Josep Piguillem 5ae1d05d30 fix(api): accept Pireon webhooks from the password client too ...

Pireon signs each webhook with the secret of the client that registered
it, and the API has two clients (the web app's and the password
grant's). Only PIREON_WEBHOOK_SECRET was accepted, so a token revoked
for someone signed in with a password went unheard. A delivery now
verifies with PIREON_WEBHOOK_SECRET or PIREON_PASSWORD_WEBHOOK_SECRET;
the same event arriving from both clients changes nothing.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 13:29:27 +02:00

..

e2e

fix(api): typed OpenAPI query params and not-found messages that hide private projects

2026-10-07 18:59:38 +02:00

scripts

feat: attachments on tickets and comments

2026-10-08 08:35:33 +02:00

src

fix(api): accept Pireon webhooks from the password client too

2026-10-09 13:29:27 +02:00

eslint.config.mjs

first commit

2026-10-03 13:40:26 +02:00

jest.config.cts

first commit

2026-10-03 13:40:26 +02:00

jest.e2e.config.cts

first commit

2026-10-03 13:40:26 +02:00

openapi.json

fix(api): accept Pireon webhooks from the password client too

2026-10-09 13:29:27 +02:00

package.json

fix: ship nodemailer in the API image

2026-10-08 19:58:06 +02:00

project.json

feat: attachments on tickets and comments

2026-10-08 08:35:33 +02:00

schema.gql

feat: tickets I follow, and more news for followers

2026-10-09 11:29:17 +02:00

tsconfig.app.json

first commit

2026-10-03 13:40:26 +02:00

tsconfig.json

first commit

2026-10-03 13:40:26 +02:00

tsconfig.spec.json

first commit

2026-10-03 13:40:26 +02:00

webpack.config.js

first commit

2026-10-03 13:40:26 +02:00