Andras BacsaiandClaude Opus 5.5 bbee57a81a fix(webhooks): scope manual webhook lockouts to repository and branch ...

Failed manual webhook deliveries were counted per provider and source
IP. On Coolify Cloud many customers share the Git provider IP, so one
repository with a wrong secret locked out valid deliveries of all
other repositories for 60 seconds.

The failure key now also contains the repository and branch. Guessing
the secret of one application stays limited to 30 tries per minute,
and a lockout rejects all deliveries in that scope, also correct ones.
A GitLab request without a token no longer counts as a failure.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-26 10:40:53 +02:00

..

Concerns

fix(webhooks): scope manual webhook lockouts to repository and branch

2026-09-26 10:40:53 +02:00

Bitbucket.php

fix(webhooks): scope manual webhook lockouts to repository and branch

2026-09-26 10:40:53 +02:00

Gitea.php

fix(webhooks): scope manual webhook lockouts to repository and branch

2026-09-26 10:40:53 +02:00

Github.php

fix(webhooks): scope manual webhook lockouts to repository and branch

2026-09-26 10:40:53 +02:00

Gitlab.php

fix(webhooks): scope manual webhook lockouts to repository and branch

2026-09-26 10:40:53 +02:00

Stripe.php

fix(webhooks): reject incomplete Stripe configuration

2026-09-21 15:35:31 +02:00