Skip to content

Releases: brancogao/webhook-debugger

v1.1.0 - Webhook Signature Verification

17 Feb 19:11
@brancogao brancogao
v1.1.0
88b7cb2

Choose a tag to compare

View all tags
v1.1.0 - Webhook Signature Verification Latest
Latest

What's New in v1.1.0

🔐 Webhook Signature Verification

Verify that incoming webhooks are authentic and haven't been tampered with. Supports the most popular services:

Service Signature Format Header
Stripe HMAC-SHA256 + timestamp Stripe-Signature
GitHub HMAC-SHA256 (sha256=) X-Hub-Signature-256
Slack HMAC-SHA256 (v0=) X-Slack-Signature
Shopify HMAC-SHA256 (base64) X-Shopify-Hmac-SHA256
Generic HMAC-SHA256 X-Hub-Signature / X-Webhook-Signature

🎛️ Endpoint Configuration UI

Manage your verification secrets directly from the UI. Each endpoint can have its own signing secret.

✅ Verification Status Display

See at a glance whether each webhook was verified:

  • ✓ Verified - Signature matches, webhook is authentic
  • ✗ Not Verified - Signature doesn't match or no secret configured

Security

  • All signature verification happens server-side
  • Secrets are stored securely in Cloudflare D1
  • Stripe verification includes timestamp check to prevent replay attacks

Try It Out

Live demo: https://webhook-debugger.autocompany.workers.dev

Full Changelog

See CHANGELOG.md

Assets 2
Loading

v1.0.0 - Initial Release

17 Feb 09:11
@brancogao brancogao
v1.0.0
6a389f8

Choose a tag to compare

View all tags
v1.0.0 - Initial Release

Webhook Debugger v1.0.0

The webhook inspector that keeps your data in your own hands.

What's New

This is the first public release of Webhook Debugger - a self-hosted webhook inspection tool built on Cloudflare Workers and D1.

Features

  • Unique Webhook URLs - Generate unique endpoints instantly
  • 90-Day History - Retain webhooks for 90 days (free: 7 days)
  • One-Click Replay - Replay webhooks to any target URL
  • Full-Text Search - Search across all webhook payloads using SQLite FTS5
  • Auto Source Detection - Automatically identifies Stripe, GitHub, Shopify, Slack, and more
  • GitHub OAuth - No passwords required, seamless authentication
  • Self-hostable - Deploy to your own Cloudflare account in 5 minutes

Tech Stack

  • Runtime: Cloudflare Workers (Edge)
  • Database: Cloudflare D1 (SQLite)
  • Language: TypeScript
  • Authentication: GitHub OAuth + HMAC-signed session tokens
  • Search: SQLite FTS5 full-text search

Quick Start

git clone https://github.com/brancogao/webhook-debugger.git
cd webhook-debugger && npm install
npx wrangler login && npx wrangler d1 create webhook-debugger-db
npm run deploy

Full documentation: Quick Start Guide

Live Demo

Try it live at: https://webhook-debugger.autocompany.workers.dev

License

MIT License - See LICENSE file for details

Roadmap

  • Webhook signature verification
  • Webhook filtering and rules
  • More export options
  • Team collaboration features

Built with ❤️ by Auto Company

Loading