Matthew Meszaros ab445e2207 feat: customer webhook subscriptions with hmac signing and retry ...

- webhook_endpoints / webhook_deliveries schema (migration 42)
- service: dispatch + endpoint crud + hmac-sha256 signing
- delivery worker drains queue using FOR UPDATE SKIP LOCKED so multiple
  api replicas can run safely without duplicate dispatch
- exponential backoff (30s → 1h cap, 8 attempts then abandoned)
- REST API under /webhooks: list/create/update/delete/rotate-secret/
  list-deliveries. secret only returned at create + rotate
- header convention matches stripe-style: X-Warmbly-Signature: t=<unix>,v1=<hex>
- legacy header X-Warmbly-Token already renamed; new outbound webhook
  headers are X-Warmbly-Signature / X-Warmbly-Event / X-Warmbly-Event-Id
- wired into email account connect/remove and warmup health transitions;
  campaign/tracking/deliverability call sites will reuse the same
  webhookService.Dispatch interface

2026-05-25 16:03:13 +00:00

..

service_test.go

feat: customer webhook subscriptions with hmac signing and retry

2026-05-25 16:03:13 +00:00

service.go

feat: customer webhook subscriptions with hmac signing and retry

2026-05-25 16:03:13 +00:00