memos/server
boojack eb826455b6 chore(webhook): reveal-later signing secret flow
Generate webhook signing secrets server-side and let users reveal them on
demand, replacing the create-dialog secret controls that surfaced internal
mask state (Status / Generate & Copy / Clear / Pending) to users.

- Add owner-gated GetUserWebhookSigningSecret RPC — the only path that
  returns the secret; list/create/update responses still omit it.
- Generate the secret server-side on create (webhook.GenerateSigningSecret),
  so validity no longer depends on the client.
- Rename UserWebhook.has_signing_secret -> signing_secret_set for parity
  with the existing api_key_set field.
- Create dialog drops the secret section to a one-line note; the generated
  secret is shown once right after create and revealable from Edit later.
2026-06-26 09:03:24 +08:00
..
auth fix(auth): harden authorization and username validation (#5890) 2026-04-25 21:24:16 +08:00
notification feat(notification): add smtp email settings 2026-05-01 18:48:21 +08:00
router chore(webhook): reveal-later signing secret flow 2026-06-26 09:03:24 +08:00
runner fix(s3presign): preserve motion media payload 2026-05-09 22:51:56 +08:00
cors.go fix(cors): open API to any origin for token auth, keep cookies same-origin 2026-06-14 23:20:34 +08:00
cors_test.go fix(cors): open API to any origin for token auth, keep cookies same-origin 2026-06-14 23:20:34 +08:00
server.go feat: add OpenAPI-driven MCP support (#6026) 2026-06-09 09:16:50 +08:00