3f5fee20c0
fix: updated based on review
...
- added support for sha512
- added notes to docs
2019-12-17 10:18:08 -07:00
c6e809a1a2
fix: spelling
2019-12-17 10:05:18 -07:00
2088f61cba
fix: simplify implementation
2019-12-17 10:05:18 -07:00
a818e29113
feat: added multiple sig support
2019-12-17 10:05:18 -07:00
8fe6c9a05d
Update version to 2.6.11
2019-12-15 14:30:54 +01:00
7c4e6e94fc
Merge pull request #365 from moorereason/feature/364-constant-time
...
Use constant time string compare for match value
2019-12-11 07:06:12 +01:00
31e76bcd00
Use constant time string compare for match value
...
Fixes #364
2019-12-10 22:22:13 -06:00
c47c06e822
Merge pull request #363 from moorereason/feature/arm64-travisci
...
Add arm64 to Travis CI
2019-12-10 00:23:38 +01:00
bf3d042da6
Use master instead of tip
2019-12-09 16:57:55 -06:00
d05911cdcb
Add arm64 to Travis CI
2019-12-09 16:50:19 -06:00
634ca84807
Merge pull request #362 from moorereason/feature/cipher-suites
...
Feature/cipher suites
2019-12-09 21:52:25 +01:00
8c46a8343b
Document minimum Go release
2019-12-05 17:01:38 -06:00
13d5630e80
Update docs for TLS version and cipher suite options
2019-12-03 21:36:14 -06:00
f1003560f1
Add list cipher suites support
2019-12-03 21:35:16 -06:00
997db04b9f
Require Go 1.12 or newer
...
Go 1.11 does not support TLS 1.3. To simplify cipher suite selection,
we now require at least Go 1.12.
2019-12-03 21:31:23 -06:00
769e743563
Add missing files
2019-12-03 15:21:18 -06:00
43f519a712
Add TLS version and cipher suites options
...
Default to TLS 1.2 and secure cipher suites.
Built for Go 1.13. Code in cipher_suites.go taken from Go tip commit
0ee22d9, which is scheduled for the upcoming Go 1.14 release. Once Go
1.14 is released, we can remove this file and use the stdlib.
Fixes #244
2019-12-03 15:13:12 -06:00
a617b1a6ac
Merge pull request #361 from adnanh/feature/check-payload-hash-sha512
...
Add SHA512 payload check rule
2019-12-02 22:34:07 +01:00
9117f4f6d6
Merge pull request #360 from adnanh/improvement/content-type-based-payload-parsing
...
Fix invalid assumption that multipart forms can be parsed in te same way as urlencoded forms.
2019-12-02 22:33:45 +01:00
b53996f175
Add tests for SHA512 payload hash check rule.
2019-12-02 19:49:56 +01:00
154177e46a
Add documentation for SHA512 payload hash check rule.
2019-12-02 19:49:34 +01:00
d4e98281d7
Add SHA512 payload check rule.
2019-12-02 19:48:59 +01:00
ce186487f4
Format the file using go fmt.
2019-12-02 19:03:38 +01:00
1110f82443
Add test for unsupported content type error message.
2019-12-02 19:01:20 +01:00
a99abd4e6f
Fix invalid assumption in code that multipart forms can be parsed in the same way as urlencoded forms.
...
Refactored code to use switch-case statement over the `Content-Type` header and log unsupported content types instead of silently failing.
Also made the `x-www-form-urlencoded` content type handler more specific (as opposed to the previous code which looked for `form` occurence in the value),
as we need to use different logic for multipart forms, which we'll hopefully implement soon.
The issue with multipart forms that we have to handle first is that the files are being written to temporary files, and as such, for async hooks
webhook cannot guarantee they'll be available after we close the request; that, and the fact that we don't have code that will properly serialize
and pass such Golang objects to the script, as there are several fields which might be interesting to the end user.
2019-12-02 18:49:24 +01:00
8728ec4786
Add help target to Makefile
2019-10-19 23:16:17 +02:00
34ae132930
Bump webhook version to 2.6.10
2019-09-24 19:45:40 +02:00
f993aaa11c
Merge branch 'master' into development
2019-09-24 19:35:31 +02:00
d82e838554
Merge pull request #342 from moorereason/doc-content-type
...
Document incoming-payload-content-type hook setting
2019-09-21 11:50:46 +02:00
9c35aa070c
Document incoming-payload-content-type hook setting
...
As implemented in PR #206
2019-09-20 08:50:44 -05:00
14ee68a06e
Create FUNDING.yml
2019-09-20 01:48:22 +02:00
e0e1dd8ade
Delete appveyor.yml
2019-09-20 01:42:52 +02:00
9852f0f0a5
Merge pull request #341 from moorereason/wintrav
...
Add Windows to Travis CI
2019-09-20 01:41:01 +02:00
2cf3f4e1a8
Add Windows to Travis CI
2019-09-19 08:42:33 -05:00
1cf531b1c3
Merge pull request #339 from moorereason/StatusOK
...
Fix TestWebhook tests
2019-09-19 10:52:44 +02:00
74e55e3089
Update go versions in Travis CI
...
Test against the latest three minor releases.
2019-09-18 17:00:22 -05:00
6c77ff0a2c
Fix TestWebhook tests
...
PR #266 appears to have changed the default response code to StatusOK.
waitForServerReady() was expected a StatusNotFound response, which was
preventing all TestWebhook tests from running.
2019-09-18 16:59:11 -05:00
002c332b68
Merge pull request #327 from dexpota/master
...
Fix issue with relative paths and command execution
2019-09-18 18:07:07 +02:00
ffba396523
Merge pull request #337 from moorereason/iss333
...
Update GetParameter to support keys with dots
2019-09-18 18:02:25 +02:00
b016e99ea6
Update GetParameter to support keys with dots
...
Fixes #333
2019-09-13 13:10:14 -05:00
e47f9afb11
Fix failing ip-whitelist tests
2019-09-13 13:09:44 -05:00
d3fd9bddd9
Fix issue with relative paths and command execution
2019-08-25 20:08:39 +02:00
42b72b028b
Merge pull request #319 from Htbaa/issue-313
...
Replaced fmt.Frpintf calls with fmt.Fprint when there's no formatting…
2019-06-21 22:04:12 +02:00
c6939d57dc
Replaced fmt.Frpintf calls with fmt.Fprint when there's no formatting used
...
This fixes #313
2019-04-24 14:59:38 +02:00
90f751a61d
Merge pull request #266 from aioobe/development
...
Added SuccessHttpResponseCode hook setting
2019-04-17 18:13:25 +02:00
e86c2cf610
Merge branch 'development' into development
2019-04-17 18:11:12 +02:00
0aa7395e21
Merge pull request #304 from johnpmitsch/travis
...
Add travis CI webhook example
2019-02-13 09:53:03 +01:00
3f834f5c3d
Add travis webhook example
2019-02-12 20:51:29 -05:00
5bca86cdb2
Add snap store link to the README.md
2019-02-12 10:29:39 +01:00
896d1608ca
Merge pull request #297 from moorereason/iss207
...
Return errors on empty secrets during signature validations
2019-01-08 09:30:08 +01:00
Wyatt Johnson