fix: harden hook session key routing defaults

2026-06-28 21:01:43 +03:00 · 2026-02-13 02:09:01 +01:00
parent 0a7201fa84
commit 3421b2ec1e
15 changed files with 603 additions and 32 deletions
@@ -262,6 +262,9 @@ When validation fails:
        enabled: true,
        token: "shared-secret",
        path: "/hooks",
+        defaultSessionKey: "hook:ingress",
+        allowRequestSessionKey: false,
+        allowedSessionKeyPrefixes: ["hook:"],
        mappings: [
          {
            match: { path: "gmail" },