Declutter the dashboard UX - #41
Conversation
Entire-Checkpoint: 01KZQWAC2WE6W36TGP6FPWREM4
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 0e7e4c4602
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| <p class="text-xs text-foreground-muted"> | ||
| Copy this secret <span class="text-foreground font-medium">now</span> — it won't be shown again. The receiver uses it to verify HMAC signatures. | ||
| Copy this secret <span class="text-foreground font-medium">now</span>. It won't be shown again. | ||
| </p> |
There was a problem hiding this comment.
Restore webhook secret verification instructions
When an operator creates a webhook, this one-time view is their last opportunity to learn what the secret is for, but the page now only says to copy it and no longer mentions X-Orva-Signature, X-Orva-Timestamp, or that the receiver must verify HMAC-SHA256 over timestamp + "." + raw_body. A receiver implemented from this flow can therefore hash the wrong payload or ignore verification entirely; retain the verification contract here or link directly to the relevant documentation before the secret is dismissed.
Useful? React with 👍 / 👎.
Entire-Checkpoint: 01KZQWSP9BSNYWANR3XKYS045C
Entire-Checkpoint: 01KZQWX6EZA1F6YN1NWDWQDS5V
Entire-Checkpoint: 01KZQY3ZNPSTH8346WV2VX6ZED
Entire-Checkpoint: 01KZQYNE1PY127PY52FGKSAJYR
Entire-Checkpoint: 01KZQZ4EF319Q6YZ6RTQ5WETDD
Entire-Checkpoint: 01KZQZWKTP3EJ3X3D8E20FK88J
Entire-Checkpoint: 01KZR06AMSV3MB0X2VY26KHVEK
Entire-Checkpoint: 01KZR233XMNFGV54A8WCZ7D9AW
Summary
Validation
npm run lintnpm testnpm run buildmake build-allmake lintmake test