Andras Bacsai 13a57cc059 fix(webhooks): never lock out manual webhook deliveries with a valid signature ...

The failed-authentication lockout for manual webhooks was checked before
the signature, and the bucket used the client IP from X-Forwarded-For.
An unauthenticated client could send failed attempts with the Git host's
address for a public repository and branch, and correctly signed
deliveries then got 429, so deployments were lost.

The lockout now applies only to deliveries that fail authentication; a
delivery with a valid secret for a matched application is always
processed. Failures are counted per connection address (REMOTE_ADDR, or
CF-Connecting-IP on cloud), so rotating X-Forwarded-For no longer gives
a new bucket.

2026-10-01 07:16:27 +02:00

..

Controllers

fix(webhooks): never lock out manual webhook deliveries with a valid signature

2026-10-01 07:16:27 +02:00

Middleware

refactor(auth): remove OAuth re-authentication for destructive actions

2026-09-30 21:37:02 +02:00

Kernel.php

refactor(http): remove the TrustHosts middleware that never checked the host

2026-09-28 12:00:16 +02:00