From b3f0fa37468cfe3ea47641f37c632d90bf8c375c Mon Sep 17 00:00:00 2001 From: Greg Date: Tue, 1 Jul 2025 11:14:00 -0700 Subject: [PATCH] fix: Use hex encoding for webhook signature instead of base64 - Webhook handler expects hexdigest() format - Deploy workflow was using base64 encoding - This fixes the 401 signature validation error --- .github/workflows/deploy-dev.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/deploy-dev.yml b/.github/workflows/deploy-dev.yml index 73c3b39..821547a 100644 --- a/.github/workflows/deploy-dev.yml +++ b/.github/workflows/deploy-dev.yml @@ -75,7 +75,7 @@ jobs: ) # Generate HMAC signature for webhook security - SIGNATURE=$(echo -n "$PAYLOAD" | openssl dgst -sha256 -hmac "${{ secrets.WEBHOOK_SECRET }}" -binary | base64) + SIGNATURE=$(echo -n "$PAYLOAD" | openssl dgst -sha256 -hmac "${{ secrets.WEBHOOK_SECRET }}" | sed 's/^.* //') # Send webhook HTTP_CODE=$(curl -s -o /tmp/webhook_response.json -w "%{http_code}" \