dries/ocman
1
0
Fork 1
Code Issues 38 Pull requests 9 Projects Releases 122 Packages Wiki Activity Actions 12

feat: add encrypted relay webhook inboxes #633

Merged
dries merged 1 commit from factory/encrypted-webhook-inboxes into main 2026-09-12 22:01:15 +02:00
Conversation 1 Commits 1 Files changed 6 +899 -35
dries commented 2026-09-12 17:20:37 +02:00
Owner
Copy link

Summary

  • add enrollment-protected webhook inbox registration with role-separated hashed credentials
  • encrypt exact webhook bodies and request metadata to age X25519 recipients before object-store persistence
  • add authenticated snapshot-cursor listing, ciphertext fetch, and idempotent acknowledgment

Testing

  • make test-backend
  • make lint
  • go test -race ./internal/relay ./cmd/ocman-relay
  • go test -cover ./internal/relay
## Summary - add enrollment-protected webhook inbox registration with role-separated hashed credentials - encrypt exact webhook bodies and request metadata to age X25519 recipients before object-store persistence - add authenticated snapshot-cursor listing, ciphertext fetch, and idempotent acknowledgment ## Testing - make test-backend - make lint - go test -race ./internal/relay ./cmd/ocman-relay - go test -cover ./internal/relay
feat: add encrypted relay webhook inboxes
All checks were successful
CI / Frontend (pull_request) Successful in 8m40s
Details
CI / Playwright E2E (pull_request) Successful in 9m36s
Details
CI / Backend (pull_request) Successful in 12m53s
Details
CI / Coverage Results (pull_request) Successful in 24s
Details
CI / Build (pull_request) Successful in 5m31s
Details
CI / Semantic Tag (pull_request) Successful in 6s
Details
870c2a5c3e
dries changed title from WIP: feat: add encrypted relay webhook inboxes to feat: add encrypted relay webhook inboxes 2026-09-12 17:21:13 +02:00
forgejo-actions commented 2026-09-12 17:48:21 +02:00
Copy link

Coverage ratchet: ✅ pass

Suite Baseline This PR Δ
frontend 75.98% 75.98% +0.00 ✅
go 82.80% 82.70% -0.10 ✅

Tolerance: -0.1%. Baseline stored on gh-pages.

<!-- coverage-ratchet --> ### Coverage ratchet: ✅ pass | Suite | Baseline | This PR | Δ | | |---|---|---|---|---| | frontend | 75.98% | 75.98% | +0.00 | ✅ | | go | 82.80% | 82.70% | -0.10 | ✅ | _Tolerance: -0.1%. Baseline stored on `gh-pages`._
dries merged commit 252b956af2 into main 2026-09-12 22:01:15 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
backend

Go backend code

  
bug

Something is broken or incorrect

  
chore

Maintenance, tooling, or cleanup

  
duplication

Code duplication to be addressed

  
effort:complex

Significant effort or risk

  
effort:medium

Moderate effort required

  
effort:trivial

Quick fix, low complexity

  
enhancement

New feature or capability

  
follow-up

Follow-up from a PR review or shipped change

  
frontend

TypeScript / React frontend code

  
fullstack

Touches both backend and frontend

  
priority:high

Should be addressed soon

  
ready-for-agent

Agent-grabbable ticket, fully specced

  
refactor

Code restructuring without behaviour change

  
security

Security related

No labels
backend
bug
chore
duplication
effort:complex
effort:medium
effort:trivial
enhancement
follow-up
frontend
fullstack
priority:high
ready-for-agent
refactor
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
dries/ocman!633
No description provided.