feat: add per-webhook secret with backfill migration (#13573)

2026-02-26 17:26:12 +05:30
parent 7c60ad9e28
commit c218eff5ec
19 changed files with 319 additions and 78 deletions
--- a/app/models/webhook.rb
+++ b/app/models/webhook.rb
@@ -21,6 +21,9 @@ class Webhook < ApplicationRecord
  belongs_to :account
  belongs_to :inbox, optional: true

+  has_secure_token :secret
+  encrypts :secret if Chatwoot.encryption_configured?
+
  validates :account_id, presence: true
  validates :url, uniqueness: { scope: [:account_id] }, format: URI::DEFAULT_PARSER.make_regexp(%w[http https])
  validate :validate_webhook_subscriptions