SWI-11363 Add CONTRIBUTING guide + harden webhook auth and outbound fetch handling - #14

Merged

kshahbw merged 14 commits into

mainfrom

adapter/contributing-guide

Jul 16, 2026

Commits on Jul 14, 2026

docs: add best-effort CONTRIBUTING guide

kshahbw
and
claude
committed

Commits on Jul 15, 2026

feat(server): add constant-time credential comparison helper
kshahbw
committed
refactor(server): use constant-time comparison for REST facade auth
kshahbw
committed
feat(egress): add outbound fetch destination guard
kshahbw
committed
fix(egress): classify IPv6-literal hosts and normalize resolver failures
kshahbw
committed
feat(egress): constrain outbound customer fetches to public destinations
kshahbw
committed
feat(server): apply egress policy to Bandwidth webhook fetches
kshahbw
committed
feat(server): authenticate inbound Bandwidth webhooks with Basic auth
kshahbw
committed
feat(translator): attach callback credentials to emitted BXML callback verbs
kshahbw
committed
feat(server): default to loopback host and document webhook auth setup
kshahbw
committed
feat(egress): optional host allowlist for outbound fetches
kshahbw
committed
docs: clarify egress guard is defense-in-depth
kshahbw
committed
Merge pull request #13 from Bandwidth/adapter/webhook-callback-auth
kshahbw
authored
Merge branch 'main' into adapter/contributing-guide
kshahbw
authored