mirror of
https://github.com/zitadel/zitadel.git
synced 2025-12-06 18:02:46 +00:00
1a7cd6e1af
# Which Problems Are Solved
HTTP Request to HTTP providers for Email or SMS are not signed.
# How the Problems Are Solved
Add a Signing Key to the HTTP Provider resources, which is then used to
generate a header to sign the payload.
# Additional Changes
Additional tests for query side of the SMTP provider.
# Additional Context
Closes #10067
---------
Co-authored-by: Marco A. <marco@zitadel.com>
(cherry picked from commit 8909b9a2a6)
65 lines
1.8 KiB
Go
65 lines
1.8 KiB
Go
package webhook
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/zitadel/logging"
|
|
|
|
"github.com/zitadel/zitadel/internal/notification/channels"
|
|
"github.com/zitadel/zitadel/internal/notification/messages"
|
|
"github.com/zitadel/zitadel/internal/zerrors"
|
|
"github.com/zitadel/zitadel/pkg/actions"
|
|
)
|
|
|
|
const (
|
|
SigningHeader = "ZITADEL-Signature"
|
|
)
|
|
|
|
func InitChannel(ctx context.Context, cfg Config) (channels.NotificationChannel, error) {
|
|
if err := cfg.Validate(); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
logging.Debug("successfully initialized webhook json channel")
|
|
return channels.HandleMessageFunc(func(message channels.Message) error {
|
|
requestCtx, cancel := context.WithTimeout(ctx, 5*time.Second)
|
|
defer cancel()
|
|
msg, ok := message.(*messages.JSON)
|
|
if !ok {
|
|
return zerrors.ThrowInternal(nil, "WEBH-K686U", "message is not JSON")
|
|
}
|
|
payload, err := msg.GetContent()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
req, err := http.NewRequestWithContext(requestCtx, cfg.Method, cfg.CallURL, strings.NewReader(payload))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if cfg.Headers != nil {
|
|
req.Header = cfg.Headers
|
|
}
|
|
req.Header.Set("Content-Type", "application/json")
|
|
if cfg.SigningKey != "" {
|
|
req.Header.Set(SigningHeader, actions.ComputeSignatureHeader(time.Now(), []byte(payload), cfg.SigningKey))
|
|
}
|
|
|
|
resp, err := http.DefaultClient.Do(req)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err = resp.Body.Close(); err != nil {
|
|
return err
|
|
}
|
|
if resp.StatusCode < 200 || resp.StatusCode >= 300 {
|
|
return zerrors.ThrowUnknown(fmt.Errorf("calling url %s returned %s", cfg.CallURL, resp.Status), "WEBH-LBxU0", "webhook didn't return a success status")
|
|
}
|
|
logging.WithFields("calling_url", cfg.CallURL, "method", cfg.Method).Debug("webhook called")
|
|
return nil
|
|
}), nil
|
|
}
|