zeekay 31a45e2826 Post a webhook as eSign only to a URL HANZO_WEBHOOKS lists exactly ...

A team chooses where its webhook points, so the origin was not enough: an admin
could aim eSign's identity at any Hanzo API route and read the answer in the
webhook log. One sender now serves sends and resends: a URL HANZO_WEBHOOKS
names exactly is posted with eSign's IAM token and its answer is not kept;
every other URL gets the webhook's own secret and nothing of ours.

notify's token is minted for the Hanzo API rather than for eSign itself, and a
bearer eSign's own client minted is refused.

2026-10-20 18:18:40 -07:00

..

__tests__

fix(email): read the MailChannels sender through the address helper

2026-09-19 04:27:20 -07:00

providers

feat: migrate nextjs to rr7

2025-02-13 14:10:38 +11:00

static

feat: add organisation sso portal (#1946)

2025-09-09 17:14:07 +10:00

template-components

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

templates

Say Hanzo eSign wherever the product names itself

2026-10-20 13:12:22 -07:00

transports

Post a webhook as eSign only to a URL HANZO_WEBHOOKS lists exactly

2026-10-20 18:18:40 -07:00

.gitignore

feat: email templates

2023-11-06 13:01:07 +11:00

components.ts

feat: migrate nextjs to rr7

2025-02-13 14:10:38 +11:00

index.ts

feat: use server-actions for authoring flow

2023-11-06 13:01:07 +11:00

mailer.ts

feat(email): send through notify so this app holds no mail credentials

2026-08-13 16:55:27 -07:00

package.json

Give every package one version

2026-08-29 18:44:19 -07:00

render.tsx

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

tailwind.config.js

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00

tsconfig.json

rename: @hanzo/sign-* → @hanzo/esign-* (full eSign brand consistency)

2026-06-21 19:56:09 -07:00