Is your feature request related to a problem? Please describe.
Currently, there is no middleware to validate the authenticity of incoming webhooks. This could lead to security risks as unauthorized requests may be processed.
Describe the solution you'd like
Implement a middleware to validate the signature of all incoming webhook requests. The middleware should:
-
Extract and validate the signature.
-
Allow or block processing based on the result.
-
Log validation results for audit purposes.
-
Follow the strategy pattern for future extensibility.
Describe alternatives you've considered
None, Without this feature, webhooks are processed without signature validation, posing security risks.
Additional context
This middleware will improve security by ensuring that only authenticated webhooks are processed.
Is your feature request related to a problem? Please describe.
Currently, there is no middleware to validate the authenticity of incoming webhooks. This could lead to security risks as unauthorized requests may be processed.
Describe the solution you'd like
Implement a middleware to validate the signature of all incoming webhook requests. The middleware should:
Extract and validate the signature.
Allow or block processing based on the result.
Log validation results for audit purposes.
Follow the strategy pattern for future extensibility.
Describe alternatives you've considered
None, Without this feature, webhooks are processed without signature validation, posing security risks.
Additional context
This middleware will improve security by ensuring that only authenticated webhooks are processed.