Skip to content

End-to-end dry-run.yml matrix that includes webhook HMAC verification against a mock server #336

Description

@miss-yusrah

Complexity: High (200 points)

Why this matters
dry-run.yml hits Horizon but may not verify webhook signatures. HMAC bugs ship.

Problem
Webhook unit tests exist. dry-run matrix may skip signature verification against a mock receiver.

What "done" looks like

  • Mock server job or step verifying HMAC.
  • Matrix still covers Horizon.
  • Docs.

Scope

  • In: dry-run.yml, webhook.ts, docs.
  • Out: Dashboard live E2E.

Guidelines

  • Key files: .github/workflows/dry-run.yml, src/webhook.ts, docs/USAGE.md
  • Watch for: secrets in logs, timing-safe compare, schema version.
  • Constraints: Don’t call real dashboard. Mock only.
  • Validate: workflow + npm test webhook

PR must include

  • HMAC mock in dry-run
  • docs
  • no secret leaks

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Stellar WaveIssues in the Stellar wave program

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions