stacklok / minder / 8387569569

47%

main: 53%

push

github

Provide an array of fallback secrets to allow secret migration (#2734)

In order to provide for a clean webhook secret migration, we need to
provide a window of using the old secret. For this, we add an array of
PreivousWebhookSecrets to the WebhookConfig structure. If validating the
payload with the WebhookConfig.WebhookSecret fails, we fall back to
validating using the previous secrets.

Because validating the request reads the request body, we need to read
the body first and save in a byte slice in case we do have the fallbacks
configured.

Related: #2722

41 of 56 new or added lines in 2 files covered. (73.21%)

7275 of 15436 relevant lines covered (47.13%)

40.4 hits per line