Require signed CoinPay credit webhooks - #24

Closed

aiirvizionz wants to merge 1 commit into

moshcoder:mainfrom

aiirvizionz:clientkit/coinpay-webhook-secret

aiirvizionz commented Jul 15, 2026

Contributor

Summary

fail closed when COINPAY_WEBHOOK_SECRET is not configured for credit top-up webhooks
move CoinPay webhook signature validation into a small helper
add coverage for missing, invalid, and valid webhook signatures

Verification

npm test
cd apps/pwa && npm test
git diff --check


          fix(app): require CoinPay webhook signatures

31264a8

ralyodio closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet