19 Commits

Author	SHA1	Message	Date
gronod	a4d398ef1b	fix(webhooks): correct Ombi isReplay() call after signature change (closes #70)	2026-05-28 17:40:33 +01:00
gronod	6b73727d4e	fix(queue): extract shared arr cache helper, annotate season packs, null-guard flatMap (closes #61)	2026-05-28 15:36:33 +01:00
gronod	593ad79670	fix(webhooks): redesign replay key with content identifiers, log instance fallback (closes #62)	2026-05-28 15:30:08 +01:00
gronod	95bd703b26	chore: bump version to 1.7.22 and update CHANGELOG, tests and docs	2026-05-27 17:42:41 +01:00
gronod	7b9c895888	fix: support query parameter-based secret validation fallback to fix Ombi webhooks (#47)	2026-05-24 21:25:38 +01:00
gronod	9491948ec9	fix: resolve Ombi webhook race condition and add Ombi webhook status metrics to status panel	2026-05-24 10:22:47 +01:00
gronod	86c67bcf29	fix: support PascalCase properties in Ombi webhooks (#42)	2026-05-23 20:57:55 +01:00
gronod	82b3824658	chore: bump version to 1.7.7 and update CHANGELOG	2026-05-23 20:38:05 +01:00
gronod	6ac0a8421e	fix: resolve rate-limiting and Ombi requests caching bugs (fixes #42, fixes #43)	2026-05-23 18:55:03 +01:00
gronod	dbf45ec31d	fix: secure webhook config endpoint and validate config on Ombi enable/test ... - Add requireAuth to GET /api/webhook/config to enforce authentication - Add SOFARR_BASE_URL and SOFARR_WEBHOOK_SECRET validation to POST /api/ombi/webhook/enable and /test - Return 400 with descriptive errors when webhook config is missing on Ombi routes - Clean up test environment in webhook.test.js afterEach - Add regression tests for all new validation logic - Update CHANGELOG.md with security fixes	2026-05-22 09:50:30 +01:00
gronod	9862c0555c	Handle Ombi API object-format requestedUser field ... The Ombi API returns requestedUser as an OmbiUser object instead of a string. Add extractRequestedUser helper to extract username from various fields (alias, userAlias, userName, normalizedUserName) with fallback to legacy string format. Update client and server routes to use the helper for consistent username extraction.	2026-05-21 21:56:36 +01:00
gronod	1dccda529a	feat: add Ombi requests tab and webhook panel integration ... - Add Ombi requests tab UI with movie/TV request display - Add showAll parameter support for Ombi requests (API and SSE) - Add Ombi webhook panel with enable/test functionality - Add Ombi webhook status endpoint with metrics - Add Ombi webhook test endpoint - Change GET /api/ombi/requests to use OmbiRetriever instead of cache - Add Ombi webhook state and API functions to frontend - Update SSE payload to include Ombi baseUrl and requests	2026-05-21 20:59:06 +01:00
gronod	5c0ad7cb1b	docs(swagger): add JSDoc @openapi for webhook endpoints ... - POST /api/webhook/sonarr: secret validation, rate-limited, replay protection - POST /api/webhook/radarr: identical processing logic - Document X-Sofarr-Webhook-Secret header requirement - List all valid eventType values - Document event classification (QUEUE vs HISTORY) - Include replay protection window (5 minutes)	2026-05-21 12:36:43 +01:00
gronod	5ad525a760	fix: webhook replay cache atomicity and instanceName precision	2026-05-20 20:46:35 +01:00
gronod	f22dd0d1f6	fix(downloads): Fix SABnzbd/qBittorrent collision and webhook metrics ... 1. Fixed download client collision: - SABnzbd client with id 'i3omb' was being overwritten by qBittorrent - Now uses unique key ':' like the arr retrievers 2. Fixed webhook metrics showing 0: - instanceName from webhooks is generic ('Sonarr', 'Radarr') - Not the configured instance name ('i3omb') - Now updates metrics for ALL instances of that type	2026-05-19 21:40:53 +01:00
gronod	1bef14d590	feat(webhooks): security hardening, tests, full documentation audit & polish (Phase 6)	2026-05-19 17:11:45 +01:00
gronod	8609f03c5a	fix(webhooks): connect receiver to cache metrics for polling optimization (Phase 5.1)	2026-05-19 16:41:39 +01:00
gronod	1d61ea8d83	feat(webhooks): integrate receiver with cache + SSE (Phase 2)	2026-05-19 15:24:43 +01:00
gronod	99ddb05dbe	feat(webhook): implement Phase 1 webhook receiver for Sonarr and Radarr ... - Added POST /api/webhook/sonarr and POST /api/webhook/radarr endpoints - Implemented webhook secret validation via SOFARR_WEBHOOK_SECRET environment variable - Added logging for all incoming webhook events using existing logToFile utility - Returns HTTP 200 immediately to prevent webhook retries - Mounted webhook routes before CSRF middleware (called by external services) - Non-breaking: no changes to polling, caching, SSE, or any existing behavior - Lays groundwork for Phase 2 (cache + SSE integration) without implementing it yet	2026-05-19 15:15:53 +01:00