3 Commits

Include renames

Author	SHA1	Message	Date
Nick Szaunig	a0f7573af5	fix(backend): block SSRF via webhook subscription URLs ... WebhooksService.create() rejected obviously private, loopback, or link-local URLs (incl. cloud metadata 169.254.169.254 and the decimal/octal/hex IPv4 shorthand encodings the WHATWG URL parser normalizes) so an admin-configured webhook can no longer be used to proxy requests into internal infrastructure. Registration-time only, no DNS resolution (DNS-rebinding is out of scope for this check).	2026-08-23 07:05:53 +02:00
Nick Szaunig	2458927d38	fix(backend): DELETE /webhooks/:id returns 204 No Content ... Matches REST convention and the frontend api-client's existing 204 fast-path, avoiding a JSON-parse crash on an empty response body.	2026-08-23 06:58:13 +02:00
Nick Szaunig	59fdc816a0	feat(backend): Webhooks mit HMAC-signierter Auslieferung (Modul 28) ... WebhooksModule (WebhookSubscription: URL, Events, Secret, aktiv) mit Event-Dispatcher, angehaengt an 10 Ereignisse in 8 bestehenden Services (colony.created, inspection.created, queen.created, queen.replaced, harvest.created, batch.created, batch.updated, product.stock_changed, task.created, task.completed). Auslieferung ist best-effort und blockiert die ausloesende Anfrage nicht bei Fehlern.	2026-08-23 06:56:56 +02:00