feat: implement comprehensive webhook system for real-time event notifications

Author: Datanoise

config/config.go

@@ -40,6 +40,12 @@ type TranscoderConfig struct {
 	Enabled     bool   `json:"enabled"`
 }
 
+type WebhookConfig struct {
+	URL     string   `json:"url"`
+	Events  []string `json:"events"` // "source_connect", "source_disconnect", "metadata_update", "security_lockout"
+	Enabled bool     `json:"enabled"`
+}
+
 type Config struct {
 	BindHost              string            `json:"bind_host"`
 	Port                  string            `json:"port"`
@@ -50,6 +56,7 @@ type Config struct {
 	AdvancedMounts map[string]*MountSettings `json:"advanced_mounts"`
 	Relays         []*RelayConfig            `json:"relays"`
 	Transcoders    []*TranscoderConfig       `json:"transcoders"`
+	Webhooks       []*WebhookConfig          `json:"webhooks"`
 	BannedIPs      []string                  `json:"banned_ips"`
 
 	AdminPassword  string            `json:"admin_password"`
@@ -175,6 +182,9 @@ func (config *Config) initMapsAndArrays() {
 	if config.Transcoders == nil {
 		config.Transcoders = make([]*TranscoderConfig, 0)
 	}
+	if config.Webhooks == nil {
+		config.Webhooks = make([]*WebhookConfig, 0)
+	}
 	if config.BannedIPs == nil {
 		config.BannedIPs = make([]string, 0)
 	}

relay/relay.go

@@ -387,31 +387,45 @@ func (s *Stream) Unsubscribe(id string) {
 }
 
 // UpdateMetadata updates stream info
-func (s *Stream) UpdateMetadata(name, desc, genre, url, bitrate, contentType string, public, visible bool) {
+func (s *Stream) UpdateMetadata(name, desc, genre, url, bitrate, contentType string, public, visible bool) bool {
 	s.mu.Lock()
 	defer s.mu.Unlock()
-	if name != "" {
+	changed := false
+	if name != "" && s.Name != name {
 		s.Name = name
+		changed = true
 	}
-	if desc != "" {
+	if desc != "" && s.Description != desc {
 		s.Description = desc
+		changed = true
 	}
-	if genre != "" {
+	if genre != "" && s.Genre != genre {
 		s.Genre = genre
+		changed = true
 	}
-	if url != "" {
+	if url != "" && s.URL != url {
 		s.URL = url
+		changed = true
 	}
-	if bitrate != "" {
+	if bitrate != "" && s.Bitrate != bitrate {
 		s.Bitrate = bitrate
+		changed = true
 	}
-	if contentType != "" {
+	if contentType != "" && s.ContentType != contentType {
 		s.ContentType = contentType
 		ct := strings.ToLower(contentType)
 		s.IsOggStream = strings.Contains(ct, "ogg") || strings.Contains(ct, "opus")
+		changed = true
 	}
-	s.Public = public
-	s.Visible = visible
+	if s.Public != public {
+		s.Public = public
+		changed = true
+	}
+	if s.Visible != visible {
+		s.Visible = visible
+		changed = true
+	}
+	return changed
 }
 
 // SetCurrentSong updates the current song info thread-safely

server/server.go

@@ -174,6 +174,68 @@ func NewServer(cfg *config.Config, authLog *logrus.Logger) *Server {
 	}
 }
 
+func (s *Server) dispatchWebhook(event string, data map[string]interface{}) {
+	if len(s.Config.Webhooks) == 0 {
+		return
+	}
+
+	payload := map[string]interface{}{
+		"event":     event,
+		"timestamp": time.Now().Format(time.RFC3339),
+		"hostname":  s.Config.HostName,
+		"data":      data,
+	}
+
+	jsonPayload, err := json.Marshal(payload)
+	if err != nil {
+		logrus.WithError(err).Error("Failed to marshal webhook payload")
+		return
+	}
+
+	for _, wh := range s.Config.Webhooks {
+		if !wh.Enabled {
+			continue
+		}
+
+		// Check if this webhook is interested in this event
+		interested := false
+		for _, e := range wh.Events {
+			if e == event {
+				interested = true
+				break
+			}
+		}
+
+		if !interested {
+			continue
+		}
+
+		// Dispatch asynchronously
+		go func(url string, body []byte) {
+			ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
+			defer cancel()
+
+			req, err := http.NewRequestWithContext(ctx, "POST", url, bytes.NewBuffer(body))
+			if err != nil {
+				return
+			}
+			req.Header.Set("Content-Type", "application/json")
+			req.Header.Set("User-Agent", "TinyIce-Webhook/1.0")
+
+			resp, err := http.DefaultClient.Do(req)
+			if err != nil {
+				logrus.Warnf("Webhook delivery failed to %s: %v", url, err)
+				return
+			}
+			defer resp.Body.Close()
+
+			if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+				logrus.Warnf("Webhook returned non-2xx status from %s: %d", url, resp.StatusCode)
+			}
+		}(wh.URL, jsonPayload)
+	}
+}
+
 func (s *Server) setupRoutes() *http.ServeMux {
 	mux := http.NewServeMux()
 	mux.HandleFunc("/admin", s.handleAdmin)
@@ -194,6 +256,8 @@ func (s *Server) setupRoutes() *http.ServeMux {
 	mux.HandleFunc("/admin/remove-banned-ip", s.handleRemoveBannedIP)
 	mux.HandleFunc("/admin/clear-auth-lockout", s.handleClearAuthLockout)
 	mux.HandleFunc("/admin/clear-scan-lockout", s.handleClearScanLockout)
+	mux.HandleFunc("/admin/add-webhook", s.handleAddWebhook)
+	mux.HandleFunc("/admin/delete-webhook", s.handleDeleteWebhook)
 	mux.HandleFunc("/admin/add-relay", s.handleAddRelay)
 	mux.HandleFunc("/admin/toggle-relay", s.handleToggleRelay)
 	mux.HandleFunc("/admin/restart-relay", s.handleRestartRelay)
@@ -496,6 +560,12 @@ func (s *Server) recordAuthFailure(ip string) {
 	if attempt.Count >= 5 {
 		attempt.LockoutBy = time.Now().Add(15 * time.Minute)
 		logrus.Warnf("IP %s locked out for 15 minutes due to 5 failed auth attempts", ip)
+		s.dispatchWebhook("security_lockout", map[string]interface{}{
+			"ip":      ip,
+			"reason":  "brute_force_auth",
+			"until":   attempt.LockoutBy.Format(time.RFC3339),
+			"details": "5 failed authentication attempts",
+		})
 	}
 }
 
@@ -519,6 +589,12 @@ func (s *Server) recordScanAttempt(ip string) {
 	if attempt.Count >= 10 {
 		attempt.LockoutBy = time.Now().Add(15 * time.Minute)
 		logrus.Warnf("IP %s locked out for 15 minutes due to 10 scanning attempts (404s)", ip)
+		s.dispatchWebhook("security_lockout", map[string]interface{}{
+			"ip":      ip,
+			"reason":  "connection_scanning",
+			"until":   attempt.LockoutBy.Format(time.RFC3339),
+			"details": "10 connection scanning attempts (404s)",
+		})
 	}
 }
 
@@ -787,7 +863,14 @@ func (s *Server) handleSource(w http.ResponseWriter, r *http.Request) {
 	bufrw.WriteString("HTTP/1.0 200 OK\r\nServer: Icecast 2.4.4\r\nConnection: Keep-Alive\r\n\r\n")
 	bufrw.Flush()
 
-	logrus.WithField("mount", mount).Info("Source connected")
+	logrus.WithFields(logrus.Fields{"mount": mount, "ip": r.RemoteAddr, "ua": r.Header.Get("User-Agent")}).Info("Source connected")
+	s.dispatchWebhook("source_connect", map[string]interface{}{
+		"mount": mount,
+		"ip":    r.RemoteAddr,
+		"ua":    r.Header.Get("User-Agent"),
+		"name":  r.Header.Get("Ice-Name"),
+	})
+
 	stream := s.Relay.GetOrCreateStream(mount)
 	stream.SourceIP = r.RemoteAddr
 
@@ -804,6 +887,9 @@ func (s *Server) handleSource(w http.ResponseWriter, r *http.Request) {
 		}
 	}
 	logrus.WithField("mount", mount).Info("Source disconnected")
+	s.dispatchWebhook("source_disconnect", map[string]interface{}{
+		"mount": mount,
+	})
 	s.Relay.RemoveStream(mount)
 }
 
@@ -823,7 +909,15 @@ func (s *Server) updateSourceMetadata(stream *relay.Stream, mount string, r *htt
 	}
 	isPublic := r.Header.Get("Ice-Public") == "1"
 	isVisible := s.Config.VisibleMounts[mount]
-	stream.UpdateMetadata(r.Header.Get("Ice-Name"), r.Header.Get("Ice-Description"), r.Header.Get("Ice-Genre"), r.Header.Get("Ice-Url"), bitrate, r.Header.Get("Content-Type"), isPublic, isVisible)
+	if stream.UpdateMetadata(r.Header.Get("Ice-Name"), r.Header.Get("Ice-Description"), r.Header.Get("Ice-Genre"), r.Header.Get("Ice-Url"), bitrate, r.Header.Get("Content-Type"), isPublic, isVisible) {
+		s.dispatchWebhook("metadata_update", map[string]interface{}{
+			"mount":        mount,
+			"name":         stream.Name,
+			"description":  stream.Description,
+			"genre":        stream.Genre,
+			"current_song": stream.CurrentSong,
+		})
+	}
 }
 
 func (s *Server) handleListener(w http.ResponseWriter, r *http.Request) {
@@ -1914,6 +2008,55 @@ func (s *Server) handleClearScanLockout(w http.ResponseWriter, r *http.Request)
 	http.Redirect(w, r, "/admin#tab-security", http.StatusSeeOther)
 }
 
+func (s *Server) handleAddWebhook(w http.ResponseWriter, r *http.Request) {
+	if !s.isCSRFSafe(r) {
+		http.Error(w, "Forbidden", http.StatusForbidden)
+		return
+	}
+	if _, ok := s.checkAuth(r); !ok {
+		return
+	}
+
+	url := r.FormValue("url")
+	events := r.Form["events"]
+
+	if url == "" || len(events) == 0 {
+		http.Error(w, "URL and at least one event required", http.StatusBadRequest)
+		return
+	}
+
+	s.Config.Webhooks = append(s.Config.Webhooks, &config.WebhookConfig{
+		URL:     url,
+		Events:  events,
+		Enabled: true,
+	})
+	s.Config.SaveConfig()
+
+	http.Redirect(w, r, "/admin#tab-webhooks", http.StatusSeeOther)
+}
+
+func (s *Server) handleDeleteWebhook(w http.ResponseWriter, r *http.Request) {
+	if !s.isCSRFSafe(r) {
+		http.Error(w, "Forbidden", http.StatusForbidden)
+		return
+	}
+	if _, ok := s.checkAuth(r); !ok {
+		return
+	}
+
+	url := r.FormValue("url")
+	newWHs := []*config.WebhookConfig{}
+	for _, wh := range s.Config.Webhooks {
+		if wh.URL != url {
+			newWHs = append(newWHs, wh)
+		}
+	}
+	s.Config.Webhooks = newWHs
+	s.Config.SaveConfig()
+
+	http.Redirect(w, r, "/admin#tab-webhooks", http.StatusSeeOther)
+}
+
 func (s *Server) handleGetStats(w http.ResponseWriter, r *http.Request) {
 	if _, ok := s.checkAuth(r); !ok {
 		http.Error(w, "Unauthorized", http.StatusUnauthorized)

server/templates/admin.html

@@ -75,6 +75,7 @@
                 <button class="nav-link" onclick="showTab('tab-users')"><i data-lucide="users"></i> User Management</button>
                 <button class="nav-link" onclick="showTab('tab-relays')"><i data-lucide="refresh-ccw"></i> Edge Relays</button>
                 <button class="nav-link" onclick="showTab('tab-transcoding')"><i data-lucide="scissors"></i> Transcoding</button>
+                <button class="nav-link" onclick="showTab('tab-webhooks')"><i data-lucide="webhook"></i> Webhooks</button>
                 <button class="nav-link" onclick="showTab('tab-security')"><i data-lucide="shield-check"></i> Security & Bans</button>
                 {{end}}
                 <button class="nav-link" onclick="showTab('tab-insights')"><i data-lucide="trending-up"></i> Insights</button>
@@ -280,6 +281,64 @@ <h2>Active Transcoders</h2>
                                 </section>
                             </div>
                         </div>
+                        <div id="tab-webhooks" class="tab-content">
+                            <div style="display: grid; grid-template-columns: 1fr 1.5fr; gap: 2rem;">
+                                <section>
+                                    <h2>Configure Webhook</h2>
+                                    <div class="card">
+                                        <form action="/admin/add-webhook" method="POST">
+                                            <input type="hidden" name="csrf" value="{{$.CSRFToken}}">
+                                            <div class="form-group"><label>Target URL</label><input type="text" name="url" placeholder="https://discord.com/api/webhooks/..." required></div>
+                                            <div class="form-group">
+                                                <label>Event Triggers</label>
+                                                <div style="display: grid; grid-template-columns: 1fr 1fr; gap: 0.5rem; text-align: left; font-size: 0.8rem;">
+                                                    <label style="text-transform: none; display: flex; align-items: center; gap: 0.5rem;"><input type="checkbox" name="events" value="source_connect" checked> Source Connect</label>
+                                                    <label style="text-transform: none; display: flex; align-items: center; gap: 0.5rem;"><input type="checkbox" name="events" value="source_disconnect" checked> Source Disconnect</label>
+                                                    <label style="text-transform: none; display: flex; align-items: center; gap: 0.5rem;"><input type="checkbox" name="events" value="metadata_update" checked> Song Changes</label>
+                                                    <label style="text-transform: none; display: flex; align-items: center; gap: 0.5rem;"><input type="checkbox" name="events" value="security_lockout" checked> Security Alerts</label>
+                                                </div>
+                                            </div>
+                                            <button type="submit" class="btn btn-primary" style="width: 100%;">Save Webhook</button>
+                                        </form>
+                                    </div>
+                                </section>
+                                <section>
+                                    <h2>Active Webhooks</h2>
+                                    <div class="card" style="padding: 0; overflow: hidden;">
+                                        <table>
+                                            <thead>
+                                                <tr>
+                                                    <th>Target URL</th>
+                                                    <th>Events</th>
+                                                    <th>Action</th>
+                                                </tr>
+                                            </thead>
+                                            <tbody>
+                                                {{range .Config.Webhooks}}
+                                                <tr>
+                                                    <td style="font-size: 0.75rem; color: var(--text-dim); max-width: 200px; overflow: hidden; text-overflow: ellipsis;">{{.URL}}</td>
+                                                    <td style="font-size: 0.7rem;">
+                                                        {{range .Events}}
+                                                        <span class="genre-tag" style="margin-right: 2px; margin-bottom: 2px; font-size: 0.6rem;">{{.}}</span>
+                                                        {{end}}
+                                                    </td>
+                                                    <td>
+                                                        <form action="/admin/delete-webhook" method="POST" onsubmit="return confirm('Delete?')">
+                                                            <input type="hidden" name="csrf" value="{{$.CSRFToken}}">
+                                                            <input type="hidden" name="url" value="{{.URL}}">
+                                                            <button type="submit" class="btn btn-danger btn-sm">DELETE</button>
+                                                        </form>
+                                                    </td>
+                                                </tr>
+                                                {{else}}
+                                                <tr><td colspan="3" style="text-align: center; padding: 2rem;">No webhooks configured.</td></tr>
+                                                {{end}}
+                                            </tbody>
+                                        </table>
+                                    </div>
+                                </section>
+                            </div>
+                        </div>
                         <div id="tab-security" class="tab-content">
             <div style="grid-template-columns: 1fr 1fr; display: grid; gap: 2rem;"><section><h2>Ban Address or Range</h2><div class="card"><form action="/admin/add-banned-ip" method="POST"><input type="hidden" name="csrf" value="{{$.CSRFToken}}"><div class="form-group"><label>IP Address or CIDR Range</label><input type="text" name="ip" placeholder="e.g. 1.2.3.4 or 192.168.1.0/24" required></div><button type="submit" class="btn btn-danger">Ban Address</button></form></div></section><section><h2>Access Control List</h2><div class="card" style="padding: 0;"><table><thead><tr><th style="width:70%">Banned IP / Range</th><th style="width:30%">Action</th></tr></thead><tbody>{{range .Config.BannedIPs}}<tr><td>{{.}}</td><td><form action="/admin/remove-banned-ip" method="POST"><input type="hidden" name="csrf" value="{{$.CSRFToken}}"><input type="hidden" name="ip" value="{{.}}"><button type="submit" class="btn btn-outline btn-sm">Unban</button></form></td></tr>{{else}}<tr><td colspan="2" style="text-align:center; padding:2rem">No active bans.</td></tr>{{end}}</tbody></table></div></section></div>