pub struct WebhookConfig {
pub secret_env: String,
pub algorithm: WebhookAlgorithm,
pub signature_header: Option<String>,
pub max_body_bytes: Option<u64>,
pub publish: Option<String>,
}Expand description
Signed inbound-webhook config for a function (FA-5). The verifying secret is a reference to a host env var (never stored plaintext — mirrors site secrets); the endpoint verifies the request signature over the raw body, constant-time, before the guest runs.
Fields§
§secret_env: StringThe host env var holding the shared secret.
algorithm: WebhookAlgorithmSignature scheme (default HMAC-SHA256).
signature_header: Option<String>The header carrying the hex signature (default x-boatramp-signature; a
leading sha256= is accepted and stripped).
max_body_bytes: Option<u64>Max request body accepted before verifying/dispatching (default 1 MiB).
publish: Option<String>If set, a verified webhook publishes its body onto the project bus at
this topic (a consumer subscribes with bus:<topic>) and returns 202,
without running any component — the “external event → the fabric”
ingress, so a quick webhook needs no dedicated wasi:http function. Unset
⇒ the verified webhook invokes the function as before.