Jake BarnbyandClaude Opus 4.7 a546c41662 docs(notifications): document _APP_NOTIFICATIONS_WEBHOOK_SECRET ...

Registers the webhook signing secret in app/config/variables.php under a
new Notifications category, threads it through the worker container in
docker-compose.yml and tests/resources/docker/docker-compose.yml, and
adds an empty default to .env so operators see the knob alongside the
existing SMTP block.

When set, outbound webhook deliveries from the notifications worker
include an X-Appwrite-Webhook-Signature header carrying
sha256=<hex(hmac_sha256(timestamp.body, secret))>. When unset, the
worker delivers payloads unsigned — receivers must decide whether to
accept them.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-01 15:51:25 +12:00

..

benchmarks

Improve scopes quality

2026-04-29 13:52:13 +02:00

e2e

test(notifications): e2e coverage for notifications queue health

2026-05-01 15:51:24 +12:00

extensions

chore: bump PHPStan to level 4 and fix all new errors

2026-04-19 17:31:20 +05:30

resources

docs(notifications): document _APP_NOTIFICATIONS_WEBHOOK_SECRET

2026-05-01 15:51:25 +12:00

unit

test(notifications): unit tests for worker and adapters

2026-05-01 15:51:24 +12:00