mirror of
https://github.com/DRYTRIX/TimeTracker.git
synced 2026-05-19 12:50:11 -05:00
7e059a0a52
- When webhook_secret is set in Jira integration, verify incoming webhooks via X-Hub-Signature-256, X-Atlassian-Webhook-Signature, or X-Hub-Signature - Reject requests with missing or invalid signature; no secret = accept all (unchanged) - Add webhook_secret password field to Connection Settings in Jira config - Add tests for verification success, missing sig, and invalid sig