Travis webhook verification

[9999years]

caddy-git/travis_hook.go

Line 81 in 7c37f04

signature := r.Header.Get("Authorization")

Is the handleSignature function correct? The Travis documentation seems to imply the code should check the Signature header against Travis’ public key.

It seems like the Authorization header is an old method of authenticating Travis requests phased out in November 2016.

[abiosoft]

Oops, thanks for reporting this.
Unfortunately I do not have time to work on this at the moment, it may take a week or two.