send through
core SafeHttpClient.

New cdn_revalidation_hook fields:
- signatureFormat: STANDARD_WEBHOOKS (the default for new rows) or LEGACY,
  which keeps X-Revalidate-Signature byte-for-byte. A null format, as on
  existing rows, stays LEGACY.
- allowPlainHttp and internalAllowlist: explicit exceptions to the SSRF
  policy.

Closes #15 (architecture review QRun-IO/qqq#1150, finding F11).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-13 19:33:36 -05:00