webhook

Jul 16, 2026

Changes in this version

type Event

+ Scope Scope

+ type Scope struct

+ CAID string

type SubStore

+ ListActiveWebhookSubscriptionsForCA func(ctx context.Context, caID string) ([]*models.WebhookSubscription, error)

Jun 23, 2026 GO-2026-5985

  GO-2026-5985: Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` in github.com/forgekeep/nebula-mesh

Jun 15, 2026 GO-2026-5985 +1 more

  GO-2026-5985: Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` in github.com/forgekeep/nebula-mesh

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

Jun 13, 2026 GO-2026-5985 +1 more

  GO-2026-5985: Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private` in github.com/forgekeep/nebula-mesh

  GO-2026-5986: nebula-mesh: Certificate revocation is never enforced at the mesh in github.com/forgekeep/nebula-mesh

Changes in this version

+ const DeliveryHeader

+ const EventHeader

+ const SignatureHeader

+ type Config struct

+ AllowPrivate bool

+ DeliveryTO time.Duration

+ Events []string

+ HMACSecret string

+ HTTPClient *http.Client

+ MaxRetries int

+ NewID func() string

+ Now func() time.Time

+ QueueSize int

+ RetryBackoff time.Duration

+ Source SubscriptionSource

+ URL string

+ type Dispatcher struct

+ func New(cfg Config, logger *slog.Logger) *Dispatcher

+ func (d *Dispatcher) Close()

+ func (d *Dispatcher) Emit(eventType string, data map[string]any)

+ type Emitter interface

+ Emit func(eventType string, data map[string]any)

+ type Event struct

+ CreatedAt time.Time

+ Data map[string]any

+ ID string

+ Type string

+ type StoreSource struct

+ func NewStoreSource(s SubStore, master *keystore.Master, logger *slog.Logger) *StoreSource

+ func (s *StoreSource) RecordDelivery(ctx context.Context, id string, ok bool, errMsg string)

+ func (s *StoreSource) TargetsFor(ctx context.Context, eventType string) ([]Target, error)

+ type SubStore interface

+ ListActiveWebhookSubscriptions func(ctx context.Context) ([]*models.WebhookSubscription, error)

+ RecordWebhookDelivery func(ctx context.Context, id string, ok bool, errMsg string, at time.Time) error

+ type SubscriptionSource interface

+ RecordDelivery func(ctx context.Context, targetID string, ok bool, errMsg string)

+ TargetsFor func(ctx context.Context, eventType string) ([]Target, error)

+ type Target struct

+ AllowPrivate bool

+ ID string

+ Secret []byte

+ URL string