Class: InboundWebhooksController

Inherits:
ActionController::API
  • Object
show all
Defined in:
lib/generators/open_loam/install/templates/inbound_webhooks_controller.rb

Overview

Public endpoint that receives webhooks FROM external systems at /webhooks/:token. No session, no bearer token: the HMAC signature is the auth (ActionController::API, so there is no CSRF to skip). All the verified, replay-resistant work lives in OpenLoam::InboundWebhooks.ingest; this controller only maps its Result to an HTTP status and never leaks tenant context to the next request on this thread.

Instance Method Summary collapse

Instance Method Details

#receive ⇒ Object 



8
9
10
11
12
13
14
15
16
 
# File 'lib/generators/open_loam/install/templates/inbound_webhooks_controller.rb', line 8

def receive
  result = OpenLoam::InboundWebhooks.ingest(
    token: params[:token], raw_body: request.raw_post, headers: request.headers
  )
  Rails.logger.info("[open_loam inbound] #{result.status} #{result.reason}") if result.status >= 400
  head result.status
ensure
  OpenLoam::Current.reset
end