management/updater
jtricerolph 568cd8d299 Fix webhook signature verification — raw body capture + Forgejo header support
- fastify-raw-body was never registered, so HMAC ran over re-serialised
  JSON and every Forgejo delivery failed with 401
- accept X-Forgejo-Signature / X-Gitea-Signature (bare hex) as well as
  the GitHub-style sha256= prefix, and reject length mismatches instead
  of crashing timingSafeEqual with a 500

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-05 13:54:37 +00:00
..
src Fix webhook signature verification — raw body capture + Forgejo header support 2026-07-05 13:54:37 +00:00
deploy-map.js Replace static deploy-map with dynamic auth registry 2026-07-01 20:49:39 +00:00
Dockerfile Initial commit: management 2026-07-01 12:09:54 +00:00
package.json Initial commit: management 2026-07-01 12:09:54 +00:00