Outbound Webhooks
Requires
dbflowlabs/core:^1.1. Pro canvas authors webhook nodes; Core delivers with SSRF/TLS guards.
Outbound webhooks are part of the additive schema_version 1.1 contract. Delivery is not externally exactly-once — design hosts for idempotent receivers.
Security
- SSRF and TLS guards on outbound requests
- HMAC signing via the host
WorkflowSecretResolvercontract and secret references - Idempotency keys on delivery attempts
- Plaintext signing secrets are rejected by Pro validation — use
{{ secret.key_name }}references
Bind a WorkflowSecretResolver in Core for runtime signing. Filament Standard redacts webhook metadata on read-only surfaces (permission: dbflow.webhook_metadata.view).
Pro
Webhook Inspector configures headers/body with the Field Catalog picker and webhook_signing_enabled. Secret-reference policy is enforced at compile/hydrate time.