zeekay 3578254c60 Tie a webhook's eSign identity to its team as well as its URL, and follow no redirect with it ...

HANZO_WEBHOOKS entries are <team url>=<url>: another team pointing at a listed URL is posted as a stranger. A call made as eSign does not follow a redirect, so the token reaches the listed URL and nowhere else.

2026-10-20 18:21:45 -07:00

..

client

fix(rpc): carry uploaded files over the socket

2026-08-14 00:07:22 -07:00

gen

migrate esign RPC: tRPC → @zap-proto/web (14/14 routers, client + server, fully cut over) (#5)

2026-06-16 17:12:56 -07:00

react

fix(zap): mark the promise-returning functions async, and the two that never wait not

2026-09-19 05:06:51 -07:00

runtime

fix(rpc): carry uploaded files over the socket

2026-08-14 00:07:22 -07:00

schema

migrate esign RPC: tRPC → @zap-proto/web (14/14 routers, client + server, fully cut over) (#5)

2026-06-16 17:12:56 -07:00

server

Tie a webhook's eSign identity to its team as well as its URL, and follow no redirect with it

2026-10-20 18:21:45 -07:00